All News

Showing 24 articles in "security"

Security1h ago14 min read

CVE-2026-116606: Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway (Update: added to CISA KEV)

Do first: Upgrade to a fixed version: 9.4.0.030. Exploitation: none Automatable: yes Technical impact: total Summary The Barracuda Email Security Gateway appliance is affected. An unauthenticated remote attacker could bypass login protections and restore a crafted configuration backup, allowing unauthorized changes to the device's global settings. Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them. An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration. cve.now Index Exploitation28/40Public exploit, and a...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1h ago1 min read

CVE-2026-111793: Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. (Update: added to CISA KEV)

Update: added to CISA KEV. Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1h ago1 min read

CVE-2026-20320: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read… (Update: added to CISA KEV)

Update: added to CISA KEV. A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML me...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1h ago7 min read

CVE-2026-125350: Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (Update: added to CISA KEV)

Do first: Upgrade to a fixed version: 157.0.8103.50. Summary Google Chrome is affected by a use-after-free bug in its XML handling. A remote attacker could run arbitrary code inside the browser sandbox by luring a victim to a crafted HTML page. Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them. Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) cve.now Index Exploitation?/40Unknown. No CISA SSVC exploitation rating yet Exposure?/25Unknown. No advisory context yet Reach20/20Affects Google Chrome (software...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1h ago1 min read

CVE-2026-111560: OS Command Injection in Barracuda Appliances (Update: added to CISA KEV)

Update: added to CISA KEV. Certain Barracuda appliance products are affected by a flaw in how the timezone configuration field handles special characters. An authenticated administrator could exploit this to run arbitrary operating system commands with root privileges on the device.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1d ago1 min read

CVE-2026-123218: IBM Aspera Faspex Authorization Bypass (Update: added to CISA KEV)

Update: added to CISA KEV. IBM Aspera Faspex has an authorization bypass that an attacker can reach remotely, without logging in, by sending a specially crafted message. This lets the attacker bypass user authorization and gain full administrative privileges, and the bug is listed in CISA's Known Exploited Vulnerabilities catalog, meaning attacks are happening.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1d ago1 min read

CVE-2026-102895: GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated… (Update: added to CISA KEV)

Update: added to CISA KEV. GPUStack, an open-source GPU cluster manager for AI model serving, has an authentication bypass that lets an attacker gain full administrator access remotely, without logging in, by making a request appear to come from the local machine. This allows them to change users and models, create persistent admin API keys, steal worker and cloud-provider credentials, and run code on worker hosts, and t...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1d ago1 min read

CVE-2026-116779: FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands (Update: added to CISA KEV)

Update: added to CISA KEV. FreeSWITCH, the open-source telecom software, has a flaw in how it handles incoming SIP chat messages, letting an attacker run commands with the privileges of the FreeSWITCH process, including arbitrary operating system commands, read configuration and credentials, and take full control of calls. It can be reached remotely over the network without logging in, public exploit code is available, a...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security1d ago1 min read

CVE-2026-123158: sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass… (Update: added to CISA KEV)

Update: added to CISA KEV. OpenSSH's sshd on Linux systems that use musl libc without PAM (such as Alpine Linux) lets an attacker bypass password authentication remotely, without logging in, by sending any password between 256 and 1024 characters for some account configurations. This only affects a non-default setup with PAM support disabled, but public exploit code exists and the bug is listed as being exploited in atta...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security2d ago1 min read

CVE-2023-41974: A use-after-free issue was addressed with improved memory management. (Update: proof of concept on GitHub published)

Update: proof of concept on GitHub published. A use-after-free flaw in Apple's iOS and iPadOS lets an app on the device run arbitrary code with kernel privileges. It is reached locally, without any login, but it requires the user to take an action, and attacks using it are happening.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security3d ago1 min read

CVE-2024-24919: Information disclosure (Update: proof of concept on GitHub published)

Update: proof of concept on GitHub published. An information disclosure flaw in Check Point Security Gateways that have the Remote Access VPN or Mobile Access Software Blades enabled lets an attacker read certain information remotely, without logging in or any user interaction. Public exploit code is available, and attacks using this bug are happening.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security3d ago1 min read

CVE-2017-5689: An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology… (Update: proof of concept on GitHub published)

Update: proof of concept on GitHub published. Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) are affected by a flaw that lets an attacker completely bypass web interface authentication and log in as admin with any password, or even an empty digest response, reaching it remotely over the network without logging in on systems where AMT is provisioned and its web interface is reachable. Public exploit code, in...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20128: Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file tha...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20131: Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Ja...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20127: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the pee...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20122: Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could ...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-22719: VMware Aria Operations command injection vulnerability

VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migration is in progress. To remediate CVE-2026-22719, apply the patches listed in the 'Fixed Version' column of the ' Response Matrix https://sup...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2025-67038: Lantronix EDS5000, G520, and X300 OS Command Injection

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-33634: Trivy ecosystem supply chain briefly compromised

Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-3502: TrueConf Client Update Integrity Verification Bypass

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20700: A memory corruption issue was addressed with improved state management.

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individu...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-20079: Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this v...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-22769: Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers u...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0

Security4d ago1 min read

CVE-2026-33017: Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the store...

cve.now CISA KEV

🟢Bullish 0🔴Bearish 0⭐Important 0