CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms ≤1.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet — disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE

CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms ≤1.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet — disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE

Critical Check Point Security Flaw Exposes Management Servers to Root-Level Remote Code Execution + Video

A Dangerous Vulnerability in the Security Control Plane A newly disclosed vulnerability in Check Point management infrastructure has created an urgent patching situation for organizations relying on the company’s security platforms. Tracked as CVE-2026-91843, the flaw is rated CVSS 9.8, Critical, and could allow an unauthenticated remote attacker to execute…

https://undercodenews.com/critical-check-point-security-flaw-exposes-management-servers-to-root-level-remote-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

🚨New Censys Advisory: CVE-2026-91843

A critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.

Censys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.

No public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.

Read the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/

#Cybersecurity #CVE #Vulnerability #CensysARC

🚨 Please read this important update from Check Point:

CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers

https://support.checkpoint.com/results/sk/sk1000155

#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843

Check Point fixed a critical Check Point login flaw (CVE-2026-91843). Patch this Check Point login flaw now to block unauthenticated remote root takeovers.

#CheckPoint #Cybersecurity #CVE202691843 #InfoSec #Vulnerability

https://securityonline.info/check-point-login-flaw-cve-2026-91843/?utm_source=mastodon&utm_medium=jetpack_social

🚨New Censys Advisory: CVE-2026-91843

A critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.

Censys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.

No public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.

Read the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/

#Cybersecurity #CVE #Vulnerability #CensysARC

🚨 Please read this important update from Check Point:

CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers

https://support.checkpoint.com/results/sk/sk1000155

#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843

Check Point fixed a critical Check Point login flaw (CVE-2026-91843). Patch this Check Point login flaw now to block unauthenticated remote root takeovers.

#CheckPoint #Cybersecurity #CVE202691843 #InfoSec #Vulnerability

https://securityonline.info/check-point-login-flaw-cve-2026-91843/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL auth bypass (CVE-2026-76460) in Cisco ISE & ISE-PIC is being actively exploited. Remote attackers gain root on management interface via crafted API calls. Patch ASAP — no workarounds except ACLs. Details: https://radar.offseq.com/threat/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day-d5bd452a61e0a8f8 #OffSeq #Cisco #ZeroDay

Cisco’s Critical ISE Zero-Day Is Being Exploited: CVE-2026-76460 Gives Remote Attackers a Path to Root Access + Video

A New Cisco Emergency for Security Teams A serious new vulnerability in Cisco Identity Services Engine has moved rapidly from disclosure to active exploitation, creating an immediate security concern for organizations that rely on ISE to control identity, authentication, and network access. Cisco has assigned the flaw CVE-2026-76460, giving it the…

https://undercodenews.com/ciscos-critical-ise-zero-day-is-being-exploited-cve-2026-76460-gives-remote-attackers-a-path-to-root-access-video/?utm_source=mastodon&utm_medium=jetpack_social

Cisco confirmed active exploitation of CVE-2026-76460, an authentication bypass in an ISE API endpoint. Unauthenticated remote access can lead to root compromise of ISE and ISE-PIC, now listed in CISA KEV. Patching and log review are urgent. #CiscoIse #AuthBypass #CisaKev

https://cyberworldops.eu/en/cisco-ise-api-authentication-flaw-opens-a-remote-path-to-root-access

New Episode: SANS Stormcast Thursday, September 17th, 2026: Hospitality Scans; Cisco, Acronis, and Pixel 0-Day; Dynamic Incident Response

Shownotes:

Scans Targeting Hospitality Applications
https://isc.sans.edu/diary/Scans%20Targeting%20Hospitality%20Applications/33344
Cisco Identity Services Engine Authentication Bypass Vulnerability CVE-2026-76460
https://sec.cloudapps.cisco.com/

Transcript

AntennaPod | Anytime Player | Apple Podcasts | Castamatic | CurioCaster | Fountain | gPodder | Overcast | Pocket Casts | Podcast Addict | Podcast Guru | Podnews | Podverse | Truefans

Or Listen right here.

Patch your Cisco ISE. CVE-2026-76460 a perfect 10 and is EITW. 🥳

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5

The Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.

An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.

#Cisco #CiscoISE #CVE202676460 #Cybersecurity #InfoSec

https://securityonline.info/cisco-ise-vulnerability-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL auth bypass (CVE-2026-76460) in Cisco ISE & ISE-PIC is being actively exploited. Remote attackers gain root on management interface via crafted API calls. Patch ASAP — no workarounds except ACLs. Details: https://radar.offseq.com/threat/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day-d5bd452a61e0a8f8 #OffSeq #Cisco #ZeroDay

Cisco confirmed active exploitation of CVE-2026-76460, an authentication bypass in an ISE API endpoint. Unauthenticated remote access can lead to root compromise of ISE and ISE-PIC, now listed in CISA KEV. Patching and log review are urgent. #CiscoIse #AuthBypass #CisaKev

https://cyberworldops.eu/en/cisco-ise-api-authentication-flaw-opens-a-remote-path-to-root-access

Patch your Cisco ISE. CVE-2026-76460 a perfect 10 and is EITW. 🥳

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5

The Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.

An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.

#Cisco #CiscoISE #CVE202676460 #Cybersecurity #InfoSec

https://securityonline.info/cisco-ise-vulnerability-exploited/?utm_source=mastodon&utm_medium=jetpack_social

「Google Pixel端末がゼロクリック攻撃でハッキングされる
/CISAは連邦政府機関に対し、パッチ適用にわずか3日間しか猶予を与えていない。 」： #TheRegister

「Googleと米国政府は、Pixelスマートフォンの携帯モデムに存在するゼロデイ脆弱性を悪用した攻撃者が、権限チェックを回避し、ユーザーの操作なしに権限を昇格できると警告した。この脆弱性は、アップデートを行うことで既に修正されている。

Googleは 火曜日に、 CVE-2026-58704 として追跡されているこの重大な脆弱性 を公表し 、その際、このセキュリティホールが「限定的かつ標的を絞った悪用を受けている可能性がある」と警告した。つまり、Googleが問題を修正する前に、悪意のある人物がこのバグを発見し、悪用していたということだ。」

https://www.theregister.com/security/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks/5296936

#prattohome

「Google、限定的な標的型攻撃の兆候が見られる中、Pixelモデムの脆弱性を修正 」： #TheHackerNews

「Googleは、 明らかにした。 同社のPixel Cellular Modemに存在する深刻なセキュリティ上の欠陥が、実際に悪用されていることを

（CVSSスコア：8.0）として追跡されているこの脆弱性は CVE-2026-58704 、権限昇格の欠陥です。

によると、「セルラーモデムには、コードの論理エラーにより権限がバイパスされる可能性がある」とのことです NIST（米国国立標準技術研究所）の国家脆弱性データベース（NVD）に掲載されているバグの説明 。「これにより、追加の実行権限を必要とせずに、リモート（近接/隣接）での権限昇格が可能になる可能性がある。悪用にはユーザーの操作は不要である。」 」

https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html

#prattohome

Google confirmed a Pixel modem zero-day (CVE-2026-58704) exploited in a zero-click spyware attack to escape the modem sandbox. Update now.

#Pixel #ZeroDay #CVE202658704 #Google #Spyware #ZeroClick #CyberSecurity

https://securityexpress.info/pixel-modem-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

A strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....

https://thecybermind.co/h86g

Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.

This allows attackers to silently bypass permission checks and escalate privileges with no user interaction!

It was quickly added to CISA's Known Exploited Vulnerabilities (KEV) catalog [1.2.1, 1.5.1].

Would be an excellent idea for Pixel owners to ownload and apply the September Android OS patches ASAP!

#Google #PixelPhone #ZeroDay #Exploit

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

Actionable threat intelligence and end-to-end hardening strategies for CVE-2026-58704, addressing improper authorization flaws in Google Pixel cellular modems....

https://thecybermind.co/iuw6

Google confirms Pixel phones exploited in 'targeted' modem based attack

Google은 2026년 9월 보안 업데이트에서 Pixel 기기에 영향을 주는 셀룰러 모뎀 취약점 CVE-2026-58704를 수정했으며, 해당 취약점이 제한적·표적형 공격에 실제 악용됐다고 밝혔다. 이 논리 오류 기반 권한 우회는 사용자 상호작용 없이 인접 네트워크 범위에서 권한 상승을 유발할 수 있어, 제로클릭 공격 경로로 분류된다. CISA도 이를 알려진 악용 취약점(KEV)으로 등록했으며, Pixel 사용자는 즉시 9월 보안 패치를 적용해야 한다. AI 특화 이슈는 아니지만 개발자와 조직의 모바일 단말 보...

https://9to5google.com/2026/09/16/google-pixel-targeted-zero-day-modem-attack/

Google patched CVE-2026-58704, a high-severity Pixel Cellular Modem privilege-escalation flaw reportedly exploited in limited, targeted attacks. Its addition to CISA’s KEV Catalog underscores the need to prioritize affected device updates. #ZeroDay #MobileSecurity #ThreatIntelligence

https://cyberworldops.eu/en/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks

New.

Press release: New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity https://www.cisa.gov/news-events/news/new-cisa-guidance-helps-critical-infrastructure-detect-observe-and-impede-malicious-cyber-activity

The guide: Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response

CISA has also added one vulnerability to the catalogue.

CVE-2026-58704: Google Pixel Improper Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58704 #Google #infosec #vulnerability #CISA

🏆 New Achievement! Tutorial: Learning to Live With Being Actively Exploited!

Welcome to the Mandatory Pixel Debuff Sequence. Before you proceed, please note that CVE-2026-58704 has been equipped to your device without your consent. This is a zero-day — that means the tutorial boss was already in your pocket before the level loaded. (1/3)

📰 Google Patches Actively Exploited Zero-Day Flaw in Pixel Modems

Google patches high-severity zero-day (CVE-2026-58704) in Pixel modems. The flaw allows for remote privilege escalation and is under limited, targeted exploitation. CISA added to KEV. Update your Pixel now! #Pixel #Android #ZeroDay

🔗 https://cyber.netsecops.io/articles/google-patches-actively-exploited-pixel-modem-zero-day-cve-2026-58704/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

🚨 [CISA-2026:0916] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-58704 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-58704)
- Name: Google Pixel Improper Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Pixel
- Notes: https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260916 #cisa20260916 #cve_2026_58704 #cve202658704

If you've got a Google Pixel cell phone, do a system patch immediately. There is an active vulnerability that allows the hacker to take control of your device with no user interaction. It is being actively used in the wild.

https://www.cve.org/CVERecord?id=CVE-2026-58704

Google corrige falha zero-day em telemóveis Pixel com atualização que resolve 110 vulnerabilidades. A falha, identificada como CVE-2026-58704, está a ser explorada em ataques direcionados de alcance limitado. 📱

🔗 https://tugatech.com.pt/t91149-google-corrige-falha-zero-day-em-telemoveis-pixel-numa-atualizacao-com-110-vulnerabilidades-resolvidas

#falha #google #pixel 

CVE ID: CVE-2026-58704
Vendor: Google
Product: Pixel
Date Added: 2026-09-16
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-58704

@skyblitz CVE-2026-58704 is a modem firmware vulnerability with a patch released today and it will be included in our upcoming release.

Google Discloses Pixel Modem Flaw Under Limited Targeted Exploitation

Google just sounded the alarm on a high-severity bug in Pixel devices that's being exploited in targeted attacks, and they're urging users to take action. The vulnerability, tracked as CVE-2026-58704, affects the Pixel Cellular Modem and could allow attackers to escalate privileges.

https://osintsights.com/google-discloses-pixel-modem-flaw-under-limited-targeted-exploitation?utm_source=mastodon&utm_medium=social

#PixelModemFlaw #Cve202658704 #AndroidSecurity #EmergingThreats #Google

@GrapheneOS funny to see google fixing : CVE-2025-48595 that was fixed looooooong ago in your.

i don't see CVE-2026-58704, is it already fixed ?

https://www.bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-zero-day-on-pixel-devices/

Google Fixes Exploited Android Zero-Day Flaw on Pixel Devices

Google just patched a high-severity zero-day flaw in its Pixel smartphones, warning that hackers may be using it to launch targeted attacks. The vulnerability, tracked as CVE-2026-58704, allows for a permission bypass in the device's modem, posing a significant risk to users.

https://osintsights.com/google-fixes-exploited-android-zero-day-flaw-on-pixel-devices?utm_source=mastodon&utm_medium=social

#AndroidZeroDay #Cve202658704 #GooglePixel #EmergingThreats #MobileSecurity

「Google Pixel端末がゼロクリック攻撃でハッキングされる
/CISAは連邦政府機関に対し、パッチ適用にわずか3日間しか猶予を与えていない。 」： #TheRegister

「Googleと米国政府は、Pixelスマートフォンの携帯モデムに存在するゼロデイ脆弱性を悪用した攻撃者が、権限チェックを回避し、ユーザーの操作なしに権限を昇格できると警告した。この脆弱性は、アップデートを行うことで既に修正されている。

Googleは 火曜日に、 CVE-2026-58704 として追跡されているこの重大な脆弱性 を公表し 、その際、このセキュリティホールが「限定的かつ標的を絞った悪用を受けている可能性がある」と警告した。つまり、Googleが問題を修正する前に、悪意のある人物がこのバグを発見し、悪用していたということだ。」

https://www.theregister.com/security/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks/5296936

#prattohome

「Google、限定的な標的型攻撃の兆候が見られる中、Pixelモデムの脆弱性を修正 」： #TheHackerNews

「Googleは、 明らかにした。 同社のPixel Cellular Modemに存在する深刻なセキュリティ上の欠陥が、実際に悪用されていることを

（CVSSスコア：8.0）として追跡されているこの脆弱性は CVE-2026-58704 、権限昇格の欠陥です。

によると、「セルラーモデムには、コードの論理エラーにより権限がバイパスされる可能性がある」とのことです NIST（米国国立標準技術研究所）の国家脆弱性データベース（NVD）に掲載されているバグの説明 。「これにより、追加の実行権限を必要とせずに、リモート（近接/隣接）での権限昇格が可能になる可能性がある。悪用にはユーザーの操作は不要である。」 」

https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html

#prattohome

Google confirmed a Pixel modem zero-day (CVE-2026-58704) exploited in a zero-click spyware attack to escape the modem sandbox. Update now.

#Pixel #ZeroDay #CVE202658704 #Google #Spyware #ZeroClick #CyberSecurity

https://securityexpress.info/pixel-modem-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

A strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....

https://thecybermind.co/h86g

Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.

This allows attackers to silently bypass permission checks and escalate privileges with no user interaction!

It was quickly added to CISA's Known Exploited Vulnerabilities (KEV) catalog [1.2.1, 1.5.1].

Would be an excellent idea for Pixel owners to ownload and apply the September Android OS patches ASAP!

#Google #PixelPhone #ZeroDay #Exploit

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

Actionable threat intelligence and end-to-end hardening strategies for CVE-2026-58704, addressing improper authorization flaws in Google Pixel cellular modems....

https://thecybermind.co/iuw6

Google patched CVE-2026-58704, a high-severity Pixel Cellular Modem privilege-escalation flaw reportedly exploited in limited, targeted attacks. Its addition to CISA’s KEV Catalog underscores the need to prioritize affected device updates. #ZeroDay #MobileSecurity #ThreatIntelligence

https://cyberworldops.eu/en/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks

New.

Press release: New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity https://www.cisa.gov/news-events/news/new-cisa-guidance-helps-critical-infrastructure-detect-observe-and-impede-malicious-cyber-activity

The guide: Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response

CISA has also added one vulnerability to the catalogue.

CVE-2026-58704: Google Pixel Improper Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58704 #Google #infosec #vulnerability #CISA

🏆 New Achievement! Tutorial: Learning to Live With Being Actively Exploited!

Welcome to the Mandatory Pixel Debuff Sequence. Before you proceed, please note that CVE-2026-58704 has been equipped to your device without your consent. This is a zero-day — that means the tutorial boss was already in your pocket before the level loaded. (1/3)

🚨 [CISA-2026:0916] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-58704 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-58704)
- Name: Google Pixel Improper Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Pixel
- Notes: https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260916 #cisa20260916 #cve_2026_58704 #cve202658704

If you've got a Google Pixel cell phone, do a system patch immediately. There is an active vulnerability that allows the hacker to take control of your device with no user interaction. It is being actively used in the wild.

https://www.cve.org/CVERecord?id=CVE-2026-58704

Google corrige falha zero-day em telemóveis Pixel com atualização que resolve 110 vulnerabilidades. A falha, identificada como CVE-2026-58704, está a ser explorada em ataques direcionados de alcance limitado. 📱

🔗 https://tugatech.com.pt/t91149-google-corrige-falha-zero-day-em-telemoveis-pixel-numa-atualizacao-com-110-vulnerabilidades-resolvidas

#falha #google #pixel 

CVE ID: CVE-2026-58704
Vendor: Google
Product: Pixel
Date Added: 2026-09-16
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-58704

@skyblitz CVE-2026-58704 is a modem firmware vulnerability with a patch released today and it will be included in our upcoming release.

@GrapheneOS funny to see google fixing : CVE-2025-48595 that was fixed looooooong ago in your.

i don't see CVE-2026-58704, is it already fixed ?

https://www.bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-zero-day-on-pixel-devices/

@cR0w was just looking at those, lol. Don't sleep on this great advertisment of a CVE though: https://db.gcve.eu/vuln/cve-2026-20331

@cR0w was just looking at those, lol. Don't sleep on this great advertisment of a CVE though: https://db.gcve.eu/vuln/cve-2026-20331

CVE-2026-92838: HIGH severity DLL hijack in GeoVision GV-Remote E-map 18.3.1 🖥️. Local attackers can execute arbitrary code via unsafe DLL load paths. Restrict directory write access; check vendor guidance. https://radar.offseq.com/threat/cve-2026-92838-cwe-427-uncontrolled-search-path-element-in-geovision-inc-gv-remote-e-map-0688637b5de2fbea #OffSeq #Vuln #InfoSec #Windows

CVE-2026-92838: HIGH severity DLL hijack in GeoVision GV-Remote E-map 18.3.1 🖥️. Local attackers can execute arbitrary code via unsafe DLL load paths. Restrict directory write access; check vendor guidance. https://radar.offseq.com/threat/cve-2026-92838-cwe-427-uncontrolled-search-path-element-in-geovision-inc-gv-remote-e-map-0688637b5de2fbea #OffSeq #Vuln #InfoSec #Windows

CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (≤29.0) allows attackers with stolen password hashes to log in as any user — no password needed. Patch pending — restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec

CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (≤29.0) allows attackers with stolen password hashes to log in as any user — no password needed. Patch pending — restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec

CRITICAL SSRF vuln (CVE-2026-92576) in HKUDS nanobot <0.3.0: Inadequate URL validation lets attackers access internal cloud metadata & services. Restrict WebFetchTool, monitor for suspicious requests. Patch status: unconfirmed. https://radar.offseq.com/threat/cve-2026-92576-server-side-request-forgery-ssrf-in-hkuds-nanobot-4673f42d188d2ce5 #OffSeq #infosec #CVE202692576

CRITICAL SSRF vuln (CVE-2026-92576) in HKUDS nanobot <0.3.0: Inadequate URL validation lets attackers access internal cloud metadata & services. Restrict WebFetchTool, monitor for suspicious requests. Patch status: unconfirmed. https://radar.offseq.com/threat/cve-2026-92576-server-side-request-forgery-ssrf-in-hkuds-nanobot-4673f42d188d2ce5 #OffSeq #infosec #CVE202692576

CVE-2026-20341: CRITICAL flaw in Cisco Secure FMC Software sftunnel protocol. Admin remote attackers can gain root via insecure deserialization. Limit admin access, monitor for abuse, and check for patch updates. https://radar.offseq.com/threat/a-vulnerability-in-the-sftunnel-inter-device-communication-protocol-of-cisco-secure-fmc-software-could-c3ce1a1e4096035e #OffSeq #Cisco #Infosec #Vulnerability

CVE-2026-20341: CRITICAL flaw in Cisco Secure FMC Software sftunnel protocol. Admin remote attackers can gain root via insecure deserialization. Limit admin access, monitor for abuse, and check for patch updates. https://radar.offseq.com/threat/a-vulnerability-in-the-sftunnel-inter-device-communication-protocol-of-cisco-secure-fmc-software-could-c3ce1a1e4096035e #OffSeq #Cisco #Infosec #Vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-87024 - High (7.5)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87024 - High (7.5)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-70416 - Critical (10)

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70416 - Critical (10)

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92176 - High (7.8)

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92176 - High (7.8)

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92177 - High (7.8)

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92177/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92177 - High (7.8)

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92177/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-91939 - Critical (9.8)

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91939/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-91939 - Critical (9.8)

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91939/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86865 - High (8.8)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86865/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86865 - High (8.8)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86865/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92248 - High (7.8)

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This lea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92248/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92248 - High (7.8)

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This lea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92248/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.

#ProxyAddr #NodeJS #IPspoofing #CVE202690711 #Cybersecurity

http://securityonline.info/proxy-addr-ip-spoofing-flaw/?utm_source=mastodon&utm_medium=jetpack_social

A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.

#ProxyAddr #NodeJS #IPspoofing #CVE202690711 #Cybersecurity

http://securityonline.info/proxy-addr-ip-spoofing-flaw/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-90711 - Critical (9.1)

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-si...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90711/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87288 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87288/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87288 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87288/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

🟠 CVE-2026-77853 - High (8.8)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77853/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Discover the latest mySCADA myPRO Manager vulnerabilities, including CVE-2026-73807, and learn how to patch your systems to prevent remote attacks.

#mySCADA #CVE202673807 #Cybersecurity #Vulnerability

https://securityonline.info/myscada-mypro-manager-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-73807 | CRITICAL: mySCADA myPRO (v0 – 2.1) API flaw allows unauthenticated access to privileged functions. No patch yet — restrict API network access & monitor logs. https://radar.offseq.com/threat/cve-2026-73807-cwe-862-in-myscada-technologies-myscada-mypro-e06debb83925d7aa #OffSeq #ICS #SCADA #Vulnerability

Discover the latest mySCADA myPRO Manager vulnerabilities, including CVE-2026-73807, and learn how to patch your systems to prevent remote attacks.

#mySCADA #CVE202673807 #Cybersecurity #Vulnerability

https://securityonline.info/myscada-mypro-manager-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-73807 | CRITICAL: mySCADA myPRO (v0 – 2.1) API flaw allows unauthenticated access to privileged functions. No patch yet — restrict API network access & monitor logs. https://radar.offseq.com/threat/cve-2026-73807-cwe-862-in-myscada-technologies-myscada-mypro-e06debb83925d7aa #OffSeq #ICS #SCADA #Vulnerability

🔴 CVE-2026-53713 - Critical (9.1)

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53713/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & Carlo Gavazzi.

#IndustrialSecurity #FirmwareFlaws #Cybersecurity #CVE202627565 #InfoSec

https://securityonline.info/industrial-firmware-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & Carlo Gavazzi.

#IndustrialSecurity #FirmwareFlaws #Cybersecurity #CVE202627565 #InfoSec

https://securityonline.info/industrial-firmware-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.

https://cert.pl/posts/2026/09/CVE-2026-40854/

#internetOfShit #miraiWillNeverDie
#jobSecurityForSomeone

Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.

https://cert.pl/posts/2026/09/CVE-2026-40854/

#internetOfShit #miraiWillNeverDie
#jobSecurityForSomeone

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

🔴 CVE-2026-92397 - Critical (9.1)

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92397/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-92397 - Critical (9.1)

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92397/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

A critical KVM guest escape (CVE-2026-89775) enables an LPE to gain root on Linux hosts. Patch this KVM guest escape vulnerability now.

#KVM #LinuxKernel #CVE202689775 #Cybersecurity #InfoSec

https://securityonline.info/kvm-guest-escape-cve-2026-89775/?utm_source=mastodon&utm_medium=jetpack_social

A critical KVM guest escape (CVE-2026-89775) enables an LPE to gain root on Linux hosts. Patch this KVM guest escape vulnerability now.

#KVM #LinuxKernel #CVE202689775 #Cybersecurity #InfoSec

https://securityonline.info/kvm-guest-escape-cve-2026-89775/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-87287 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87287 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82028 - High (8.8)

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82028/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61595 - High (7.7)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was stored in `threading.local(...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61595 - High (7.7)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was stored in `threading.local(...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Advantech EKI-1242IEIMS (fw ≤1.06.01) suffers CRITICAL CVE-2026-73172: unauthenticated OS command injection via TCP 5058 enables remote root access. No patch yet — restrict device exposure & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-73172-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-273be6f3526b5b8e #OffSeq #ICS #CVE202673172 #infosec

Advantech EKI-1242IEIMS (fw ≤1.06.01) suffers CRITICAL CVE-2026-73172: unauthenticated OS command injection via TCP 5058 enables remote root access. No patch yet — restrict device exposure & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-73172-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-273be6f3526b5b8e #OffSeq #ICS #CVE202673172 #infosec

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

🟠 CVE-2026-91990 - High (7.5)

Tornado before 6.5.8 contains a memory amplification vulnerability in parse_multipart_form_data that splits multipart data before validating the max_parts limit. Attackers can send crafted multipart requests with many parts to create large transie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91990/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65838 - High (8.2)

Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequestWithBody filter in filters/openpolicyagent/openpolicyagent.go can allow an oversized declared Content-Length request to bypass a deny-on-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65838/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73453: CRITICAL code injection in Arista EOS (4.29.2F – 4.36.1F) via P4Runtime. Allows unauthenticated code execution & admin control if enabled. Disable P4Runtime if not needed. No active exploits yet. https://radar.offseq.com/threat/cve-2026-73453-cwe-94-improper-control-of-generation-of-code-code-injection-in-arista-networks-eos-86cb5135e8adffc5 #OffSeq #CVE202673453 #NetworkSecurity

CVE-2026-73453: CRITICAL code injection in Arista EOS (4.29.2F – 4.36.1F) via P4Runtime. Allows unauthenticated code execution & admin control if enabled. Disable P4Runtime if not needed. No active exploits yet. https://radar.offseq.com/threat/cve-2026-73453-cwe-94-improper-control-of-generation-of-code-code-injection-in-arista-networks-eos-86cb5135e8adffc5 #OffSeq #CVE202673453 #NetworkSecurity

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-028
Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code…

HTML: https://certvde.com/en/advisories/VDE-2026-028
CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-027
Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab…

HTML: https://certvde.com/en/advisories/VDE-2026-027
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-014
Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities
CVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)

The affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute…

HTML: https://certvde.com/en/advisories/VDE-2026-014
CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json

#OT #Advisory

CVE-2026-81642: CRITICAL heap buffer overflow in NLnet Labs Unbound ≤1.26.0. Exploitable via DNSKEY with owner compression pointer — possible DoS & RCE. Patch ASAP. https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #DNS #Unbound #Vuln #RCE

CVE-2026-81642: CRITICAL heap buffer overflow in NLnet Labs Unbound ≤1.26.0. Exploitable via DNSKEY with owner compression pointer — possible DoS & RCE. Patch ASAP. https://radar.offseq.com/threat/cve-2026-81642-cwe-122-heap-based-buffer-overflow-in-nlnet-labs-unbound-2ab04cc5a0313c65 #OffSeq #DNS #Unbound #Vuln #RCE

📰 Critical WordPress Plugin Flaw Allows Unauthenticated Admin Creation

Critical unauthenticated admin creation flaw (CVE-2026-12793, CVSS 9.8) found in JetFormBuilder WordPress plugin (<= 3.6.2). Public exploit available. Update or disable immediately to prevent site takeover! #WordPress #Vulnerability

🔗 https://cyber.netsecops.io/articles/wordpress-jetformbuilder-plugin-flaw-cve-2026-12793-allows-admin-takeover/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CVE-2026-12793: CRITICAL privilege escalation in JetFormBuilder Dynamic Blocks Form Builder (<=3.6.2). Unauthenticated attackers can create admin accounts. Restrict access & monitor until patch. https://radar.offseq.com/threat/cve-2026-12793-cwe-269-improper-privilege-management-in-jetmonsters-jetformbuilder-dynamic-blocks-form-fa1c70f5eeec8d4c #OffSeq #WordPress #CVE202612793 #Infosec

CVE-2026-12793: CRITICAL privilege escalation in JetFormBuilder Dynamic Blocks Form Builder (<=3.6.2). Unauthenticated attackers can create admin accounts. Restrict access & monitor until patch. https://radar.offseq.com/threat/cve-2026-12793-cwe-269-improper-privilege-management-in-jetmonsters-jetformbuilder-dynamic-blocks-form-fa1c70f5eeec8d4c #OffSeq #WordPress #CVE202612793 #Infosec

TrueBooker (<=1.2.3) WordPress plugin hit by CVE-2026-14349 (CRITICAL, CVSS 9.8): missing auth lets unauthenticated attackers change user emails & reset passwords. No patch yet — restrict access & monitor! https://radar.offseq.com/threat/cve-2026-14349-cwe-862-missing-authorization-in-themetechmount-truebooker-appointment-booking-and-c8c43284d888ee3a #OffSeq #WordPress #CVE202614349 #AppSec

TrueBooker (<=1.2.3) WordPress plugin hit by CVE-2026-14349 (CRITICAL, CVSS 9.8): missing auth lets unauthenticated attackers change user emails & reset passwords. No patch yet — restrict access & monitor! https://radar.offseq.com/threat/cve-2026-14349-cwe-862-missing-authorization-in-themetechmount-truebooker-appointment-booking-and-c8c43284d888ee3a #OffSeq #WordPress #CVE202614349 #AppSec

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-85893 - High (8.8)

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85893/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85893 - High (8.8)

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85893/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

Delinea Secret Server (On-Prem, v10.5.0 – 12.1.3) hit by CRITICAL auth bypass (CVE-2026-15640). SAML spoofing may allow attacker impersonation. Patch info not yet available. Details: https://radar.offseq.com/threat/cve-2026-15640-cwe-290-authentication-bypass-by-spoofing-in-delinea-secret-server-on-prem-e1dc96081cdc3445 #OffSeq #Vuln #Delinea #CVE202615640

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

Delinea Secret Server (On-Prem, v10.5.0 – 12.1.3) hit by CRITICAL auth bypass (CVE-2026-15640). SAML spoofing may allow attacker impersonation. Patch info not yet available. Details: https://radar.offseq.com/threat/cve-2026-15640-cwe-290-authentication-bypass-by-spoofing-in-delinea-secret-server-on-prem-e1dc96081cdc3445 #OffSeq #Vuln #Delinea #CVE202615640

🟠 CVE-2026-69486 - High (8.8)

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69486/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69486 - High (8.8)

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69486/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

CVE-2026-15639: CRITICAL XSS in Delinea Secret Server (On-Prem, 10.2.19 – 11.9.48). Exploitation allows remote attackers to run JS in user sessions. Patch status unknown — check vendor advisories. https://radar.offseq.com/threat/cve-2026-15639-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ac80ea2cb57f59e8 #OffSeq #XSS #Vuln #Delinea #Cybersecurity

Go hack more Secret Server shit.

https://delinea.com/security-advisories

Authentication Bypass via SAML Response Manipulation - CVE-2026-15640

Reflected Cross-Site Scripting - CVE-2026-15639

Cryptographic Padding Oracle - CVE-2026-15638

CVE-2026-15639: CRITICAL XSS in Delinea Secret Server (On-Prem, 10.2.19 – 11.9.48). Exploitation allows remote attackers to run JS in user sessions. Patch status unknown — check vendor advisories. https://radar.offseq.com/threat/cve-2026-15639-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ac80ea2cb57f59e8 #OffSeq #XSS #Vuln #Delinea #Cybersecurity

🟠 CVE-2026-87289 - High (7.5)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network ac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87289/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87289 - High (7.5)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network ac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87289/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

🟠 CVE-2026-92000 - High (7.5)

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92000/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92000 - High (7.5)

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92000/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68070 - High (8.8)

The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68070 - High (8.8)

The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66890 - Critical (9.6)

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66890/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66890 - Critical (9.6)

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66890/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87286 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87286 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>

CVE‑2026‑83099
• Oracle WebCenter Portal – Runtime Tools
• Remote code execution (CVSS 9.9) via HTTP; full compromise of the portal.
• 9.9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83099>

CVE‑2026‑83098
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83098>

CVE‑2026‑83095
• Oracle WebCenter Portal – Composer
• Remote code execution (CVSS 9.8) via HTTP; full compromise.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83095>

#infosecnews

[1/4]

Most Impactful Security Incidents ( 2026‑09‑15 → today )

---

PRIORITY 1 – Critical/high‑severity flaws (CVSS 7‑10) in core software stacks :

CVE‑2026‑83339
• Oracle WebCenter Enterprise Capture – Client Bundle
• Unauthenticated remote code execution; attacker can take full control of the capture service.
• 9.8 (Critical)
• HTTP (network‑level)
• <https://cveawg.mitre.org/api/cve/CVE-2026-83339>

CVE‑2026‑83355
• Oracle Enterprise Manager for Fusion Middleware – Metrics
• Remote code execution via unauthenticated HTTP request; full takeover of the management console.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83355>

CVE‑2026‑83149
• Oracle Application Testing Suite – 13.3.0.1
• Low‑privileged attacker can execute arbitrary code over HTTP; leads to full compromise of the testing suite.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83149>

CVE‑2026‑83107
• Oracle Forms – 12.2.1.19.0 / 14.1.2.0
• High‑privileged attacker can gain remote code execution via HTTP; full takeover of Forms services.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83107>

CVE‑2026‑83105
• Oracle Forms – same versions
• Remote code execution (CVSS 9) via HTTP; attacker gains full control.
• 9
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83105>

CVE‑2026‑83103
• Oracle Forms – same versions
• Remote code execution (CVSS 9.1) via HTTP; full compromise.
• 9.1
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83103>

CVE‑2026‑83100
• Oracle Forms – same versions
• Remote code execution (CVSS 9.8) via HTTP; full takeover.
• 9.8
• HTTP
• <https://cveawg.mitre.org/api/cve/CVE-2026-83100>