CVE-2026-7273

Overview

Zyxel
GS1900-48HPv2 firmware

16 Jun 2026

Published

22 Sep 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

1.99%

MITRE

KEV

Description

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Statistics

9 Posts
7 Interactions

Last activity: 9 hours ago

Fediverse

Daily CyberSecurity @DailyCyberSecurity

CISA warned of an exploited Zyxel switch vulnerability in GS1900 devices. Patch the Zyxel switch vulnerability now to prevent network compromise.

#Zyxel #CVE20267273 #CISAKEV #BufferOverflow #NetworkSecurity #Infosec

https://securityonline.info/exploited-zyxel-switch-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
19h ago

Cybersecurity & cyberwarfare @cybersecurity

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zyxel flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Zyxel GS1900 Series Switches flaw, tracked as CVE-2026-7273 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a stack-based buffer overflow that could allow attackers […]
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

0
0
0
12h ago

Bluesky

PCI Guru @jbhall56.bsky.social

The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution. thehackernews.com/2026/09/zyxe...

1
1
1
9h ago

boredchilada @cyfar.ca

~Cisa~ CISA confirms active exploitation of a Zyxel GS1900 switch buffer overflow; prioritize remediation. - IOCs: CVE-2026-7273 - #CVE20267273 #KEV #ThreatIntel

1
0
0
17h ago

Information Security Briefly @infosecbriefly.bsky.social

CISA added a patched Zyxel GS1900 stack-based buffer overflow (CVE-2026-7273) to KEV due to evidence of active exploitation.

1
0
0
14h ago

Abijita Foundation @abijita.bsky.social

Zyxel GS1900 Switches Targeted in Active Attacks, CISA Warns Attackers are actively exploiting CVE-2026-7273 in Zyxel GS1900 switches, with CISA urging organizations to patch affected devices.

1
0
0
10h ago

Help Net Security @helpnetsecurity.com

Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273) 📖 Read more: www.helpnetsecurity.com/2026/09/22/z... #cybersecurity #cybersecuritynews #exploit #government #SMBs @greynoise.io @greynoise.infosec.exchange.ap.brid.gy @veeam.com

1
0
0
10h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

CISA says CVE-2026-7273 in Zyxel GS1900 switches is actively exploited for data theft. The stack overflow lets unauthenticated LAN users run OS commands. #Zyxel #CISA #US

1
0
0
10h ago

CVE-2026-93616

Overview

checkpoint
Quantum Security Management

22 Sep 2026

Published

22 Sep 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

Pending

MITRE

KEV

Description

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Statistics

9 Posts
4 Interactions

Last activity: Last hour

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

🚨 Check Point patches Management Server zero-day exploited in attacks
⠀
Check Point has released fixes for CVE-2026-93616, a vulnerability that allows unauthenticated attackers to upload and execute arbitrary scripts on affected management servers.
⠀
The company says a small number of customers have already been attacked.
⠀
Affected products include:

• Security Management Server
• Multi-Domain Security Management Server
• Log Server
• Multi-Domain Log Server
• SmartEvent
⠀
The vulnerability carries a CVSS score of 9.8.
⠀
Check Point advises installing the applicable fixes, restricting management access to trusted IP addresses, and checking for signs of exploitation.
⠀
LivePatch Take 28/29 does not fix this vulnerability.

Source: https://www.bleepingcomputer.com/news/security/check-point-patches-management-server-zero-day-exploited-in-attacks/

0
1
0
2h ago

OffSequence @offseq

Check Point Quantum Security Management is affected by CVE-2026-93616 (CRITICAL, CVSS 9.8): unauthenticated attackers can upload & execute scripts via path traversal. Restrict access & monitor activity until patch info is released. https://radar.offseq.com/threat/cve-2026-93616-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-4344dfa6a4d98182 #OffSeq #CheckPoint #CyberAlert

0
0
0
7h ago

Daily CyberSecurity @DailyCyberSecurity

A critical exploited Check Point Management vulnerability (CVE-2026-93616) allows attackers to execute arbitrary scripts. Secure your servers now.

#CheckPoint #CVE202693616 #Cybersecurity #InfoSec #Vulnerability #RCE

https://securityonline.info/exploited-cve-2026-93616-checkpoint-scripts/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
7h ago

Cybersecurity & cyberwarfare @cybersecurity

Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has released emergency hotfixes for CVE-2026-93616, a critical path traversal flaw in its Security Management Server. The security firm bug is already being exploited. Attackers can abuse the flaw without logging in to […]
Check Point Fixes a New Actively Exploited Critical Security Flaw

0
0
0
1h ago

Catalin Cimpanu @campuscodi

Check Point has disclosed a zero-day (in Security Management Server) and marked an older bug also as exploited in the wild (in Site-to-Site VPN)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

3
0
0
1h ago

Bluesky

Sami Laiho @samilaiho.com

sk1000171 - CVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management Server support.checkpoint.com/results/sk/s... CVSS: 9.8 - Actively exploited

0
0
0
2h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Check Point released emergency hotfixes for CVE-2026-93616, a critical path traversal flaw in Security Management Server products being exploited in the wild, enabling unauthenticated script execution. #CheckPoint #CVE202693616 #SmartConsole

0
0
0
1h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Check Point disclosed CVE-2026-93616, a path traversal zero-day in Security Management Server web services used in targeted attacks, and released fixes plus hunting guidance. #CheckPoint #ZeroDay #VPN

0
0
0
Last hour

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-93616 enables unauthenticated script execution via path traversal in Check Point Security Management Server, fixed September 22, while separate VPN attempts target CVE-2026-85102.

0
0
0
1h ago

CVE-2026-86296

Overview

D-Link
DIR-822A

07 Sep 2026

Published

08 Sep 2026

Updated

CVSS v4.0

CRITICAL (10.0)

EPSS

1.35%

MITRE

KEV

Description

A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Statistics

6 Posts
26 Interactions

Last activity: 6 hours ago

Fediverse

Catalin Cimpanu @campuscodi

D-Link warns of two major bugs with public POCs

CVE-2026-86296: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10516

POC: https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0

CVE-2026-93958: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10518

POC: https://github.com/FoundTL/D-Link-R95-BE9500

7
3
0
7h ago

Daily CyberSecurity @DailyCyberSecurity

Public PoC exploit details emerge for critical D-Link DIR-822A vulnerabilities. Learn how these D-Link DIR-822A vulnerabilities impact unpatched devices.

#DLink #DIR822A #CVE202686296 #CVE202686510 #RouterSecurity #Cybersecurity #Infosec

https://securityonline.info/d-link-dir-822a-vulnerabilities-poc/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
19h ago

Bluesky

BleepingComputer @bleepingcomputer.com

D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers.

3
3
0
8h ago

Joe Slowik @pylos.co

lol CVE-2026-86296

0
6
0
6h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

D-Link flags a max-severity zero-day in legacy DIR-822A routers. CVE-2026-86296 is an unauthenticated stack-based buffer overflow in the DHCP server; public PoC exists. #DLink #DIR822A #CVE202686296

0
0
0
6h ago

Catalin Cimpanu @campuscodi.risky.biz

D-Link warns of two major bugs with public POCs CVE-2026-86296: supportannouncement.us.dlink.com/security/pub... POC: tzh00203.notion.site/D-Link-DIR-8... CVE-2026-93958: supportannouncement.us.dlink.com/security/pub... POC: github.com/FoundTL/D-Li...

1
3
0
7h ago

CVE-2026-94127

Overview

F5
BIG-IP

22 Sep 2026

Published

22 Sep 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

Pending

MITRE

KEV

Description

When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Statistics

4 Posts
15 Interactions

Last activity: Last hour

Fediverse

IFIN - The Independent Federated Intelligence Network @ifin

When it rains, it pours. F5 BIG-IP APM also has an exploited CVE!

https://ifin.network/t/f5-big-ip-cve-2026-94127-rce-exploited/855

#ThreatIntel #ThreatIntelligence #IFIN

5
3
0
Last hour

:rainbowCrow: @cR0w

EITW 0day in F5 APM.

https://my.f5.com/manage/s/article/K000162605

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). (CVE-2026-94127)
This vulnerability allows an unauthenticated attacker to perform RCE. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.

2
5
0
6h ago

Daily CyberSecurity @DailyCyberSecurity

An exploited BIG-IP APM vulnerability tracked as CVE-2026-94127 allows RCE attacks. Secure your BIG-IP APM vulnerability deployments with new F5 hotfixes.

#F5 #BIGIP #CVE202694127 #Cybersecurity #InfoSec #RCE #Vulnerability

https://securityonline.info/big-ip-apm-vulnerability-cve-2026-94127/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
4h ago

Bluesky

Sami Laiho @samilaiho.com

BIG-IP APM vulnerability CVE-2026-94127 #critical #9.8 my.f5.com/manage/s/art...

0
0
0
5h ago

CVE-2026-93952

Overview

Arista Networks
VeloCloud Orchestrator (VCO) On-Prem

22 Sep 2026

Published

22 Sep 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

0.42%

MITRE

KEV

Description

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.

Statistics

4 Posts
5 Interactions

Last activity: 7 hours ago

Fediverse

OffSequence @offseq

CVE-2026-93952 (CRITICAL, CVSS 10) impacts Arista VeloCloud Orchestrator (On-Prem) via improper input validation. Remote, unauthenticated access may lead to full system compromise. Patch urgently. https://radar.offseq.com/threat/cve-2026-93952-cwe-20-improper-input-validation-in-arista-networks-velocloud-orchestrator-vco-on-prem-25dafe8f246f1077 #OffSeq #CVE #infosec #Vulnerability

2
0
0
12h ago

Daily CyberSecurity @DailyCyberSecurity

An exploited VeloCloud vulnerability with a 10.0 CVSS score hits Arista appliances. Patch the critical VeloCloud vulnerability to stop active attacks.

#VeloCloud #Arista #CVE202693952 #ZeroDay #Cybersecurity #Infosec

https://securityonline.info/velocloud-vulnerability-cve-2026-93952/?utm_source=mastodon&utm_medium=jetpack_social

1
0
0
18h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-93952 enables unauthenticated remote attackers to gain internal privileges on on-premises VeloCloud Orchestrator, potentially compromising orchestrator and managed Edge devices.

1
0
0
7h ago

Bitnewsbot @bitnewsbot.bsky.social

Arista disclosed a critical flaw (CVE-2026-93952) in on-premises VeloCloud Orchestrator (VCO) actively exploited as of September 22. The vulnerability, with […]

1
0
0
7h ago

CVE-2026-85102

Overview

checkpoint
Quantum Security Gateway

09 Sep 2026

Published

22 Sep 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.33%

MITRE

KEV

Description

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Statistics

4 Posts
7 Interactions

Last activity: 1 hour ago

Fediverse

IFIN - The Independent Federated Intelligence Network @ifin

Two Check Point critical vulnerabilities are now listed as exploited in the wild.

https://ifin.network/t/cve-2026-85102-and-93616-check-point-security-gateway-rce-path-traversal-exploited/853

#ThreatIntel #ThreatIntelligence #IFIN

1
2
0
1h ago

Daily CyberSecurity @DailyCyberSecurity

An exploited Check Point VPN vulnerability allows remote code execution. Patch this Check Point VPN vulnerability now to block active in-the-wild attacks.

#CheckPoint #CVE202685102 #VPN #Cybersecurity #Infosec #ZeroDay

https://securityonline.info/checkpoint-vpn-vulnerability-cve-2026-85102/?utm_source=mastodon&utm_medium=jetpack_social

0
1
0
5h ago

Catalin Cimpanu @campuscodi

Check Point has disclosed a zero-day (in Security Management Server) and marked an older bug also as exploited in the wild (in Site-to-Site VPN)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

3
0
0
1h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-93616 enables unauthenticated script execution via path traversal in Check Point Security Management Server, fixed September 22, while separate VPN attempts target CVE-2026-85102.

0
0
0
1h ago

CVE-2026-87902

Overview

WordPress
WordPress

22 Sep 2026

Published

22 Sep 2026

Updated

CVSS

Pending

EPSS

Pending

MITRE

KEV

Description

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE.

Statistics

3 Posts
3 Interactions

Last activity: Last hour

Fediverse

cyberia╱eu × mr.luk4 @cyberia

Service notice: all hosted/maintained WP websites have been updated to the latest minor version of your current major branch (security release, CVE-2026-87902). No action needed from you!

I don't host or maintain your website? Be sure to update your WordPress ASAP. This one is critical.

Release notes → https://wordpress.org/news/2026/09/wordpress-7-1-2-release/

#WordPress #Security #Critical #Cyberia

1
1
0
5h ago

Daily CyberSecurity @DailyCyberSecurity

WordPress 7.1.2 patches a critical WordPress RCE vulnerability (CVE-2026-87902). Update your site to prevent conditional remote code execution.

#WordPress #CVE202687902 #RCE #Cybersecurity #Infosec #WordPressSecurity

https://securityonline.info/wordpress-rce-vulnerability-cve-2026-87902/?utm_source=mastodon&utm_medium=jetpack_social

1
0
0
5h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

WordPress patched CVE-2026-87902, a critical core flaw in versions 4.7.0-7.1.1 that could let unauthenticated attackers load a PHP file and, on some servers, trigger code execution. #WordPress #CVE202687902 #PatchUpdate

0
0
0
Last hour

CVE-2026-78902

Overview

Pending

Pending

Published

Pending

Updated

CVSS

Pending

EPSS

Pending

MITRE

KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

2 Posts
6 Interactions

Last activity: 7 hours ago

Fediverse

buherator @buherator

[RSS] CVE-2026-78902: XSS to RCE in pfSense with one DNS request

https://www.netspi.com/blog/technical-blog/web-application-pentesting/cve-2026-78902-xss-to-rce-in-pfsense-with-one-dns-request/

2
4
0
7h ago

Bluesky

buherator @buherator.bsky.social

[RSS] CVE-2026-78902: XSS to RCE in pfSense with one DNS request www.netspi.com -> Original->

0
0
0
7h ago

CVE-2026-65660

Overview

Microsoft
Microsoft SharePoint Enterprise Server 2016

11 Aug 2026

Published

16 Sep 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

0.81%

MITRE

KEV

Description

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Statistics

2 Posts
1 Interaction

Last activity: 7 hours ago

Fediverse

The CyberSec Guru @guru

Microsoft Called CVE-2026-65660 a Spoofing Bug. It’s an Authenticated SharePoint RCE

CVE-2026-65660 is an authenticated SharePoint RCE, not just spoofing. Learn about the ToolPane flaw, XAML exploit chain, affected versions, and fixes

https://thecybersecguru.com/news/cve-2026-65660-sharepoint-rce/

0
0
0
7h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-65660 in SharePoint Server enables authenticated remote code execution via unescaped quotes in SafeControls-related directive reconstruction.

1
0
0
8h ago

CVE-2026-59309

Overview

VMware
Cloud Foundation

30 Jul 2026

Published

30 Jul 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

7.94%

MITRE

KEV

Description

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system.

Statistics

4 Posts
1 Interaction

Last activity: 9 hours ago

Fediverse

Ciarán (mc) @ciaranmak

Pre-Auth vCenter RCE #threatintel #vmwarw

https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/

0
0
0
9h ago

Bluesky

/r/netsec @r-netsec-bot.bsky.social

vCenter pre-auth RCE: CVE-2026-59309/59310

0
0
1
13h ago

Tim (Wadhwa-)Brown :donor: @timb.me.uk

Woops: * https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/ #threatintel, #vmware

1
0
0
11h ago

Quick check

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Microsoft Called CVE-2026-65660 a Spoofing Bug. It’s an Authenticated SharePoint RCE

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky