24h | 7d | 30d

CVE-2026-76519

Overview

  • Cisco
  • Cisco Secure Email
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
1.74%
KEV

Description

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

Statistics

  • 12 Posts
  • 21 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
CERT-Bund @certbund

Cisco gab am Abend des 14. Oktober bekannt, dass derzeit Angriffe auf sein Secure Email Gateway beobachtet werden. Demnach ermöglicht CVE-2026-76519 das Schreiben beliebiger Dateien sowie die Ausführung von Befehlen mit Root-Rechten auf dem zugrunde liegenden Betriebssystem (AsyncOS) - sofern bestimmte Konfigurationen vorliegen. Die Schwachstelle wird mit 9.8 von 10 als „kritisch“ bewertet.

IT-Sicherheitsverantwortliche sollten schnellstmöglich aktiv werden:
bsi.bund.de/SharedDocs/Cybersi

  • 10
  • 9
  • 0
  • 17h ago
Profile picture fallback
Günter Born @gborn

Nutzt wer #Cisco Secure Email Gateway (SEG)? Patchen

borncity.com/blog/2026/10/15/a

  • 1
  • 1
  • 0
  • 19h ago
Profile picture fallback
Trinacriatech @trinacriatech

Cisco Secure Email Gateway: CVE-2026-76519 (CVSS 9.8) sfruttata attivamente. Email con allegato crafted → file write e comandi come root, senza auth. Solo con File Reputation attivo e Content Scanner Tools < 25.3.0.5525.

Nessun workaround. Fix: Content Scanner Tools 25.3.0.5525 (no restart) o AsyncOS 15.5.5-014 / 16.5.0-780. Check: grep "System Security" system_logs su ogni nodo, poi log rete/firewall.

#cybersecurity #infosec sec.cloudapps.cisco.com/securi

  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
CERT.at @CERT_at

Neu Warnung:
Kritische Sicherheitslücke in Cisco Secure Email Gateway - aktiv ausgenutzt - Updates verfügbar - CVE-2026-76519 cert.at/de/warnungen/2026/10/k

  • 0
  • 0
  • 0
  • 20h ago
Profile picture fallback
Cybersecurity & cyberwarfare @cybersecurity
Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco Secure Email Gateway, tracked as CVE-2026-76519 with a CVSS score of 9.8. An attacker can exploit the flaw […]
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
  • 0
  • 0
  • 0
  • 20h ago
Profile picture fallback
Jeff Hall - PCIGuru :verified: @jbhall56

Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. bleepingcomputer.com/news/secu

  • 0
  • 0
  • 1
  • 16h ago

Bluesky

Profile picture fallback
Information Security Briefly @infosecbriefly.bsky.social
CVE-2026-76519 (CVSS 9.8) enables unauthenticated attackers to write arbitrary files via crafted email attachments when specific AMP and Content Scanner Tools conditions are met.
  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to write files and run commands as root. Customers should patch; CISA added the flaw to its KEV catalog.
  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Cisco says attackers are exploiting CVE-2026-76519 in certain Secure Email Gateway configurations to write files and potentially run commands as root. It urges customers to update Content Scanner Tools or install fixed AsyncOS releases.
  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
曖昧なイッヌ @aimainainnu.bsky.social
root権限取得を許すシスコ製品の深刻な脆弱性、ゼロデイ攻撃で悪用される：CVE-2026-76519 Codebook - マキナレコード ... マルウェア・ランサムウェア · ダークウェブ · 情報セキュリティ · 脆弱性 · セキュリティ認証 · 規程・ガイドライン · セキュリティ教育 · 組織体制 ... codebook.machinarecord.com/threatreport...
  • 0
  • 0
  • 0
  • 2h ago
Profile picture fallback
SANS.edu Internet Storm Center @sansisc.bsky.social
SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect Secure https://isc.sans.edu/podcastdetail/10140
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-99999

Overview

  • Linux
  • Linux
15 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
Pending
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Statistics

  • 7 Posts
  • 31 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
Jan Schaumann @jschauma

"PwnEscape" is the KVM escape for which rumors made the rounds a few days ago. Getting CVE-2026-99999 assigned is 👨🏻‍🍳💋.

pwn.ai/blog/pwnescape

Kernel patch for this part (because it sounds like there's multiple):
github.com/torvalds/linux/comm

  • 14
  • 12
  • 0
  • 11h ago
Profile picture fallback
hex @Hex

Oh... That's bad

app.opencve.io/cve/CVE-2026-99

  • 1
  • 1
  • 0
  • Last hour
Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Security researchers have disclosed PwnEscape (CVE-2026-99999), a vulnerability in the Linux kernel networking subsystem.

The flaw enables a virtual machine to access memory belonging to the host, with potential for system crashes or arbitrary code execution.

It was discovered by using AI-assisted analysis during a Vercel competition.

Patches are included in recent stable kernel releases, such as 5.10.272 and 6.12.113.

Syst…

en.hacks.gr/sovaro-keno-asfale

#Linux #Kernel #CVE_2026_99999 #PwnEscape

  • 0
  • 1
  • 0
  • 8h ago
Profile picture fallback
tomcat @tomcat

‼️ A newly disclosed critical Linux kernel flaw, PwnEscape (CVE-2026-99999), lets code inside guest VMs read host memory and enabled VM escape with root access in lab tests.

Read - thehackernews.com/2026/10/crit

Vercel confirmed the memory leak in its live production sandboxes during its $1 million security challenge.

The flaw lies in Linux networking, not the hypervisor, with implications beyond Vercel.

  • 0
  • 1
  • 0
  • 6h ago
Profile picture fallback
ekiledjian @edwardk

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical flaw in the Linux kernel’s networking code (CVE-2026-99999, nicknamed PwnEscape) lets code inside a virtual machine read host memory, crash the host, or run code on it, The Hacker News reports. The flaw was found through a Vercel security challenge and demonstrated against Vercel’s live cloud sandboxes; there is no sign it has been used in a real attack. thehackernews.com/2026/10/crit

  • 0
  • 0
  • 0
  • 7h ago

Bluesky

Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
CVE-2026-99999 lets code in a Linux guest VM read host memory. Researchers demonstrated the leak in Vercel production sandboxes; host crashes and code execution were shown only in a lab. A kernel fix is available, with no real-world exploitation reported.
  • 0
  • 1
  • 0
  • 5h ago
Profile picture fallback
Best of r/cybersecurity @cybersecurity.page
PwnEscape (CVE-2026-99999): a guest-to-host escape in the kernel's IPv4 fragmentation path, not KVM itself. Exploits can leak host memory in packets, crash the host, and a lab chain reached root. Patched kernels are rolling out; if you run untrusted guests, patch now.
  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-0322

Overview

  • Palo Alto Networks
  • Cloud NGFW
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v4.0
HIGH (8.6)
EPSS
1.08%
KEV

Description

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Statistics

  • 10 Posts
  • 2 Interactions
Last activity: 4 hours ago

Fediverse

Profile picture fallback
ekiledjian @edwardk

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS remote code execution zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. Customers are advised to apply the updates. bleepingcomputer.com/news/secu

  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
DragonJAR @dragonjar

En las últimas 24 horas, destacan avances en reconocimiento de voz con Grok Voice 3.0, nuevas amenazas como "lombrices" de IA que comprometen dispositivos domésticos, explotación crítica en Chrome creada con IA y vulnerabilidades activas en firewalls PAN-OS; mientras comunidades liberan datos de Cobalt Strike y Vercel refuerza su programa de recompensas tras detectar un zero-day en Linux. Descubre estos y más detalles en el siguiente listado de noticias sobre seguridad informática:

🗞️ ÚLTIMAS NOTICIAS EN SEGURIDAD INFORMÁTICA 🔒
====| 🔥 LO QUE DEBES SABER HOY 15/10/26 📆 |====

🚀 PRESENTACIÓN DE GROK VOICE 3.0: EL MODELO DE RECONOCIMIENTO DE VOZ MÁS INTELIGENTE

Grok Voice 3.0 revoluciona la atención al cliente con un sistema de reconocimiento de voz capaz de resolver llamadas en menos de un segundo. Además, su diseño eficiente reduce considerablemente los costos frente a otros modelos líderes, marcando un avance significativo para empresas que buscan mejorar la experiencia del usuario y la operatividad. Descubre cómo esta innovación puede transformar los servicios de voz en tu negocio. Más detalles aquí 👉 djar.co/J3NWb

🪱 SEÑALES DE VIDA PARA “LOMBRICES” DE IA EN DISPOSITIVOS DOMÉSTICOS

Anthropic ha identificado indicios preocupantes: “lombrices de IA” que podrían colonizar dispositivos domésticos, vulnerando la seguridad de nuestros hogares conectados. Esta investigación abre un debate crucial sobre las amenazas emergentes en el internet de las cosas y la necesidad de fortalecer las defensas frente a códigos inteligentes que se propagan de manera autónoma. Infórmate sobre estos riesgos y recomendaciones para proteger tus dispositivos. Lee más aquí 👉 djar.co/Y6yFm

💻 CADENA DE EXPLOTACIÓN EN CHROME DESARROLLADA CON IA VALORADA EN 250,000 DÓLARES

XBOW ha utilizado un modelo abierto de OpenAI para construir en apenas seis días una cadena completa de exploits en el navegador Chrome que facilita la ejecución remota de código en sistemas Windows. Esta hazaña resalta tanto el poder de las herramientas de IA para la seguridad ofensiva como la importancia crítica de mantener los sistemas actualizados. Google ya ha corregido las tres vulnerabilidades relacionadas. Conoce los detalles técnicos y cómo protegerte aquí 👉 djar.co/buCU

🔥 ALERTA DE VULNERABILIDAD RCE EN PAN-OS EXPLORADA EN ATAQUES REALES

Palo Alto Networks ha emitido parches urgentes para una vulnerabilidad de ejecución remota de código (CVE-2026-0322) detectada en su sistema operativo PAN-OS, utilizada activamente en campañas dirigidas contra firewalls. Esta amenaza de alta gravedad exige revisión inmediata para evitar compromisos críticos en la infraestructura. Descubre cómo actualizar tu sistema y mitigar este riesgo ahora mismo. Más información aquí 👉 djar.co/VXdS

📊 LIBERACIÓN DEL CORPUS COMPLETO DE BEACONS DE COBALT STRIKE PARA INVESTIGACIÓN

Fox-IT ha puesto a disposición la base de datos completa con 56,843 llamadas de beacon y sus configuraciones provenientes de Cobalt Strike, una herramienta común en ataques cibernéticos. Esta liberación masiva apoya a la comunidad de seguridad tanto en la defensa como en la ofensiva, facilitando análisis detallados para la detección temprana y respuesta frente a campañas maliciosas. Explora este recurso indispensable para profesionales de la ciberseguridad. Accede aquí 👉 djar.co/z5Ph

💰 RECOMPENSAS Y VULNERABILIDAD ZERO-DAY EN VERCEL: UN MILLÓN DE DÓLARES EN JUEGO

Vercel reveló un programa de recompensas que ha pagado 242,000 dólares tras 1,285 reportes, destacando la detección de una vulnerabilidad zero-day en entornos Linux. Aunque no hay indicios de robo de datos, esta situación enfatiza la importancia de la colaboración entre hackers éticos y empresas para blindar infraestructuras críticas. Entérate cómo Vercel gestiona la seguridad y el impacto de esta vulnerabilidad. Más detalles aquí 👉 djar.co/lU8Oh

  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Palo Alto Networks patched the PAN-OS CVE-2026-0322 zero-day vulnerability exploited in limited attacks to achieve root code execution on firewalls.

meterpreter.org/pan-os-cve-202

  • 0
  • 0
  • 0
  • 13h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CISA KEV | CVE-2026-0322 | Palo Alto Networks / PAN-OS CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1273
  • 1
  • 1
  • 0
  • 21h ago
Profile picture fallback
Information Security Briefly @infosecbriefly.bsky.social
CVE-2026-0322 is a high-severity PAN-OS management-interface RCE flaw enabling authenticated attackers to execute arbitrary root code on affected firewalls.
  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
Information Security Briefly @infosecbriefly.bsky.social
CVE-2026-0322 in PAN-OS enables remote code execution via the management interface and requires patches for affected Palo Alto Networks firewalls.
  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Palo Alto Networks patched CVE-2026-0322, an authenticated remote-code-execution flaw in PAN-OS management interfaces. Limited exploitation was observed; CISA added the vulnerability to its KEV catalog.
  • 0
  • 0
  • 0
  • 17h ago
Profile picture fallback
boredchilada @cyfar.ca
~Cybergcca~ Six advisories cover PAN-OS KEV exploitation, Drupal critical RCE, and updates for Juniper, n8n, Chrome, and HPE. - IOCs: CVE-2026-0322, SA-CORE-2026-014 - #CVE20260322 #CyberSecurity #ThreatIntel #Vulnerability
  • 0
  • 0
  • 0
  • 14h ago
Profile picture fallback
ripjyr.bsky.social @ripjyr.bsky.social
Paloaltoの脆弱性情報 「CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)」が公開されました。 → https://security.paloaltonetworks.com/CVE-2026-0322
  • 0
  • 0
  • 0
  • 11h ago
Profile picture fallback
SANS.edu Internet Storm Center @sansisc.bsky.social
SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect Secure https://isc.sans.edu/podcastdetail/10140
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-104935

Overview

  • Ivanti
  • Connect Secure
13 Oct 2026
Published
13 Oct 2026
Updated
CVSS v3.1
HIGH (8.6)
EPSS
25.98%
KEV

Description

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Statistics

  • 7 Posts
  • 8 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
Censys @censys

🚨 Rapid Response: Ivanti Connect Secure Authentication Bypass (CVE-2026-104935)

Ivanti confirms active exploitation of a high-severity (CVSS 8.6) authentication bypass vulnerability in Ivanti Connect Secure that allows unauthenticated attackers to execute arbitrary commands. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on October 13.

Censys currently observes 7,604 Internet-exposed hosts and 269,319 web properties running Ivanti Connect Secure, excluding honeypots. These are total product exposures, not confirmed vulnerable systems.

Full Censys ARC advisory, including affected versions, available patches, and remediation guidance: censys.com/advisory/cve-2026-1

  • 1
  • 2
  • 0
  • 15h ago

Bluesky

Profile picture fallback
Censys @censys.bsky.social
🚨 Rapid Response: Ivanti Connect Secure CVE-2026-104935 (CVSS 8.6) is actively exploited and on CISA's KEV list. Censys sees 7,604 exposed hosts and 269,319 web properties (not confirmed vulnerable). Censys ARC advisory: https://bit.ly/4jplTIr
  • 1
  • 2
  • 0
  • 15h ago
Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
Incident Radar | CISA Reports Active Exploitation of Ivanti Connect Secure Authentication Bypass CISA reports that threat actors are actively exploiting CVE-2026-104935, a zero-day authentication bypass… Source: CISA Cybersecurity Advisories Full analysis: https://t.me/aiutocomputerhelp_lab/1271
  • 0
  • 1
  • 0
  • 23h ago
Profile picture fallback
boredchilada @cyfar.ca
@talosintelligence.com CVE growth outpaced KEV, but patch debt and UAT-6275 espionage targeting CIS government and critical infrastructure remain urgent. - IOCs: UAT-6275, CVE-2026-104935 - #CyberEspionage #ThreatIntel #Vulnerabilities
  • 0
  • 1
  • 0
  • 10h ago
Profile picture fallback
PCI Guru @jbhall56.bsky.social
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on. www.darkreading.com/vulnerabilit...
  • 0
  • 0
  • 1
  • 16h ago
Profile picture fallback
LeMagIT @lemagit.bsky.social
Ivanti Connect Secure (CVE-2026-104935) : Attention au-delà du patch. Après l'attaque (logs effacés, secrets AD visés), la rotation des clés et l'analyse post-mortem sont cruciales. ⚠️ #Cybersécurité [lire]
  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-108097

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 4 Posts
  • 4 Interactions
Last activity: 1 hour ago

Fediverse

Profile picture fallback
ekiledjian @edwardk

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

Drupal has shipped fixes for a critical flaw in its core Field UI module (CVE-2026-108097) that could let an attacker run code on a site’s server, The Hacker News reports. The flaw cannot be reached through core alone, but several exploit paths exist through contributed modules, at least one requiring no login; fixes are in Drupal 11.4.10, 11.3.19 and 10.6.19. thehackernews.com/2026/10/drup

  • 2
  • 0
  • 0
  • 14h ago
Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Drupal has shipped fixes for a critical remote code execution vulnerability in its Field UI module, tracked as CVE-2026-108097.

The flaw cannot be reached through core alone, but requires contributed modules or custom code.

Over 150,000 reporting sites were on unsupported branches receiving no update.

Patches are available in versions 11.4.10, 11.3.19, and 10.6.19, with temporary mitigation options available for administrators una…

en.hacks.gr/epeigoyses-diortho

#Drupal #CVE2026108097 #PHP #WebDev

  • 1
  • 0
  • 0
  • 17h ago

Bluesky

Profile picture fallback
Bitnewsbot @bitnewsbot.bsky.social
Drupal core’s Field UI module contains a critical remote code execution vulnerability tracked as CVE-2026-108097, rated 19 out of 25 […]
  • 1
  • 0
  • 0
  • 16h ago
Profile picture fallback
Abijita Foundation @abijita.bsky.social
Drupal Fixes Critical RCE Vulnerability That Could Put Websites at Risk Drupal has patched CVE-2026-108097, a critical remote code execution vulnerability in Field UI that could expose websites through vulnerable contributed modules or custom code.
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-110447

Overview

  • Collabora
  • Collabora Online - Built-in CODE Server
  • richdocumentscode
14 Oct 2026
Published
14 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
1.22%
KEV

Description

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

Statistics

  • 5 Posts
  • 5 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
benzogaga33 :verified: @benzogaga33

Nextcloud : des serveurs piratés via une faille critique de l’application Collabora Built-in CODE it-connect.fr/nextcloud-collab #ActuCybersécurité #Cybersécurité #Vulnérabilité

  • 0
  • 1
  • 0
  • 14h ago

Bluesky

Profile picture fallback
BleepingComputer @bleepingcomputer.com
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.
  • 1
  • 3
  • 0
  • 9h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Attackers exploited CVE-2026-110447 in the built-in Nextcloud CODE app to run commands and plant web shells when its local server was down. Collabora fixed versions before 26.4.303; users must update or remove the app.
  • 0
  • 0
  • 0
  • 18h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Attackers are exploiting CVE-2026-110447 in Nextcloud’s optional built-in Collabora CODE app. Versions before 26.4.303 are affected; administrators should upgrade or remove the app. Some ransomware exploitation reports remain unconfirmed.
  • 0
  • 0
  • 0
  • 6h ago
Profile picture fallback
IT-Connect @it-connect.bsky.social
#Nextcloud : une faille critique dans l'application #Collabora Built-in CODE (CVE-2026-110447) est exploitée depuis le 10 septembre pour déposer des webshells. Désactiver l'application ne suffit pas. Comment vous protéger : www.it-connect.fr/nextcloud-co...
  • 0
  • 0
  • 0
  • Last hour

CVE-2026-94603

Overview

  • podman-container-tools
  • podman
13 Oct 2026
Published
13 Oct 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
0.92%
KEV

Description

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.

Statistics

  • 1 Post
  • 77 Interactions
Last activity: 3 hours ago

Bluesky

Profile picture fallback
Ian Coldwater 🧊🚫 @lookitup.baby
Critical vulnerability in podman: CVE-2026-94603 The `podman run` command can be instructed to disable almost all sandboxing by image annotation Images being pulled should be scanned for the io.podman.annotations.checkpoint.runtime.name annotation, and rejected if it is present.
  • 25
  • 52
  • 0
  • 3h ago

CVE-2026-92392

Overview

  • curl
  • curl
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS
Pending
EPSS
0.23%
KEV

Description

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

Statistics

  • 4 Posts
  • 2 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.

securityonline.info/curl-cve-2

  • 0
  • 0
  • 0
  • 16h ago
Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

The curl 8.23.0 release fixes critical vulnerability CVE-2026-92392, an HTTP/2 use-after-free flaw surfaced by Anthropic that permits remote code execution.

meterpreter.org/curl-8-23-0-cv

  • 0
  • 0
  • 0
  • 8h ago

Bluesky

Profile picture fallback
Spiegel's crawler @crawler.baldanders.info
＞ Ubuntu 26.04 その76 - CVE-2026-92392 含む curl の脆弱性22件修正・アップデートを https://kledgeb.blogspot.com/2026/10/ubuntu-2604-76-cve-2026-92392-curl-22.html
  • 1
  • 0
  • 0
  • 14h ago
Profile picture fallback
OpsMatters @opsmatters.com
The latest update for #Canonical includes "Canonical releases #Ubuntu 26.10 Stonking Stingray" and "Fixes available for CVE-2026-92392 and other curl vulnerabilities". #Cloud #OpenSource https://opsmtrs.com/2Wcir8A
  • 0
  • 1
  • 0
  • 3h ago

CVE-2026-96951

Overview

  • Microsoft
  • Outlook.com
13 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
1.51%
KEV

Description

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 3 Posts
  • 1 Interaction
Last activity: 7 hours ago

Fediverse

Profile picture fallback
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Geopolitically, an international operation disrupted a cybercrime network behind over a billion phishing messages targeting 75,000 organizations. In cybersecurity, Microsoft's October 2026 Patch Tuesday addressed a record 1,415 vulnerabilities, including an actively exploited Windows zero-day (CVE-2026-96951) and critical RCE flaws. Technology news includes Samsung's Future Wireless Summit, focusing on 6G and AI-native innovations.

#Cybersecurity #TechNews #AnonNews_irc

  • 1
  • 0
  • 0
  • 7h ago
Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

October 2026 Patch Tuesday sets a Microsoft record with 1,411 fixed flaws, including an exploited Windows Shell bug. See what to patch first.

dailytechnow.com/october-2026-

  • 0
  • 0
  • 0
  • 11h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CISA KEV | CVE-2026-96951 | Microsoft / Windows CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1272
  • 0
  • 0
  • 0
  • 22h ago

CVE-2025-8088

Overview

  • win.rar GmbH
  • WinRAR
08 Aug 2025
Published
11 Aug 2026
Updated
CVSS v4.0
HIGH (8.4)
EPSS
94.26%
KEV

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Statistics

  • 3 Posts
Last activity: 5 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Security researchers attribute a series of targeted attacks against government organizations in the CIS to the threat actor Silent Lynx.

The campaign, observed between June 2025 and August 2026, utilized four distinct infection chains leveraging macro documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives exploiting CVE-2025-8088 to deploy custom reverse shells like FoalShell, Chvost, Laplas, and P…

en.hacks.gr/omada-chaker-katas

#SilentLynx #Malware #PowerShell #WinRAR

  • 0
  • 0
  • 0
  • 11h ago

Bluesky

Profile picture fallback
Information Security Briefly @infosecbriefly.bsky.social
Silent Lynx targets CIS government organizations using macro documents, PS2EXE downloaders, GitHub PowerShell, and WinRAR CVE-2025-8088 archives to deploy reverse shells for remote access.
  • 0
  • 0
  • 0
  • 13h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
Researchers attribute attacks on government organizations across the CIS to Silent Lynx, describing phishing and other delivery methods, including crafted WinRAR archives exploiting CVE-2025-8088 to deploy custom reverse shells.
  • 0
  • 0
  • 0
  • 5h ago
Showing 1 to 10 of 89 CVEs