Overview
Description
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Statistics
- 14 Posts
- 2 Interactions
Last activity: Last hour
Fediverse
CISA flags an actively exploited SharePoint vulnerability (CVE-2026-45659) enabling remote code execution. Patch SharePoint Server 2016 now.
#SharePoint #Microsoft #CVE202645659 #CISAKEV #RCE #ExploitedInTheWild #Vulnerability
Critical Alert: CVE-2026-45659 is actively exploited. If you are running Microsoft SharePoint, you need to audit your deserialization logic immediately. CISA has added this to the KEV catalog, and BOD 26-04 mandates action. I’ve just released the full forensic playbook for the SOC—detailing this
Read the full critical threat briefing here:
https://thecybermind.co/r8pt
#CyberSecurity #InfoSec #SharePoint #BOD2604 #TCM #StrategicArsenal
C-Suite Alert: CVE-2026-45659 is actively exploited. CISA BOD 26-04 mandates immediate action. Is your organization compliant? My executive briefing provides the risk assessment and strategic roadmap to secure your SharePoint assets and mitigate enterprise liability. https://thecybermind.co/x3h5
#Governance #InfoSec #SharePoint
Bluesky
Microsoft MSRC — CVE-2026-45659 vulnerability record:
msrc.microsoft.com/update-guide...
Microsoft Security Blog — MCP tool poisoning / AI agents:
www.microsoft.com/en-us/securi...
#CTI Brief for 2026-07-02:
CISA added Microsoft SharePoint Server CVE-2026-45659 to KEV with a July 4 due date. This is the action item: patch exposed/high-value SharePoint first, then assess for compromise.
#ThreatIntel #Cybersecurity
CISAが既知の悪用された脆弱性を1件カタログに追加
CISA Adds One Known Exploited Vulnerability to Catalog #CISA (Jul 1)
CVE-2026-45659 Microsoft SharePoint Serverにおける信頼できないデータの逆シリアル化の脆弱性
www.cisa.gov/news-events/...
CISA added CVE-2026-45659, a SharePoint Server remote code execution flaw, to the KEV catalog due to evidence of active exploitation.
The U.S. CISA has flagged a high-severity Microsoft SharePoint flaw, CVE-2026-45659, as actively exploited, demanding federal agency patches by July […]
CISA added CVE-2026-45659, a high-severity SharePoint Server RCE flaw, to its KEV catalog after active exploitation was found. Microsoft also tied related attacks to Storm-2603 and Warlock ransomware. #SharePoint #CISA #RCE
CISA added CVE-2026-45659 to KEV, urging agencies to patch within three days because authenticated attackers can execute arbitrary code on affected SharePoint servers.
⚠️ CVE-2026-45659 (CVSS 8.8, CISA KEV): deserialization flaw in Microsoft SharePoint letting an authenticated attacker with Site Member permissions run code remotely, no user interaction. Actively exploited. Affects SharePoint 2016, 2019 & Sub Edition. Query: technology="Microsoft SharePoint"
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation reconbee.com/sharepoint-r...
#sharepoint #RCE #CISA #KEV #cybersecurity #cyberattack
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation thehackernews.com/2026/07/shar...
Overview
Description
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
Statistics
- 7 Posts
- 7 Interactions
Last activity: Last hour
Fediverse
Citrix has patched a series of bugs this week, including another CitrixBleed-like vulnerability that can allow remote attackers to leak a device's memory and find goodies inside, such as auth or config data.
This impacts NetScaler ADC devices.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604
‼️ CVE-2026-8451: Citrix Netscaler overread Detection Artifact Generator Tool
GitHub: https://github.com/watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451
Full writeup: https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/
CVE-2026-8451 is a NetScaler ADC and NetScaler Gateway memory overread flaw caused by insufficient input validation, affecting appliances configured as a SAML Identity Provider.
The risk is sensitive memory disclosure, with researchers showing NetScaler can be tricked into returning process memory that should never leave the appliance.
Bluesky
CitrixBleed CVE-2026-8451 was exploited within 24 hours of disclosure, targeting NetScaler ADC and Gateway devices using SAML IDP. The XML parser flaw can leak memory without authentication. #Citrix #NetScaler #Germany
CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread
CVE-2026-8451)
labs.watchtowr.com/citrixbleed-...
Overview
Description
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.
Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.
Note: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.
Statistics
- 3 Posts
Last activity: 3 hours ago
Bluesky
CVE-2026-20230 in Cisco Unified CM/SME is actively exploited, enabling SSRF and potential root access; WebDialer-enabled appliances require patching to remediate.
Cisco confirma exploração ativa de vulnerabilidade nos sistemas Unified CM, com agentes maliciosos a explorar o problema identificado como CVE-2026-20230, que permite ataques de falsificação de pedidos do lado do servidor (SSRF). A confirmação surge semanas após a empresa ter disponibilizado as corr
Overview
Description
In the Linux kernel, the following vulnerability has been resolved:
drm: Set old handle to NULL before prime swap in change_handle
There was a potential race condition in change_handle. The ioctl
briefly had a single object with two idr entries; a concurrent
gem_close could delete the object and remove one of the handles
while leaving the other one dangling, which could subsequently
be dereferenced for a use-after-free.
To fix this, do the same dance that gem_close itself does.
(f6cd7daecff5 drm: Release driver references to handle before making it available again)
First idr_replace the old handle to NULL. Later, if the prime
operations are successful, actually close it.
create_tail required a similar dance to avoid a similar problem.
(bd46cece51a3 drm/gem: Fix race in drm_gem_handle_create_tail())
It idr_allocs the new handle with NULL, then swaps in the correct
object later to avoid races. We don't need to do that here, since
the only operations that could race are drm_prime, and
change_handle holds the prime lock for the entire duration.
v2: cleanups of error paths
Statistics
- 2 Posts
- 12 Interactions
Last activity: 16 hours ago
Fediverse
Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215):
Bluesky
Overview
Description
SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.
Statistics
- 2 Posts
- 6 Interactions
Last activity: 7 hours ago
Bluesky
SimpleHelp CVE-2026-48558 is now confirmed exploited-in-the-wild & on US CISA KEV
www.cisa.gov/known-exploi...
We are scanning for CVE-2026-48558 vulnerable instances since 2026-06-16. We see 439 unpatched (2026-07-01 scan)
Dashboard World Map view: dashboard.shadowserver.org/statistics/c...
Overview
- Apache Software Foundation
- Apache Tomcat
29 Jun 2026
Published
30 Jun 2026
Updated
CVSS
Pending
EPSS
0.25%
KEV
Description
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.
Users are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue.
Statistics
- 1 Post
- 1 Interaction
Last activity: 19 hours ago
Overview
Description
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Statistics
- 2 Posts
- 1 Interaction
Last activity: 3 hours ago
Fediverse
ShinyHunters e lo zero-day PeopleSoft: il regolatore assicurativo USA tra le 100+ vittime di UNC6240
Sfruttando CVE-2026-35273, una RCE non autenticata in Oracle PeopleSoft, il collettivo ShinyHunters/UNC6240 ha colpito oltre 100 organizzazioni prima ancora del rilascio della patch. Tra le vittime la NAIC, il regolatore assicurativo USA: 3,1 TB di dati esfiltrati e agenzie di rating in stallo.Overview
- JetBrains
- Hub
19 Jun 2026
Published
24 Jun 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.42%
KEV
Description
In JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
Statistics
- 1 Post
- 1 Interaction
Last activity: 16 hours ago
Fediverse
JetBrains patched a CVSS 10 authentication bypass and two more flaws (CVE-2026-50242). Its tools reach 15M developers. Update JetBrains Hub now.
#JetBrains #AuthenticationBypass #CVE202650242 #JetBrainsHub #GoLand
Overview
- Progress Software
- LoadMaster
04 Jun 2026
Published
01 Jul 2026
Updated
CVSS v3.1
CRITICAL (9.6)
EPSS
29.64%
KEV
Description
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints
Statistics
- 1 Post
- 1 Interaction
Last activity: 23 hours ago
Fediverse
Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release
Overview
- guardian
- language-system
01 Jul 2026
Published
01 Jul 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
0.37%
KEV
Description
Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private FROM files where id = '\".$_GET['id'].\"'. An authenticated attacker can perform error-based SQL injection to extract database contents.
Statistics
- 1 Post
Last activity: 4 hours ago