24h | 7d | 30d

CVE-2026-99999

Overview

  • Linux
  • Linux
15 Oct 2026
Published
17 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
0.21%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Statistics

  • 4 Posts
  • 10 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
Who Let The Dogs Out 🐾 @ashed

15 октября появилась публичная информация о KVM escape и патчи ядра Linux. Авторы не предоставили публичный PoC опасаясь эксплуатации в дикой природе

А уже 17 октября был взломан FirstVDS.

Но с CVE-2026-99999 это не связано. У firstvds взлом произошёл через vmmanager 6. Там дырка, позволявшая через ссылку на iso передать ещё и команду, выполнявшуюся от root-а панелью.

Резюмируем, что с современным ИИ эксплуатация уязвимостей стала производиться гораздо быстрее.
Информации из анализа изменений достаточно для обнаружения ошибки и написания полноценного эксплоита в кратчайшие сроки.

#infosec #ai #kvm #vmmanager #hack #vulnerability

  • 1
  • 2
  • 0
  • Last hour
Profile picture fallback
nyan @nyanbinary

CVE-2026-99999 is just a beautiful summary of this entire year as it comes to vulnerability management.

  • 0
  • 5
  • 0
  • 15h ago
Profile picture fallback
ласточка61 @axaneco

"Aufgrund eines Sicherheitsrelevaten Kernelupdates müssen wir kurzfristig Wartungsarbeiten am Wirt Ihres vServers durchführen", ah ok. (Ich habe mal kurz recherchiert, das könnte der CVE-2026-99999 sein.)

  • 0
  • 1
  • 0
  • 10h ago

Bluesky

Profile picture fallback
IT-Connect @it-connect.bsky.social
PwnEscape (CVE-2026-99999) : une faille critique dans la pile réseau du noyau Linux permet, depuis une VM KVM, de lire la mémoire de l'hôte, de le planter, voire d'y exécuter du code root en labo. C'est l'hôte qu'il faut patcher : www.it-connect.fr/pwnescape-cv...
  • 0
  • 1
  • 0
  • 4h ago

CVE-2026-102764

Overview

  • BeyondTrust
  • Remote Support
15 Oct 2026
Published
17 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
1.18%
KEV

Description

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

Statistics

  • 2 Posts
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

2026-W42 — Weekly Threat Roundup

🔓 Chinese APT Armory Castle exploited a BeyondTrust zero-day (CVE-2026-102764) since August, deploying custom webshells and credential harvesters across remote support infrastructure.
🏭 A ConnectWise Cloud Backup supply-chain compromise granted attackers admin access to 173 Microsoft 365 tenants…

threatnoir.com/weekly/2026-w42

🤖 AI generated summary

  • 1
  • 0
  • 0
  • 16h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CISA KEV | CVE-2026-102764 | BeyondTrust / Remote Support CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1287
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-103849

Overview

  • Adobe
  • Adobe Commerce
13 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.78%
KEV

Description

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

Statistics

  • 2 Posts
Last activity: 4 hours ago

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: Critical BlockStrap flaw lets hackers run code on Magento servers

A critical RCE vulnerability (CVE-2026-103849, BlockStrap) in Magento and Adobe Commerce allows unauthenticated attackers to execute arbitrary PHP code on affected servers. The flaw impacts Adobe Commerce and Magento Open Source through 2.4.9 and Adobe Commerce B2B through 1.5.3. No active exploita…

threatnoir.com/focus

🤖 AI generated summary

  • 0
  • 0
  • 0
  • 9h ago

Bluesky

Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
  • 0
  • 0
  • 0
  • 4h ago

CVE-2023-20938

Overview

  • Android
28 Feb 2023
Published
02 Aug 2024
Updated
CVSS
Pending
EPSS
0.34%
KEV

Description

In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel

Statistics

  • 2 Posts
Last activity: 13 hours ago

Fediverse

Profile picture fallback
buherator @buherator
[RSS] Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging

https://www.eshard.com/blog/kernel-uaf-1-trigger
  • 0
  • 0
  • 0
  • 13h ago

Bluesky

Profile picture fallback
buherator @buherator.bsky.social
[RSS] Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging www.eshard.com -> Original->
  • 0
  • 0
  • 0
  • 13h ago

CVE-2025-29009

Overview

  • Webkul
  • Medical Prescription Attachment Plugin for WooCommerce
  • medical-prescription-attachment-plugin-for-woocommerce
16 Jul 2025
Published
28 Apr 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.62%
KEV

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Webkul Medical Prescription Attachment Plugin for WooCommerce medical-prescription-attachment-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Medical Prescription Attachment Plugin for WooCommerce: from n/a through <= 1.2.3.

Statistics

  • 1 Post
  • 3 Interactions
Last activity: 20 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

CVE-2025-29009: Medical Prescription Attachment Plugin for WooCommerce Unauthenticated Arbitrary File Upload

CVSS: 10

PoC: github.com/Nxploited/CVE-2025-

  • 1
  • 2
  • 0
  • 20h ago

CVE-2026-81376

Overview

  • Microsoft
  • Visual Studio Code
08 Sep 2026
Published
14 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.6)
EPSS
0.90%
KEV

Description

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty.

Write-up: samchen.blog/blog/vscode-neste

  • 1
  • 1
  • 0
  • 2h ago

CVE-2025-30156

Overview

  • ceph
  • ceph
27 Aug 2026
Published
01 Sep 2026
Updated
CVSS v3.1
HIGH (8.9)
EPSS
0.09%
KEV

Description

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message authentication, allowing an attacker to forge credentials and gain cluster-wide access. Because the ciphertext is malleable and the monitor will encrypt attacker-chosen entity names, an attacker holding one low-privilege key and able to observe CephX traffic can use the monitor as an encryption oracle and splice ciphertext blocks into valid tickets for privileged entities such as Manager, MDS, and OSD. The same lack of authentication also lets an attacker with CephX permissions escalate privileges by flipping a single bit in a service ticket to set its allow_all field to true. This issue is fixed in versions 20.2.4 and 19.2.6.

Statistics

  • 1 Post
  • 4 Interactions
Last activity: 23 hours ago

Fediverse

Profile picture fallback
Michael @mmeier

New blog post: blog.mei-home.net/posts/ceph-c

I mitigate a Ceph CVE and have to decommission one of my hosts because its CPU doesn't support Rocky Linux 10 anymore, due to packages there being build with a newer x86-64 instruction set.

#HomeLab #Ceph #blog

  • 0
  • 4
  • 0
  • 23h ago

CVE-2026-111998

Overview

  • vanus-labs
  • vanus
18 Oct 2026
Published
18 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
Pending
KEV

Description

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users, tokens, and role bindings, and read or publish events.

Statistics

  • 1 Post
Last activity: 7 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CRITICAL vuln (CVE-2026-111998) in vanus-labs vanus 0.8.0 – 0.9.0: hardcoded admin token lets remote attackers gain cluster-admin via gRPC proxy. Restrict port and monitor usage while awaiting patch. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 7h ago

CVE-2026-112005

Overview

  • clidey
  • whodb
18 Oct 2026
Published
18 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
Pending
KEV

Description

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use read_text, read_blob, COPY ... TO or ATTACH to steal session.key and stored database credentials or overwrite files.

Statistics

  • 1 Post
Last activity: 9 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-112005: CRITICAL path traversal in clidey whodb (0.104.0 – 0.134.9). Remote attackers can read/write host files via DuckDB queries — risk of credential theft & file overwrite. Update ASAP! radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 9h ago

CVE-2026-109786

Overview

  • fail2ban
  • fail2ban
13 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
0.31%
KEV

Description

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make fail2ban associate failed login attempts with an arbitrary source IP address and ban it (e.g., to block logins from a legitimate user). The default filter mode is affected.

Statistics

  • 1 Post
Last activity: 22 hours ago

Bluesky

Profile picture fallback
nixpkgs security changes @nixpkgssecuritychanges.gerbet.me
[Backport release-26.05] fail2ban: include fix for CVE-2026-109786 https://github.com/NixOS/nixpkgs/pull/575064 #security
  • 0
  • 0
  • 0
  • 22h ago
Showing 1 to 10 of 53 CVEs