CVE-2026-18786: CRITICAL auth bypass in CheckView WP plugin ≤2.0.29. Attackers can exploit REST API via crafted links to perform admin actions if an admin clicks. Restrict plugin REST API & avoid suspicious links. https://radar.offseq.com/threat/cve-2026-18786-cwe-287-improper-authentication-in-checkview-8f35dcb91728f992 #OffSeq #WordPress #CVE202618786

CVE-2026-18786: CRITICAL auth bypass in CheckView WP plugin ≤2.0.29. Attackers can exploit REST API via crafted links to perform admin actions if an admin clicks. Restrict plugin REST API & avoid suspicious links. https://radar.offseq.com/threat/cve-2026-18786-cwe-287-improper-authentication-in-checkview-8f35dcb91728f992 #OffSeq #WordPress #CVE202618786

CVE-2026-16985: Squeeze WP plugin <1.7.12 has a CRITICAL vuln — users with upload_files can upload PHP files, enabling remote code execution. Restrict permissions, monitor uploads, and check for updates. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6591f #OffSeq #WordPress #CVE2026_16985 #infosec

CVE-2026-16985: Squeeze WP plugin <1.7.12 has a CRITICAL vuln — users with upload_files can upload PHP files, enabling remote code execution. Restrict permissions, monitor uploads, and check for updates. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6591f #OffSeq #WordPress #CVE2026_16985 #infosec

GStreamer gst-plugins-ugly (asfdemux) in Red Hat Enterprise Linux 10 is affected by CVE-2026-19389 (HIGH, CVSS 7.1). Parsing crafted ASF/WMV/WMA files may lead to DoS or info leaks. No patch yet — avoid untrusted media. https://radar.offseq.com/threat/cve-2026-19389-integer-overflow-or-wraparound-in-red-hat-red-hat-enterprise-linux-10-8bd45ea7a574114c #OffSeq #Linux #CVE #GStreamer

GStreamer gst-plugins-ugly (asfdemux) in Red Hat Enterprise Linux 10 is affected by CVE-2026-19389 (HIGH, CVSS 7.1). Parsing crafted ASF/WMV/WMA files may lead to DoS or info leaks. No patch yet — avoid untrusted media. https://radar.offseq.com/threat/cve-2026-19389-integer-overflow-or-wraparound-in-red-hat-red-hat-enterprise-linux-10-8bd45ea7a574114c #OffSeq #Linux #CVE #GStreamer

🟠 CVE-2026-19387 - High (7.6)

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19387/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19387 - High (7.6)

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19387/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19381 - High (7.8)

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kingston FURY CTRL RGB Control Software v2.0.65.0 hit by HIGH severity vuln (CVE-2026-19381, CVSS 8.5). Local attackers can escalate privileges via NTIOLib_KSFX.sys. Exploit code is public; no patch yet. Restrict local access, monitor systems. https://radar.offseq.com/threat/cve-2026-19381-improper-privilege-management-in-kingston-fury-ctrl-rgb-control-software-9a62169aad70214d #OffSeq #Vuln #Kingston

🟠 CVE-2026-19381 - High (7.8)

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kingston FURY CTRL RGB Control Software v2.0.65.0 hit by HIGH severity vuln (CVE-2026-19381, CVSS 8.5). Local attackers can escalate privileges via NTIOLib_KSFX.sys. Exploit code is public; no patch yet. Restrict local access, monitor systems. https://radar.offseq.com/threat/cve-2026-19381-improper-privilege-management-in-kingston-fury-ctrl-rgb-control-software-9a62169aad70214d #OffSeq #Vuln #Kingston

CVE-2026-15534: HIGH severity in LEONT perl (≤5.45.1) — Integer overflow in regex engine can cause heap corruption or crashes when large inputs and crafted patterns are processed. Avoid risky patterns until patched. https://radar.offseq.com/threat/cve-2026-15534-cwe-190-integer-overflow-or-wraparound-in-leont-perl-b58a44fbf0b93abe #OffSeq #Perl #Vuln #AppSec

CVE-2026-15534: HIGH severity in LEONT perl (≤5.45.1) — Integer overflow in regex engine can cause heap corruption or crashes when large inputs and crafted patterns are processed. Avoid risky patterns until patched. https://radar.offseq.com/threat/cve-2026-15534-cwe-190-integer-overflow-or-wraparound-in-leont-perl-b58a44fbf0b93abe #OffSeq #Perl #Vuln #AppSec

🔴 CVE-2026-19348 - Critical (9.8)

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19348/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-19348 in Shenzhen Aitemi M300 Wi-Fi Repeater: CRITICAL command injection via /protocol.csp (enable, name, mac). Public exploit code out; no patch yet. Restrict access & monitor traffic. https://radar.offseq.com/threat/cve-2026-19348-command-injection-in-shenzhen-aitemi-m300-wi-fi-repeater-50170c9de7b315c0 #OffSeq #CVE202619348 #IoTSecurity

🔴 CVE-2026-19348 - Critical (9.8)

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19348/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-19348 in Shenzhen Aitemi M300 Wi-Fi Repeater: CRITICAL command injection via /protocol.csp (enable, name, mac). Public exploit code out; no patch yet. Restrict access & monitor traffic. https://radar.offseq.com/threat/cve-2026-19348-command-injection-in-shenzhen-aitemi-m300-wi-fi-repeater-50170c9de7b315c0 #OffSeq #CVE202619348 #IoTSecurity

🟠 CVE-2026-19346 - High (8.8)

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19346 - High (8.8)

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19341 - High (8.8)

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19341/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19195 - High (7.8)

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19195 - High (7.8)

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10595 - High (7.5)

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vulnerability arises from the improper handling of user-controlled path input, which is dir...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15038 (CRITICAL): InfiniteWP Client <1.13.6 has improper authentication in WordPress Multisite. Allows unauthenticated takeover & potential RCE. Restrict endpoint, monitor activity, upgrade ASAP. https://radar.offseq.com/threat/cve-2026-15038-cwe-287-improper-authentication-in-infinitewp-client-58f162c29ea9006c #OffSeq #WordPress #Vuln #BlueTeam

Instale já a correção para vulnerabilidade em máquinas virtuais

Se você usa Proxmox ou apenas tem um VPS, atualize já seu sistema. O problema permite o escape de máquinas virtuais e acesso à máquina física.

Se usa Debian, saiu o kernel 6.12.101-1 que corrige o problema. O Proxmox também já lançou atualização mesmo para quem não é assinante com o kernel 7.0.14-9.

:debian: https://security-tracker.debian.org/tracker/CVE-2026-64561
:xp_secure_server: https://forum.proxmox.com/threads/proxmox-and-cve-2026-64561.185571/
:xp_sys_info: https://www.cve.org/CVERecord?id=CVE-2026-64561
:github: https://github.com/V4bel/Zapscape

@fediadminbr

#FediAdminBR #MastoAdmin

A new Linux Kernel KVM vulnerability threatens cloud servers with virtual machine escape risks. Learn about CVE-2026-64561 and secure your host machine now.

#LinuxKernel #KVMVulnerability #CVE202664561 #CloudSecurity #VMescape

https://securityexpress.info/linux-kernel-kvm-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

「Zapscape KVMの新たな脆弱性により、特権を持つL1ゲストコードがLinuxホストに漏洩する可能性 」： #TheHackerNews

「Linuxカーネルの新たな脆弱性「Zapscape」 により、L1ゲスト仮想マシン（VM）内でカーネル権限を持つ攻撃者がKVM分離を回避し、ホスト上でコードを実行できる可能性があります。このリスクは、ネストされた仮想化が信頼できないゲストに公開されている場合に発生します。

この脆弱性は CVE-2026-64561 として追跡されており、ネストされたゲストメモリ変換に使用されるシャドウページテーブルを管理するKVM/x86のシャドウメモリ管理ユニット（MMU）に影響を与えます。

このバグを明らかにしたセキュリティ研究者の キム・ヒョヌ氏 は、実証されたエクスプロイト経路によって、カーネル権限、つまりroot権限でホスト上でコマンドを実行できると述べた。 」

https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html

#prattohome

🟠 CVE-2026-19193 - High (7.8)

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launch...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19193 - High (7.8)

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launch...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-64564: SCTP Flaw Enables Container Escape

https://securityonline.info/sctp-uaf-cve-2026-64564-container-escape/?utm_source=mastodon&utm_medium=jetpack_social

SCTPhantom: 18-Year-Old Linux Kernel Flaw Allows Root Access and Container Escape

A use-after-free vulnerability in the Linux SCTP implementation (CVE-2026-64564) allows local attackers to gain root privileges and escape containers. The flaw has existed since 2008 and affects most major Linux distributions.

**If you run Linux (Debian, Ubuntu, RHEL, Rocky) on servers, containers or workstations, install the latest kernel update from your distribution vendor and reboot. The fix for CVE-2026-64564 only takes effect after the restart. If you don't use SCTP, also switch the module off (add both blacklist sctp and install sctp /bin/false to /etc/modprobe.d/sctp.conf, refresh the initramfs, and confirm with lsmod | grep sctp that nothing comes back).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sctphantom-18-year-old-linux-kernel-flaw-allows-root-access-and-container-escape-f-i-j-g-0/gD2P6Ple2L

🏆 New Achievement! SCTPhantom Menace: Eighteen Years In The Making!

ERROR: Kernel identity verification module returned incorrect value. Duration of incorrect value: eighteen years. Tencent researchers have confirmed CVE-2026-64564, a use-after-free in Linux's SCTP networking code, allows local users to escalate to root and escape containers entirely. The bug checks a delete request against the packet's source address, then acts on a different one. The kernel trusted the wrong address. (1/2)

CVE-2026-64564: SCTP Flaw Enables Container Escape

https://securityonline.info/sctp-uaf-cve-2026-64564-container-escape/?utm_source=mastodon&utm_medium=jetpack_social

SCTPhantom: 18-Year-Old Linux Kernel Flaw Allows Root Access and Container Escape

A use-after-free vulnerability in the Linux SCTP implementation (CVE-2026-64564) allows local attackers to gain root privileges and escape containers. The flaw has existed since 2008 and affects most major Linux distributions.

**If you run Linux (Debian, Ubuntu, RHEL, Rocky) on servers, containers or workstations, install the latest kernel update from your distribution vendor and reboot. The fix for CVE-2026-64564 only takes effect after the restart. If you don't use SCTP, also switch the module off (add both blacklist sctp and install sctp /bin/false to /etc/modprobe.d/sctp.conf, refresh the initramfs, and confirm with lsmod | grep sctp that nothing comes back).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sctphantom-18-year-old-linux-kernel-flaw-allows-root-access-and-container-escape-f-i-j-g-0/gD2P6Ple2L

🏆 New Achievement! SCTPhantom Menace: Eighteen Years In The Making!

ERROR: Kernel identity verification module returned incorrect value. Duration of incorrect value: eighteen years. Tencent researchers have confirmed CVE-2026-64564, a use-after-free in Linux's SCTP networking code, allows local users to escalate to root and escape containers entirely. The bug checks a delete request against the packet's source address, then acts on a different one. The kernel trusted the wrong address. (1/2)

「18年前のLinux SCTPの脆弱性により、ローカルユーザーがroot権限を取得し、コンテナから脱出できる可能性 」： #TheHackerNews

「LinuxのSCTPネットワークコードに存在する解放済みメモリ使用のバグを悪用すると、ホスト上で完全なroot権限を取得できる可能性がある。Tencentの研究者らは、このバグを利用してコンテナから脱出し、その下にあるマシンにアクセスしたと述べている。

この脆弱性は2008年から存在していました。修正版は既にリリースされており、8月3日にリリースされた安定版カーネル7.1.6、6.18.42、6.12.101、6.6.148で修正されています。SCTP接続可能な古いカーネルを使用しているユーザーはアップデートしてください。

CVE-2026-64564 として追跡され 、 発見者によってSCTPhantom と名付けられたこの脆弱性は、カーネルCVEチームが割り当てた2日後の8月6日に公表された。 」

https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

#prattohome

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free · Tencent Zhuque Lab https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

MSI Radix AXE6600 (firmware v781521) is affected by CVE-2026-71993 (CVSS 9.8): CRITICAL command injection in openvpn via macfilter allows remote root access. Restrict management access & monitor activity. Details: https://radar.offseq.com/threat/msi-radix-axe6600-router-firmware-version-v781521-contains-a-command-injection-vulnerability-in-the-776e96041d2257c7 #OffSeq #Vuln #RouterSecurity #CVE2026_71993

MSI Radix AXE6600 (firmware v781521) is affected by CVE-2026-71993 (CVSS 9.8): CRITICAL command injection in openvpn via macfilter allows remote root access. Restrict management access & monitor activity. Details: https://radar.offseq.com/threat/msi-radix-axe6600-router-firmware-version-v781521-contains-a-command-injection-vulnerability-in-the-776e96041d2257c7 #OffSeq #Vuln #RouterSecurity #CVE2026_71993

MSI Radix AXE6600 v781521 suffers CRITICAL CVE-2026-71993 (CVSS 9.3): OS Command Injection via macfilter allows remote root access. Restrict remote access & monitor openvpn/macfilter activity. Details: https://radar.offseq.com/threat/cve-2026-71993-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-d8e25db330470f39 #OffSeq #CVE #RouterSecurity #Infosec

🔴 CVE-2026-71993 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71993/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 (v781521) is affected by CVE-2026-71986 (CRITICAL) — OS command injection in dmz function allows remote root access. No patch yet, monitor vendor updates. https://radar.offseq.com/threat/cve-2026-71986-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-a197b90333b0f1d8 #OffSeq #CVE #Infosec #RouterSecurity

MSI Radix AXE6600 (v781521) is affected by CVE-2026-71986 (CRITICAL) — OS command injection in dmz function allows remote root access. No patch yet, monitor vendor updates. https://radar.offseq.com/threat/cve-2026-71986-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-a197b90333b0f1d8 #OffSeq #CVE #Infosec #RouterSecurity

🔴 CVE-2026-71986 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71986/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 (v781521) hit by CRITICAL OS command injection (CVE-2026-71990, CVSS 9.3). Remote attackers can gain root via SSH config. No patch yet — restrict SSH access & monitor for updates. https://radar.offseq.com/threat/cve-2026-71990-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-0b56ced622becfdc #OffSeq #CVE #infosec #router

🔴 CVE-2026-71990 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can expl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71990/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 routers (v781521) affected by CRITICAL OS command injection (CVE-2026-71992, CVSS 9.3). Remote attackers can execute root commands — no auth needed. Restrict access, monitor logs. No patch yet. https://radar.offseq.com/threat/cve-2026-71992-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-20f0be0f1615528d #OffSeq #CVE202671992 #RouterSecurity

🔴 CVE-2026-71992 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71985 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71984 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71987 - Critical unpatched RCE in MSI Radix AXE6600 routers via command injection in alg function. CVSS 9.8. Full root access possible. Update immediately or isolate devices. #CVE #MSI #infosec

https://www.valtersit.com/cve/CVE-2026-71987/

CVE-2026-71987: MSI Radix AXE6600 (v781521) suffers from a CRITICAL OS command injection vulnerability (CVSS 9.3). Remote, unauthenticated code execution possible with root privileges. Restrict device access and monitor! https://radar.offseq.com/threat/cve-2026-71987-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-46b78b0439cf6545 #OffSeq #CVE202671987 #Infosec #RouterSecurity

CVE-2026-71987: MSI Radix AXE6600 (v781521) suffers from a CRITICAL OS command injection vulnerability (CVSS 9.3). Remote, unauthenticated code execution possible with root privileges. Restrict device access and monitor! https://radar.offseq.com/threat/cve-2026-71987-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-46b78b0439cf6545 #OffSeq #CVE202671987 #Infosec #RouterSecurity

🔴 CVE-2026-71987 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 (v781521) hit by CRITICAL OS command injection (CVE-2026-71988, CVSS 9.3). Remote attackers can gain root via portFw/alg — full device takeover possible. Patch status unconfirmed. More: https://radar.offseq.com/threat/cve-2026-71988-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-8fa920b8dd663be3 #OffSeq #CVE202671988 #Infosec #RouterSecurity

MSI Radix AXE6600 (v781521) hit by CRITICAL OS command injection (CVE-2026-71988, CVSS 9.3). Remote attackers can gain root via portFw/alg — full device takeover possible. Patch status unconfirmed. More: https://radar.offseq.com/threat/cve-2026-71988-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-8fa920b8dd663be3 #OffSeq #CVE202671988 #Infosec #RouterSecurity

🔴 CVE-2026-71988 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71991 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 routers (v781521) affected by CRITICAL CVE-2026-71991 🛡️. OS command injection via TelnetSSH enables remote root access. Restrict Telnet, segment devices, monitor for vendor fixes. https://radar.offseq.com/threat/cve-2026-71991-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-73b9d5ae919f36d2 #OffSeq #CVE202671991 #RouterSecurity

MSI Radix AXE6600 routers (v781521) impacted by CVE-2026-71989: CRITICAL OS command injection (CVSS 9.3) in porTrigger/alg enables unauthenticated root command execution. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-71989-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-0ff15d6b83145a7e #OffSeq #Vuln #CVE202671989 #RouterSecurity

🔴 CVE-2026-71989 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71983 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parame...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71953 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpSe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71953/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71955 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, ta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71954 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71950 - Critical RCE in D-Link DWR-M961. Command injection in formSmsManage, root access. CVSS 9.8. Unpatched. Disable remote access immediately. #CVE #DLink #infosec

https://www.valtersit.com/cve/CVE-2026-71950/

🔴 CVE-2026-71950 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71950/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71945 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject arbitrary malicious comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71944 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject arbitrary malicious comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71952 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject arbitrary malicious commands int...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71952/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71948 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71957 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71956 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst fiel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42170 - High (7.8)

A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71946 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71946/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71958 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71951 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71951/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71949 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71947 - Critical command injection in D-Link DWR-M961 routers. Remote attackers can execute arbitrary commands as root via /boafrm/formTracerouteDiagnosticRun. CVSS 9.8. No patch available - isolate affected devices now. #CVE #DLink #infosec

https://www.valtersit.com/cve/CVE-2026-71947/

🔴 CVE-2026-71947 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject arbitrary malicious com...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71947/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67620 - High (7.7)

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud meta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14526 - Critical auth bypass in AI Copilot WordPress plugin. Unauthenticated attackers can create admin accounts and take over sites. CVSS 9.8. Unpatched. Disable plugin now. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-14526/

CVE-2026-14526: AI Copilot – Content Generator <=1.5.6 has a CRITICAL auth bypass. Unauth attackers can create WordPress admin users via an exposed nonce, leading to site takeover. Disable [aiwu-form]/chatbot & check for vendor patch. https://radar.offseq.com/threat/cve-2026-14526-cwe-269-improper-privilege-management-in-wupsales-ai-copilot-content-generator-735a53bb0d60cd45 #OffSeq #CVE202614526 #WordPress

🔴 CVE-2026-14526 - Critical (9.8)

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This make...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-16948 | HIGH severity in Solace Extra WP plugin <1.6.1: Missing capability checks on AJAX actions lets Subscribers change site settings & delete imported content. Patch status unknown — tighten role permissions. https://radar.offseq.com/threat/cve-2026-16948-cwe-284-improper-access-control-in-solace-extra-5877e08458999aac #OffSeq #WordPress #CVE2026_16948

CVE-2026-16955: HIGH severity path traversal in AI Engine WP plugin <3.6.6. Subscribers can read arbitrary files if public API is enabled. Restrict API & admin privileges. Await patch. https://radar.offseq.com/threat/cve-2026-16955-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-ai-72905be644e71053 #OffSeq #WordPress #CVE2026_16955 #Security

CVE-2026-16594: WP Directory Kit <1.5.5 has a HIGH severity info exposure flaw. Any authenticated user (even Subscribers) can access API keys/secrets due to missing authorization on AJAX action. Restrict user roles & monitor logs. https://radar.offseq.com/threat/cve-2026-16594-cwe-200-information-exposure-in-wp-directory-kit-3d8a39f4c5fd7c8a #OffSeq #WordPress #CVE

📰 CISA Adds Progress Kemp LoadMaster Flaw to KEV Catalog After Exploits

🚨 CISA KEV ALERT: A critical command injection flaw in Progress Kemp LoadMaster (CVE-2026-8037, CVSS 9.6) is actively exploited. Unauthenticated attackers can gain full control. Federal agencies must patch by Aug 10. #CVE #CISA #KEV #PatchNow

🔗 https://cyber.netsecops.io/articles/progress-kemp-loadmaster-flaw-cve-2026-8037-added-to-cisa-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CRITICAL THREAT ALERT: Active exploitation of CVE-2026-8037 in Progress LoadMaster allows unauthenticated RCE via command injection. Securing your perimeter requires immediate SIEM detection updates and access restrictions. Review our full TSUITE analysis: https://thecybermind.co/5yde

🚨 [CISA-2026:0807] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-8037 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8037)
- Name: Progress LoadMaster Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Progress
- Product: LoadMaster
- Notes: https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8037

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260807 #cisa20260807 #cve_2026_8037 #cve20268037

CVE ID: CVE-2026-8037
Vendor: Progress
Product: LoadMaster
Date Added: 2026-08-07
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8037

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CVE-2026-56793 - High-severity improper authentication in Dell OpenManage Server Administrator (<11.1.0.2). Remote unauthenticated attackers can gain unauthorized access. CVSS 7.7. Update immediately. #CVE #Dell #infosec

https://www.valtersit.com/cve/CVE-2026-56793/

🟠 CVE-2026-56793 - High (7.7)

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71851 (CRITICAL, CVSS 9): brix crypto-js <4.0.0 uses weak RNG in WordArray.random(), risking private key recovery in wallet apps using BIP39. Upgrade to 4.0.0+ now. https://radar.offseq.com/threat/cve-2026-71851-cwe-331-insufficient-entropy-in-brix-crypto-js-e5283f6c465bd95e #OffSeq #CryptoJS #InfoSec #Vulnerability

🔴 CVE-2026-71851 - Critical (9)

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71851/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71560 - Critical (9.1)

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71558 - Critical (9.8)

Heap type confusion vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserializat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71558/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70558 - Critical (9.8)

Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path validation. The route is marked @SaIgnore and /download/** is excluded from the Sa-Token...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70558/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70558 - Critical (9.8)

Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path validation. The route is marked @SaIgnore and /download/** is excluded from the Sa-Token...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70558/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5857 - High (8.1)

Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set. On the next TCP segment, tc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5857 - High (8.1)

Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set. On the next TCP segment, tc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19192 - High (7.8)

A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19192/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52878 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawD...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-46409 - Critical (9.6)

OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:` (commonly 19141) without server-side Origin validat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46409/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48170 - Critical prototype pollution in scim-patch <0.9.1. Attacker-controlled SCIM PATCH can pollute Object.prototype process-wide. CVSS 9.1. Unpatched - update immediately. #CVE #NodeJS #infosec

https://www.valtersit.com/cve/CVE-2026-48170/

CVE-2026-48170 (CRITICAL, CVSS 9.1): Prototype pollution in scim-patch <0.9.1 lets attackers alter Object.prototype globally in Node.js. Upgrade to 0.9.1+ or freeze prototypes for mitigation. https://radar.offseq.com/threat/cve-2026-48170-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-1a8d5ec623a7b014 #OffSeq #CVE202648170 #NodeJS #InfoSec

🔴 CVE-2026-48170 - Critical (9.1)

`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`. After one such patch,
`Object.prototype.somePr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16258 - Critical (9.8)

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. When a suitable POP chain is present via another installed Ajax Searc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16263 - High (8.8)

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to includ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63235 - High (7.5)

In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15972 - High (7.5)

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15972/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64636 - High (7.7)

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15215 - High (8.8)

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protecte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16041 - High (7.5)

The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated attacker to create WooCommerce product reviews with an attacker-chose...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50540 - Critical (9.6)

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19082 - High (7.5)

Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags.

copy_string_tags() computes an ASCII EXIF tag's length as `entry->size - 1` to strip ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48169 - High (8.8)

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

pipeboard-co meta-ads-mcp (<1.0.109) affected by CRITICAL auth bypass (CVE-2026-48039). Unauthenticated requests can access tools & leak access tokens via error responses. Patch to 1.0.109+ ASAP. https://radar.offseq.com/threat/cve-2026-48039-cwe-287-improper-authentication-in-pipeboard-co-meta-ads-mcp-cda3b9551f498ab7 #OffSeq #CVE202648039 #infosec #vuln

🔴 CVE-2026-48039 - Critical (9.1)

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48039/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50481 - Critical (9.9)

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50481/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50481 - Critical (9.9)

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50481/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dans la suite de wp2shell, encore une jolie chaîne WordPress : #XSS2Shell — CVE-2026-64638.

Au départ, on a “juste” une Reflected XSS pré-auth sur wp-login.php.

Sauf qu’en la chaînant avec plusieurs briques déjà présentes dans WordPress, on arrive à quelque chose de beaucoup moins sympa :

XSS → contexte admin → Application Password → REST API → upload de plugin → RCE 🐚

⚠️ À noter quand même : ce n’est pas du pre-auth zero-click.
Il faut qu’un admin déjà connecté clique sur un lien contrôlé par l’attaquant.

Encore un bon rappel : une “simple XSS” peut devenir franchement méchante une fois mise dans la bonne chaîne.

🩹 Corrigé dans WordPress 7.0.3.
👇
https://wordpress.org/news/2026/08/wordpress-7-0-3-release/

En cas de doute sur une exploitation passée : petit coup d’œil aux Application Passwords, aux plugins récemment ajoutés et aux fichiers PHP inhabituels.

"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)"
👇
https://pwn.ai/blog/xss2shell

#WordPress #XSS2Shell #CyberVeille

Another one of those WordPress pre-auth RCEs

This one's named XSS2Shell, CVE-2026-64638, found with AI, patched in v7.0.3, released on Thursday

https://pwn.ai/blog/xss2shell

New WordPress Flaw Turns a Failed Login Attempt Into Full Server Takeover

https://securebulletin.com/new-wordpress-flaw-turns-a-failed-login-attempt-into-full-server-takeover/

Dans la suite de wp2shell, encore une jolie chaîne WordPress : #XSS2Shell — CVE-2026-64638.

Au départ, on a “juste” une Reflected XSS pré-auth sur wp-login.php.

Sauf qu’en la chaînant avec plusieurs briques déjà présentes dans WordPress, on arrive à quelque chose de beaucoup moins sympa :

XSS → contexte admin → Application Password → REST API → upload de plugin → RCE 🐚

⚠️ À noter quand même : ce n’est pas du pre-auth zero-click.
Il faut qu’un admin déjà connecté clique sur un lien contrôlé par l’attaquant.

Encore un bon rappel : une “simple XSS” peut devenir franchement méchante une fois mise dans la bonne chaîne.

🩹 Corrigé dans WordPress 7.0.3.
👇
https://wordpress.org/news/2026/08/wordpress-7-0-3-release/

En cas de doute sur une exploitation passée : petit coup d’œil aux Application Passwords, aux plugins récemment ajoutés et aux fichiers PHP inhabituels.

"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)"
👇
https://pwn.ai/blog/xss2shell

#WordPress #XSS2Shell #CyberVeille

Another one of those WordPress pre-auth RCEs

This one's named XSS2Shell, CVE-2026-64638, found with AI, patched in v7.0.3, released on Thursday

https://pwn.ai/blog/xss2shell

🚨 XSS2shell (CVE-2026-64638) has been identified as a notable vulnerability.

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.

Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires successful social engineering of and explicit interaction by the target victim.

This issue affects all versions of WordPress. Version 7.0.3 has been released, containing a fix for the vulnerability, and as a courtesy to users on older branches the fix has been backported to all branches back to 4.7.

Discovered and responsibly disclosed by the team at pwn.ai.

ℹ️ Additional details on ZEN SecDB https://secdb.nttzen.cloud/updates/267dffcb-04e8-4ba6-9c9e-2305d1d11b59/xss2shell-vulnerability

#infosec #xss2shell #wordpress #xss #rce
#nttdata #zen #secdb

WordPress RCE. Every version ever released (except the latest, 7.0.3). 500+ million sites. 43% of the Internet-facing sites. Hacker's paradise.

"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)":

https://pwn.ai/blog/xss2shell

「WordPressの事前認証における新たなXSS脆弱性によりPHPコードの実行につながる可能性あり - 早急に修正を！ 」： #TheHackerNews

「WordPressは、ログイン画面に存在する、認証前のリフレクテッドクロスサイトスクリプティング（XSS）の脆弱性を修正しました。この脆弱性は、コンテンツ管理システムのすべてのバージョンに影響を与えます。pwn.aiは、ログインした管理者が攻撃者によって制御されたページを操作する際に、この脆弱性がサーバー上でPHPコードの実行に連鎖的に繋がる仕組みを実証しました。

CVE-2026-64638 （CVSSスコア：8.9）として追跡されている この深刻な脆弱性は、攻撃者に特別な権限を必要としません。 」

https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html

#prattohome

"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)"
https://pwn.ai/blog/xss2shell

🚨 WordPress patches XSS2Shell flaw that could lead to server code execution

CVE-2026-64638 is a CVSS 8.9 pre-authentication XSS vulnerability in the WordPress login screen.

The XSS itself requires no account. Researchers at pwn.ai demonstrated how it can be chained against a logged-in administrator to reach PHP code execution after social engineering the admin into interacting with an attacker-controlled page.

A successful chain could potentially allow attackers to:

• Create API credentials
• Gain authenticated REST access
• Upload malicious plugin files
• Execute PHP on the server
• Access WordPress secrets and database credentials

WordPress 7.0.3 fixes the flaw, with patches backported through the 4.7 branch.

NHS England says exploitation is likely following the release of technical details and a PoC.

WordPress has not reported confirmed exploitation in the wild as of August 7.

Update immediately.

🟠 CVE-2026-20346 - High (7.5)

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16262 - High (7.5)

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a victim into an attacker-controlled account (login CSRF), so that t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16262/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16038 - Critical (9.1)

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order ful...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16038/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15361 - High (8.1)

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscrib...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15361/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59118 - Critical (9.3)

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16030 - High (8.1)

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to forge a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16030/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln

🟠 CVE-2026-71559 - High (7.5)

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.

This issue aff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71559/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67688 - Critical (9.8)

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67688 - Critical (9.8)

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67687 - High (8.8)

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67687/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67687 - High (8.8)

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67687/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70634 - High (8.1)

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c). The forward path validates the decoded index; the reverse path us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70634/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70634 - High (8.1)

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c). The forward path validates the decoded index; the reverse path us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70634/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14943 - High (7.5)

The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when a specific option is enabled, allowing unauthenticated visitors ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14205 - Critical (9.8)

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a completed book...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-64637 - Critical (9.9)

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64637/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-64637 (CRITICAL, CVSS 9.9): WebPros Plesk <18.0.80 allows authenticated resellers to escalate privileges to root via XML-RPC API. Patch not confirmed — restrict access, monitor API use. https://radar.offseq.com/threat/cve-2026-64637-cwe-269-improper-privilege-management-in-webpros-plesk-ea44a21d820141d3 #OffSeq #Plesk #Vuln #PrivilegeEscalation

🟠 CVE-2026-20339 - High (7.5)

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20339/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-20348 - High (7.5)

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20348/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20345 - High (7.5)

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20338 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper memory handling when processing content in zip files durin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-20347 - High (7.5)

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20347/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68772 - High (8)

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20337/

🟠 CVE-2026-20337 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper boundary checks for content in zip files during scanning, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20337/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-67621 - High (7.6)

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67621/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67621 - High (7.6)

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67621/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70628 - High (7.8)

FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70628 - High (7.8)

FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70632 - High (7.8)

FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70632 - High (7.8)

FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67622 - Critical (9.9)

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67622 - Critical (9.9)

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

🟠 CVE-2026-67422 - High (7.5)

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67422/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67422 - High (7.5)

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67422/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-53984 - Critical (9.1)

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or replace the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-53984 - Critical (9.1)

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or replace the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45198 - High (7.8)

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory.

The GPU thread of control (Firmware) uses a pointer from non-secur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45198 - High (7.8)

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory.

The GPU thread of control (Firmware) uses a pointer from non-secur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14365 - Critical (9.8)

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perfo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14365/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14365 - Critical (9.8)

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perfo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14365/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

🔴 CVE-2026-50515 - Critical (9.9)

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50515 - Critical (9.9)

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5855 - High (7.5)

Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5855 - High (7.5)

Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9169 - High (8.8)

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH en...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53983 - High (8.6)

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53983 - High (8.6)

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49007 - High (7.5)

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49007/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-48085 - Critical (9.8)

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to `/setup/create-admin-account` a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48085/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-48085 - Critical (9.8)

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to `/setup/create-admin-account` a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48085/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack