CVE-2026-18316: CRITICAL auth bypass in Solace Extra WordPress plugin (≤1.6.0). Subscriber-level users can perform destructive actions — no patch yet. Restrict user roles & monitor import_zip() activity. https://radar.offseq.com/threat/cve-2026-18316-cwe-862-missing-authorization-in-solacewp-solace-extra-02691f8987449b12 #OffSeq #WordPress #Vuln #CVE202618316

CVE-2026-18316: CRITICAL auth bypass in Solace Extra WordPress plugin (≤1.6.0). Subscriber-level users can perform destructive actions — no patch yet. Restrict user roles & monitor import_zip() activity. https://radar.offseq.com/threat/cve-2026-18316-cwe-862-missing-authorization-in-solacewp-solace-extra-02691f8987449b12 #OffSeq #WordPress #Vuln #CVE202618316

🔴 CVE-2026-18432 - Critical (9.8)

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUser::conditions_logic()` gates the `current_user_can('edit_user', $u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18432 - Critical (9.8)

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUser::conditions_logic()` gates the `current_user_can('edit_user', $u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17123 - High (8.8)

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhook_url' setting. The widget's render() method persists the attacker-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17123/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17123 - High (8.8)

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhook_url' setting. The widget's render() method persists the attacker-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17123/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16099 - High (8.8)

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item function in all versions up to, and including, 4.5.3. This makes it possible for authentic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16099/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16099 - High (8.8)

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item function in all versions up to, and including, 4.5.3. This makes it possible for authentic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16099/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16098 - Critical (9.8)

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Dispo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16098 - Critical (9.8)

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Dispo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14524 - Critical (9.1)

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unaut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14524 - Critical (9.1)

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unaut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14498 - High (8.8)

The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_ajax_qw_for...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14498 - High (8.8)

The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_ajax_qw_for...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19924 - Critical (9.8)

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19924/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Tenda AC10 (16.03.10.09_multi_TDE01) hit by CRITICAL auth bypass (CVE-2026-19924) via R7WebsSecurityHandler. Public exploit available — remote compromise possible. Update or restrict access! https://radar.offseq.com/threat/cve-2026-19924-improper-authentication-in-tenda-ac10-b84751472c0f965f #OffSeq #CVE202619924 #Tenda #Vuln

🔴 CVE-2026-19924 - Critical (9.8)

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19924/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Tenda AC10 (16.03.10.09_multi_TDE01) hit by CRITICAL auth bypass (CVE-2026-19924) via R7WebsSecurityHandler. Public exploit available — remote compromise possible. Update or restrict access! https://radar.offseq.com/threat/cve-2026-19924-improper-authentication-in-tenda-ac10-b84751472c0f965f #OffSeq #CVE202619924 #Tenda #Vuln

🟠 CVE-2026-73054 - High (7.5)

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73054/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73054 - High (7.5)

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73054/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73045 - High (7.5)

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73045 - High (7.5)

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73044 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73044/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73044 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73044/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73043 - Critical (9)

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and Jav...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73043/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73043 - Critical (9)

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and Jav...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73043/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73055: CRITICAL vuln in ericcornelissen shescape (<2.1.15, 3.0.0<3.0.2). Improper tilde (~) escaping lets attackers leak home dir & alter cmd targets on BusyBox /bin/sh. Avoid untrusted input in escape APIs. Patch pending. https://radar.offseq.com/threat/cve-2026-73055-improper-encoding-or-escaping-of-output-in-ericcornelissen-shescape-3ef90f5f16672f7b #OffSeq #CVE202673055 #infosec

CVE-2026-73055: CRITICAL vuln in ericcornelissen shescape (<2.1.15, 3.0.0<3.0.2). Improper tilde (~) escaping lets attackers leak home dir & alter cmd targets on BusyBox /bin/sh. Avoid untrusted input in escape APIs. Patch pending. https://radar.offseq.com/threat/cve-2026-73055-improper-encoding-or-escaping-of-output-in-ericcornelissen-shescape-3ef90f5f16672f7b #OffSeq #CVE202673055 #infosec

CVE-2026-73053: CRITICAL XSS in SiYuan (pre-v3.7.4) risks code execution on host via crafted icons when Node integration is enabled. No patch confirmed — disable Node integration or avoid untrusted files. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-1654398c24cf93d4 #OffSeq #XSS #Vuln #SiYuan

🔴 CVE-2026-73053 - Critical (9)

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73053: CRITICAL XSS in SiYuan (pre-v3.7.4) risks code execution on host via crafted icons when Node integration is enabled. No patch confirmed — disable Node integration or avoid untrusted files. https://radar.offseq.com/threat/cve-2026-73053-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-1654398c24cf93d4 #OffSeq #XSS #Vuln #SiYuan

🔴 CVE-2026-73053 - Critical (9)

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk — upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec

🔴 CVE-2026-73052 - Critical (9)

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73052: CRITICAL XSS in SiYuan (<3.7.4) enables arbitrary JS & potential code execution if Node integration is enabled. Desktop users most at risk — upgrade ASAP & disable Node integration where possible. https://radar.offseq.com/threat/cve-2026-73052-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-c5f0eb8b5e84714b #OffSeq #XSS #SiYuan #Infosec

🔴 CVE-2026-73052 - Critical (9)

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73050 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73050/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73050 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73050/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73046 - Critical (9.8)

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/* surface, accepts the workspace access code (Conf.AccessAuthCode)...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73046/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73046 - Critical (9.8)

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/* surface, accepts the workspace access code (Conf.AccessAuthCode)...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73046/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73042 - Critical (9)

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73042/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73042 - Critical (9)

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73042/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73041 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73041 - Critical (9)

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-18855 - Critical RCE in WordPress Link Library plugin. Unauthenticated arbitrary file deletion via ll_delete_link_fields. CVSS 9.1. Patch under review. Update immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-18855/

🔴 CVE-2026-18855 - Critical (9.1)

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18855 - Critical (9.1)

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19900 - High (8.1)

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19900 - High (8.1)

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19598 - Critical (9.8)

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19598/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19598 - Critical (9.8)

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19598/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19901 - High (8.1)

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19901 - High (8.1)

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.

#ApacheStruts #Struts2 #DoS #CVE #JavaWeb #CyberSecurity #InfoSec #Vulnerability

http://securityonline.info/apache-struts-dos-flaws-json-plugin/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-18438 - High (8.8)

The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.7.1 via the fetch_remote_file function. This...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18438/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.

#ApacheStruts #Struts2 #DoS #CVE #JavaWeb #CyberSecurity #InfoSec #Vulnerability

http://securityonline.info/apache-struts-dos-flaws-json-plugin/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-15826 - Critical (9.8)

The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15826/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15826: CRITICAL flaw in User Profile Builder (≤3.16.4) allows auth bypass via type conversion error. Attackers gain admin (user ID 1) access. Restrict registration or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-beautiful-03ed293eb36de594 #OffSeq #WordPress #Infosec #CVE

CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5

#CVE202615826 #WordPress #UserProfileBuilder #InfoSec

https://securityonline.info/user-profile-builder-cve-2026-15826/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-16142 - Critical (9.8)

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being registered for unauthenticated users and accepting an arbitrary truebo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16142/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-16142 (CRITICAL, CVSS 9.8): TrueBooker WP plugin ≤1.2.6 is vulnerable to auth bypass via user-controlled AJAX handler. Attackers can hijack any account by changing email & triggering password reset. Restrict or disable TrueBooker. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-themetechmount-truebooker-17123cd1c5904122 #OffSeq #WordPress #CVE2026_16142

🟠 CVE-2026-15142 - High (7.5)

The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability handling in the allow_attachment_actions() function, which can treat a target u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15142/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14279 - High (8.8)

The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX action. The ced_wholesale_request_send_callback() handler only verifies a nonce (which ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2022-21882 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 at 18:08:17 UTCDate Added to KEV: 2022-02-04View CVE Details

https://nvd.nist.gov/vuln/detail/CVE-2022-21882

#Ransomware #Microsoft #Win32k

CVE-2019-5591 - Changed to Known Ransomware Status

Fortinet FortiOS Default Configuration VulnerabilityVendor: FortinetProduct: FortiOSFortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.Status changed from Unknown to Known for ransomware campaign usage.Flip https://nvd.nist.gov/vuln/detail/CVE-2019-5591

🟠 CVE-2026-15965 - High (8.8)

The MaxUpload – Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.4.0 via the handle_upload function. This is due to a filename-validation m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15965/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15341: CRITICAL auth bypass in rafasashi User Session Synchronizer ≤1.4.0. Attackers can impersonate any WP user — including admins. Disable plugin until fix is released. 🔓 https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e5e90d3fb #OffSeq #WordPress #Vuln #Infosec

🔴 CVE-2026-14484 - Critical (9.1)

The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxRemoveUpload function in all versions up to, and including, 1.0.4....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15303: CRITICAL auth bypass in sixstorage 6Storage Rentals <=2.27.0. Unauthenticated attackers can impersonate any WP user via exposed AJAX handler. Restrict endpoint or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15303-cwe-287-improper-authentication-in-sixstorage-6storage-rentals-a7f565714ebb98e6 #OffSeq #WordPress #Vuln #Security

🟠 CVE-2026-69414 - High (7.8)

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as &quot;ShieldBreak &quot;.
We are working to provide a high quality security update that addresses this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69414/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73683 - High (8.1)

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-17181: IBM Db2 Mirror for i 7.4 – 7.6 has a CRITICAL path traversal flaw (CVSS 9.3) enabling remote file writes — no auth needed. No patch yet. Restrict access & follow IBM updates. https://radar.offseq.com/threat/ibm-db2-mirror-for-i-74-75-and-76-could-allow-a-remote-attacker-to-write-files-to-arbitrary-locations-05bd59624b3ef1c8 #OffSeq #IBM #Db2 #Vulnerability #InfoSec

CRITICAL: IBM Db2 Mirror for i (7.4-7.6) vulnerable to remote authentication bypass (CVE-2026-17182) due to improper URI path validation. Sensitive data at risk — restrict service access until patch available. https://radar.offseq.com/threat/ibm-db2-mirror-for-i-74-75-and-76-could-allow-a-remote-attacker-to-bypass-authentication-and-obtain-or-13a675f43aebb05d #OffSeq #Db2 #Vuln #CVE202617182

IBM Db2 Mirror for i (7.4 – 7.6) faces CRITICAL OS command injection (CVE-2026-17186, CVSS 9.9) 🛡️. No patch yet — restrict access, monitor for abuse. No exploits seen in wild. https://radar.offseq.com/threat/cve-2026-17186-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-bb1e0c030a679943 #OffSeq #IBM #Vuln #OSCommandInjection

CVE-2026-67365: Unauthenticated SQL injection in Joomla iCagenda (4.0.0 – 4.0.11). Exploitable via com_ajax, no auth needed. CRITICAL (CVSS 9.2). Restrict endpoint & monitor for attacks. https://radar.offseq.com/threat/cve-2026-67365-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-8f2e4ed9eff903b1 #OffSeq #CVE202667365 #Joomla #SQLi

🟠 CVE-2026-19909 - High (7.5)

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-17184 (CRITICAL, CVSS 9.8): IBM Db2 Mirror for i 7.4 – 7.6 allows remote code execution via external file name/path control. No privileges needed. Restrict access, monitor advisories. https://radar.offseq.com/threat/ibm-db2-mirror-for-i-74-75-and-76-could-allow-a-remote-attacker-to-execute-arbitrary-code-due-to-9c0fd8c4bcffe5ba #OffSeq #IBM #Vuln #Cybersecurity

CVE-2026-66456 - Stored XSS in BestWebSoft Profile Extra Fields ≤1.3.4. Subscriber-level attack. CVSS 6.5. Unpatched. Disable or restrict access now. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-66456/

Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.

#ApacheStruts #Struts2 #DoS #CVE #JavaWeb #CyberSecurity #InfoSec #Vulnerability

http://securityonline.info/apache-struts-dos-flaws-json-plugin/?utm_source=mastodon&utm_medium=jetpack_social

CyberPanel's hard-coded JWT secret grants an unauthenticated root shell

CyberPanel WebTerminal의 CVE-2026-67614는 2.4.2~2.4.6에서 소스에 하드코딩된 HS256 JWT 비밀키를 이용해 인증 없이 `ssh_user=root` 토큰을 위조하고 원격 루트 셸을 획득할 수 있는 CVSS 9.8 취약점입니다. WebTerminal은 기본적으로 root 권한으로 8888/TLS 포트에서 실행되므로, 인터넷에 노출된 해당 버전의 패널은 즉각적인 침해 위험이 있습니다. 2.4.7~3.0.0은 설치별 시크릿을 도입했지만 fallback 및 토큰 신뢰 설계 문제...

https://hellorecon.com/blog/cve-2026-67614-cyberpanel-webterminal-jwt-root-shell

CVE-2026-19789 – Critical stack buffer overflow in Tenda AC1206 via /goform/WifiGuestSet. Remote RCE possible. CVSS 8.8. Unpatched. Update or isolate now. #CVE #Tenda #infosec

https://www.valtersit.com/cve/CVE-2026-19789/

2026-W33 — Weekly Threat Roundup

🔥 VMware vCenter RCE (CVE-2026-59310) under active APT exploitation across 47 countries, patch and hunt for persistence now.
🤖 Near-autonomous AI cyberattack observed against Taiwan's government, adapting mid-operation without human direction.
💀 Lazarus Group's Operation Dream Job exploits Windo…

https://threatnoir.com/weekly/2026-w33

#infosec #cybersecurity #threatintel

🤖 AI generated summary

2026-W33 — Weekly Threat Roundup

🔥 VMware vCenter RCE (CVE-2026-59310) under active APT exploitation across 47 countries, patch and hunt for persistence now.
🤖 Near-autonomous AI cyberattack observed against Taiwan's government, adapting mid-operation without human direction.
💀 Lazarus Group's Operation Dream Job exploits Windo…

https://threatnoir.com/weekly/2026-w33

#infosec #cybersecurity #threatintel

🤖 AI generated summary

Critical macOS Screen Sharing Flaw Is Already Being Exploited: Attackers Gain Root Access and Install Monero Miners + Video

A Dangerous Race Between Apple’s Patch and Cybercriminals A critical vulnerability in macOS has moved from a security advisory to an active exploitation problem in remarkably little time. The Dutch National Cyber Security Centre (NCSC-NL) has confirmed that attackers are exploiting CVE-2026-65400, a critical authentication flaw in Apple’s built-in…

https://undercodenews.com/critical-macos-screen-sharing-flaw-is-already-being-exploited-attackers-gain-root-access-and-install-monero-miners-video/?utm_source=mastodon&utm_medium=jetpack_social

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #newsAtKukei https://masto.kukei.eu/browse/news category:
- **Indonesia earthquake**: Magnitude 7.7 quake off Flores Island kills at least 38, injures 13, with 2,000 evacuated and dozens of homes damaged.
- **AfD politician violence**: AfD politician Arno Bausemer injured a 14-year-old boy with a baseball bat in Stendal, Germany.
- **macOS security flaw**: CVE-2026-65400, a macOS Screen Sharing [1/3]

A severe macOS Screen Sharing vulnerability (CVE-2026-65400) is being exploited to install Monero miners on exposed systems. Apple has issued emergency updates; users should update their systems promptly to mitigate this risk.

#macOS #Security #CVE202665400 #Monero #Cybersecurity #Apple

https://thedailytechfeed.com/critical-macos-screen-sharing-flaw-exploited-to-deploy-monero-miner-2/

Vulnerability giving attackers full control of Macs is under active exploitation

Apple이 지난주 패치한 macOS 화면 공유 취약점 CVE-2026-65400(심각도 7.1)이 실제 공격에 악용되고 있다. 네덜란드 NCSC는 인터넷에 VNC 포트(5900)를 노출한 여러 Mac에서 공격자가 root 권한을 획득하고 Monero 채굴기를 설치한 사례를 확인했다. 영향 대상은 macOS Tahoe, Sequoia, Sonoma이며, 화면 공유의 상태 관리 결함으로 인증 없는 원격 접근이 가능할 수...

https://arstechnica.com/security/2026/08/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation/

The Dutch NCSC reports active exploitation of CVE-2026-65400, an authentication flaw in macOS Screen Sharing. Attackers leverage public exploit code to deploy Monero miners on systems exposing the built-in VNC service on TCP/5900. Organizations running macOS with screen sharing enabled should audit their perimeter exposure immediately.

#CVE2026 #ScreenSharing #MoneroMiner #MacOSSecurity

https://cyberworldops.eu/en/macos-screen-sharing-actively-exploited-monero-miner-installed-on

🐧 SIGINT // Ubuntu Watch — 2026-08-16

VXLAN changelink missing CAP_NET_ADMIN check in device netns means unprivileged containers could reconfigure host tunnels. If you run VXLAN overlays for k8s or LXD networking, patch this before someone pivots across your virtual fabric.

🔗 https://avd.aquasec.com/nvd/2026/cve-2026-68432/

#Ubuntu #Linux #infosec

Microsoft has patched critical Exchange Server vulnerabilities, including CVE-2026-62911. Administrators should update systems immediately to prevent potential exploits.

#Microsoft #ExchangeServer #Cybersecurity #Vulnerabilities #SecurityUpdate #CVE202662911

https://thedailytechfeed.com/critical-vulnerabilities-in-microsoft-exchange-server-demand-immediate-attention/

CVE-2026-70328 - OOB read in Microsoft Excel. Info disclosure over network. CVSS 6.5. Patch under review - monitor updates closely. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2026-70328/

Sentencing is swift and merciless: patch Microsoft SharePoint against CVE-2026-55040 without delay, or face consequences this court will not be held responsible for.

Reward: You've received the Gavel of Marginal Preparedness. It is mostly decorative at this point.

#SharePoint #CyberSecurity #CriticalVulnerability #Microsoft #Ransomware #ExploitInTheWild (2/2)

🏆 New Achievement! The PoC Heard Round the World!

This court finds Microsoft SharePoint guilty of harboring CVE-2026-55040, a critical vulnerability of the highest order. Exhibit A: Rapid7 published proof-of-concept exploit code. Exhibit B: threat actors, punctual as a process server, immediately began active exploitation. The defense's argument of "maybe nobody will notice" is overruled and stricken from the record. (1/2)

Sentencing is swift and merciless: patch Microsoft SharePoint against CVE-2026-55040 without delay, or face consequences this court will not be held responsible for.

Reward: You've received the Gavel of Marginal Preparedness. It is mostly decorative at this point.

#SharePoint #CyberSecurity #CriticalVulnerability #Microsoft #Ransomware #ExploitInTheWild (2/2)

🏆 New Achievement! The PoC Heard Round the World!

This court finds Microsoft SharePoint guilty of harboring CVE-2026-55040, a critical vulnerability of the highest order. Exhibit A: Rapid7 published proof-of-concept exploit code. Exhibit B: threat actors, punctual as a process server, immediately began active exploitation. The defense's argument of "maybe nobody will notice" is overruled and stricken from the record. (1/2)

New vulnerability disclosure from
@chocapikk_:

CVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K or so based on the team's ASM queries. Good stuff as always from Valentin.

https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce

MSNightmare's ShieldBreak PoC claims to fully bypass Microsoft's July patch for CVE-2026-50656, achieving SYSTEM-level privileges on Windows 11 and Server 2025.

#ShieldBreak #CVE202650656 #MicrosoftDefender #PrivilegeEscalation #Windows11

https://meterpreter.org/shieldbreak-cve-2026-50656-defender-bypass/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-18704 - Privilege escalation in MongoDB. Authenticated read-only users can perform unauthorized writes via aggregation framework. CVSS 6.5. No patch available. Restrict access and monitor. #CVE #MongoDB #infosec

https://www.valtersit.com/cve/CVE-2026-18704/

🏆 New Achievement! Add to Cart: One Critical Exploit, Final Sale!

LOOTBOX TERMS AND CONDITIONS — By operating Adobe Commerce, Commerce B2B, or Magento Open Source on or before the July 2026 patches, you have opted into the CVE-2026-71362 Prize Pool. Odds of receiving an unauthenticated attacker hijacking your customer accounts: improving daily. Sansec blocked initial exploitation attempts moments after Adobe's advisory went public. Disclosure-to-attack speedrun: essentially instantaneous. (1/2)

CVE-2026-62837 - Path traversal info disclosure in Microsoft Office SharePoint. CVSS 6.5. Patch under review. Monitor advisories and restrict access. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2026-62837/

Out-of-bounds writes in ABAP's DIAG protocol parsing, SSTI and SSRF in a servlet component, code injection in Manufacturing Integration and Intelligence. Four weak points, all exposed, all hitting simultaneously. Your raid team is screaming.

ENRAGE TIMER IS RUNNING. Apply SAP's security patches for CVE-2026-58231, CVE-2026-34265, CVE-2026-44772, and CVE-2026-44758 before unauthenticated attackers execute arbitrary code or crater your systems entirely. (2/3)

Attackers are actively exploiting a maximum severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, just days after SAP released a patch. The flaw is a remote code execution vulnerabi
https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html
#cybersecurity #vulnerability #SAP

SAP Commerce Cloud Hit by a CVSS 100 Flaw as Attackers Move Within Days of the Patch + Video

A Critical Warning for SAP Commerce Cloud Operators A security patch is supposed to close a door. In the case of CVE-2026-58231, however, attackers appear to have started testing that door almost immediately after SAP released its fix. The vulnerability affects SAP Commerce Cloud and carries the maximum CVSS severity score of 10.0. More importantly, exploitation has reportedly…

https://undercodenews.com/sap-commerce-cloud-hit-by-a-cvss-100-flaw-as-attackers-move-within-days-of-the-patch-video/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-58231, a critical SAP Commerce Cloud vulnerability, is being actively exploited. This flaw enables unauthenticated remote code execution. Organizations should apply patches immediately and monitor for suspicious activity to protect their systems.

#SAP #CyberSecurity #Vulnerability #CVE202658231 #PatchNow #InfoSec

https://thedailytechfeed.com/critical-sap-commerce-cloud-vulnerability-under-active-exploitation/

Critical SAP Commerce Cloud RCE Vulnerability Under Active Attack

SAP Commerce Cloud flaw (CVE-2026-58231) is reportedly being actively exploited to gain full control over e-commerce platforms.

**If you run SAP Commerce Cloud (COM_CLOUD 2211, XMII 15.4, or ABAP Platform 7.53), apply the August 2026 SAP security updates immediately. Attackers are already exploiting CVE-2026-58231 to take over these systems. If you can't patch right away, restrict access to the Data Hub Adapter endpoint with IP filters so only trusted addresses can reach it, and treat any internet-exposed instance as a priority to check for signs of compromise.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-sap-commerce-cloud-rce-vulnerability-under-active-attack-k-v-m-i-3/gD2P6Ple2L

SAP Commerce Cloud Faces a Maximum-Severity Attack: CVE-2026-58231 Is Being Actively Exploited + Video

A Critical SAP Vulnerability Has Moved From Patch Priority to Immediate Threat A critical security flaw in SAP Commerce Cloud has crossed a dangerous line. What began as a newly disclosed vulnerability has rapidly become an active exploitation concern, giving defenders very little time to treat the issue as a routine patching exercise. Tracked as CVE-2026-58231, the…

https://undercodenews.com/sap-commerce-cloud-faces-a-maximum-severity-attack-cve-2026-58231-is-being-actively-exploited-video/?utm_source=mastodon&utm_medium=jetpack_social

Out-of-bounds writes in ABAP's DIAG protocol parsing, SSTI and SSRF in a servlet component, code injection in Manufacturing Integration and Intelligence. Four weak points, all exposed, all hitting simultaneously. Your raid team is screaming.

ENRAGE TIMER IS RUNNING. Apply SAP's security patches for CVE-2026-58231, CVE-2026-34265, CVE-2026-44772, and CVE-2026-44758 before unauthenticated attackers execute arbitrary code or crater your systems entirely. (2/3)

🏆 New Achievement! SAP Has Entered the Chat (As the Final Boss)!

PHASE ONE ACTIVE. CVE-2026-58231 scores a perfect 10.0 — that is not a grade, that is a tombstone. SAP Commerce Cloud lets an unauthenticated attacker abuse a default auth client and feed malformed input to unvalidated functions. No login required. You are already in the wipe.

PHASE TWO: additional CVEs are spawning adds. (1/3)

「SAP Commerce Cloudの脆弱性が最大レベルの攻撃の標的に。 」： #BLEEPINGCOMPUTER

「脅威インテリジェンス企業Defusedによると、3日前にパッチが適用されたSAP Commerce Cloudの深刻度最高レベルのリモートコード実行の脆弱性が、すでに攻撃の標的となっているという。

Commerce Cloud（旧称SAP Hybris）は、世界的に有名なブランドや大手小売業者が所有するオンラインストアで使用されているクラウドベースのeコマースプラットフォームです。

CVE-2026-58231 として追跡されている この重大な脆弱性は、Commerce Cloudの中核となるデータハブアダプタ拡張機能における不適切な認証の弱点に起因するもので、権限を持たない攻撃者が低複雑度の攻撃で悪用し、任意のコードを実行する可能性があります。 」

https://www.bleepingcomputer.com/news/security/max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks/

#prattohome

Attackers are actively exploiting a maximum severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, just days after SAP released a patch. The flaw is a remote code execution vulnerabi
https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html
#cybersecurity #vulnerability #SAP

Out-of-bounds writes in ABAP's DIAG protocol parsing, SSTI and SSRF in a servlet component, code injection in Manufacturing Integration and Intelligence. Four weak points, all exposed, all hitting simultaneously. Your raid team is screaming.

ENRAGE TIMER IS RUNNING. Apply SAP's security patches for CVE-2026-58231, CVE-2026-34265, CVE-2026-44772, and CVE-2026-44758 before unauthenticated attackers execute arbitrary code or crater your systems entirely. (2/3)

@da_667 The SolarWinds Serv-U denial-of-service vulnerability (CVE-2026-28318) became a massive infosec meme and talking point because unauthenticated attackers can crash over 12,000 internet-exposed servers using a single HTTP POST request with a Content-Encoding: deflate header.

CVE-2026-58427 - Info disclosure via /members API leaks private org lists. Incomplete fix for PR #38145. CVSS 7.5. Update immediately. #CVE #infosec #privacy

https://www.valtersit.com/cve/CVE-2026-58427/

CVE-2025-60710 - Changed to Known Ransomware Status

Microsoft Windows Link Following VulnerabilityVendor: MicrosoftProduct: WindowsMicrosoft Windows contains a link following vulnerability that allows for privilege escalationStatus changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 at 18:08:17 UTCDate Added to KEV: 2026-04-13View CVE Details

https://nvd.nist.gov/vuln/detail/CVE-2025-60710

#Ransomware #Microsoft #Windows

‼️ CVE-2025-49091: Single click Remote Code Execution exploit targeting Gajim on devices with KDE Plasma.

GitHub PoC: https://github.com/thefreestyleresearcher/CVE-2025-49091-Gajim-RCE

‼️ CVE-2025-49091: Single click Remote Code Execution exploit targeting Gajim on devices with KDE Plasma.

GitHub PoC: https://github.com/thefreestyleresearcher/CVE-2025-49091-Gajim-RCE

CVE-2019-0803 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 athttps://nvd.nist.gov/vuln/detail/CVE-2019-0803

CVE-2018-0802 - Changed to Known Ransomware Status

Microsoft Office Memory Corruption VulnerabilityVendor: MicrosoftProduct: OfficeMicrosoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.Status changed from Unknown to Known for ransomware https://nvd.nist.gov/vuln/detail/CVE-2018-0802

CVE-2016-0189 - Changed to Known Ransomware Status

Microsoft Internet Explorer Memory Corruption VulnerabilityVendor: MicrosoftProduct: Internet ExplorerThe Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: Augusthttps://nvd.nist.gov/vuln/detail/CVE-2016-0189

CVE-2021-4034 - Changed to Known Ransomware Status

Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityVendor: Red HatProduct: PolkitThe Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 at 18:08:17 UTCDate Added to KEV: 2022-06-27View CVE https://nvd.nist.gov/vuln/detail/CVE-2021-4034

CVE-2020-0618 - Changed to Known Ransomware Status

Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityVendor: MicrosoftProduct: SQL ServerMicrosoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.Status changed from Unknown to Known https://nvd.nist.gov/vuln/detail/CVE-2020-0618

CVE-2020-29574 - Changed to Known Ransomware Status

CyberoamOS (CROS) SQL Injection VulnerabilityVendor: SophosProduct: CyberoamOSCyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 at 18:08:17 UTCDate Added to KEV: 2025-02-06View CVE https://nvd.nist.gov/vuln/detail/CVE-2020-29574

CVE-2020-0968 - Changed to Known Ransomware Status

Microsoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityVendor: MicrosoftProduct: Internet ExplorerMicrosoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: August 14, 2026 at 18:08:17 https://nvd.nist.gov/vuln/detail/CVE-2020-0968

CVE-2018-0802 - Changed to Known Ransomware Status

Microsoft Office Memory Corruption VulnerabilityVendor: MicrosoftProduct: OfficeMicrosoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.Status changed from Unknown to Known for ransomware https://nvd.nist.gov/vuln/detail/CVE-2018-0802

🚨 Critical #MariaDB flaw enables remote code execution

CVE-2026-49261 can run arbitrary commands on vulnerable servers.
🔗 read more: securityonline.info/...

#ransomNews #cybersecurity

🚨 Critical #MariaDB flaw enables remote code execution

CVE-2026-49261 can run arbitrary commands on vulnerable servers.
🔗 read more: securityonline.info/...

#ransomNews #cybersecurity

CVE-2026-56864 - High severity Go module supply chain attack. Malicious GOSUMDB can serve unverified content bypassing transparency log. CVSS 7.5. Update Go toolchain and verify sums immediately. #CVE #GoLang #infosec

https://www.valtersit.com/cve/CVE-2026-56864/

🟠 CVE-2026-19474 - High (7.5)

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19474/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19474 - High (7.5)

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19474/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18549 - High (7.5)

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18549/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18500 - High (8.1)

@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify({ key }) is silently overridden by the plugin's globally configured secret, because the option merge applies...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18500/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Out-of-bounds writes in ABAP's DIAG protocol parsing, SSTI and SSRF in a servlet component, code injection in Manufacturing Integration and Intelligence. Four weak points, all exposed, all hitting simultaneously. Your raid team is screaming.

ENRAGE TIMER IS RUNNING. Apply SAP's security patches for CVE-2026-58231, CVE-2026-34265, CVE-2026-44772, and CVE-2026-44758 before unauthenticated attackers execute arbitrary code or crater your systems entirely. (2/3)

Nearly 14,000 Trezor customers had their data stolen via CVE-2026-72898, a critical Metabase zero-day exploited through logistics partner ShipMonk.

#Trezor #DataBreach #Metabase #CVE202672898 #ShipMonk

https://meterpreter.org/trezor-shipmonk-metabase-breach-cve-2026-72898/?utm_source=mastodon&utm_medium=jetpack_social