Overview
Description
Statistics
- 1 Post
Overview
Description
Statistics
- 1 Post
Bluesky
Overview
- Ubiquiti Inc
- UniFi Play PowerAmp
Description
Statistics
- 1 Post
Fediverse
🚨 CVE-2026-22562: CRITICAL path traversal (CWE-22) in Ubiquiti UniFi Play PowerAmp ≤1.0.35 & Audio Port ≤1.0.24 enables unauth RCE via arbitrary file write. Patch to 1.0.38+/1.1.9+ ASAP! https://radar.offseq.com/threat/cve-2026-22562-cwe-22-path-traversal-in-ubiquiti-i-464fb9b6 #OffSeq #CVE #Ubiquiti #Security
Overview
Description
Statistics
- 1 Post
Overview
- MervinPraison
- PraisonAI
Description
Statistics
- 1 Post
Fediverse
🚨 CVE-2026-40288 (CRITICAL, CVSS 9.8): PraisonAI <4.5.139 vulnerable to OS command injection via untrusted YAML files. Attackers can achieve full system compromise. Upgrade ASAP! More: https://radar.offseq.com/threat/cve-2026-40288-cwe-78-improper-neutralization-of-s-06bb92e7 #OffSeq #PraisonAI #InfoSec
Overview
- wpeverest
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Description
Statistics
- 1 Post
Bluesky
Overview
- Microsoft
- Windows 10 Version 1607
Description
Statistics
- 1 Post
Overview
- SAP_SE
- SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise)
Description
Statistics
- 1 Post
Overview
- Fortinet
- FortiSandbox
Description
Statistics
- 1 Post
Fediverse
🚨 Fortinet just disclosed CVE-2026-39808 and CVE-2026-39813 - 2 critical vulnerabilities affecting FortiSandbox. No active exploitation itw reported as of yet.
Scan your infrastructure to find vulnerable instances:
CVE-2026-39808: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39808.yaml
CVE-2026-39813: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39813.yaml
CVE-2026-39808 (CVSS 9.1):
An Improper Neutralization of Special Elements used in an OS Command ('OS command injection') vulnerability [CWE-78] in FortiSandbox may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
CVE-2026-39813 (CVSS 9.1):
A Path Traversal vulnerability [CWE-24] in FortiSandbox JRPC API may allow an unauthenticated attacker to bypass authentication via specially crafted HTTP requests.
Patches are available as per vendor advisories:
https://fortiguard.fortinet.com/psirt/FG-IR-26-112
https://fortiguard.fortinet.com/psirt/FG-IR-26-100
Overview
- Microsoft
- Windows 10 Version 1607
Description
Statistics
- 1 Post