24h | 7d | 30d

CVE-2026-105133

Overview

  • Ahsay
  • AhsayCBS
04 Oct 2026
Published
26 Oct 2026
Updated
CVSS v4.0
MEDIUM (6.9)
EPSS
84.48%
KEV

Description

A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 9.15.2.70 and 10.3.4.45 is able to mitigate this issue. It is recommended to upgrade the affected component. The initial patch did not fix the security vulnerability properly. An update of the CVE entry to reflect this became necessary.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 13 hours ago

Fediverse

Profile picture fallback
halil deniz @halildeniz

🚨 Attackers exploit zero-day flaws
in AhsayCBS (CVE-2026-105133 & CVE-2026-105134) to bypass authentication and deploy sandbox-evading Python backdoors on backup servers. Patch immediately!

Read more: denizhalil.com/2026/11/11/ahsa

#CyberSecurity #CyberThreats #Malware

  • 0
  • 1
  • 0
  • 13h ago

CVE-2026-105134

Overview

  • Ahsay
  • AhsayCBS
04 Oct 2026
Published
26 Oct 2026
Updated
CVSS v4.0
CRITICAL (10.0)
EPSS
81.76%
KEV

Description

A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 9.15.2.70 and 10.3.4.45 is able to resolve this issue. Upgrading the affected component is advised. The initial patch did not fix the security vulnerability properly. An update of the CVE entry to reflect this became necessary.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 13 hours ago

Fediverse

Profile picture fallback
halil deniz @halildeniz

🚨 Attackers exploit zero-day flaws
in AhsayCBS (CVE-2026-105133 & CVE-2026-105134) to bypass authentication and deploy sandbox-evading Python backdoors on backup servers. Patch immediately!

Read more: denizhalil.com/2026/11/11/ahsa

#CyberSecurity #CyberThreats #Malware

  • 0
  • 1
  • 0
  • 13h ago

CVE-2026-108187

Overview

  • Zoom Communications
  • Zoom Workplace
10 Nov 2026
Published
11 Nov 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
0.19%
KEV

Description

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Statistics

  • 1 Post
Last activity: 13 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Zoom has addressed two security vulnerabilities in its Workplace application for Windows, identified as CVE-2026-108186 and CVE-2026-108187. These flaws could allow an unauthorized user to escalate privileges over the network.

Affected versions for CVE-2026-108186 include 7.1.0 through 7.1.7, while CVE-2026-108187 affects versions prior to 7.1.5. Zoom has issued patches and recommends that all users update to the latest…

en.hacks.gr/enimeroste-amesa-t

#Zoom #Windows #CVE_2026_108186 #CVE_2026_108187

  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-99999

Overview

  • Linux
  • Linux
15 Oct 2026
Published
24 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.3)
EPSS
0.79%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

Statistics

  • 1 Post
Last activity: 15 hours ago

Fediverse

Profile picture fallback
warthog9 @warthog9

I'm not going to point at anyone per-se, BUT if you publish that you've fixed something and it's on your CVE page, and I go and spend a lot of effort to literally update everything, and it turns out that your claim of having it fixed and it be public was a lie on one of the versions of your distro as it was still propagating to the public mirrors or something...

I'm going to be a smidge upset and a bit cranky

Just saying.

#CVE-2026-99999 #CVE-2026-98432

  • 0
  • 0
  • 0
  • 15h ago

CVE-2026-108186

Overview

  • Zoom Communications
  • Zoom Workplace
10 Nov 2026
Published
11 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.6)
EPSS
0.41%
KEV

Description

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Statistics

  • 1 Post
Last activity: 13 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Zoom has addressed two security vulnerabilities in its Workplace application for Windows, identified as CVE-2026-108186 and CVE-2026-108187. These flaws could allow an unauthorized user to escalate privileges over the network.

Affected versions for CVE-2026-108186 include 7.1.0 through 7.1.7, while CVE-2026-108187 affects versions prior to 7.1.5. Zoom has issued patches and recommends that all users update to the latest…

en.hacks.gr/enimeroste-amesa-t

#Zoom #Windows #CVE_2026_108186 #CVE_2026_108187

  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-123876

Overview

  • Red Hat
  • Red Hat Enterprise Linux 10
  • containers-common
06 Nov 2026
Published
10 Nov 2026
Updated
CVSS
Pending
EPSS
0.15%
KEV

Description

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

en.hacks.gr/kykloforise-to-pod

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-121885

Overview

  • podman
10 Nov 2026
Published
11 Nov 2026
Updated
CVSS
Pending
EPSS
0.38%
KEV

Description

A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart. If a user runs the malicious container and auto-update processes it, arbitrary system services are restarted with the user's privileges, potentially allowing an attacker to shut down the host system when Podman runs with administrative privileges.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

en.hacks.gr/kykloforise-to-pod

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-18767

Overview

  • Beckhoff Automation
  • TcRouter.sys for Windows on x64 3.1.0.2364
11 Nov 2026
Published
11 Nov 2026
Updated
CVSS v4.0
HIGH (8.5)
EPSS
0.14%
KEV

Description

A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.

Statistics

  • 1 Post
Last activity: 23 hours ago

Fediverse

Profile picture fallback
CERT@VDE @certvde

🔒 New CSAF advisory published

VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769

The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…

HTML: certvde.com/en/advisories/VDE-
CSAF JSON: beckhoff.csaf-tp.certvde.com/.

  • 0
  • 0
  • 0
  • 23h ago

CVE-2026-109163

Overview

  • Apache Software Foundation
  • Apache HTTP Server
11 Nov 2026
Published
11 Nov 2026
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue affects Apache HTTP Server: 2.4.69.

Statistics

  • 1 Post
Last activity: 9 hours ago

Bluesky

Profile picture fallback
OMO @omo.bsky.social
Apache HTTP Serverの脆弱性(Critical: CVE-2026-119618, Important: CVE-2026-106023, Low: CVE-2026-109163)と2.4.71リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #apache security.sios.jp/vulnerabilit...
  • 0
  • 0
  • 0
  • 9h ago

CVE-2026-111361

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

en.hacks.gr/kykloforise-to-pod

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

  • 0
  • 0
  • 0
  • 14h ago
Showing 71 to 80 of 82 CVEs