24h | 7d | 30d

CVE-2026-31431

Overview

  • Linux
  • Linux
22 Apr 2026
Published
04 May 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
3.98%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Statistics

  • 23 Posts
  • 17 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉 @nemo

Heise berichtet: Die Linux-Lücke „Copy Fail“ (CVE-2026-31431) wird bereits aktiv ausgenutzt — lokaler Root-Zugriff. Admins sollten sofort verfügbare Kernel-Updates/Packages einspielen. Details & PoC: heise.de/news/Linux-Luecke-Cop 🔥🛡️🐧 #Linux #Security #CVE202631431

Edit/Korrektur: Laut @giggls
ist ein Container-Escape nicht möglich.

  • 3
  • 1
  • 0
  • 4h ago
Profile picture fallback
:awesome:🐦‍🔥nemo™🐦‍⬛ 🇺🇦🍉 @nemo

Security teams: "Copy Fail" (CVE-2026-31431) is now being exploited — a local→root Linux kernel LPE affecting many distros since 2017. Patches are available; update immediately. Details: heise.de/en/news/Linux-vulnera 🚨🛡️ #Linux #infosec #CVE202631431

  • 1
  • 1
  • 0
  • 4h ago
Profile picture fallback
benzogaga33 :verified: @benzogaga33

Copy.fail: a small Linux kernel bug with an unusually big blast radius jorijn.com/en/blog/copy-fail-c

  • 0
  • 1
  • 0
  • 7h ago
Profile picture fallback
funz @funz

@besendorf für Debian security-tracker.debian.org/tr

  • 0
  • 0
  • 0
  • 22h ago
Profile picture fallback
TrustedAlpaca @TrustedAlpaca

CVE-2026-31431, also known as CopyFail, is a Local Privilege Escalation (LPE) vulnerability in which an attacker can escalate an already compromised and authenticated standard user to root privileges, which are the highest privileges on the host. This vulnerability affects most popular Linux distributions, as well as many virtualized and hardware environments where Linux is present.

The vulnerability is present in the algif_aead module of the Linux kernel, which is responsible for hardware-accelerated cryptography. Canonical, the company behind Ubuntu, pushed out an update that disables the algif_aead module to mitigate the CopyFail vulnerability, however, Canonical notes that this mitigation will not be necessary once the kernel is updated.

Disabling the affected module should make applications fallback from hardware-accelerated cryptography to userspace cryptographic functions. However, because of the complexity and variation of configurations across many environments, it is recommended to test this mitigation in staging first, as some applications may not include or support userspace cryptographic functions. A reboot is also recommended to complete the mitigation, as some applications may require a reboot to trigger the fallback.

To protect systems running Ubuntu and Ubuntu-based distributions against this vulnerability, follow the steps below:

Open a terminal and type:

1. apt changelog kmod

This checks the changelog for the version of the kmod tool currently installed on your system and shows a list of changes, which will confirm whether the CopyFail vulnerability was mitigated. Check the top entry to confirm the mitigation, as shown in the attached screenshot, if the top entry mentions "* Disable loading of algif_aead module to mitigate CVE-2026-31431", you already have the update installed that mitigates the CopyFail vulnerability but if there is no mention of the CVE, continue with the steps below.

2. sudo apt-get update

This will update your package index files so you can install newly released updates.

3. sudo apt-get install --only-upgrade kmod

This command will upgrade only kmod, a tool used to configure kernel modules on Ubuntu, the new release contains the mitigation for your current kernel.

4. sudo reboot

This will reboot the operating system.

5. apt changelog kmod

Repeat the command from the first step to confirm whether the mitigation is in place. The top entry should now say "* Disable loading of algif_aead module to mitigate CVE-2026-31431".

  • 0
  • 0
  • 0
  • 14h ago
Profile picture fallback
ekiledjian @edwardk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-31431, a Linux root access bug also known as Copy Fail, to its Known Exploited Vulnerabilities catalog due to active exploitation. This privilege escalation flaw allows unprivileged local users to gain root access by corrupting the kernel's page cache, posing a significant risk to cloud and containerized environments.
thehackernews.com/2026/05/cisa

  • 0
  • 0
  • 0
  • 14h ago
Profile picture fallback
Carl :fedora: @carlt4

@clock

I don't know if this helps, but I don't see your kernel listed here: debiansupport.com/blog/copy-fa

Edit to add that I also have not seen any differentiation between arm and x86_64 vulnerabilities (in general, not just pi-related).

  • 0
  • 0
  • 0
  • 11h ago
Profile picture fallback
Carl :fedora: @carlt4

@clock whilst I was doom-scrolling, this popped up from a few hours ago. I kinda think you're ok since you're on 6.x.

explains.social/@veronica/stat

also:
security-tracker.debian.org/tr

  • 0
  • 0
  • 0
  • 9h ago
Profile picture fallback
Stefan Beyer @sbeyer

60 Sekunden Cyber KW18 2026, 27. April - 3. Mai:

Daten von Kunden und Benutzern von Vimeo werden von der Gruppierung ShinyHunters ins Dark Net gestellt, Sicherheitsforscher finden mit Copy Fail eine seit 2017 (!) bestehende Schwachstelle (CVE-2026-31431), mit der man root-Zugriff auf allen bekannteren Linux-Distributionen erhalten kann, das NGO noyb klagt gegen die Hamburger

60-sekunden-cyber.de/kw18-2026/

#cyber #cybersicherheit #itsicherheit #itsecurity #infosec #threatint #threatintel #news #update

  • 0
  • 0
  • 1
  • 5h ago
Profile picture fallback
Masayuki Hatta @mhatta

copy.fail (CVE-2026-31431): a small Linux kernel bug with an unusually big blast radius | Jorijn Schrijvershof jorijn.com/en/blog/copy-fail-c

  • 0
  • 0
  • 0
  • Last hour
Profile picture fallback
Dataplane.org @dataplane

The Internet Last Week

* Ubuntu/Canonical DDoS
status.canonical.com/#/inciden==
techcrunch.com/2026/05/01/ubun
* Linux copy.fail vulnerability
nvd.nist.gov/vuln/detail/CVE-2
xint.io/blog/copy-fail-linux-d
* GitHub availability
github.blog/news-insights/comp
githubstatus.com/incidents/ql9
githubstatus.com/incidents/dby
githubstatus.com/incidents/vq1
* cPanel/WHM vulnerability
nvd.nist.gov/vuln/detail/CVE-2
support.cpanel.net/hc/en-us/ar
censys.com/blog/the-cpanel-sit

#Ubuntu #Linux #GitHub #cPanel #WHM #Outages #DDoS

  • 2
  • 2
  • 0
  • 20h ago

Bluesky

Profile picture fallback
OpsMatters @opsmatters.com
The latest update for #Mendit includes "PhantomRaven Wave 5: New Undocumented NPM #SupplyChain Campaign Targets DeFi, #Cloud, and AI Developers" and "CVE-2026-31431 (Copy Fail): #Linux Kernel LPE". #CyberSecurity #DevOps #OpenSource #Compliance https://opsmtrs.com/3zEYo7d
  • 0
  • 3
  • 0
  • 9h ago
Profile picture fallback
Ninja Owl @ninjaowl.ai
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...
  • 0
  • 2
  • 0
  • 15h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
WSL2+Docker環境における、CVE-2026-31431 (Copy Fail) への対策メモ https://zenn.dev/user_thebigslee/articles/41b570658f911b
  • 0
  • 1
  • 0
  • 7h ago
Profile picture fallback
CySecurity News @cysecuritynews.bsky.social
CISA Highlights CVE-2026-31431 as an Active Linux Root Exploitation Risk #CISAKEVcatalog #ContainerSecurityRisk #CVE202631431
  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 CVE-2026-31431 (Copy.Fail) : workaround eBPF pour une LPE via AF_ALG socket Linux 📝 ## 🔍 Contexte Publié le 3 mai 2026 sur GitHub (dépôt `wgnet/wg.copyfail.… https://cyberveille.ch/posts/2026-05-03-cve-2026-31431-copy-fail-workaround-ebpf-pour-une-lpe-via-af-alg-socket-linux/ #AF_ALG #Cyberveille
  • 0
  • 0
  • 0
  • 18h ago
Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 CopyFail (CVE-2026-31431) : élévation de privilèges critique affectant quasiment tous les noyaux Linux 📝 ## 🗓️ Contexte Publié le 30 avri… https://cyberveille.ch/posts/2026-05-03-copyfail-cve-2026-31431-elevation-de-privileges-critique-affectant-quasiment-tous-les-noyaux-linux/ #CI_CD #Cyberveille
  • 0
  • 0
  • 0
  • 18h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
CVE-2026-31431: The 732-Byte Script That Renders All Linux Kernel Defenses Since 2017 Obsolete + Video Introduction: A recently disclosed local privilege escalation (LPE) vulnerability identified as CVE-2026-31431 and codenamed "Copy Fail" has sent shockwaves through the cybersecurity community.…
  • 0
  • 0
  • 0
  • 16h ago
Profile picture fallback
曖昧ナ犬 @aimainainnu.bsky.social
「Copy Fail」Linux バグ：732バイトのスクリプトで2017年以降のほぼすべてのディストリビューションにて root 権限の取得が可能に - BigGo ニュース Linux カーネルにおける「Copy Fail」と命名された CVE-2026-31431 という深刻な論理ベースの脆弱性は、オープンソースおよびクラウドコンピューティングの ... biggo.jp/news/2026050...
  • 0
  • 0
  • 0
  • 10h ago
Profile picture fallback
ReconBee @reconbee.bsky.social
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV reconbee.com/cisa-adds-ac... #CISA #linuxrootaccess #CVE #Linuxroot #cyberattack
  • 0
  • 0
  • 0
  • 6h ago
Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
CVE-2026-31431：我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程 - CVE-2026-31431: I used DeepSeek to reproduce the entire process of AI detecting Copy Fail privilege escalation.
  • 0
  • 0
  • 0
  • 4h ago
Profile picture fallback
Cybersecurity News Everyday @hendryadrian.bsky.social
CISA reports active exploitation of "Copy Fail" Linux kernel flaw (CVE-2026-31431) allowing local users to gain root access. Federal agencies must patch by May 15 under BOD 22-01. #LinuxKernel #RootAccess #USA
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-41940

Overview

  • WebPros
  • cPanel
29 Apr 2026
Published
01 May 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
28.36%
KEV

Description

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Statistics

  • 14 Posts
  • 15 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
N_{Dario Fadda} @nuke

CVE-2026-41940: il bug CRLF di cPanel che ha consegnato 44.000 server al ransomware “Sorry”
#CyberSecurity
insicurezzadigitale.com/cve-20

  • 4
  • 0
  • 0
  • 19h ago
Profile picture fallback
N_{Dario Fadda} @nuke

APT Campaign Exploits cPanel CVE-2026-41940 to Breach Government and Military Servers Across South-East Asia
#CyberSecurity
securebulletin.com/apt-campaig

  • 4
  • 0
  • 0
  • 19h ago
Profile picture fallback
(in)sicurezza digitale @blog

CVE-2026-41940: il bug CRLF di cPanel che ha consegnato 44.000 server al ransomware “Sorry”

Una vulnerabilità critica CVSS 9.8 nel pannello di controllo hosting più diffuso al mondo — sfruttata in silenzio per mesi prima della patch — ha permesso a un gruppo criminale di compromettere oltre 44.000 server e distribuire il ransomware “Sorry”. La tecnica: un’iniezione CRLF nel daemon di autenticazione di cPanel che consente accesso root senza credenziali.

insicurezzadigitale.com/cve-20

  • 0
  • 0
  • 1
  • 21h ago
Profile picture fallback
TechNadu @technadu

cPanel zero-day active:
40K+ servers hit
CVE-2026-41940
→ auth bypass
→ admin access
Patch immediately.

Source: securityweek.com/over-40000-se

Follow @technadu

  • 0
  • 0
  • 0
  • Last hour
Profile picture fallback
Dataplane.org @dataplane

The Internet Last Week

* Ubuntu/Canonical DDoS
status.canonical.com/#/inciden==
techcrunch.com/2026/05/01/ubun
* Linux copy.fail vulnerability
nvd.nist.gov/vuln/detail/CVE-2
xint.io/blog/copy-fail-linux-d
* GitHub availability
github.blog/news-insights/comp
githubstatus.com/incidents/ql9
githubstatus.com/incidents/dby
githubstatus.com/incidents/vq1
* cPanel/WHM vulnerability
nvd.nist.gov/vuln/detail/CVE-2
support.cpanel.net/hc/en-us/ar
censys.com/blog/the-cpanel-sit

#Ubuntu #Linux #GitHub #cPanel #WHM #Outages #DDoS

  • 2
  • 2
  • 0
  • 20h ago

Bluesky

Profile picture fallback
Sergiu Gatlan @serghei.bsky.social
A critical cPanel authentication bypass vulnerability (CVE-2026-41940) is being exploited in widespread "Sorry" ransomware attacks days after the release of an emergency update. www.bleepingcomputer.com/news/securit...
  • 0
  • 2
  • 0
  • 4h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
CVE-2026-41940: CRLF Injection Opens 70 Million cPanel Hosts to Complete Takeover + Video Introduction: A maximum-severity vulnerability tracked as CVE-2026-41940 (CVSS 10.0) is currently being exploited in the wild, compromising thousands of servers hosting an estimated 70 million domains. The…
  • 0
  • 1
  • 0
  • 15h ago
Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 CVE-2026-41940 : faille critique cPanel exploitée avant patch, ransomware signalé 📝 ## 🗞️ Contexte Article publié le 1er mai 2026 par *The Register*… https://cyberveille.ch/posts/2026-05-03-cve-2026-41940-faille-critique-cpanel-exploitee-avant-patch-ransomware-signale/ #CVE_2026_41940 #Cyberveille
  • 0
  • 0
  • 0
  • 18h ago
Profile picture fallback
IT-Connect @it-connect.bsky.social
⚠️ Ransomware Sorry Les instances cPanel sont actuellement ciblées. Les pirates exploitent la faille critique CVE-2026-41940 pour ensuite chiffrer les fichiers du serveur Linux avec le ransomware Sorry. Plus d'infos 👇 - www.it-connect.fr/linux-les-do... #linux #cpanel #ransomware
  • 0
  • 0
  • 0
  • 6h ago
Profile picture fallback
N_{Dario Fadda} @nuke86.rfeed.it
CVE-2026-41940: Il Bug CRLF di cPanel che ha Consegnato 44.000 Server al Ransomware “Sorry” il blog: insicurezzadigitale.com/cve-2026-419... #cybersecurity #infosec #ransomware #zeroday
  • 0
  • 0
  • 0
  • 5h ago
Profile picture fallback
Information Security Briefly @infosecbriefly.bsky.social
Over 40,000 servers have been compromised due to a critical cPanel zero-day vulnerability, CVE-2026-41940, allowing unauthorized administrative access.
  • 0
  • 0
  • 0
  • 4h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
cPanel Under Siege: CVE-2026-41940’s Perfect Storm – Unauthenticated Root Takeover via a Simple CRLF Injection + Video Introduction A critical authentication bypass vulnerability, identified as CVE-2026-41940 and carrying a near‑max CVSS score of 9.8, has been actively exploited since at least 23…
  • 0
  • 0
  • 0
  • 1h ago
Profile picture fallback
OpsMatters @opsmatters.com
The latest update for #CyCognito includes "Emerging Threat: (CVE-2026-41940) cPanel & WHM Authentication Bypass via CRLF Injection" and "Emerging Threat: (CVE-2026-3854) #GitHub Enterprise Server RCE via Git Push Injection". #cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X
  • 0
  • 0
  • 0
  • 9h ago

CVE-2026-42511

Overview

  • FreeBSD
  • FreeBSD
30 Apr 2026
Published
01 May 2026
Updated
CVSS
Pending
EPSS
0.04%
KEV

Description

The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by dhclient, e.g., after a system restart, an attacker-controlled field from the lease is passed to dhclient-script(8), which evaluates it. A rogue DHCP server may be able to execute arbirary code as root on a system running dhclient.

Statistics

  • 2 Posts
  • 4 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
N_{Dario Fadda} @nuke

FreeBSD DHCP Client Flaw CVE-2026-42511 Allows Root Code Execution via Rogue DHCP Server
#CyberSecurity
securebulletin.com/freebsd-dhc

  • 4
  • 0
  • 0
  • 2h ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
CVE-2026-42511: Critical FreeBSD DHCP Flaw Grants Attackers Root Access – Patch Now! + Video Introduction: The Dynamic Host Configuration Protocol (DHCP) automates IP address assignment on networks, but a newly disclosed vulnerability in FreeBSD’s default IPv4 DHCP client (dhclient) flips this…
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-32202

Overview

  • Microsoft
  • Windows 10 Version 1607
14 Apr 2026
Published
30 Apr 2026
Updated
CVSS v3.1
MEDIUM (4.3)
EPSS
7.19%
KEV

Description

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Statistics

  • 2 Posts
  • 1 Interaction
Last activity: 6 hours ago

Fediverse

Profile picture fallback
buherator @buherator
[RSS] A Shortcut to Coercion: Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202

https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-32202
  • 1
  • 0
  • 0
  • 6h ago

Bluesky

Profile picture fallback
buherator @buherator.bsky.social
[RSS] A Shortcut to Coercion: Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202 www.akamai.com -> Original->
  • 0
  • 0
  • 0
  • 6h ago

CVE-2026-4747

Overview

  • FreeBSD
  • FreeBSD
26 Mar 2026
Published
02 Apr 2026
Updated
CVSS
Pending
EPSS
0.09%
KEV

Description

Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notably, this does not require the client to authenticate itself first. As kgssapi.ko's RPCSEC_GSS implementation is vulnerable, remote code execution in the kernel is possible by an authenticated user that is able to send packets to the kernel's NFS server while kgssapi.ko is loaded into the kernel. In userspace, applications which have librpcgss_sec loaded and run an RPC server are vulnerable to remote code execution from any client able to send it packets. We are not aware of any such applications in the FreeBSD base system.

Statistics

  • 3 Posts
  • 1 Interaction
Last activity: Last hour

Fediverse

Profile picture fallback
AllAboutSecurity @allaboutsecurity

CHERI-Speichersicherheit reduziert LLM-gefundene FreeBSD-Schwachstelle CVE-2026-4747

all-about-security.de/cheri-sp

#llm #Freebsd

  • 1
  • 0
  • 1
  • Last hour

Bluesky

Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 CVE-2026-4747 : CHERI neutralise un stack buffer overflow dans FreeBSD découvert par LLM 📝 📅 **Source et contexte** : Article publié le 28 avril 2026… https://cyberveille.ch/posts/2026-05-03-cve-2026-4747-cheri-neutralise-un-stack-buffer-overflow-dans-freebsd-decouvert-par-llm/ #CHERI #Cyberveille
  • 0
  • 0
  • 0
  • 19h ago

CVE-2026-42369

Overview

  • GeoVision Inc.
  • GV-VMS V20.0.2
04 May 2026
Published
04 May 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
Pending
KEV

Description

GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but it is also possible to enable remote access via the "WebCam Server" feature. Once enabled, it is possible to access to the management and monitoring feature via a regular Web interface. This webersever is another native application, compiled without ASLR, which makes exploitation much easier and more likely. Most of the features require authentication before being reachable and leverage a standard login page to grant access. However the `gvapi` endpoint uses its own authentication mechanism via an `HTTP Authorization` header. It supports both `Basic` authentication and the `Digest` modes of authentication.   #### Stack-overflow via unbound copy of base64 decoded string The `b64decoder` string is sized dynamically, but it is then copied to the `Buffer` stack variable one character at the time at [0], and there's no bound-check. As such, if the decoded string is bigger than 256 characters (the size of the `Buffer` variable) then a stack overflow occurs. Because the data can be fully controlled by an attacker and lack of ASLR, this vulnerability can easily be exploited to gain full code execution as SYSTEM on the machine running the service.

Statistics

  • 2 Posts
Last activity: 4 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

🚨 CVE-2026-42369 (CRITICAL, CVSS 10): GeoVision GV-VMS V20.0.2 stack overflow in gvapi endpoint lets unauthenticated remote attackers execute code as SYSTEM. Restrict remote access, monitor for patches. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 7h ago

Bluesky

Profile picture fallback
BaseFortify.eu @basefortify.bsky.social
🚨 Critical flaw in CVE-2026-42369 affects GeoVision GV-VMS V20 (CVSS 10.0). Unauthenticated attackers can gain full SYSTEM access via the WebCam Server. 🔗 basefortify.eu/cve_reports/... #CVE #CyberSecurity #GeoVision
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-42368

Overview

  • GeoVision Inc.
  • GV-LPC2011/LPC2211
04 May 2026
Published
04 May 2026
Updated
CVSS v3.1
CRITICAL (9.9)
EPSS
Pending
KEV

Description

A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can visit a webpage to trigger this vulnerability.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 2 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

🌐 CVE-2026-42368 | CRITICAL privilege escalation in GeoVision GV-LPC2011/LPC2211 v1.10. Remote attackers can gain full control via crafted HTTP requests. No patch — restrict web interface access & monitor traffic. Details: radar.offseq.com/threat/cve-20

  • 1
  • 0
  • 0
  • 2h ago

CVE-2026-29200

Overview

  • WebPros
  • Comet Backup
04 May 2026
Published
04 May 2026
Updated
CVSS v4.0
CRITICAL (9.9)
EPSS
Pending
KEV

Description

A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call.

Statistics

  • 1 Post
Last activity: 5 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

🚨 CVE-2026-29200: CRITICAL IDOR in WebPros Comet Backup (20.11.0 – 26.1.1, 26.2.1) lets tenant admins impersonate any end user on the server. No patch yet — restrict admin access and monitor for suspicious cross-tenant activity. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-7712

Overview

  • MindsDB
03 May 2026
Published
03 May 2026
Updated
CVSS v4.0
MEDIUM (5.3)
EPSS
Pending
KEV

Description

A security vulnerability has been detected in MindsDB up to 26.01. Affected is the function pickle.loads of the component Pickle Handler. The manipulation leads to deserialization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Statistics

  • 1 Post
Last activity: 13 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

⚠️ CVE-2026-7712: MEDIUM severity deserialization vuln in MindsDB ≤26.01 (pickle.loads). Public exploit available, remote attack possible. No vendor response yet. Check your exposure. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-7719

Overview

  • Totolink
  • WA300
04 May 2026
Published
04 May 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
Pending
KEV

Description

A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The affected element is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument http_host results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Statistics

  • 1 Post
Last activity: 10 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

Totolink WA300 (5.2cu.7112_B20190227) faces a CRITICAL buffer overflow (CVE-2026-7719) via http_host in /cgi-bin/cstecgi.cgi. Public exploit out, no patch yet. Limit exposure, monitor closely. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 10h ago
Showing 1 to 10 of 24 CVEs