Overview
Description
Statistics
- 3 Posts
- 1 Interaction
Fediverse
This Ivanti Endpoint Manager Mobile (IPMM) security advisory seems to fit the timeline of the incident: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US
Bluesky
Overview
Description
Statistics
- 2 Posts
- 1 Interaction
Fediverse
‼️ CISA has added two vulnerabilities to the KEV Catalog
https://darkwebinformer.com/cisa-kev-catalog/
CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:
SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.
CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:
React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.
Overview
- Fortinet
- FortiOS
Description
Statistics
- 1 Post
- 5 Interactions
Fediverse
Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026.
CVE-2026-25815
"customers "are supposed to enable" a non-default option that eliminates the weakness. " -> disputed
Overview
- F5
- NGINX Open Source
Description
Statistics
- 1 Post
- 1 Interaction
Fediverse
nginx-1.28.2 stable and nginx-1.29.5 mainline versions have been released, with a fix for the SSL upstream injection vulnerability (CVE-2026-1642).
http://nginx.org/#2026-02-04
#nginx #security
Overview
Description
Statistics
- 1 Post
Overview
- sebastianbergmann
- phpunit
Description
Statistics
- 1 Post
Overview
- WatchGuard
- Fireware OS
Description
Statistics
- 2 Posts
Fediverse
#WatchGuard #Firebox LDAP Injection Schwachstelle #cve-2026-1498
Overview
- NixOS
- nixpkgs
Description
Statistics
- 1 Post
Overview
- Python Software Foundation
- CPython
Description
Statistics
- 1 Post
Overview
- neutrinolabs
- xrdp
Description
Statistics
- 1 Post