CVE-2026-1281

Overview

Ivanti
Endpoint Manager Mobile

29 Jan 2026

Published

30 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

19.39%

MITRE

KEV

Description

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Statistics

29 Posts
5 Interactions

Last activity: 3 hours ago

Fediverse

circl @circl

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

#ivanti #cybersecurity #vulnerabilitymanagement #vulnerability

https://vulnerability.circl.lu/vuln/CVE-2026-1281

0
0
0
21h ago

Anonymous :verified: @youranonnewsirc

Bluesky

CyberVeille @cyberveille-ch.bsky.social

📢 Ivanti alerte sur deux failles critiques EPMM exploitées en zero‑day (CVE‑2026‑1281/1340) 📝 Source: BleepingComputer — Ivanti a divulgué deu… https://cyberveille.ch/posts/2026-01-30-ivanti-alerte-sur-deux-failles-critiques-epmm-exploitees-en-zero-day-cve-2026-1281-1340/ #CVE_2026_1281 #Cyberveille

0
1
0
19h ago

Help Net Security @helpnetsecurity.com

Ivanti provides temporary patches for actively exploited EPMM zero-day (CVE-2026-1281) 📖 Read more: www.helpnetsecurity.com/2026/01/30/i... #cybersecurity #cybersecuritynews #endpointmanagement #patch

0
0
0
20h ago

ohhara @shiojiri.com

Ivanti、ゼロデイ攻撃で悪用されているEPMMの脆弱性について警告（CVE-2026-1281、CVE-2026-1340） | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/43679/

0
0
0
23h ago

Information Security Briefly @infosecbriefly.bsky.social

Two critical code-injection vulnerabilities (CVE-2026-1281 and CVE-2026-1340) enable unauthenticated remote code execution in Ivanti EPMM, exploited in zero-day attacks.

0
0
1
23h ago

ohhara @shiojiri.com

Ivanti Endpoint Manager Mobile（EPMM）の脆弱性（CVE-2026-1281、CVE-2026-1340）に関する注意喚起 https://www.jpcert.or.jp/at/2026/at260002.html

0
0
0
21h ago

Eyal Estrin ☁️ @eyalestrin.bsky.social

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) #patchmanagement

0
0
0
19h ago

/r/netsec @r-netsec-bot.bsky.social

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) - watchTowr Labs

0
0
3
11h ago

Rapid7 @rapid7.com

🚨 On 1/29/26, #Ivanti disclosed 2 new critical vulnerabilities affecting Endpoint Manager Mobile (EPMM): CVE-2026-1281 & CVE-2026-1340. The vendor has indicated that exploitation in the wild has already occurred prior to disclosure. More in our blog: r-7.co/4qZBsaH

0
0
0
11h ago

Kevin Poireault @leekthehack.bsky.social

🔓 𝗩𝘂𝗹𝗻𝗪𝗮𝘁𝗰𝗵 𝗙𝗿𝗶𝗱𝗮𝘆: 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟭𝟮𝟴𝟭 Ivanti announced emergency patches for two critical vulnerabilities, tracked as CVE-2026-1281 and CVE-2026-1340, in EPMM that have been exploited in the wild as zero-days.

0
0
0
11h ago

CyberHub @cyberhub.blog

📌 Expert Bash Exploitation Uncovered in Ivanti EPMM Pre-Auth RCE Vulnerabilities (CVE-2026-1281 & CVE-2026-1340) https://www.cyberhub.blog/article/18811-expert-bash-exploitation-uncovered-in-ivanti-epmm-pre-auth-rce-vulnerabilities-cve-2026-1281-cve-2026-1340

0
0
0
7h ago

Information Security Briefly @infosecbriefly.bsky.social

Ivanti patched two critical EPMM zero-day RCE vulnerabilities (CVE-2026-1281, CVE-2026-1340) that were being exploited in the wild.

0
0
0
6h ago

OpsMatters @opsmatters.com

The latest update for #ArcticWolf includes "CVE-2026-1281 and CVE-2026-1340: Unauthenticated RCE Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile" and "CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited". #cybersecurity #infosec https://opsmtrs.com/2ZFbaTl

0
0
0
3h ago

CVE-2026-1340

Overview

Ivanti
Endpoint Manager Mobile

29 Jan 2026

Published

30 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.16%

MITRE

KEV

Description

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Statistics

25 Posts
4 Interactions

Last activity: 3 hours ago

Fediverse

CERT-FR @cert_fr

⚠️ Alerte CERT-FR ⚠️

Les vulnérabilités critiques CVE-2026-1281 et CVE-2026-1340 affectant Ivanti Endpoint Manager Mobile sont activement exploitées dans le cadre d'attaques ciblées.
https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-001/

2
0
1
17h ago

Dark Web Informer :verified_paw: @DarkWebInformer

‼️ CVE-2026-1281 & CVE-2026-1340: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Zero-Day: Yes
CVSS: Both 9.8
CVE Published: January 29th, 2026
KEV Catalog: January 29th, 2026

Affected Vendor: Ivanti
Vulnerability Type: Remote Code Execution (RCE)

Advisory: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US

1
1
0
9h ago

Sam Stepanyan :verified: 🐘 @securestep9

#Ivanti: Two Ivanti EPMM #ZeroDay Unauthenticated #RCE Vulnerabilities CVE-2026-1281 & CVE-2026-1340 Actively Exploited, Patch Now!
👇
https://thehackernews.com/2026/01/two-ivanti-epmm-zero-day-rce-flaws.html

0
0
1
18h ago

ekiledjian @edwardk

Ivanti warns of two EPMM flaws exploited in zero-day attacks
https://www.bleepingcomputer.com/news/security/ivanti-warns-of-two-epmm-flaws-exploited-in-zero-day-attacks/
Ivanti has disclosed two critical vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-1281 and CVE-2026-1340, that have been exploited in zero-day attacks. Both are unauthenticated remote code execution flaws with a CVSS score of 9.8.
Ivanti confirmed a limited number of customers were impacted at the time of disclosure.
Successful exploitation could allow attackers to execute arbitrary code on vulnerable EPMM appliances and potentially access sensitive administrative, user and device data.
Mitigations are available via RPM scripts:
• RPM 12.x.0.x for EPMM 12.5.0.x, 12.6.0.x and 12.7.0.x
• RPM 12.x.1.x for EPMM 12.5.1.0 and 12.6.1.0
Ivanti states the updates require no downtime and have no functional impact. Organizations should apply the mitigations immediately.
CISA has added CVE-2026-1281 to its Known Exploited Vulnerabilities catalogue, reinforcing the urgency of remediation.

0
0
1
15h ago

ekiledjian @edwardk

Ivanti Provides Temporary Patches for Actively Exploited EPMM Zero-Day
https://www.helpnetsecurity.com/2026/01/30/ivanti-epmm-cve-2026-1281-cve-2026-1340/
Ivanti issued provisional patches for two critical EPMM vulnerabilities (including one exploited in the wild). Security teams should apply these immediately and plan for permanent updates in upcoming releases.

0
0
0
15h ago

TechNadu @technadu

Ivanti confirms active exploitation of EPMM zero-day RCE flaws (CVE-2026-1281, CVE-2026-1340).
Emergency patches released—apply immediately.

🔗 https://www.technadu.com/ivanti-epmm-zero-day-rce-flaws-actively-exploited-affecting-very-limited-number-of-customers/619369/

#ZeroDay #RCE #Ivanti #Infosec

0
0
0
15h ago

CyberNetsecIO @netsecio

📰 CRITICAL: Ivanti Patches Two Actively Exploited RCE Zero-Days in EPMM

🚨 CRITICAL UPDATE: Ivanti patches two actively exploited zero-day RCEs (CVE-2026-1281, CVE-2026-1340) in EPMM. Both are CVSS 9.8. Unauthenticated attackers can gain full control. Patch immediately! #Ivanti #ZeroDay #CyberSecurity #RCE

🔗 https://cyber.netsecops.io/articles/ivanti-patches-two-critical-actively-exploited-rce-flaws-in-epmm/?utm_source=mastodon&utm_medium=social&utm_campaign=twitter_auto

0
0
0
10h ago

schrotthaufen @schrotthaufen

Not sure I like that I didn’t need the explanation about variable expansion to understand wtf happened 😅

https://labs.watchtowr.com/someone-knows-bash-far-too-well-and-we-love-it-ivanti-epmm-pre-auth-rces-cve-2026-1281-cve-2026-1340/

0
0
0
8h ago

Bluesky

ohhara @shiojiri.com

Ivanti、ゼロデイ攻撃で悪用されているEPMMの脆弱性について警告（CVE-2026-1281、CVE-2026-1340） | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/43679/

0
0
0
23h ago

Information Security Briefly @infosecbriefly.bsky.social

Two critical code-injection vulnerabilities (CVE-2026-1281 and CVE-2026-1340) enable unauthenticated remote code execution in Ivanti EPMM, exploited in zero-day attacks.

0
0
1
23h ago

ohhara @shiojiri.com

Ivanti Endpoint Manager Mobile（EPMM）の脆弱性（CVE-2026-1281、CVE-2026-1340）に関する注意喚起 https://www.jpcert.or.jp/at/2026/at260002.html

0
0
0
21h ago

Eyal Estrin ☁️ @eyalestrin.bsky.social

Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) #patchmanagement

0
0
0
19h ago

/r/netsec @r-netsec-bot.bsky.social

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) - watchTowr Labs

0
0
3
11h ago

Rapid7 @rapid7.com

🚨 On 1/29/26, #Ivanti disclosed 2 new critical vulnerabilities affecting Endpoint Manager Mobile (EPMM): CVE-2026-1281 & CVE-2026-1340. The vendor has indicated that exploitation in the wild has already occurred prior to disclosure. More in our blog: r-7.co/4qZBsaH

0
0
0
11h ago

Kevin Poireault @leekthehack.bsky.social

🔓 𝗩𝘂𝗹𝗻𝗪𝗮𝘁𝗰𝗵 𝗙𝗿𝗶𝗱𝗮𝘆: 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟭𝟮𝟴𝟭 Ivanti announced emergency patches for two critical vulnerabilities, tracked as CVE-2026-1281 and CVE-2026-1340, in EPMM that have been exploited in the wild as zero-days.

0
0
0
11h ago

CyberHub @cyberhub.blog

📌 Expert Bash Exploitation Uncovered in Ivanti EPMM Pre-Auth RCE Vulnerabilities (CVE-2026-1281 & CVE-2026-1340) https://www.cyberhub.blog/article/18811-expert-bash-exploitation-uncovered-in-ivanti-epmm-pre-auth-rce-vulnerabilities-cve-2026-1281-cve-2026-1340

0
0
0
7h ago

Information Security Briefly @infosecbriefly.bsky.social

Ivanti patched two critical EPMM zero-day RCE vulnerabilities (CVE-2026-1281, CVE-2026-1340) that were being exploited in the wild.

0
0
0
6h ago

OpsMatters @opsmatters.com

The latest update for #ArcticWolf includes "CVE-2026-1281 and CVE-2026-1340: Unauthenticated RCE Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile" and "CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited". #cybersecurity #infosec https://opsmtrs.com/2ZFbaTl

0
0
0
3h ago

CVE-2025-8088

Overview

win.rar GmbH
WinRAR

08 Aug 2025

Published

21 Oct 2025

Updated

CVSS v4.0

HIGH (8.4)

EPSS

3.53%

MITRE

KEV

Description

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

Statistics

4 Posts
11 Interactions

Last activity: 9 hours ago

Fediverse

Christoph Schmees @PC_Fluesterer

Sicherheitsloch in WinRAR wird reichlich ausgenutzt

Da Windows früher nicht mit komprimierten Dateien umgehen konnte, musste man sich mit zusätzlichen Tools helfen. Eines von denen war und ist WinRAR. Das dürfte immer noch als Altlast auf vielen Windows-Rechnern herumliegen. Das ist gefährlich, wenn es nicht aktualisiert wurde. Im Juli 2025 wurde ein Update (auf Version 7.13) veröffentlicht, mit dem eine kritische Sicherheitslücke (CVE-2025-8088) geschlossen wird. Diese Sicherheitslücke wird allerseits für Angriffe ausgenutzt, vom kommerziell interessierten Cybergangster bis zu staatlichen Hackern. Für einen Angriff reicht es aus, WinRAR ein speziell präpariertes Archiv (komprimierte Datei) unterzuschieben. Ist es

https://www.pc-fluesterer.info/wordpress/2026/01/30/sicherheitsloch-in-winrar-wird-reichlich-ausgenutzt/

#Warnung #cybercrime #exploits #windows #wissen

5
5
0
17h ago

Bluesky

Kootek Consulting @kooteksec.bsky.social

NEW OUTBREAK ALERT: CVE-2025-8088 is a high-severity path traversal vulnerability in WinRAR that attackers exploit by leveraging Alternate Data Streams (ADS). #Explore our managed security and compliance solutions: kootek-consulting-ltd145108215.hubspotpagebuilder.eu

0
1
0
15h ago

ohhara @shiojiri.com

WinRARの脆弱性、ハッカーに悪用され続ける（CVE-2025-8088） | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/43660/

0
0
0
23h ago

CyberVeille @cyberveille-ch.bsky.social

📢 Exploitation massive de la faille WinRAR CVE-2025-8088 par des acteurs étatiques et criminels 📝 Source: Google Threat Intelligence Gro… https://cyberveille.ch/posts/2026-01-29-exploitation-massive-de-la-faille-winrar-cve-2025-8088-par-des-acteurs-etatiques-et-criminels/ #CVE_2025_8088 #Cyberveille

0
0
0
9h ago

CVE-2026-24061

Overview

GNU
Inetutils

21 Jan 2026

Published

29 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

33.90%

MITRE

KEV

Description

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

Statistics

2 Posts
1 Interaction

Last activity: 1 hour ago

Fediverse

BLACKVOID ⚫️ @blackvoid

New #synology #DSM Version: 7.3.2-86009 Update 1 is out.

This is a security patch:

Fixed Issues
- Fixed a security vulnerability regarding telnetd (CVE-2026-24061).

https://www.synology.com/en-global/releaseNote/DSM

#selfhosting #selfhosted #homelab

1
0
0
19h ago

Bluesky

CyberHub @cyberhub.blog

📌 Critical Vulnerability CVE-2026-24061 Discovered in GNU InetUtils Affecting Telnet Access https://www.cyberhub.blog/article/18826-critical-vulnerability-cve-2026-24061-discovered-in-gnu-inetutils-affecting-telnet-access

0
0
0
1h ago

CVE-2026-24858

Overview

Fortinet
FortiProxy

27 Jan 2026

Published

29 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.4)

EPSS

3.63%

MITRE

KEV

Description

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

Statistics

3 Posts
1 Interaction

Last activity: 3 hours ago

Bluesky

CyberVeille @cyberveille-ch.bsky.social

📢 Fortinet corrige le zero-day CVE-2026-24858 dans FortiCloud SSO exploité activement 📝 Selon Help Net Security, Fortinet a commencé à diffuser d… https://cyberveille.ch/posts/2026-01-30-fortinet-corrige-le-zero-day-cve-2026-24858-dans-forticloud-sso-exploite-activement/ #CVE_2026_24858 #Cyberveille

0
1
0
19h ago

OpsMatters @opsmatters.com

The latest update for #Foresiet includes "CVE-2026-24858: Fortinet Multiple Products Authentication Bypass Zero-Day Analysis" and "Emerging Ransomware Threat: Reverse Engineering the Green Blood Group Golang Payload". #cybersecurity #infosec https://opsmtrs.com/3J3CMGz

0
0
0
3h ago

OpsMatters @opsmatters.com

The latest update for #ArcticWolf includes "CVE-2026-1281 and CVE-2026-1340: Unauthenticated RCE Zero-Day Vulnerabilities in Ivanti Endpoint Manager Mobile" and "CVE-2026-24858: FortiCloud SSO Authentication Bypass Vulnerability Exploited". #cybersecurity #infosec https://opsmtrs.com/2ZFbaTl

0
0
0
3h ago

CVE-2026-1470

Overview

n8n

27 Jan 2026

Published

27 Jan 2026

Updated

CVSS v3.1

CRITICAL (9.9)

EPSS

0.31%

MITRE

KEV

Description

n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.

Statistics

2 Posts

Last activity: 12 hours ago

Bluesky

Calimeg @calimegai.bsky.social

Deux failles critiques dans n8n permettent l'exécution de code à distance via une injection eval (CVE-2026-1470, CVSS 9.9) pour utilisateurs authentifiés. Protégez vos workflows ! ⚠️ #n8n #CyberSecurity #Automatisation

0
0
0
21h ago

guardian360.bsky.social @guardian360.bsky.social

Researchers at JFrog who discovered the vulnerabilities assigned a critical severity score of 9.9 for one of them (CVE-2026-1470), and a high severity score of 8.5 to the second (CVE-2026-0863). www.darkreading.com/vulnerab...

0
0
0
12h ago

CVE-2026-0755

Overview

Gemini MCP Tool
gemini-mcp-tool

23 Jan 2026

Published

23 Jan 2026

Updated

CVSS v3.0

CRITICAL (9.8)

EPSS

1.27%

MITRE

KEV

Description

gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the execAsync method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27783.

Statistics

1 Post
4 Interactions

Last activity: 9 hours ago

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

‼️ CVE-2026-0755: Reported Zero-Day in Gemini MCP Tool Could Allow Remote Code Execution

Zero-Day: Yes
CVSS: 9.8
CVE Published: January 23rd, 2026

Affected Vendor: Gemini MCP Tool
Vulnerability Type: Remote Code Execution (RCE)

Advisory: https://github.com/advisories/GHSA-28qq-5f47-r5x2

2
2
0
9h ago

CVE-2022-37393

Overview

Synacor
Zimbra Server

16 Aug 2022

Published

17 Sep 2024

Updated

CVSS

Pending

EPSS

5.12%

MITRE

KEV

Description

Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.

Statistics

1 Post
4 Interactions

Last activity: 6 hours ago

Fediverse

Ron Bowes @iagox86

@Weld When I was at Rapid7, we were firm that we wouldn't sign anything preventing us from disclosing. Sometimes that made it real difficult to talk to the company

Sadly the link to the disclosure is dead now, but this was my favourite: https://attackerkb.com/topics/92AeLOE1M1/cve-2022-37393/rapid7-analysis

0
4
0
6h ago

CVE-2025-11001

Overview

7-Zip
7-Zip

19 Nov 2025

Published

21 Nov 2025

Updated

CVSS v3.0

HIGH (7.0)

EPSS

0.37%

MITRE

KEV

Description

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.

Statistics

1 Post

Last activity: 18 hours ago

Fediverse

Ruarí Ødegaard @ruario

@TeddyTheBest Yes it is open source but it is a little tough to claim the moral high ground here when 7-Zip also frequently has security issues and like WinRAR offers no autoupdate

https://nvd.nist.gov/vuln/detail/CVE-2025-11001

0
0
0
18h ago

CVE-2026-1686

Overview

Totolink
A3600R

30 Jan 2026

Published

30 Jan 2026

Updated

CVSS v4.0

HIGH (8.7)

EPSS

Pending

MITRE

KEV

Description

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Statistics

2 Posts

Last activity: 11 hours ago

Fediverse

TheHackerWire @thehackerwire

🟠 CVE-2026-1686 - High (8.8)

A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1686/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

0
0
1
11h ago