Mandiant documented active exploitation of CVE-2026-20245 (privilege escalation) chained with CVE-2026-20182 and CVE-2026-20127 (authentication bypass) against SD-WAN controllers. Attackers used rogue peering connections to establish...

https://captechgroup.com/threat-intelligence-center/attackers-hit-cisco-sd-wan-flaw-2-months-before-di-52a02f?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=attackers-hit-cisco-sd-wan-flaw-2-months-before-disclosure

Critical zero-day alert: Cisco CUCM WebDialer SSRF (CVE-2026-20230) allows unauthenticated remote root file-writes. We map out the Tomcat log baselines, JSP shell indicators, and edge isolation steps in our latest TSUITE Runbook. Protect your voice network: mike@thecybermind.co. #Infosec

Cisco unter Beschuss

Es ist alles nicht so schlimm wie es aussieht, es ist alles viel viel schlimmer. Nicht nur werden in schöner (?) Regelmäßigkeit gefährliche Sicherheitslücken in Cisco-Produkten gefunden, sondern sie werden auch sofort für Angriffe ausgenutzt - manche schon vor der Veröffentlichung (Zero-Day). Eine kleine Historie füge ich unten an. Beginnen wir mit CVE-2026-20230 (8,6 von 10), über die ich noch nicht explizit berichtet hatte. Am Anfang Juni hatte Cisco Flicken gegen diese Sicherheitslücke veröffentlicht. Damals vermeldete die Firma, dass ein PoC Exploit vorläge. Anscheinend haben unbekannte Hacker den PoC gleich in einen

https://www.pc-fluesterer.info/wordpress/2026/06/25/cisco-unter-beschuss/

#0day #backdoor #cybercrime #exploits #hersteller #politik #privacy #sicherheit #spionage #UnplugTrump #wissen #zeroday

For the Boardroom: A critical unauthenticated code injection flaw (CVE-2025-67038) in Lantronix EDS5000 servers is under active exploitation. Read the full C-SUITE threat advisory on mitigating this operational risk. Ping the word 'ok' mike@thecybermind.co to upgrade your intel. https://thecybermind.co/jpul
#CyberSec #RiskManagement

CISA warns of max-severity Ubiquiti flaws exploited in attacks
Source URL: https://www.bleepingcomputer.com/news/security/cisa-warns-of-max-severity-ubiquiti-flaws-exploited-in-attacks/
CISA added actively exploited vulnerabilities affecting Ubiquiti UniFi OS and Lantronix EDS5000 serial-to-Ethernet servers to its Known Exploited Vulnerabilities catalogue and, under BOD 26-04, directed U.S. federal agencies to apply available updates or vendor-recommended mitigations within three days. The Ubiquiti flaws include an access-control bypass, directory/path traversal and improper input validation that could enable command execution, with researchers showing the issues can be chained for full remote code execution on vulnerable UniFi OS devices. The Lantronix issue, CVE-2025-67038, is a critical root-level command-injection flaw in the HTTP RPC module, making urgent patching, exposure review and compensating controls appropriate for organizations running these products.

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-55200/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

！

SSH 爆 9.2 分漏洞 CVE-2026-55200，libssh2 遠端程式碼執行 RCE – CyberQ 賽博客 https://share.google/orU4BQysqx2yrbcIr

🌿 站点更新完成：Mastodon 4.6.2

服务器花园完成了一轮快速修整！Somincola Social 已从 Mastodon 4.6.0 更新至 4.6.2，目前运行正常。🐘

本次更新包括：
• 修复 Emoji、下拉菜单、高级界面、个人资料字段及 LDAP 登录等问题
• 更新 Docker 镜像中的 FFmpeg，修复严重安全漏洞 CVE-2026-8461
• 本站的 5000 字符上限继续保留
大家无需进行额外操作。Tangerine UI 目前宣布停更，暂时移出了服务器花园。希望它在花园外能继续茁壮成长

感谢大家的等待！辛勤的园艺师傅已经扫完落叶，联邦小路继续开放啦。🌿

#SomincolaSocial #Mastodon #站点更新

Since I'm not running docker, just upgraded FFMPEG to the latest version that has the https://nvd.nist.gov/vuln/detail/CVE-2026-8461 patch. No need to upgrade to 4.6.2 since that's only a fix for docker images.

#Sysadmin #Infosec #MastoAdmin am I reading correctly that Ubuntu is still triaging the lastest FFMPEG vulnerability and hasn't released a fix?

Running 24.04 LTS and I don't wanna get pwned

https://ubuntu.com/security/CVE-2026-8461

#ffmpeg

RE: https://social.coop/@cwebber/116810673204863384

Every once in a while, we observe flaws in media players that allow exploits to be delivered by video files. These files often get free passes in security gateways.

Fortunately, it doesn't work by default. BleepingComputer wrote:

the RCE exploit requires ASLR (Address Space Layout Randomization) to be disabled, and that CVE-2026-8461 alone does not bypass this memory protection.

In theory, a separate information-disclosure bug in FFmpeg's FlashSV decoder could be chained with PixelSmash to bypass ASLR.

CVE-2026-23879 - Critical RCE in Py7zr. Arbitrary file write via symbolic link chains allows escape from destination directory. CVSS 8.0. No patch available. Update or avoid extraction of untrusted 7z archives. #CVE #infosec #Python

https://www.valtersit.com/cve/CVE-2026-23879/

CVE-2026-1840 - Critical unauthorized access in Aclara Metrum Cellular Web Interface. No authentication on system functions. CVSS 7.5. Unpatched. Urgent action needed. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-1840/