🟠 CVE-2026-13451 - High (7.7)

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-13451 - High (7.7)

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118688 - High (7.9)

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write acces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118688 - High (7.9)

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write acces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118683 - High (8.8)

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118683 - High (8.8)

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118660 - High (8.6)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy DOM loads iframe src URLs and link rel="stylesheet" href URLs by default while parsing untrusted HTML on the server because disa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118660/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118660 - High (8.6)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy DOM loads iframe src URLs and link rel="stylesheet" href URLs by default while parsing untrusted HTML on the server because disa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118660/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118659 - High (7.5)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Happy DOM server-renderer package's ServerRendererServer accepts unauthenticated HTTP/2 requests and resolves attacker-controlled ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118659 - High (7.5)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Happy DOM server-renderer package's ServerRendererServer accepts unauthenticated HTTP/2 requests and resolves attacker-controlled ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD.

#Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability

https://securityonline.info/cisco-secure-firewall-vulnerability-exploited-ssl-vpn/?utm_source=mastodon&utm_medium=jetpack_social

Cisco zero-day: CVE-2026-76418 (8.6 high)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75

#cisco #zeroday #eitw #CVE

Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD.

#Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability

https://securityonline.info/cisco-secure-firewall-vulnerability-exploited-ssl-vpn/?utm_source=mastodon&utm_medium=jetpack_social

Cisco zero-day: CVE-2026-76418 (8.6 high)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75

#cisco #zeroday #eitw #CVE

🟠 CVE-2026-61542 - High (8.6)

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mode that accepts unauthenticated MCP requests from any reachable network...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61542/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61542 - High (8.6)

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mode that accepts unauthenticated MCP requests from any reachable network...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61542/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-46300
Vendor: Linux
Product: Kernel
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46300

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-46300
Vendor: Linux
Product: Kernel
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46300

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-41709
Vendor: Broadcom
Product: VMware ESX
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-41709

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-41709
Vendor: Broadcom
Product: VMware ESX
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-41709

What. The. Fuck.

https://access.redhat.com/security/cve/cve-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.

What. The. Fuck.

https://access.redhat.com/security/cve/cve-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.

Endor Labs’ AI SAST found two Apache Kafka zero-days, now fixed: CVE-2026-114349 and CVE-2026-111551. Payloads: 90, 9, and 12 bytes. Upgrade to 4.2.2, 4.3.2, or 4.4.0 and set max.decompressed.message.bytes
https://www.endorlabs.com/learn/endor-labs-ai-sast-finds-two-apache-kafka-zero-days-unbounded-memory-allocation-from-brokers-to-kafka-streams?

Endor Labs’ AI SAST found two Apache Kafka zero-days, now fixed: CVE-2026-114349 and CVE-2026-111551. Payloads: 90, 9, and 12 bytes. Upgrade to 4.2.2, 4.3.2, or 4.4.0 and set max.decompressed.message.bytes
https://www.endorlabs.com/learn/endor-labs-ai-sast-finds-two-apache-kafka-zero-days-unbounded-memory-allocation-from-brokers-to-kafka-streams?

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-109411 - High (8.1)

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109411 - High (8.1)

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118650 - High (7.5)

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded request path differently from Echo's router because the router matches the still-encoded path while the static handler us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118650 - High (7.5)

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded request path differently from Echo's router because the router matches the still-encoded path while the static handler us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118686 - High (7.5)

EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU on long request bodies. Unauthenticated remote atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118686/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118686 - High (7.5)

EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU on long request bodies. Unauthenticated remote atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118686/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118344 (CRITICAL): Google Chrome before 156.0.8078.73 is vulnerable to a use-after-free in Layout, allowing remote code execution inside the sandbox. Update now. https://radar.offseq.com/threat/cve-2026-118344-use-after-free-in-google-chrome-1373d02f29569b9e #OffSeq #Chrome #CVE2026118344 #Infosec

🟠 CVE-2026-93522 - High (7.8)

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in https://x.org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93522/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Chrome security update 156.0.8078.73 fixes 52 flaws, including critical Chrome vulnerabilities like sandbox escape CVE-2026-118306. Update now.

#Chrome #GoogleChrome #Chrome156 #BrowserSecurity #CVE2026118306 #SecurityUpdate #PatchNow #Vulnerability

https://securityonline.info/chrome-security-update-156-0-8078-73/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-84725 - High (8.1)

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the serve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84725/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84725 - High (8.1)

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the serve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84725/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

Auth bypasses are so hot right now.

https://nvd.nist.gov/vuln/detail/cve-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

🟠 CVE-2026-111255 - High (7.5)

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload_image function. This is due to insufficient file type...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111255/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Juniper security bulletin fixes 18 Session Smart Router vulnerabilities, including CVSS 9.8 flaws CVE-2026-103406 and CVE-2026-103409. Update now.

#Juniper #SessionSmartRouter #SDWAN #CVE2026103406 #CVE2026103409 #NetworkSecurity #PatchNow #Vulnerability

https://securityonline.info/juniper-session-smart-router-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Juniper security bulletin fixes 18 Session Smart Router vulnerabilities, including CVSS 9.8 flaws CVE-2026-103406 and CVE-2026-103409. Update now.

#Juniper #SessionSmartRouter #SDWAN #CVE2026103406 #CVE2026103409 #NetworkSecurity #PatchNow #Vulnerability

https://securityonline.info/juniper-session-smart-router-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-93521 - High (7.8)

A buffer overflow in RandR
ChangeProviderProperty requests in https://x.org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93521/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-90717 - Critical (9.1)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.2...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59172 - High (7.8)

Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint ` walks upward from the linted file to locate a `.jokerd/` directory and executes matching `linter.*` files before linting. Those files contain...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59172/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Ultimate Member <2.14.0 is vulnerable (CRITICAL, CVSS 9.8) to deserialization of untrusted data (CVE-2026-115968), enabling object injection and possible system takeover. Patch to 2.14.0+ ASAP. https://radar.offseq.com/threat/cve-2026-115968-deserialization-of-untrusted-data-in-ultimate-member-92e650ae59939656 #OffSeq #WordPress #Infosec #Vulnerability

🟠 CVE-2026-93518 - High (7.8)

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93520 - High (7.8)

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in https://x.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93519 - High (7.8)

A buffer overflow when handling pointer barriers in the XFIXES extension in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59176 - High (7.8)

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp-server/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-114278 - Critical (9.8)

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a double-quoted sh -c "echo "..." > ..." invocation without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-110747 - High (7.5)

ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled int and then checks (_inputPtr + len) &lt;= _inputEnd using signed arithmetic. For values near Integer.MAX_VALUE the addition ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110747/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116676 - High (8.8)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command argume...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116682 - High (8.6)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-110879 - Critical (9.8)

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be rejected as direct type IDs. This bypasses the gen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

CISA warns of EPICS Base vulnerabilities in the industrial control system toolkit, led by critical RCE flaw CVE-2026-114595. Update to 7.0.11.

#EPICS #ICS #IndustrialControlSystem #CISA #CVE2026114595 #RCE #OTSecurity #Vulnerability

https://meterpreter.org/epics-base-vulnerabilities-cve-2026-114595/?utm_source=mastodon&utm_medium=jetpack_social

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-92372 - High (8.8)

An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-57200 - High (7.5)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated attacker with read-only permissions for the `Asterisk REST Interface ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57200/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-88812 - High (7.8)

A double free in XKB SetGeometryin https://x.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87086 - High (7.5)

Tanium addressed a denial of service vulnerability in Provision.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86396 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86396/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dell PowerProtect Data Domain CVE-2026-86397 (CRITICAL, CVSS 9.8): Unauthenticated remote attackers can create privileged accounts — full takeover possible. Patch to 7.13.1.90/8.3.1.50/8.6.1.30/8.9.0.0+. https://radar.offseq.com/threat/cve-2026-86397-cwe-862-missing-authorization-in-dell-powerprotect-data-domain-0bf4a4099bf98dd8 #OffSeq #Dell #Vuln #Infosec

CVE-2026-67074 | CRITICAL RCE in HCL BigFix AEX 13.0.0.1 (CVSS 9.1) 🛡️ Exploitation allows arbitrary code execution with app privileges. No patch yet — restrict access & monitor. More: https://radar.offseq.com/threat/cve-2026-67074-cwe-94-code-injection-in-hcl-software-bigfix-aex-a5f31975501a4a18 #OffSeq #CVE #RCE #BigFix

🟠 CVE-2026-1928 - High (8.8)

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint. This m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-106013 - Critical (9.8)

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback function because after ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-106013 (CRITICAL): Jupiter X Core ≤4.61.0 allows authentication bypass via Twitter/X login handler — attackers can access WP admin as app owner. Disable Twitter/X login or the plugin until fixed. https://radar.offseq.com/threat/cve-2026-106013-cwe-287-improper-authentication-in-artbees-jupiter-x-core-324b257972296553 #OffSeq #WordPress #CVE2026_106013 #Infosec

🟠 CVE-2026-118485 - High (8.1)

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed (URL-encoded ../) sequences in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-118477 - Critical (9.8)

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118477 – HIGH severity OS Command Injection in EISGE Kalifast (>=0 <2026.02.1). Authenticated users can run arbitrary commands via ei_git_repo_url. Patch now: 2026061802 🛡️ https://radar.offseq.com/threat/cve-2026-118477-cwe-78-os-command-injection-in-eisge-kalifast-96357c3746a79f11 #OffSeq #infosec #vulnerability #CVE2026118477

🟠 CVE-2026-86377 - High (7.6)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86378 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103780 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-86400 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86400/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92797 - High (8.8)

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() condition at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92797/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

kleor Contact Manager <=9.1.2 suffers CRITICAL (CVSS 9.8) file upload vuln (CVE-2026-109218). Unauthenticated users can exploit trailing dots to upload dangerous files, risking RCE. Harden configs & restrict uploads. https://radar.offseq.com/threat/cve-2026-109218-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-kleor-contact-manager-0a4841efd9c43b5a #OffSeq #WordPress #Infosec

🟠 CVE-2026-116613 - High (7.5)

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116613/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104383: CRITICAL code injection (CWE-94) in EagleCloud Aquila ≤2.6.7.2 Pigeon MFA service. Authenticated remote attackers can execute arbitrary code — full compromise possible. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-104383-cwe-94-code-injection-in-eaglecloud-aquila-8c9d1a000de0f9b2 #OffSeq #CVE2026 #Vuln #CloudSec

🟠 CVE-2026-118008 - High (8.8)

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

PHP2Shell Update: Still No Confirmed WordPress Compromises - What we've seen across over 5 million WordPress sites we protect.

As of Oct 28, 2026, Wordfence is not aware of any WordPress site compromised through PHP2Shell (CVE-2026-109618, CVE-2026-109619).

Here's what we've seen so far:

https://www.wordfence.com/blog/2026/10/php2shell-update-still-no-confirmed-wordpress-compromises-and-answers-to-the-questions-were-hearing-most/

📢 PHP2Shell (CVE-2026-109618/109619) : artefact Velociraptor YARA pour détecter l'exploitation in-the-wild

Cet artefact (Generic.Detection.Yara.PHP2Shell) est signé par Matt Green (@mgreen27). Il vise à détecter l'exploitation active des vulnérabilités CVE-2026-109618 et CVE-2026-109619, regroupées sous le nom PHP2Shell, permettant une exécution de…

📖 cyberveille : https://cyberveille.ch/posts/2026-10-27-php2shell-cve-2026-109618-109619-artefact-velociraptor-yara-pour-detecter-l-exploitation-in-the-wild/
🌐 source : https://docs.velociraptor.app/exchange/artifacts/pages/php2shell/
🟡 vérification factuelle moyenne
#PHP2Shell #Velociraptor #Cyberveille

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

🖲️ #Noticia de #CiberSeguridad #CiberGuerra #CiberAtaque #CiberNoticia
⚫ Explotación efectiva de PHP2Shell confirmada (de nuevo, ahora por KEV)
🔗 http://blog.segu-info.com.ar/2026/10/explotacion-activa-de-php2shell.html

Como ya
adelantamos hace tres días, las dos vulnerabilidades críticas de ejecución remota de código (CVE-2026-109618 y CVE-2026-109619), conocidas como
PHP2Shell, han sido explotadas con éxito en entornos controlados.

Inicialmente, la actividad maliciosa fue

🔒 New CSAF advisory published

VDE-2026-137
METTLER TOLEDO: PHP2Shell in Octo Image Server
CVE-2026-109618, CVE-2026-109619

OCTO Image Server contains a vulnerable version of PHP affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We strongly recommend to upgrade PHP to version 8.2.35.

HTML: https://certvde.com/en/advisories/VDE-2026-137/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-137.json

#OT #Advisory

"Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)":

https://bishopfox.com/blog/responder-guidance-for-php2shell

🚨🇱🇰 Barista Sri Lanka allegedly breached through PHP vulnerabilities, customer information exposed

Barista, one of Sri Lanka's largest café chains with more than 100 outlets, has been targeted by an actor using the handle "secret_solder".

The actor claims to have gained unauthorized server access by exploiting PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, allegedly achieving remote code execution without authentication.

According to the post, the server was running an outdated PHP 8.1.34 installation with exposed configuration details.

The actor also claims to have extracted customer names, email addresses, phone numbers, and delivery addresses from server memory.

A sample containing customer names and phone numbers was published. The intrusion and vulnerability claims remain independently unverified.

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇺🇸 CISA confirms critical PHP2Shell flaws are now being exploited in attacks

CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
⠀
Known collectively as PHP2Shell, the two memory corruption flaws can allow an unauthenticated attacker to remotely execute code on PHP systems serving web requests.

Affected configurations include PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. The PHP team considers mod_php installations at the highest risk.
⠀
Both vulnerabilities have a CVSS 4.0 score of 9.2.

Fixed versions:

• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
⠀
CISA has ordered U.S. federal agencies to remediate the vulnerabilities by October 29.

The PHP team says there are no complete mitigations and that updating is the only safe solution.

Source: https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog

#PHP2Shell is a critical wake-up call. Two #PHP flaws (CVE-2026-109618 & CVE-2026-109619), both CVSS 9.2, can enable unauthenticated remote code execution. If you run PHP, don’t wait. Assess exposure, patch now & verify your fixes. HT @PicusSecurity https://cybersec.picussecurity.com/s/php2shell-critical-php-rce-flaws-cve-2026-109618-cve-2026-109619-explained-30169

Wieso wundert es mich genau null, dass bestimmte Produkte ein PHP Webinterface haben und jetzt so langsam mal auf den Gedanken kommen, einen Patch zu stellen? https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/

CISA has confirmed active exploitation of two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both carrying a CVSS score of 9.2 and allowing unauthenticated remote code execution.

Security researchers observed attacks in honeypots.

The issues were addressed in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 released in October 2026.

https://en.hacks.gr/krisima-provlimata-sti-glossa-php-chrisimopoioyntai-idi-se-epitheseis-symfona-me-ti-cisa/

#PHP #CISA #CVE #Vulnerability

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

#PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity

https://securityonline.info/php2shell-cisa-kev-confirmed-rce-dprk/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1026] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-109618 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- Name: PHP Memory Corruption Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: PHP Group
- Product: PHP
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.php.net/ ; https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-109618

⚠️ CVE-2026-109619 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- Name: PHP Stale Internal Request-State Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: PHP Group
- Product: PHP
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.php.net/ ; https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-109619

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261026 #cisa20261026 #cve_2026_109618 #cve_2026_109619 #cve2026109618 #cve2026109619

CISA found enough evidence to add both php2shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 to the KEV Catalog.

https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog

#php2shell #php #CISA #KEV

CVE ID: CVE-2026-109619
Vendor: PHP Group
Product: PHP
Date Added: 2026-10-26
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-109619

GNU mtools ≤4.0.49 has a medium severity flaw (CVE-2026-118384): out-of-bounds write in parse_vses (vfat.c) via missing minimum check (CWE-839). Local attackers can impact integrity & availability. Patch status pending — avoid untrusted inputs. https://radar.offseq.com/threat/cve-2026-118384-cwe-839-numeric-range-comparison-without-minimum-check-in-gnu-mtools-d3d2f31aa39cf7f4 #OffSeq #Vuln #GNU

CVE-2026-84999 | Pie Register Premium <=3.8.4.0 for WordPress: CRITICAL file upload vuln allows unauthenticated remote code execution. Path disclosure eases exploitation. Disable plugin or restrict uploads until patched. https://radar.offseq.com/threat/the-pie-register-premium-plugin-for-wordpress-is-vulnerable-to-unrestricted-file-type-upload-in-all-53fb8a5bfb673cfb #OffSeq #WordPress #CVE202684999

🟠 CVE-2026-85898 - High (8.8)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Cart Before The Hearse!

Step right up, online merchants! For only the low, low price of ignoring CVE-2026-48356, attackers are now offering a full remote code execution package for your Adobe Commerce or Magento store — hundreds of shops already redecorated, free of charge. CISA has slapped a patch deadline of November 10, 2026 on this critical file upload flaw, which lets uninvited guests take over your store like a haunted Best Buy. (1/3)

Adobe Commerce and Magento Under Active Attacks via Critical File Upload Flaw

CISA reports active exploitation of Adobe Commerce and Magento critical file upload vulnerability (CVE-2026-48356) that allows remote code execution. CISA has mandated a patch deadline of November 10, 2026, after reports showed hundreds of e-commerce sites were compromised.

**If you run Adobe Commerce or Magento, update to the latest patched version immediately. This flaw is actively exploited to take over online stores. Before patching, check your CMS blocks for unfamiliar or suspicious code; if you find any, treat the store as already hacked, then clean it and reset all admin passwords and sessions.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/adobe-commerce-and-magento-under-active-attacks-via-critical-file-upload-flaw-r-i-3-3-i/gD2P6Ple2L

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CVE ID: CVE-2026-48356
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48356

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

🟠 CVE-2026-83831 - High (8.8)

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-83831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-116692 - Critical (9.8)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116688 - High (8.1)

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116662 - High (7.5)

Tanium addressed a compression bomb vulnerability in Enforce.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Veeam Backup & Replication 13 (CVE-2026-108142) : une faille critique exploitable sans authentification https://www.it-connect.fr/veeam-backup-replication-13-faille-critique-cve-2026-108142/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Veeam

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🟠 CVE-2026-92377 - High (7.8)

Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC res...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

#WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity

https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-92376 - High (7.8)

Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92376/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

🟠 CVE-2026-116843 - High (8.8)

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117602 - High (8.4)

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

#HashiCorp #Consul #Kubernetes #CVE2026110720 #CloudSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/hashicorp-consul-k8s-vulnerability-cve-2026-110720/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-18449 - High (7.5)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117604 - High (7.5)

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Reset the "days since hardcoded JWT SECRET" timer.

https://nvd.nist.gov/vuln/detail/cve-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability

https://securityonline.info/nemo-agent-toolkit-vulnerability-cve-2026-65145/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-116837 - High (8.8)

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82117: CRITICAL (CVSS 9.8) in Hitachi HiRDB Server v10 (<10-12-01) – authentication bypass via spoofing. Full system compromise possible. Update to 10-12-01 ASAP. https://radar.offseq.com/threat/cve-2026-82117-cwe-290-authentication-bypass-by-spoofing-in-hitachi-hirdb-server-version-10-8e50efd369906f3e #OffSeq #CVE202682117 #Infosec #Patch

Update your #iPhone, #iPad, #Apple Safari, and everything else #Webkit *right now*

https://support.apple.com/en-us/149227
https://www.cve.org/CVERecord?id=CVE-2026-112623

CVE-2026-115216 – Eclipse ioFog Operator (3.8.0 – <3.9.2) has CRITICAL improper TLS cert validation (CWE-295), allowing attackers to intercept OAuth secrets & admin passwords. Upgrade to 3.9.2 to mitigate. https://radar.offseq.com/threat/cve-2026-115216-cwe-295-improper-certificate-validation-in-eclipse-foundation-eclipse-iofog-e8964354e78c9553 #OffSeq #CVE2026115216 #Eclipse #TLS #infosec

CVE-2026-92885: Qode Membership plugin (≤2.0.6.2) suffers a CRITICAL auth bypass (CVSS 9.8). Typo in Facebook OAuth check lets attackers hijack any WordPress account — including admins. Remove or restrict plugin use now. https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfed22c95b #OffSeq #WordPress #Vuln

🟠 CVE-2026-65220 - High (8.8)

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New advisories. You'll need to log into Broadcom for details.

CRITICAL: Broadcom Output Management Web Viewer 12.1 Vulnerabilities in Apache Tomcat https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Fortinet:

Medium-severity: CVE-2026-106174: Improper Locking Allows Unauthenticated DoS of FortiOS HTTPS Management Interface https://app.opencve.io/cve/CVE-2026-106174 #Fortinet

Adobe:

Note: Adobe doesn't allow you to bail out of data-theft if you're not a subscriber.

Security updates available for Substance 3D Painter | APSB26-178 https://www.adobe.com/trust/security/products/substance3d-painter/apsb26-178.html

Security update available for Adobe Campaign Classic | APSB26-162 https://www.adobe.com/trust/security/products/campaign/apsb26-162.html

Creative Cloud https://www.adobe.com/trust/security/products/creative-cloud/apsb26-135.html

Connect: https://www.adobe.com/trust/security/products/connect/apsb26-182.html #Adobe

Dell:

CRITICAL, affecting multiple CVEs: Security Update for Dell Integrated Data Protection Appliance Software 2.7.9 Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000524348/dsa-2026-474-security-update-for-dell-integrated-data-protection-appliance-software-2-7-9-vulnerabilities

Yesterday:

High-severity: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373 #Dell #VMWare #vulnerability #infosec

🟠 CVE-2026-106174 - High (7.5)

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106174/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.

#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability

https://securityonline.info/supermicro-bmc-vulnerabilities-ipmi/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-18450 - Critical (9.8)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75891 - High (8.8)

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirki_post_apis() AJAX d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HIGH severity in Kirki WordPress plugin (≤6.2.5): CVE-2026-75891 enables privilege escalation via deserialization of untrusted data. Authenticated users can overwrite admin passwords. Restrict plugin use or disable until patched. https://radar.offseq.com/threat/cve-2026-75891-cwe-502-deserialization-of-untrusted-data-in-themeum-kirki-freeform-page-builder-e6faae58108b3cd9 #OffSeq #WordPress #Vuln

CVE-2026-111820: HIGH severity stored XSS in Analytics Insights – Google Analytics Dashboard for WordPress (≤6.3.12). Unauthenticated attackers can inject scripts via Page Title. Restrict input, await vendor patch. Details: https://radar.offseq.com/threat/cve-2026-111820-cwe-79-cross-site-scripting-in-deconf-analytics-insights-google-analytics-dashboard-9c2c2541b7ce4cd6 #OffSeq #XSS #WordPress

🟠 CVE-2026-116836 - High (8.8)

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116816 - High (7.8)

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose negative pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-116839: HIGH severity CSRF vuln in Ubiquiti airMAX M (<6.3.26). Exploitation allows unauthorized changes & DoS if an authenticated user visits a malicious page. Upgrade to 6.3.26+ ASAP. https://radar.offseq.com/threat/cve-2026-116839-cwe-352-cross-site-request-forgery-csrf-in-ubiquiti-inc-airmax-m-384ff83bdd5089b1 #OffSeq #CSRF #Ubiquiti

OpenPanel <3.0.0 HIGH severity info disclosure (CVE-2026-116819): Read-level users can access integration secrets (Slack tokens, webhooks) due to missing redaction. Upgrade to 3.0.0+ and restrict access. https://radar.offseq.com/threat/openpanel-before-300-contains-an-information-disclosure-vulnerability-that-allows-read-level-project-1754d084c1108896 #OffSeq #vuln #OpenPanel #CVESecurity

Apple Patches Exploited CoreGraphics Flaw and Hundreds of Vulnerabilities in October 2026 Security Update

On October 26, 2026, Apple released security updates across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari, patching several hundred vulnerabilities concentrated in WebKit, the kernel, ImageIO and CoreStorage. The fixes include WebKit code-execution and sandbox-escape flaws, a Remote Management remote code execution bug, and many privilege-escalation issues, plus the most urgent one: CVE-2026-86950 in CoreGraphics, which was exploited in targeted attacks and makes updating to iOS 18.7.11 critical for owners of older iPhones.

**If you use any Apple device (iPhone, iPad, Mac, Apple Watch, Apple TV or Vision Pro), update it now. The current versions are iOS/iPadOS 27.2, 26.7.2 or 18.7.11, macOS Golden Gate 27.2, Tahoe 26.7.2 or Sequoia 15.8.2, tvOS/watchOS/visionOS 27.2, and Safari 27.2. If you still use an iPhone XS, XS Max or XR, install iOS 18.7.11 first: it fixes a flaw that has been exploited in targeted attacks. Until you've updated, be extra careful about unfamiliar websites, files, images and fonts from strangers, and connecting to unknown file-sharing or Screen Sharing servers.**
#cybersecurity #infosec #advisory #databreach
https://beyondmachines.net/event_details/apple-addressed-329-unique-b-security-b-vulnerabilities-across-today-s-updates-9to5mac-y-u-w-g-y/gD2P6Ple2L

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now.

#Apple #iOS #ZeroDay #CVE202686950 #CoreGraphics #ExploitedInTheWild #iPhone #CyberSecurity

https://securityonline.info/coregraphics-zero-day-cve-2026-86950-ios-18/?utm_source=mastodon&utm_medium=jetpack_social

📣 EMERGENCY UPDATE 📣

Apple pushed additional updates for a zero-day that may have been actively exploited.

🐛 CVE-2026-86950 (CoreGraphics) additional patches:
- iOS and iPadOS 18.7.11

#apple #cybersecurity #infosec #security #ios

New perfect 10. 🥳

https://nvd.nist.gov/vuln/detail/cve-2026-115905

sev:CRIT 10.0 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.

New perfect 10. 🥳

https://nvd.nist.gov/vuln/detail/cve-2026-115905

sev:CRIT 10.0 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.

Details and PoC exploit code are out for CVE-2026-115905, a critical 10.0 CVSS Rust zip crate vulnerability. Upgrade to version 9.0.5 immediately.

#Rust #ZipCrate #CVE2026115905 #PoC #RCE #Cybersecurity #Vulnerability #InfoSec

https://meterpreter.org/rust-zip-crate-vulnerability-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

PHP "php2shell" (CVE-2026-109618/109619) is in CISA KEV and under attack: no-login code execution on PHP web servers. That includes the web UI on OPNsense, pfSense and Unraid, and PHP apps on Synology and QNAP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or the vendor update), then restart PHP.

Also: Nextcloud's built-in Collabora CODE app (CVE-2026-110447), update to 26.4.303.

This week's issue:
https://patchorpass.beehiiv.com/p/patchorpass-2-php-php2shell-exploit-patch-now-plus-nextcloud-collabora?utm_source=mastodon&utm_medium=social&utm_campaign=issue-2

#infosec #homelab #selfhosted #nextcloud

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

Body-parser vulnerability CVE-2026-111181 (CVSS 7.5) enables Express denial of service with one request. Upgrade to body-parser 2.4.0 or 1.20.9.

#Express #NodeJS #bodyparser #CVE2026111181 #DoS #JavaScript #npm #WebSecurity

https://securityonline.info/body-parser-vulnerability-cve-2026-111181/?utm_source=mastodon&utm_medium=jetpack_social

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

Better than what?

https://nvd.nist.gov/vuln/detail/cve-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth provider, and use account.storeStateStrategy set to database can accept an OAuth sign-in state value as a Magic Link token. These settings can cause Magic Link verification records and OAuth state to resolve to the same stored identifier, allowing an unauthenticated attacker to start OAuth sign-in for a known email address and redeem the returned state through Magic Link without controlling the mailbox or completing the provider callback. The attacker can obtain a normal session for an existing user, or create an account incorrectly marked as email verified when sign-up is enabled. This issue is fixed in version 1.7.7.

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation

https://securityonline.info/yootheme-pro-vulnerability-cve-2026-102785-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Oracle Probes Expose Multiple Vulnerabilities in E-Business Suite, PeopleSoft

Security researchers have uncovered a critical vulnerability in Oracle's E-Business Suite, tracked as CVE-2026-101767, which allows attackers to launch unauthenticated SQL injection attacks with the potential for remote code execution. This flaw was recently patched by Oracle, but not before decoys recorded…

https://osintsights.com/oracle-probes-expose-multiple-vulnerabilities-in-e-business-suite-peoplesoft?utm_source=mastodon&utm_medium=social

#OracleVulnerabilities #Cve2026101767 #EbusinessSuite #Peoplesoft #SqlInjection

🚨 Rapid Response: CVE-2026-101767 (CVSS 9.8) could allow unauthenticated takeover of Oracle E-Business Suite.

Censys identified 2,246 exposed web properties. Exposure does not confirm vulnerability.

Patch and investigate: https://censys.com/advisory/cve-2026-101767/

#CensysARC #Cybersecurity #VulnerabilityManagement #Oracle #InfoSec

🚨 Rapid Response: CVE-2026-101767 (CVSS 9.8) could allow unauthenticated takeover of Oracle E-Business Suite.

Censys identified 2,246 exposed web properties. Exposure does not confirm vulnerability.

Patch and investigate: https://censys.com/advisory/cve-2026-101767/

#CensysARC #Cybersecurity #VulnerabilityManagement #Oracle #InfoSec

🚨🇺🇸 Hackers begin targeting critical Oracle E-Business Suite flaw

Threat actors are scanning for systems vulnerable to CVE-2026-101767, a critical unauthenticated SQL injection flaw in Oracle E-Business Suite that can be chained to remote code execution.
⠀
The vulnerability carries a CVSS score of 9.8 and affects E-Business Suite versions 12.2.3 through 12.2.15.
⠀
An attacker with HTTP access to the Thin Client Framework servlet can execute SQL with the privileges of the APPS database user and then run operating-system commands as the EBS application account.
⠀
Depending on the deployment, compromised systems may expose financial, payroll, human resources and procurement information.
⠀
Defused recorded exploratory exploitation attempts against its Oracle EBS decoys on October 27, one week after Oracle released patches. Shadowserver currently tracks more than 670 internet-exposed EBS instances, although it is unknown how many remain vulnerable.
⠀
Oracle has not classified the flaw as actively exploited, and successful compromises have not been publicly confirmed.

Administrators should immediately apply Oracle’s October 2026 Critical Patch Update. If patching is delayed, restrict the EBS web tier to trusted networks and remove /OA_HTML/AppsTCFServer from the URL firewall allowlist.

Source: https://www.oracle.com/security-alerts/cpuoct2026.html

The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical Patch Update. https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html

CW: CVE-2026-113380 — Signalben használt RingRTC híváslezárás megkerülhető: az FSM eseménysorát eláraszthatja a támadó, így a bontás jelzése elsikkad; mikrofon/kamera aktív maradhat. PoC nyilvános, javítva RingRTC 2.27.0 (2026-09-04). Érdemes frissíteni. https://linuxmint.hu/hir/2026/10/a-signal-egy-hibaja-miatt-nem-lehetett-megszakitani-a-csalo-hivasokat #Signal #CVE #Security #WebRTC #OpenSource

"PwnEscape" CVE-2026-99999, severity critical, disclosed October 15th, and #Ubuntu is once again still dragging their feet. "Ubuntu Priority: Medium"

smh

https://ubuntu.com/security/CVE-2026-99999

Latest cybersecurity reports highlight critical PHP vulnerabilities being actively exploited globally, necessitating emergency patching. CISA confirmed exploitation of the Node2Shell/Brotli flaw (CVE-2026-111497). China-linked groups leveraged a BeyondTrust zero-day (CVE-2026-102764), and AI agents reportedly compromised live websites during testing (Oct 27-28, 2026). In technology, Amazon Business introduced new agentic AI tools. Geopolitically, Israel's elections are heading towards a coalition deadlock.

#Cybersecurity #AnonNews_irc #News

🚨🇦🇪 Telegram zero-day can enable code execution through malicious animated content

A vulnerability in Telegram’s rlottie animation library can allow attackers to execute arbitrary code within the application process.

Tracked as CVE-2026-111105, the flaw carries a CVSS score of 7.0 and was publicly disclosed by Trend Micro’s Zero Day Initiative after remaining unresolved at the client-code level.
⠀
The vulnerability is caused by improper validation of attacker-controlled animation data, resulting in a write before the beginning of an allocated memory buffer.
⠀
Despite reports describing the flaw as a zero-click sticker attack, ZDI’s final advisory says user interaction is required. The victim must visit a malicious page or open a malicious file for exploitation to occur.
⠀
Telegram told ZDI that server-side sticker validation mitigates the vulnerability. However, ZDI continued seeking a client-side fix and ultimately published the issue as a zero-day advisory on October 15.
⠀
No affected client versions, patched versions or confirmed in-the-wild attacks have been disclosed.

Users should keep Telegram updated and avoid opening untrusted animated files, sticker packs or external links until a client-side fix is confirmed.

Source: https://www.zerodayinitiative.com/advisories/ZDI-26-757/

PoC and full details are public for the Linux nf_tables vulnerability CVE-2026-23111. The kernelCTF exploit gains root and escapes containers. Patch now.

#Linux #LinuxKernel #nf_tables #Netfilter #CVE202623111 #kernelCTF #PoC #PrivilegeEscalation #ContainerEscape