24h | 7d | 30d

CVE-2026-88772

Overview

  • Citrix NetScaler
  • ADC
27 Sep 2026
Published
28 Sep 2026
Updated
CVSS v4.0
CRITICAL (9.5)
EPSS
1.30%
KEV

Description

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Statistics

  • 1 Post
Last activity: 5 hours ago

Fediverse

Profile picture fallback
ninjaintelgroup @ninjaintelgroup

New in the known-exploited catalogue: CVE-2026-88772 in netscaler_application_delivery_controller. Exploited in the wild — the only phrase in this field that still means exactly what it says.

Patch the edge appliance. It is always the edge appliance.

#KEV #vulnerability

  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-79916

Overview

  • 1Panel-dev
  • MaxKB
21 Sep 2026
Published
22 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.1)
EPSS
0.45%
KEV

Description

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject control characters into AWS Bedrock access_key_id and secret_access_key fields that _update_aws_credentials writes to /root/.aws/credentials without safe parsing. An attacker can append a new AWS profile containing credential_process, then select that profile during a later model-validation request so botocore executes an attacker-controlled command as root. This vulnerability is fixed in 2.10.5-lts.

Statistics

  • 1 Post
Last activity: 17 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-79916: MaxKB Bedrock credential injection lets authenticated users plant credential_process in /root/.aws/credentials, executed as root. CVSS 9.1 RCE. Patch still under review. Restrict workspace access now. valtersit.com/cve/CVE-2026-799 #CVE #infosec

  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-93953

Overview

  • softaculous
  • Backuply – Backup, Restore, Migrate and Clone
16 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
HIGH (8.0)
EPSS
0.34%
KEV

Description

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing SQL query. Backuply exports the Biographical Info value verbatim inside an INSERT statement written to the backup's SQL dump (wp_usermeta). When an Administrator later restores such a backup, the crafted payload breaks out of that INSERT statement and appends attacker-controlled SQL that executes with full database privileges. This makes it possible for authenticated attackers, with subscriber-level access and above, to write arbitrary data to the database — in particular to update the default_role option in wp_options to administrator (and enable open user registration) — so that a subsequently registered account is automatically granted the Administrator role, resulting in privilege escalation and full site takeover. Because the injection executes inside an INSERT during restore with no response returned to the attacker, the primitive is used to modify database records rather than to read existing data directly.

Statistics

  • 1 Post
Last activity: 2 hours ago

Fediverse

Profile picture fallback
benzogaga33 :verified: @benzogaga33

Backuply : une faille SQL menace 600 000 WordPress, surtout si vous restaurez votre site web it-connect.fr/backuply-cve-202 #ActuCybersécurité #Cybersécurité #Vulnérabilité #Wordpress

  • 0
  • 0
  • 0
  • 2h ago

CVE-2026-111472

Overview

  • TSG
  • Profleet
16 Oct 2026
Published
16 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
0.23%
KEV

Description

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.

Statistics

  • 1 Post
Last activity: 22 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

TSG Profleet CRITICAL SQL injection (CVE-2026-111472, CVSS 9.3): Unauthenticated attackers can manipulate DB via ‘Identificación’ in /cgi-bin/index.php. Restrict access, deploy WAF. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 22h ago

CVE-2026-111823

Overview

  • Mage
  • mage-ai
16 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
Pending
KEV

Description

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

Statistics

  • 1 Post
Last activity: 12 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-111823 (CRITICAL, CVSS 9.8) in Mage mage-ai <=0.9.80: OAuth session creation flaw enables unauthorized access if provider is unknown. No confirmed patch — check vendor updates. Details: radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 12h ago

CVE-2026-88409

Overview

  • Pending
21 Sep 2026
Published
22 Sep 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
0.48%
KEV

Description

FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function (/v19/decode_matrix.c). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Statistics

  • 1 Post
Last activity: 7 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-88409 FalkorDB v4.20.1-4.20.4 buffer overflow in _Decode_GrB_Matrix, CVSS 8.8, allows DoS via crafted input. No patch yet - restrict access now. valtersit.com/cve/CVE-2026-884 #CVE #infosec #cybersecurity

  • 0
  • 0
  • 0
  • 7h ago

CVE-2026-111663

Overview

  • chaskiq
  • chaskiq
16 Oct 2026
Published
16 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
Pending
KEV

Description

Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the full response via the returned ActiveStorage blob URL.

Statistics

  • 1 Post
Last activity: 3 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CRITICAL SSRF in Chaskiq <=2.0.3 (CVE-2026-111663): Unauthenticated attackers can fetch internal/cloud URLs via GraphQL, risking sensitive data exposure. Restrict /graphql access & monitor POSTs. CVSS 8.6. radar.offseq.com/threat/chaski

  • 0
  • 0
  • 0
  • 3h ago

CVE-2026-65674

Overview

  • Microsoft
  • Microsoft SQL Server 2019 (GDR)
13 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
0.88%
KEV

Description

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Statistics

  • 1 Post
Last activity: 19 hours ago

Fediverse

Profile picture fallback
Romern @romern

patch diffed CVE-2026-65674, as a derserialization in mssql sounds interesting. seems to be in mssql polybase specifically, so an optional component for integrating external databases.

  • 0
  • 0
  • 0
  • 19h ago

CVE-2026-92392

Overview

  • curl
  • curl
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS
Pending
EPSS
0.63%
KEV

Description

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

Statistics

  • 1 Post
Last activity: 20 hours ago

Bluesky

Profile picture fallback
Packet Storm News @packetstorm.bsky.social
CVE-2026-92392: Curl HTTP/2 Upload RCE https://packetstorm.news/news/view/45653 #news
  • 0
  • 0
  • 0
  • 20h ago

CVE-2026-93479

Overview

  • F5
  • NGINX Plus
14 Oct 2026
Published
15 Oct 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.55%
KEV

Description

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact:  This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Statistics

  • 1 Post
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Cybersecurity & cyberwarfare @cybersecurity
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, critical vulnerabilities tracked as CVE-2026-15176 and CVE-2026-93479 could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an […]
F5 addressed critical RCE flaws in NGINX
  • 0
  • 0
  • 0
  • 22h ago
Showing 41 to 50 of 62 CVEs