24h | 7d | 30d

CVE-2026-99999

Overview

  • Linux
  • Linux
15 Oct 2026
Published
17 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
0.21%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Statistics

  • 18 Posts
  • 57 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
Alpine Linux :alpine: @alpinelinux

alpinelinux.org is currently unavailable due to emergency patching of the host (CVE-2026-99999).

It should be back soon.

#AlpineLinux #AlpineOps

  • 14
  • 28
  • 0
  • 19h ago
Profile picture fallback
AlmaLinux @almalinux

⚠️ PwnEscape (CVE-2026-99999) is a newly disclosed Linux kernel vulnerability.

AlmaLinux 8, 9, and 10 are affected. Patched kernels are available for testing!

Read more: almalinux.org/blog/2026-10-16-

  • 4
  • 2
  • 1
  • 14h ago
Profile picture fallback
Who Let The Dogs Out 🐾 @ashed

PwnEscape - уязвимость в сетевом стеке ядре Linux, позволяющая обойти изоляцию гипервизоров и контейнеров

opennet.ru/opennews/art.shtml?

В ядре Linux выявлена критическая уязвимость (CVE-2026-99999, PwnEscape) в стеке IPv4, позволяющая получить доступ к памяти хост-окружения из гостевой системы.
При успешной эксплуатации уязвимости пользователь гостевой системы может выполнить код с правами ядра на стороне хост-окружения.
Эксплуатация уязвимости продемонстрирована в окружении на базе гипервизора KVM, но так как уязвимость вызвана ошибкой не в гипервизоре, а в механизме обработки сетевых пакетов ядром Linux, потенциально эксплоит может быть адаптирован и для других гипервизоров и механизмов изоляции, в которых используется штатный сетевой стек Linux.

Проблема вызвана некорректной последовательностью операций при проверке контрольной суммы сетевого пакета, позволяющей изменить заголовок IPv4 в момент после проверки корректности информации,

  • 2
  • 2
  • 0
  • 17h ago
Profile picture fallback
ぽな (C.Ponapalt) @ponapalt

CVE-2026-99999が意図的に選ばれたものでは？とか話題になってるけど、もう10万番まで進んでるから、偶然アレな数字が割り付けられた説のほうがありそう…

  • 2
  • 0
  • 0
  • 12h ago
Profile picture fallback
The CyberSec Guru @guru

PwnEscape (CVE-2026-99999): The Critical Linux Kernel Flaw That Breaks VM Isolation

PwnEscape (CVE-2026-99999) is a critical Linux kernel flaw that can expose host memory and enable VM escape. Learn the impact, affected systems and patch

thecybersecguru.com/exploits/p

  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical Linux kernel vulnerability (CVE-2026-99999) in networking code allows guest VMs to read host system memory. This affects any hypervisor running vulnerable Linux kernels and has been successfully exploited against Vercel's cloud sandboxes. Host memory exposure puts credentials, keys, and…

threatnoir.com/focus

🤖 AI generated summary

  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
benzogaga33 :verified: @benzogaga33

PwnEscape : une faille Linux permet de s’évader d’une VM KVM it-connect.fr/pwnescape-cve-20 #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

  • 0
  • 0
  • 0
  • 2h ago

Bluesky

Profile picture fallback
Calimeg @calimegai.bsky.social
PwnEscape (CVE-2026-99999): faille critique du noyau Linux permettant aux VM invitées de lire la mémoire hôte. Démontrée sur les sandboxes de Vercel et confirmée. 🔓 #Vercel #Linux thehackernews.com/2026/10/crit...
  • 0
  • 2
  • 0
  • 4h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
NVD - Home https://nvd.nist.gov/vuln/detail/cve-2026-99999
  • 0
  • 1
  • 0
  • 12h ago
Profile picture fallback
nilab (in Bluesky) @nilab.bsky.social
CVE Record: CVE-2026-99999, Severity: CRITICAL, Score: 9.3 "Title: ipv4: validate checksum_start before completing checksum" "Published: 2026-10-15" "In the Linux kernel, the following vulnerability has been resolved" www.cve.org/CVERecord?id...
  • 0
  • 0
  • 0
  • 12h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
さくらのVPSにおけるLinuxカーネルの脆弱性（CVE-2026-99999）への対応状況について https://vps.sakura.ad.jp/contents/info/202610-pendingapply/
  • 0
  • 0
  • 0
  • 11h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
さくらのクラウドにおけるLinuxカーネルの脆弱性（CVE-2026-99999）への対応状況について https://cloud.sakura.ad.jp/news/2026/10/16/cve-2026-99999/
  • 0
  • 0
  • 0
  • 11h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
CVE-2026-99999（PwnEscape）を読み解く──「KVMの脆弱性」ではなく、Linuxネットワークスタックの脆弱性 - Qiita https://qiita.com/k2_naka/items/fa87685231377f15e7e3
  • 0
  • 0
  • 0
  • 9h ago
Profile picture fallback
セキュリティ対策Lab @securitylab-jp.bsky.social
さくらインターネット、Linuxカーネル重大な脆弱性「CVE-2026-99999」対応で新規申込を一時停止―クラウド・VPSなど影響調査 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
  • 0
  • 0
  • 0
  • 8h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
CVE-2026-99999 (PwnEscape) lets guest-controlled packets disclose host memory and may enable host compromise. Root execution was demonstrated only in researchers’ lab; update and reboot affected host kernels.
  • 0
  • 0
  • 0
  • 5h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
PwnEscape: Linux Kernel Virtual Machine Escape Vulnerability (CVE-2026-99999) and AI-Driven Threat Discovery + Video Introduction: The discovery of PwnEscape (CVE-2026-99999, CVSS 9.3) highlights a critical vulnerability within the Linux kernel's networking subsystem that allows a guest virtual…
  • 0
  • 0
  • 0
  • 4h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
AWS セキュリティ速報 2026-137-AWS（CVE-2026-99999）は通常の EC2 は対象外。影響範囲を確認してみた | DevelopersIO https://dev.classmethod.jp/articles/aws-security-bulletin-2026-137-kvm-kernel/
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-102764

Overview

  • BeyondTrust
  • Remote Support
15 Oct 2026
Published
17 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
0.60%
KEV

Description

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Statistics

  • 16 Posts
  • 17 Interactions
Last activity: 4 hours ago

Fediverse

Profile picture fallback
CyberNetsecIO @netsecio

📰 China-Linked Group Exploits BeyondTrust Zero-Day in Espionage Attacks

A China-linked group, Armory Castle, is actively exploiting a critical zero-day (CVE-2026-102764) in BeyondTrust Remote Support appliances to gain root access and steal credentials. Patching is urgent. #CyberSecurity #ThreatIntel #ZeroDay #CVE

🔗 cyber.netsecops.io/articles/ch

  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Chinese APT Armory Castle has been actively exploiting CVE-2026-102764, a zero-day in BeyondTrust Remote Support appliances, since August to gain root access and exfiltrate data. Organizations running BeyondTrust are at immediate risk of credential theft, lateral movement, and data loss. Attackers…

threatnoir.com/focus

🤖 AI generated summary

  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
Mike | Raymond Tec @mike

Windows Updates Can Stall Exchange, Plus 4 Stories raymondtec.com/2026/10/windows

October Windows Server updates can disrupt on-premises Exchange mail flow. Plus a BeyondTrust zero-day, court notices, Microsoft lock-in, and Android scams.

#TechNews #Android #BankruptcyCourts #BeyondTrust #CVE2026102764 #GoogleMessages #MicrosoftExchange

  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
Censys @censys

🚨 Rapid Response | BeyondTrust Remote Support/Privileged Remote Access Zero-Day (CVE-2026-102764) (CVSS 9.3) is a critical vulnerability.

The flaw allows unauthenticated attackers to perform file operations on affected appliances.
Censys currently detects 9,569 Internet-exposed hosts and 177,497 web properties running BeyondTrust Remote Support or Privileged Remote Access. These figures represent detected installations, not confirmed vulnerable or unpatched instances.

BeyondTrust has released patches for both products. Organizations should prioritize patching self-hosted appliances and investigate potential compromise, as patching does not remediate prior exploitation.

Full Censys ARC advisory, including affected versions, exploitation indicators, and remediation guidance: censys.com/advisory/cve-2026-1

  • 0
  • 0
  • 0
  • 16h ago
Profile picture fallback
@ssvc

Placeholder link cisa.gov/news-events/alerts/20

  • CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
  • CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability

  • 2
  • 2
  • 0
  • 18h ago
Profile picture fallback
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Geopolitical tensions rise: US-Ukraine ties fray over Starlink restrictions and Patriot missile shortages (Oct 16). Tech breakthrough: Microsoft unveils MAI-Base-2, a 2.8T parameter AI model with 12x DeepSeek gain (Oct 15). Cybersecurity critical: Chinese APT exploited BeyondTrust zero-day (CVE-2026-102764). Cisco warns of exploited Secure Email Gateway flaw (CVE-2026-76519).

#Cybersecurity #Geopolitics #AI

  • 0
  • 0
  • 0
  • 13h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
Incident Radar | ARMORY CASTLE Exploited BeyondTrust Remote Support Zero-Day Mandiant identified evidence that ARMORY CASTLE exploited CVE-2026-102764 in BeyondTrust Remote Support appliances as a zero-day… Source: Google Threat Intelligence Full analysis: https://t.me/aiutocomputerhelp_lab/1284
  • 2
  • 2
  • 0
  • 4h ago
Profile picture fallback
jon greig @jgreig.bsky.social
BeyondTrust blamed a Chinese espionage group known to exploit zero days in edge devices for recent attacks involving CVE-2026-102764 The vulnerability affects its Remote Support appliances that enable IT teams to securely access and troubleshoot remote endpoints therecord.media/beyond-trust...
  • 1
  • 1
  • 1
  • 22h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Mandiant and Google GTIG say China-linked Armory Castle exploited CVE-2026-102764 in BeyondTrust Remote Support from August, using webshells and a tunneler. BeyondTrust patched affected versions; SaaS customers have been updated, while some self-hosted users must patch.
  • 1
  • 1
  • 0
  • 20h ago
Profile picture fallback
Censys @censys.bsky.social
🚨 Rapid Response | BeyondTrust Remote Support/Privileged Remote Access Zero-Day (CVE-2026-102764) (CVSS 9.3) critical vulnerability. Censys detects 9,569 exposed hosts & 177,497 web properties running Remote Support or Privileged Remote Access, not all confirmed vulnerable. https://bit.ly/4ymlmeh
  • 1
  • 1
  • 0
  • 16h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
BeyondTrust says suspected China-linked actor ARMORY CASTLE exploited CVE-2026-102764 in Remote Support appliances. The article details the attack and recommends patching affected self-hosted systems and investigating appliances exposed while vulnerable.
  • 1
  • 1
  • 0
  • 5h ago
Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Attackers exploit an authentication bypass in self-hosted BeyondTrust Remote Support; patch immediately. - IOCs: CVE-2026-102764 - #BeyondTrust #CVE2026102764 #ThreatIntel
  • 0
  • 1
  • 0
  • 8h ago
Profile picture fallback
AlphaHunt Converge @alphahunt.io
New report. Earlier intrusion. Google/Mandiant reports ARMORY CASTLE exploited CVE-2026-102764 as a zero-day in late August, escalated privileges and maintained appliance access. That does not establish an October wave.
  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ CISA added Fortinet path traversal and BeyondTrust authentication bypass flaws to its KEV Catalog; prioritize remediation. - IOCs: CVE-2025-61624, CVE-2026-102764 - #CVE #KEV #ThreatIntel
  • 0
  • 0
  • 0
  • 16h ago
Profile picture fallback
boredchilada @cyfar.ca
~Cybergcca~ BeyondTrust and Ivanti flaws are exploited in the wild; updates are urged. - IOCs: CVE-2026-102764, CVE-2026-104935, CVE-2026-111357 - #CVE #ThreatIntel #Vulnerabilities
  • 0
  • 0
  • 0
  • 20h ago

CVE-2026-110447

Overview

  • Collabora
  • Collabora Online - Built-in CODE Server
  • richdocumentscode
14 Oct 2026
Published
14 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
1.22%
KEV

Description

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

Statistics

  • 4 Posts
  • 22 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
nicolas @nschont

Vérifiez vos nextcloud avec collabora CODE
it-connect.fr/nextcloud-collab

  • 12
  • 1
  • 0
  • 2h ago
Profile picture fallback
Censys @censys

🚨 Rapid Response | Collabora Online Built-in CODE Server OS Command Injection (CVE-2026-110447) (CVSS 9.2) is a critical OS command injection vulnerability affecting the Collabora Online Built-in CODE Server app for Nextcloud. Exploitation in the wild has been reported, allowing unauthenticated attackers to execute operating system commands.
Censys currently detects 19,454 Internet-exposed hosts and 103,350 web properties with the app installed. These figures represent detected installations, not confirmed vulnerable instances.

Organizations should upgrade to version 26.4.303 or later, or remove the app. Disabling it is not sufficient.

Full Censys ARC advisory, including affected versions, exploitation indicators, and remediation guidance: censys.com/advisory/cve-2026-1

  • 4
  • 2
  • 0
  • 21h ago
Profile picture fallback
The CyberSec Guru @guru

Critical Nextcloud Collabora Flaw Enables Unauthenticated Command Execution Through Built-in CODE Server

CVE-2026-110447 is a critical Nextcloud Collabora RCE flaw exploited in the wild. Learn affected versions, attack details, web shell indicators, and fixes

thecybersecguru.com/exploits/n

  • 0
  • 0
  • 0
  • 2h ago

Bluesky

Profile picture fallback
Censys @censys.bsky.social
🚨 Rapid Response: CVE-2026-110447 (CVSS 9.2), a critical flaw in the Collabora Online Built-in CODE Server for Nextcloud, has reportedly been exploited in the wild. Censys detects 19,454 hosts and 103,350 web properties with the app installed, not all confirmed vulnerable. https://bit.ly/4BbTBrm
  • 1
  • 2
  • 0
  • 21h ago

CVE-2026-103849

Overview

  • Adobe
  • Adobe Commerce
13 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.78%
KEV

Description

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Statistics

  • 4 Posts
  • 3 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
ekiledjian @edwardk

Critical BlockStrap flaw lets hackers run code on Magento servers

A maximum-severity vulnerability in Magento and Adobe Commerce (CVE-2026-103849, dubbed BlockStrap) could let attackers execute arbitrary PHP code on store servers, BleepingComputer reports. Security firm Sansec says no attacks have been observed yet, but warns that Adobe’s ‘priority 2’ rating understates the risk. bleepingcomputer.com/news/secu

  • 0
  • 0
  • 0
  • 15h ago
Profile picture fallback
Mike | Raymond Tec @mike

Online Ads Delivered Spyware, Plus 3 Stories raymondtec.com/2026/10/online-

Online ads became a zero-click spyware pipeline. Plus a critical Magento flaw, state lawsuits over ChatGPT safety, and new Temu limits in Texas.

#TechNews #AdobeCommerce #Candiru #CVE2026103849 #Magento #OpenAI #Spyware

  • 0
  • 0
  • 0
  • 2h ago

Bluesky

Profile picture fallback
BleepingComputer @bleepingcomputer.com
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.
  • 0
  • 3
  • 0
  • 16h ago
Profile picture fallback
Abijita Foundation @abijita.bsky.social
Critical Magento Flaw Could Let Hackers Execute PHP Code on E-Commerce Servers Security researchers warn that CVE-2026-103849, dubbed BlockStrap, could allow unauthenticated attackers to execute arbitrary PHP code on vulnerable Magento and Adobe Commerce servers.
  • 0
  • 0
  • 0
  • Last hour

CVE-2026-97229

Overview

  • GitLab
  • GitLab
13 Oct 2026
Published
14 Oct 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.55%
KEV

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

Statistics

  • 3 Posts
Last activity: Last hour

Fediverse

Profile picture fallback
The CyberSec Guru @guru

GitLab CVE-2026-97229: The CVSS 10.0 RCE Vulnerability Exposing 26,000+ CI/CD Pipelines to Attack

GitLab CVE-2026-97229 is a critical CVSS 10.0 RCE flaw in CI/CD regex compilation. Learn affected versions, exploit details, patches and detection

thecybersecguru.com/exploits/g

  • 0
  • 0
  • 0
  • 21h ago

Bluesky

Profile picture fallback
r1cksec @r1cksec.bsky.social
GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image github.com/jburgess-r7/... #infosec #cybersecurity #redteam #pentest
  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Rapid7 demonstrated command execution as GitLab’s git account via CVE-2026-97229. The exploit requires a malicious configuration and path in a public project; GitLab patched affected releases, and no in-the-wild exploitation was reported at disclosure.
  • 0
  • 0
  • 0
  • Last hour

CVE-2026-76519

Overview

  • Cisco
  • Cisco Secure Email
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
1.57%
KEV

Description

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

Statistics

  • 3 Posts
Last activity: 13 hours ago

Fediverse

Profile picture fallback
CyberNetsecIO @netsecio

📰 Cisco Secure Email Gateway Flaw Actively Exploited for Root Access

Cisco warns of a critical, actively exploited zero-day (CVE-2026-76519) in its Secure Email Gateway. The 9.8 CVSS flaw allows unauthenticated RCE with root access. Patch immediately—no workarounds exist. #CyberSecurity #Cisco #ZeroDay #RCE

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Geopolitical tensions rise: US-Ukraine ties fray over Starlink restrictions and Patriot missile shortages (Oct 16). Tech breakthrough: Microsoft unveils MAI-Base-2, a 2.8T parameter AI model with 12x DeepSeek gain (Oct 15). Cybersecurity critical: Chinese APT exploited BeyondTrust zero-day (CVE-2026-102764). Cisco warns of exploited Secure Email Gateway flaw (CVE-2026-76519).

#Cybersecurity #Geopolitics #AI

  • 0
  • 0
  • 0
  • 13h ago
Profile picture fallback
CyberNetsecIO @netsecio

📰 CISA Adds Four Actively Exploited Flaws to KEV Catalog

CISA adds 4 actively exploited vulnerabilities to its KEV catalog. Flaws in Palo Alto PAN-OS (CVE-2026-0322), Cisco SEG (CVE-2026-76519), & AhsayCBS (CVE-2026-105133/4) require immediate patching. #CISA #KEV #Vulnerability

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 22h ago

CVE-2026-104736

Overview

  • thimpress
  • LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
17 Oct 2026
Published
17 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
Pending
KEV

Description

The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not strip serialized object syntax, then stored in the LearnPress session table and later fed to LP_Helper::maybe_unserialize() → unserialize() (without an allowed_classes restriction) by LP_Session_Handler::get() on subsequent requests. This makes it possible for unauthenticated attackers to inject a PHP Object.

Statistics

  • 2 Posts
Last activity: 2 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-104736: LearnPress (≤4.4.10) has a CRITICAL PHP Object Injection flaw (CVSS 9.8) via 'checkout-email' — enables unauth RCE & system takeover. No patch yet; restrict AJAX checkout now. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 7h ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
Critical CVE-2026-104736 and CVE-2026-110653: Unauthenticated Flaws in LearnPress and LatePoint Threatening WordPress Deployments + Video Introduction: Recent threat intelligence highlights two critical, unauthenticated vulnerabilities affecting widely used WordPress plugins—LearnPress…
  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-110653

Overview

  • latepoint
  • Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
17 Oct 2026
Published
17 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.1)
EPSS
Pending
KEV

Description

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in the `verifyOTP` function: the counter is incremented using a stale in-memory value with no conditional `WHERE attempts < 10` guard on the `UPDATE` and no `SELECT ... FOR UPDATE` row lock, creating a TOCTOU window that allows concurrent requests to bypass the 10-attempt lockout. This makes it possible for unauthenticated attackers — who know a target customer's registered email address or phone number — to fire concurrent requests to the `auth__verify_otp` endpoint, defeat the lockout cap, brute-force the 6-digit OTP code, and authenticate as the targeted LatePoint customer, gaining full access to their account, bookings, and personal data. The nonce check present on the endpoint (`otp_verify_otp_nonce`) does not mitigate this issue, as the nonce is publicly emitted by the unauthenticated `request_otp` and `resend_otp` endpoints and is trivially obtainable by any unauthenticated attacker prior to launching the race.

Statistics

  • 2 Posts
Last activity: 2 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-110653 | CRITICAL flaw in LatePoint Appointment Booking Plugin (<=5.7.4) for WordPress: Race condition in OTP lets attackers bypass authentication & seize user accounts. Restrict OTP endpoints, monitor now. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 6h ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
Critical CVE-2026-104736 and CVE-2026-110653: Unauthenticated Flaws in LearnPress and LatePoint Threatening WordPress Deployments + Video Introduction: Recent threat intelligence highlights two critical, unauthenticated vulnerabilities affecting widely used WordPress plugins—LearnPress…
  • 0
  • 0
  • 0
  • 2h ago

CVE-2025-61624

Overview

  • Fortinet
  • FortiOS
14 Apr 2026
Published
17 Oct 2026
Updated
CVSS v3.1
MEDIUM (5.4)
EPSS
0.58%
KEV

Description

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Statistics

  • 3 Posts
  • 4 Interactions
Last activity: 16 hours ago

Fediverse

Profile picture fallback
@ssvc

Placeholder link cisa.gov/news-events/alerts/20

  • CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
  • CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability

  • 2
  • 2
  • 0
  • 18h ago
Profile picture fallback
@ssvc

This one slipped through the cracks this past Patch Tuesday because the CVE started with 2025: CVE-2025-61624 (5.4 medium) path traversal > aribtrary write/delete
fortiguard.fortinet.com/psirt/

Unit 42's blog post states it was exploited in the wild: unit42.paloaltonetworks.com/fo

The attackers exploited another vulnerability, CVE-2025-61624, via FortiOS auto-script path traversal. This exploit facilitated the deployment of PEERSTITCH, a novel, memory-resident ARM64 malware.

  • 0
  • 0
  • 0
  • 22h ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ CISA added Fortinet path traversal and BeyondTrust authentication bypass flaws to its KEV Catalog; prioritize remediation. - IOCs: CVE-2025-61624, CVE-2026-102764 - #CVE #KEV #ThreatIntel
  • 0
  • 0
  • 0
  • 16h ago

CVE-2026-89079

Overview

  • jfarthing84
  • Theme My Login
16 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
0.29%
KEV

Description

The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 17 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨 PoC published for a critical unauthenticated WordPress Theme My Login account takeover vulnerability; CVE-2026-89079

PoC: github.com/murrez/CVE-2026-890

The flaw affects WordPress multisite installations using Theme My Login with user-chosen registration passwords enabled. Under the required configuration, an unauthenticated attacker can abuse the lost-password flow to overwrite another user's password and take over the account.

CVSS: 9.8 Critical
Affected: Theme My Login ≤ 7.2.1
Fixed: Theme My Login ≥ 7.2.2

Exploitation is configuration-dependent and requires WordPress multisite with the tml_user_passwords network option enabled. The PoC includes target checking, verification, bulk scanning, and an exploit mode that validates successful account access.

  • 1
  • 1
  • 0
  • 17h ago
Showing 1 to 10 of 62 CVEs