So, hey gang...lest we start to forget we live in the stupidest timeline; #MSPaint has an #RCE vulnerability at an 8.1 CVSS. A patch dropped in mid October, but there were typos in release numbering that caused a lot of confusion, so people may or may not have the patch.

In English: Microsoft Paint has a remote code execution vulnerability known as CVE-2026-83844, which allows attackers to execute unauthorized code over a network through specially crafted image files. The vulnerability has a severity score of 8.1 out of 10.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

4
5
0
17h ago

Dark Web Informer :verified_paw: @DarkWebInformer

🚨 Critical Windows Paint vulnerability allows remote code execution without authentication, CVE-2026-83844

Microsoft has disclosed a high-severity vulnerability in Windows Paint that could allow unauthenticated attackers to execute malicious code remotely without user interaction.

Tracked as CVE-2026-83844, the flaw stems from an out-of-bounds read that could compromise the confidentiality, integrity, and availability of affected systems.

The vulnerability carries a CVSS score of 8.1 and affects Microsoft Paint versions earlier than 11.2605.91.0. Microsoft has released a security fix, and administrators are urged to ensure Paint is updated.

There are currently no confirmed reports of active exploitation.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

Telegram: https://t.me/SliceForLifeee

💥 Enterprise level intel, without the enterprise price tag. darkwebinformer.com/pricing

4
4
0
18h ago

Mark Newton @NewtonMark

Microsoft Paint has an RCE bug. https://www.cve.org/CVERecord?id=CVE-2026-83844

4
1
0
18h ago

manitu GmbH @team

Und jetzt haben wir Security endgültig durchgespielt.

Eine RCE. In MS PAINT.

https://www.cve.org/CVERecord?id=CVE-2026-83844

2
6
0
7h ago

Gea-Suan Lin @gslin

https://www.cve.org/CVERecord?id=CVE-2026-83844

小畫家 RCE，你ㄊㄇ的...

2
4
0
15h ago

Gauss :wlf: @Gauss

:neobot_this_is_fine:

https://www.cve.org/CVERecord?id=CVE-2026-83844

2
1
0
19h ago

Earthshine @earthshine

https://www.neowin.net/news/microsoft-paint-cve-2026-83844-lets-hackers-hack-windows-11-pcs-over-internet/ lmao fucking called it. Microsoft adds ai to ms paint, and now we have paint RCEs.

2
1
0
10h ago

Kyle Reddoch (CybersecKyle) @cyberseckyle

Microsoft Paint CVE-2026-83844 (RCE) needs a Microsoft Store app update, not just Windows cumulative updates. Microsoft lists 11.2609.401.0 as the fixed build, although older records show a different cutoff. Inventory Paint versions on managed Windows 11 endpoints and update from the Store or your app-management workflow. Microsoft reports no exploitation.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#Cybersecurity #Infosec #Windows #PatchManagement

2
0
0
1h ago

Chad :mstdn: @chad

Why the heck does MS Paint have a network listener??

https://www.cve.org/CVERecord?id=CVE-2026-83844

#SysAdmin #cyberSecurity

1
8
0
18h ago

Frank @derderwish

Wtf?

Remote Code Execution in fucking Paint?
Warum tut #Paint überhaupt was mit Netzwerk? 🫠

https://nvd.nist.gov/vuln/detail/cve-2026-83844

#cve #cve202683844 #microsoft #rce #cve_2026_83844

1
2
0
19h ago

Janik Besendorf @besendorf

Hilfe! Notfall alles kaputt!
https://www.cve.org/CVERecord?id=CVE-2026-83844

1
1
0
16h ago

VessOnSecurity @bontchev

The cybersecurity awareness month is over and it's not even April 1st yet but here you have it - an RCE in Microsoft Paint:

https://www.cve.org/CVERecord?id=CVE-2026-83844

1
1
0
9h ago

Osma A 🇫🇮🇺🇦 @osma

It sometimes is difficult to identify which moments are Peak Microsoft, but the company being unable to even communicate which software update fixes a now 3 weeks old remote code vulnerability disclosure probably qualifies.

Do keep in mind this is the company which recently decided to lay off a quarter of its engineers after record profits.
https://www.techzine.eu/news/security/145581/paint-vulnerability-allows-rce-patch-is-hard-to-find/
https://app.opencve.io/cve/CVE-2026-83844

1
1
0
Last hour

icco @icco

https://www.cve.org/CVERecord?id=CVE-2026-83844 Microsoft Paint was always the greatest data store. #security #cybersecurity

1
0
0
7h ago

Michal Špondr @michal

I Malování ve Windows může mít zranitelnost RCE. :-)
https://www.cve.org/CVERecord?id=CVE-2026-83844
#mspaint #RCE

0
4
0
8h ago

Jeff Triplett @webology

In 2026, we have CVEs for Microsoft Paint...

https://www.cve.org/CVERecord?id=CVE-2026-83844

0
2
0
19h ago

George Haritonidis @georgeharito

There’s a CVE for Microsoft Paint now: https://www.cve.org/CVERecord?id=CVE-2026-83844

0
2
0
17h ago

Ciarán (mc) @ciaranmak

MS paint has fallen 😂
https://www.cve.org/CVERecord?id=CVE-2026-83844

0
1
0
18h ago

Elias Mårtenson @loke

Wtf. I don't want to assume things since I haven't looked into the technical details. But I'm going to assume things about Microsoft. https://euvd.enisa.europa.eu/vulnerability/CVE-2026-83844

0
1
0
5h ago

snim2 @snim2

How did I miss this? Out of bounds read in MS Paint: https://www.cve.org/CVERecord?id=CVE-2026-83844

0
0
0
20h ago

github.com/ghostwriter @ghostwriter

🤦🏾‍♂️Windows Paint has a Remote Code Execution #Vulnerability

how would paint have a network-based exploit?

https://www.cve.org/CVERecord?id=CVE-2026-83844

#cve #rce #security #infosec

0
0
0
16h ago

sometree @sometree

well that was not on my bingo card
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844
seeming RCE in paint of all things

0
0
0
15h ago

DefectiveWings ✈️:verified: @DefectiveWings

Ok, #Microsoft, you've lost privileges for being on my network...again. Go sit in the corner and rethink your life.

#mspaint #rce #CVE_2026_83844

0
0
0
13h ago

Daily CyberSecurity @DailyCyberSecurity

Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.

#Microsoft #WindowsPaint #CVE202683844 #Cybersecurity #InfoSec

https://securityonline.info/windows-paint-rce-cve-2026-83844-fixed/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
13h ago

ekiledjian @edwardk

Microsoft Paint flaw lets hackers take control remotely

Microsoft has patched a high-severity vulnerability in Microsoft Paint, CVE-2026-83844, rated 8.1, that could allow unauthenticated attackers to execute code remotely over a network without user interaction or credentials, Cybernews reports. Microsoft rated the attack complexity high and exploitation less likely, and identified Paint build 11.2609.401.0 as the security update. https://cybernews.com/security/microsoft-paint-cve-2026-83844-windows-vulnerability/

0
0
0
6h ago

🛡️ #1 hacks.gr @hacksgr

A security update addressing CVE-2026-83844, an important remote code execution vulnerability in Windows Paint rated CVSS 8.1, is now available.

Microsoft delivers this fix exclusively via the Microsoft Store rather than standard Windows updates, updating systems to build 11.2609.401.0.

Because Paint installs separately per user account, researchers recommend verifying all local and provisioned user copies.

https://en.hacks.gr/nea-enimerosi-diorthonei-sovaro-provlima-asfaleias-sto-microsoft-paint/

#Windows #Microsoft #Paint #Patch

0
0
0
3h ago

Carlos Solís @csolisr

Most #ACE / #RCE demos on PC show they work by opening an innocent application on your computer, like the calculator. Now, imagine if the calculator itself could be used for RCE. With #MSPaint being now pwnable, it's not hard to assume it could happen. cve.org/CVERecord?id=CVE-2026-…

0
0
0
1h ago

Jeff Hall - PCIGuru :verified: @jbhall56

A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. https://thehackernews.com/2026/11/microsoft-paint-rce-fix-now-available.html

0
0
1
Last hour

Bluesky

rekdt @rekdt.com

cve-2026-83844: paint me like one of your french language packs

0
0
0
20h ago

Hacker News 20 @betterhn20.e-work.xyz

MS Paint Remote Code Execution Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83844 (https://news.ycombinator.com/item?id=50384233)

0
0
4
18h ago

HackerNewsTop5 @hackernewstop5.bsky.social

MS Paint Remote Code Execution Vulnerability #HackerNews https://www.cve.org/CVERecord?id=CVE-2026-83844

0
0
1
18h ago

ohhara @shiojiri.com

Windows11のペイントにリモートコード実行の脆弱性CVE-2026-83844。アップデートを | ニッチなPCゲーマーの環境構築Z https://www.nichepcgamer.com/archives/post-133732.html

0
0
0
13h ago

Abijita Foundation @abijita.bsky.social

Microsoft Paint Patch for CVE-2026-83844 Is Hard to Find Some Windows 11 PCs may still run an unpatched Paint build for CVE-2026-83844 despite Microsoft Store update checks.

0
0
0
9h ago

角征典／Masanori Kado @kdmsnr.com

🌐MSペイントのリモートコード実行の脆弱性 https://www.cve.org/CVERecord?id=CVE-2026-83844 via #HackerNews

0
0
0
7h ago

Information Security Briefly @infosecbriefly.bsky.social

Microsoft Store updates provide the CVE-2026-83844 fix for Windows Paint, with fixed build 11.2609.401.0 delivered only via Store updates.

0
0
0
3h ago

CVE-2026-123158

Overview

OpenBSD
OpenSSH

05 Nov 2026

Published

06 Nov 2026

Updated

CVSS v3.1

HIGH (8.1)

EPSS

0.98%

MITRE

KEV

Description

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.

Statistics

12 Posts
24 Interactions

Last activity: 3 hours ago

Fediverse

Matt "msw" Wilson @msw

RE: https://hachyderm.io/@damienmiller/117563026759098135

It's important to remember that OpenSSH is highly build-time configurable software. Only certain build configurations and system states present a real concern as an "emergent property" of this complex system.

For everyone else, it's a latent or "non-expressing" defect in source code.

#CVE #InfoSec #OpenSSH #sshole #cve_2026_123158

2
7
0
22h ago

Paul Novarese @pvn

I have had to give this flowchart to more than one person today dealing with CVE-2026-123158

0
0
0
19h ago

Bluesky

OpenSSHに認証バイパス脆弱性「*sshole（CVE-2026-123158）」 Alpine Linuxでパスワード不要のSSHログイン、root権限奪取のおそれ|セキュリティニュースのセキュリティ対策Lab https://rocket-boys.co.jp/security-measures-lab/openssh-sshhole-cve-2026-123158-alpine-authentication-bypass/

2
5
0
12h ago

IT-Connect @it-connect.bsky.social

🛑 Zoom sur la faille *sshole (CVE-2026-123158) Sur Alpine Linux, un compte sans mot de passe peut en accepter un. N'importe lequel, s'il est assez long. ⚠️ Retrouvez plus d'infos dans mon article : 👉 www.it-connect.fr/faille-opens... #cybersécurité #linux #ssh

2
2
0
7h ago

Spiegel's crawler @crawler.baldanders.info

＞ OpenSSHのパスワード認証回避の脆弱性 CVE-2026-123158 についてまとめてみた https://piyolog.hatenadiary.jp/entry/2026/11/06/120149

1
0
1
12h ago

セキュリティ対策Lab @securitylab-jp.bsky.social

OpenSSHに認証バイパス脆弱性「*sshole（CVE-2026-123158）」　Alpine Linuxでパスワード不要のSSHログイン、root権限奪取のおそれ rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース

0
1
0
17h ago

0xacb @0xacb.com

Just reproduced sshole (CVE-2026-123158), beautifully simple bug by @kultekin Needs password auth on and no PAM, but you can ssh as root into an unpatched Alpine box with any 257+ byte password. fix: openssh 10.6p2

0
0
0
23h ago

Information Security Briefly @infosecbriefly.bsky.social

OpenSSH emergency patches address SSHole (CVE-2026-123158), an authentication bypass enabling logins with very long passwords under specific musl+PAM-disabled conditions.

0
0
0
3h ago

Undercode Testing @undercode.bsky.social

OpenSSH Rushes Emergency Patches for ‘SSHole’ Authentication Bypass Vulnerability + Video Introduction: OpenSSH maintainers released emergency update 10.6p2 to remediate a critical authentication logic vulnerability tracked as CVE-2026-123158, colloquially dubbed "SSHole". The vulnerability arises…

0
0
0
3h ago

Help Net Security @helpnetsecurity.com

OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) 🔗 Read more: www.helpnetsecurity.com/2026/11/06/o... #vulnerability #exploit #cybersecurity

0
0
0
3h ago

SANS.edu Internet Storm Center @sansisc.bsky.social

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441) https://isc.sans.edu/podcastdetail/10168

1
1
0
14h ago

CVE-2026-98432

Overview

Linux
Linux

15 Oct 2026

Published

03 Nov 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.76%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Statistics

6 Posts
15 Interactions

Last activity: Last hour

Fediverse

Trankten :vf: :tkz: @trankten

Hola a todos.

Con el auge de la IA se están descubriendo y parcheando muchas vulnerabilidades que estaban presentes en drivers, kernel y demás durante años... para bien o para mal, son vulnerabilidades que hay que corregir lo antes posible.

Dicho esto, se van a parchear y actualizar algunos servidores de TKZ durante la próxima hora para parchear el CVE-2026-98432 en los servidores afectados.

Es posible que durante la próxima hora notéis alguna caida o degradación del servicio.

3
10
0
7h ago

Sebastian Damm @SebastianDamm

Ach guck an. Drei Wochen nach #Debian und 5 Tage nach #Redhat hat es auch #Ubuntu geschafft, den neuen Kernel mit dem Fix eines #CVE mit Score 9,8 zu releasen. Die eigene Webseite dazu weiß noch nix davon.
https://ubuntu.com/security/CVE-2026-98432

Was'n Saftladen!

#cve202698432 #cve_2026_98432

0
1
0
Last hour

Linus Gasser @ligasser

Interesting - Ubuntu still doesn't have an updated kernel in the stable distribution, only testing, but they give a "risk reduction" nftables configuration:

https://ubuntu.com/security/CVE-2026-98432

Well, there are still the -proposing repos:

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

0
0
0
5h ago

Daily CyberSecurity @DailyCyberSecurity

Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.

#Veeam #LinuxKernel #BackupSecurity #Cybersecurity #InfoSec

https://securityonline.info/veeam-software-appliance-cve-2026-98432-patched/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
Last hour

Dark Web Informer :verified_paw: @DarkWebInformer

🚨 Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Compromise Virtualization Hosts, CVE-2026-98432

Citrix has released emergency security updates for XenServer 8.4 and 9 after disclosing a critical vulnerability that could allow unauthenticated attackers with access to the management network to compromise virtualization hosts.

The vulnerability, tracked as CVE-2026-98432, also affects Workload Balancing and Conversion Manager appliances, raising concerns about attacks against infrastructure used to manage large numbers of virtual machines.

A second vulnerability, CVE-2026-102703, could allow a privileged attacker inside a guest virtual machine to compromise the underlying host, potentially breaking the security boundaries separating virtualized environments.

Citrix also addressed six additional vulnerabilities involving PXE boot and Secure Boot protections.

Security updates are now available for affected XenServer deployments and related management appliances. Administrators are urged to patch immediately and restrict management network access to trusted systems.

There are currently no confirmed reports of these vulnerabilities being exploited in the wild.

Source: https://support.citrix.com/external/article/CTX697256/xenserver-security-update-for-multiple-issues.html

0
1
0
23h ago

Bluesky

feedbot.unronritaro.net @feedbot.unronritaro.net

Ubuntu 27.04（tenacious）の開発：Rustのための環境整備、LXDのセキュリティ更新、CVE-2026-98432 | gihyo.jp

0
0
0
15h ago

CVE-2026-119977

Overview

WordPress Foundation
WordPress

31 Oct 2026

Published

04 Nov 2026

Updated

CVSS v3.1

HIGH (8.1)

EPSS

1.16%

MITRE

KEV

Description

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.

Statistics

3 Posts
1 Interaction

Last activity: 4 hours ago

Fediverse

Karen IT :verified: @karenit

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11051

A #high -severity #vulnerability has been identified in #WordPress Core that allows an unauthenticated remote attacker to achieve Remote Code Execution (#RCE ) during the core upgrade process. The vulnerability is tracked as CVE-2026-119977 and has been assigned a CVSS v3.1 score of 8.1 (High).

This issue is being actively exploited in the wild and was added to the CISA Known Exploited Vulnerabilities (KEV) catalog on 3 November 2026. Organizations and site owners running self-hosted WordPress installations are strongly advised to #update immediately.

https://ksrc.karenit.net/blog/security-alert/critical-remote-code-execution-during-wordpress-core-updates

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

0
1
0
21h ago

Bluesky

セキュリティ対策Lab @securitylab-jp.bsky.social

WordPressの認証不要RCE「CVE-2026-119977」が実際のサイバー攻撃で悪用　CISAがKEV登録、侵害調査も要求 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース

0
0
0
18h ago

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CISA KEV | CVE-2026-119977 | WordPress / WordPress Core CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1389

0
0
0
4h ago

CVE-2024-27834

Overview

Apple
Safari

13 May 2024

Published

05 Nov 2026

Updated

CVSS

Pending

EPSS

1.50%

MITRE

KEV

Description

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Statistics

4 Posts
1 Interaction

Last activity: 2 hours ago

Fediverse

tomcat @tomcat

🚨 Hackers are exploiting an Apple security flaw patched over two years ago.

CISA has added CVE-2024-27834 to its exploited vulnerabilities list following reports of attacks delivering information-stealing malware.

Here's what the attacks involve ↓ https://thehackernews.com/2026/11/hackers-exploit-patched-apple-flaw-to.html

0
1
0
20h ago

Michael I Ransier @thecybermind

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2024-27834 – Apple Multiple Products Improper Authentication Vulnerability

CISA has added the Apple WebKit pointer authentication flaw (CVE-2024-27834) to its KEV catalog, requiring urgent administrative validation and patching....

https://thecybermind.co/5l9k

0
0
1
2h ago

Bluesky

キタきつね @kitafox.bsky.social

Apple製品の脆弱性CVE-2024-27834の悪用確認、CISAがKEV登録 #SecurityNEXT (Nov 5) www.security-next.com/192378

0
0
0
15h ago

CVE-2026-116606

Overview

Barracuda Networks
Barracuda Email Security Gateway (ESG)

02 Nov 2026

Published

03 Nov 2026

Updated

CVSS v4.0

CRITICAL (9.3)

EPSS

0.73%

MITRE

KEV

Description

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.

Statistics

9 Posts
1 Interaction

Last activity: 1 hour ago

Fediverse

@ssvc

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

0
0
0
18h ago

🛡️ #1 hacks.gr @hacksgr

Security researchers have detailed an attack chain combining two vulnerabilities in Barracuda products.

CVE-2026-116606 is an auth bypass allowing unauthenticated configuration restore, while CVE-2026-111560 is a root-level command injection.

When chained, they allow unauthenticated command execution.

Barracuda released patches, including version 9.4.0.030 for the Email Security Gateway, and advisories recommend res…

https://en.hacks.gr/sovara-kena-asfaleias-apeiloyn-ta-systimata-email-tis-barracuda/

#Barracuda #Vulnerability #CommandInjection #Patch

0
0
0
8h ago

Bluesky

Abijita Foundation @abijita.bsky.social

Barracuda Says ESG Flaw Needs No Login Barracuda now says CVE-2026-116606 needs no login, but attackers must reach the ESG administrative interface; chained flaws can lead to root access.

0
0
0
1h ago

boredchilada @cyfar.ca

~Watchtowr~ Chained CVE-2026-116606 and CVE-2026-111560 in Barracuda Email Security Gateway allow unauthenticated root command execution; fixed in firmware 9.4.0.029. - IOCs: CVE-2026-116606, CVE-2026-111560 - #CommandInjection #RemoteCodeExecution #ThreatIntel #Vulnerability

0
1
0
12h ago

r/netsec bot @r-netsec.bsky.social

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) - watchTowr Labs

0
0
4
18h ago

CVE-2026-107441

Overview

Zyxel
GS1900-24E firmware

03 Nov 2026

Published

05 Nov 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

0.29%

MITRE

KEV

Description

An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

Statistics

4 Posts
3 Interactions

Last activity: 14 hours ago

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

🚨 Hackers exploited Zyxel zero-day to compromise nearly 1,000 network switches across 48 countries

A previously unknown vulnerability in Zyxel GS1900 switches, tracked as CVE-2026-107441, allowed attackers to execute commands remotely without authentication.

The attacks were initially blamed on an older, patched vulnerability, but researchers discovered that hackers were exploiting a separate zero-day, leaving even previously updated devices vulnerable.

The campaign compromised approximately 996 switches across 48 countries, with attackers stealing device configurations and credentials while deploying malicious tools. Zyxel has since released security updates.

Source: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026

0
1
0
22h ago

Bluesky

キタきつね @kitafox.bsky.social

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)（修正済みZyxelスイッチも別の悪用脆弱性にさらされていた） #HelpNetSecurity (Nov 5) www.helpnetsecurity.com/2026/11/05/z...

0
0
1
15h ago

SANS.edu Internet Storm Center @sansisc.bsky.social

1
1
0
14h ago

CVE-2026-31695

Overview

Linux
Linux

01 May 2026

Published

05 Aug 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

0.13%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv->lowerdev->dev)` for the virt_wifi net devices. However, unregistering a virt_wifi device in netdev_run_todo() can happen together with the device referenced by SET_NETDEV_DEV(). It can result in use-after-free during the ethtool operations performed on a virt_wifi device that is currently being unregistered. Such a net device can have the `dev.parent` field pointing to the freed memory, but ethnl_ops_begin() calls `pm_runtime_get_sync(dev->dev.parent)`. Let's remove SET_NETDEV_DEV for virt_wifi to avoid bugs like this: ================================================================== BUG: KASAN: slab-use-after-free in __pm_runtime_resume+0xe2/0xf0 Read of size 2 at addr ffff88810cfc46f8 by task pm/606 Call Trace: <TASK> dump_stack_lvl+0x4d/0x70 print_report+0x170/0x4f3 ? __pfx__raw_spin_lock_irqsave+0x10/0x10 kasan_report+0xda/0x110 ? __pm_runtime_resume+0xe2/0xf0 ? __pm_runtime_resume+0xe2/0xf0 __pm_runtime_resume+0xe2/0xf0 ethnl_ops_begin+0x49/0x270 ethnl_set_features+0x23c/0xab0 ? __pfx_ethnl_set_features+0x10/0x10 ? kvm_sched_clock_read+0x11/0x20 ? local_clock_noinstr+0xf/0xf0 ? local_clock+0x10/0x30 ? kasan_save_track+0x25/0x60 ? __kasan_kmalloc+0x7f/0x90 ? genl_family_rcv_msg_attrs_parse.isra.0+0x150/0x2c0 genl_family_rcv_msg_doit+0x1e7/0x2c0 ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 ? __pfx_cred_has_capability.isra.0+0x10/0x10 ? stack_trace_save+0x8e/0xc0 genl_rcv_msg+0x411/0x660 ? __pfx_genl_rcv_msg+0x10/0x10 ? __pfx_ethnl_set_features+0x10/0x10 netlink_rcv_skb+0x121/0x380 ? __pfx_genl_rcv_msg+0x10/0x10 ? __pfx_netlink_rcv_skb+0x10/0x10 ? __pfx_down_read+0x10/0x10 genl_rcv+0x23/0x30 netlink_unicast+0x60f/0x830 ? __pfx_netlink_unicast+0x10/0x10 ? __pfx___alloc_skb+0x10/0x10 netlink_sendmsg+0x6ea/0xbc0 ? __pfx_netlink_sendmsg+0x10/0x10 ? __futex_queue+0x10b/0x1f0 ____sys_sendmsg+0x7a2/0x950 ? copy_msghdr_from_user+0x26b/0x430 ? __pfx_____sys_sendmsg+0x10/0x10 ? __pfx_copy_msghdr_from_user+0x10/0x10 ___sys_sendmsg+0xf8/0x180 ? __pfx____sys_sendmsg+0x10/0x10 ? __pfx_futex_wait+0x10/0x10 ? fdget+0x2e4/0x4a0 __sys_sendmsg+0x11f/0x1c0 ? __pfx___sys_sendmsg+0x10/0x10 do_syscall_64+0xe2/0x570 ? exc_page_fault+0x66/0xb0 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> This fix may be combined with another one in the ethtool subsystem: https://lore.kernel.org/all/20260322075917.254874-1-alex.popov@linux.com/T/#u

Statistics

2 Posts
3 Interactions

Last activity: 23 hours ago

Fediverse

buherator @buherator

[RSS] Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via struct device

https://ptswarm.com/blog/dangerous-device-exploiting-cve-2026-31695-in-the-linux-kernel-via-struct-device/

2
0
0
23h ago

Bluesky

buherator @buherator.bsky.social

[RSS] Dangerous Device: Exploiting CVE-2026-31695 in the Linux Kernel via struct device ptswarm.com -> Original->

1
0
0
23h ago

CVE-2026-111560

Overview

Barracuda Networks
Barracuda Email Security Gateway (ESG)

02 Nov 2026

Published

03 Nov 2026

Updated

CVSS v4.0

HIGH (8.6)

EPSS

0.47%

MITRE

KEV

Description

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.

Statistics

8 Posts
1 Interaction

Last activity: 8 hours ago

Fediverse

@ssvc

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

0
0
0
18h ago

🛡️ #1 hacks.gr @hacksgr

Security researchers have detailed an attack chain combining two vulnerabilities in Barracuda products.

CVE-2026-116606 is an auth bypass allowing unauthenticated configuration restore, while CVE-2026-111560 is a root-level command injection.

When chained, they allow unauthenticated command execution.

Barracuda released patches, including version 9.4.0.030 for the Email Security Gateway, and advisories recommend res…

https://en.hacks.gr/sovara-kena-asfaleias-apeiloyn-ta-systimata-email-tis-barracuda/

#Barracuda #Vulnerability #CommandInjection #Patch

0
0
0
8h ago

Bluesky

boredchilada @cyfar.ca

0
1
0
12h ago

r/netsec bot @r-netsec.bsky.social

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) - watchTowr Labs

0
0
4
18h ago

CVE-2026-111497

Overview

Google
Brotli
github.com/google/brotli

22 Oct 2026

Published

06 Nov 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

82.64%

MITRE

KEV

Description

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Statistics

3 Posts

Last activity: 9 hours ago

Fediverse

ServerMO @ServerMO_Official

CRITICAL ADVISORY: Node.js October 2026 Security Release fixes Brotli CVE-2026-111497 & 9 other flaws.

Brotli is compiled directly into the binary; npm updates won't fix it. You must patch the runtime.

Our production SRE guide covers:
🔍 Vectors: Express 4 vs 5 & outbound fetch()
⚠️ PM2 & Systemd: Avoid hardcoded path traps
🐳 Playbook: Docker rebuilds & /proc auditing

https://www.servermo.com/howto/nodejs-brotli-rce-cve-2026-111497/

#NodeJS #DevOps #CyberSecurity #AppSec #Linux #SRE

0
0
0
9h ago

Bluesky

GCP Weekly @gcpweekly.bsky.social

Microgateway 3.3.12 Docker image is built on node:24.22.1-trixie-slim, which includes the Node.js fix for CVE-2026-111497. You must also upgrade the Node.js runtime on each host to one of the following versions, or to a later version in the same release line: Node.js release

0
0
0
14h ago

GCP Weekly @gcpweekly.bsky.social

CVE-2026-101910 CVE-2026-101911 CVE-2026-101912 CVE-2026-101913 CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 CVE-2026-109383 CVE-2026-109869 CVE-2026-109924 CVE-2026-109932 CVE-2026-110816 CVE-2026-111181 CVE-2026-111497 CVE-2026-111997 CVE-2026-115897 The Edge

0
0
0
14h ago

Showing 1 to 10 of 106 CVEs

Quick check

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky