24h | 7d | 30d

CVE-2025-62861

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 3 Posts
  • 2 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Update to version 30.0 now to fix three Bitcoin Core vulnerabilities, including CVE-2025-62861, CVE-2025-62860, and CVE-2025-62859 affecting nodes.

securityonline.info/bitcoin-co

  • 0
  • 0
  • 0
  • 14h ago

Bluesky

Profile picture fallback
Poster | Crypto News @cryptonews-poster.bsky.social
Bitcoin Core vulnerability (CVE-2025-62861) patched! Affects versions 28.0-28.2 & 29.0-29.1. Flaw in TRUC logic could block node block creation. Fix released in v30.0 & backported. Discovered by Niklas Goegge. Security maintained! #Bitcoin #Security
  • 0
  • 1
  • 0
  • 10h ago
Profile picture fallback
Blockchain Report @blockchainreport.bsky.social
Bitcoin Core critical vulnerability (CVE-2025-62861) affecting miners patched. Affected versions (28.x, 29.x) had mempool issues during chain reorgs, causing block template validation failures. Miners had to restart nodes. Resolved in v30.0+ (Oct 2025). Affected versions are EOL.
  • 0
  • 1
  • 0
  • 9h ago

CVE-2026-83844

Overview

  • Microsoft
  • Microsoft Paint
13 Oct 2026
Published
10 Nov 2026
Updated
CVSS v3.1
HIGH (7.0)
EPSS
0.38%
KEV

Description

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.

Statistics

  • 2 Posts
  • 3 Interactions
Last activity: 7 hours ago

Fediverse

Profile picture fallback
Marcel Waldvogel @marcel

5️⃣ Für einige Lacher im Netz hat letzte Woche die Meldung gesorgt, dass Windows Paint eine Lücke enthält, welche die Ausführung beliebigen Software-Codes enthält. Aber auch wenn das in der Tat auf den ersten Blick unwahrscheinlich scheint: Schlussendlich besteht bei jeder Software, welche das Laden von Daten (bzw. in diesem Fall Bildern) erlaubt, das Risiko, dass die Laderoutinen Fehler enthalten und so angreifbar sind.
cve.org/CVERecord?id=CVE-2026-

  • 0
  • 2
  • 0
  • 16h ago
Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

The Microsoft Paint vulnerability CVE-2026-83844 is fixed only in Paint 11.2609.401.0. Learn how to check your version and update from the Store.

dailytechnow.com/microsoft-pai

  • 0
  • 1
  • 0
  • 7h ago

CVE-2026-108186

Overview

  • Zoom Communications
  • Zoom Workplace
10 Nov 2026
Published
11 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.6)
EPSS
Pending
KEV

Description

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Statistics

  • 3 Posts
Last activity: 11 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Zoom Workplace for Windows 7.1.8 fixes CVE-2026-108186 (CVSS 9.6) and CVE-2026-108187, two escalation of privilege flaws. Update now.

securityonline.info/zoom-workp

  • 0
  • 0
  • 0
  • 20h ago

Bluesky

Profile picture fallback
ripjyr.bsky.social @ripjyr.bsky.social
Zoomに、Criticalの脆弱性情報 ZSB-26023 が公開されました。 「CVE-2026-108186 : Zoom Workplace for Windows - Improper Input Validation」 CVSSv3: 9.6 →　https://www.zoom.com/en/trust/security-bulletin/ZSB-26023/
  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
セキュリティ対策Lab @securitylab-jp.bsky.social
Zoom Workplace Windows版に重大な脆弱性、CVSS 9.6の権限昇格　7.1.8以降への更新を推奨-CVE-2026-108186/CVE-2026-108187 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
  • 0
  • 0
  • 0
  • 11h ago

CVE-2026-126170

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 2 Posts
Last activity: 11 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Fortinet fixes eight critical vulnerabilities, including FortiManager RCE CVE-2026-126170 (CVSS 9.8). Fortinet critical vulnerabilities also hit FortiOS.

securityonline.info/fortinet-c

  • 0
  • 0
  • 0
  • 14h ago

Bluesky

Profile picture fallback
セキュリティ対策Lab @securitylab-jp.bsky.social
Fortinet、FortiOS・FortiManagerなどに重大な脆弱性　CVE-2026-126170はCVSS 9.8、未認証でコード実行の恐れ rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
  • 0
  • 0
  • 0
  • 11h ago

CVE-2026-78287

Overview

  • Staggs
  • STAGGS
  • staggs
11 Nov 2026
Published
11 Nov 2026
Updated
CVSS v3.1
CRITICAL (10.0)
EPSS
Pending
KEV

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.

Statistics

  • 2 Posts
Last activity: Last hour

Fediverse

Profile picture fallback
OffSequence @offseq

CRITICAL: CVE-2026-78287 allows remote code execution in Staggs STAGGS (versions <3.4.0) via code injection. No privileges or user interaction required. Upgrade to 3.4.0+ to secure your systems. Details: radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • Last hour

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CVE Radar | CVE-2026-78287 | CVSS 10.0 Critical STAGGS Code Injection Vulnerability CVE-2026-78287 describes an Improper Control of Generation of Code vulnerability in the STAGGS plugin for WordPress. Full analysis: https://t.me/aiutocomputerhelp_lab/1413
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-125742

Overview

  • 7-Zip
  • 7-Zip
10 Nov 2026
Published
10 Nov 2026
Updated
CVSS v4.0
HIGH (8.5)
EPSS
Pending
KEV

Description

7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.

Statistics

  • 1 Post
  • 15 Interactions
Last activity: 23 hours ago

Fediverse

Profile picture fallback
:rainbowCrow: @cR0w

7-Zip code exec.

nvd.nist.gov/vuln/detail/cve-2

sev:HIGH 8.5 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.

  • 8
  • 7
  • 0
  • 23h ago

CVE-2026-118383

Overview

  • MongoDB
  • MongoDB Server
10 Nov 2026
Published
10 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.5)
EPSS
Pending
KEV

Description

A use-after-free in the replication component of MongoDB Server can occur when a newly elected replica set primary completes catch-up. The condition can be caused by requests that do not require authentication, and may result in the server terminating unexpectedly or, under certain conditions, arbitrary code execution in the context of the server process. Replica set members are affected, including the shard and config server replica set members of sharded clusters; standalone mongod instances are not.

Statistics

  • 2 Posts
Last activity: 5 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Update MongoDB Server to 9.0.7 now to fix CVE-2026-118383, CVE-2026-120808, and 24 other flaws causing code execution, memory leaks, and crashes.

securityonline.info/mongodb-se

  • 0
  • 0
  • 0
  • 10h ago

Bluesky

Profile picture fallback
キタきつね @kitafox.bsky.social
MongoDB Server 9.0.7 では、CVE-2026-118383 のUse-After-Free 脆弱性が修正されています。 #SecurityOnline (Nov 11) securityonline.info/mongodb-serv...
  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-113408

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 4 Posts
  • 23 Interactions
Last activity: 5 hours ago

Fediverse

Profile picture fallback
Veit Schiele @veit

Update Git! Version 2.56.1 patches several security vulnerabilities, including CVE-2026-111760: Code execution during recursive clones and CVE-2026-113408: Path traversal through a server’s advertised HEAD
github.blog/open-source/git/gi
#Git #ITSec #DevOps

  • 7
  • 4
  • 1
  • 5h ago
Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Git has released security updates for version 2.56.1 and the 2.50 through 2.55 series, addressing multiple vulnerabilities.

The primary issue, CVE-2026-111760, allowed code execution via malicious repositories during recursive cloning due to a flaw in handling extremely large file paths that could overwrite system files.

Five additional vulnerabilities were patched: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-202…

en.hacks.gr/krisimi-enimerosi-

#Git #OpenSource #Developers #Vulnerability

  • 1
  • 1
  • 0
  • 16h ago
Profile picture fallback
Harry Sintonen @harrysintonen

vulnerabilities announced:

- CVE-2026-111760: Code execution during recursive clones
- CVE-2026-113408: Path traversal through a server’s advertised HEAD
- CVE-2026-114467: Stack corruption when removing signatures
- CVE-2026-114469: Out-of-bounds reads when applying binary patches
- CVE-2026-105437: Heap corruption during large merges
- CVE-2026-114466: Filesystem access through fast-import streams

github.blog/open-source/git/gi

  • 5
  • 5
  • 0
  • 16h ago

CVE-2026-116606

Overview

  • Barracuda Networks
  • Barracuda Email Security Gateway (ESG)
02 Nov 2026
Published
11 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
1.60%
KEV

Description

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.

Statistics

  • 3 Posts
  • 2 Interactions
Last activity: 3 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨 Hackers actively exploiting Barracuda email gateway flaws to gain root access without authentication

Barracuda has confirmed that attackers are actively exploiting two vulnerabilities in its Email Security Gateway (ESG) appliances, with a small number of organizations already compromised.

The flaws, CVE-2026-116606 (CVSS 9.3) and CVE-2026-111560 (CVSS 8.6), can be chained together to bypass authentication and execute commands with root privileges, potentially giving attackers complete control of affected devices.

Exploitation requires access to the appliance's administrative interface. Barracuda has released security patches and is urging customers to update immediately and restrict management access to trusted networks.

Source: trust.barracuda.com/security/p

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

  • 0
  • 1
  • 0
  • 17h ago
Profile picture fallback
@ssvc

I'm late in posting today but happy Patch Tuesday. CISA added 6 new vulnerabilities to the KEV Catalog, two are zero-days but only one is new today (Microsoft):

  • CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
  • CVE-2026-111560 Barracuda Networks Multiple Products OS Command Injection Vulnerability
  • CVE-2026-111793 Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
  • CVE-2026-116606 Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2026-124194 Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
  • CVE-2026-125350 Google Chromium Use-After-Free Vulnerability

cisa.gov/news-events/alerts/20

  • 0
  • 1
  • 0
  • 15h ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
Chaining CVE-2026-116606 and CVE-2026-111560: Threat Actors Target Barracuda Appliances for Unauthenticated Root RCE + Video Introduction: Threat actors are actively weaponizing a zero-day exploit chain targeting exposed Barracuda enterprise appliances. By chaining an authentication bypass flaw in…
  • 0
  • 0
  • 0
  • 3h ago

CVE-2026-61794

Overview

  • projectcapsule
  • capsule
18 Sep 2026
Published
22 Sep 2026
Updated
CVSS v3.1
MEDIUM (6.8)
EPSS
0.59%
KEV

Description

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/webhook/tenant/validation/forbidden_annotations_regex.go compiles ForbiddenLabels.Regex for both the labels and annotations checks instead of validating ForbiddenAnnotations.Regex. An administrator who can update a Tenant can therefore persist a malformed ForbiddenAnnotations.Regex while leaving the labels expression valid. Namespace creation or update later passes the stored expression through pkg/api/forbidden_list.go, where regexp.MustCompile can panic during forbidden metadata validation and deny namespace operations for the affected tenant. This issue is fixed in version 0.13.7.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 10 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-61794 Capsule Kubernetes tenant validation bug (CVSS 6.8) lets admins persist a broken ForbiddenAnnotations regex, risking namespace policy bypass. Fix in 0.13.7 is under review, so pin versions and watch for the patch. #CVE #Kubernetes #infosec valtersit.com/cve/CVE-2026-617

  • 1
  • 1
  • 0
  • 10h ago
Showing 11 to 20 of 90 CVEs