24h | 7d | 30d

Overview

  • agnaistic
  • agnai

11 Oct 2026
Published
11 Oct 2026
Updated

CVSS v4.0
CRITICAL (9.3)
EPSS
Pending

KEV

Description

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.

Statistics

  • 1 Post

Last activity: 12 hours ago

Fediverse

Profile picture fallback

CVE-2026-108753 | agnaistic agnai ≤1.0.555: CRITICAL hard-coded admin creds in docker-compose enable full admin compromise. Restrict config file access & monitor for abuse. Patch status unconfirmed. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 12h ago

Overview

  • Trusted Computing Group
  • TPM2.0

11 Aug 2026
Published
12 Aug 2026
Updated

CVSS
Pending
EPSS
0.19%

KEV

Description

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key. See also TCG VRT0010.

Statistics

  • 1 Post
  • 1 Interaction

Last activity: 15 hours ago

Fediverse

Profile picture fallback

🚨🚨🚨 Did AMD and/or Gigabyte intentionally or unintentionally just make local "AI" models available to a lot more people?

I have an old AM4 Gigabyte GA-AX370-Gaming 5 motherboard with a 6 core 5600G processor in it. Gigabyte released a new BIOS for that motherboard on September 3rd 2026. Changelog story is that version F54d is a "Fix AMD TPM Reference Code Errata (CVE-2026-6726, CVE-2026-6727)"

gigabyte.com/Motherboard/GA-AX

I updated the motherboard to the shiny new F54d BIOS and it re-set the BIOS settings. This is annoying but not unusual when upgrading a BIOS. Thus, I had to poke around in the BIOS in order to restore my previous preferences and that's when I noticed something new that's not indicated in the changelog:

The area of the BIOS where you can choose how much RAM should be assigned to the integrated graphics part of the CPU (if you have one with integrated graphics) goes all the way up to 16 GB in BIOS F54d. The max used to be 2 GB, I've never seen any BIOS where you could assign more than 2 GB to the iGPU/APU.

I tried assigning 8GB to the 5600G in the BIOS and then I tried running the Q3_K_M version of the Kreamagine Krea 2 Turbo checkpoint on it. Krea 2 is a image generation model, so horsepower matters more than it does if you run some LLM. I didn't expect it to run very fast, but I was curious if it would run at all since that was previously not possible when the max assigned GPU RAM was limited to 2 GB.

Kreamagine Q3_K_M did run and I got a awfully slow 29.35 seconds per iteration. For context, the RX 6600 runs that model at around 4.93s/it. Half a minute times 10 iterations (what you ideally want for Krea 2 Turbo models) works out to 5 minutes compared to 50 seconds using the RX 6600. That's quite the execution time just to get an image resembling "1girl, confused, using computer running ai app, glasses, blond hair, tight shirt". You're not going to get lightning fast execution if you assign more RAM to GPU integrated in a CPU, but the more important detail is that it actually works.

WHY I THINK THIS IS SO COOL: If you have a now nearly 10 year old computer with an AMD CPU with integrated graphics and 16 or 32 GB DDR4 bought back when it was less than half of today's price then you're now able to assign 8 or 16 GB RAM to the graphics part of the CPU and use that to do a whole range of useful things like as offloading an image models text encoder if you have some older graphics card like a RX 6600 with only 8 GB VRAM.

It's not like I bought anything new or expected to get this new feature. I just updated the BIOS and unexpectedly got the ability to assign up to 16 GB VRAM to the integrated graphics chip. If you have some old AM4 board with a G series CPU and you play around with local models then you should see if there is a new BIOS for your board that may or may not give you the ability to bump the iGPUs memory from 2 to 16 GB.

#ai #localai #amd #apu

  • 1
  • 0
  • 0
  • 15h ago

Overview

  • Trusted Computing Group
  • TPM2.0

11 Aug 2026
Published
12 Aug 2026
Updated

CVSS
Pending
EPSS
0.15%

KEV

Description

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.

Statistics

  • 1 Post
  • 1 Interaction

Last activity: 15 hours ago

Fediverse

Profile picture fallback

🚨🚨🚨 Did AMD and/or Gigabyte intentionally or unintentionally just make local "AI" models available to a lot more people?

I have an old AM4 Gigabyte GA-AX370-Gaming 5 motherboard with a 6 core 5600G processor in it. Gigabyte released a new BIOS for that motherboard on September 3rd 2026. Changelog story is that version F54d is a "Fix AMD TPM Reference Code Errata (CVE-2026-6726, CVE-2026-6727)"

gigabyte.com/Motherboard/GA-AX

I updated the motherboard to the shiny new F54d BIOS and it re-set the BIOS settings. This is annoying but not unusual when upgrading a BIOS. Thus, I had to poke around in the BIOS in order to restore my previous preferences and that's when I noticed something new that's not indicated in the changelog:

The area of the BIOS where you can choose how much RAM should be assigned to the integrated graphics part of the CPU (if you have one with integrated graphics) goes all the way up to 16 GB in BIOS F54d. The max used to be 2 GB, I've never seen any BIOS where you could assign more than 2 GB to the iGPU/APU.

I tried assigning 8GB to the 5600G in the BIOS and then I tried running the Q3_K_M version of the Kreamagine Krea 2 Turbo checkpoint on it. Krea 2 is a image generation model, so horsepower matters more than it does if you run some LLM. I didn't expect it to run very fast, but I was curious if it would run at all since that was previously not possible when the max assigned GPU RAM was limited to 2 GB.

Kreamagine Q3_K_M did run and I got a awfully slow 29.35 seconds per iteration. For context, the RX 6600 runs that model at around 4.93s/it. Half a minute times 10 iterations (what you ideally want for Krea 2 Turbo models) works out to 5 minutes compared to 50 seconds using the RX 6600. That's quite the execution time just to get an image resembling "1girl, confused, using computer running ai app, glasses, blond hair, tight shirt". You're not going to get lightning fast execution if you assign more RAM to GPU integrated in a CPU, but the more important detail is that it actually works.

WHY I THINK THIS IS SO COOL: If you have a now nearly 10 year old computer with an AMD CPU with integrated graphics and 16 or 32 GB DDR4 bought back when it was less than half of today's price then you're now able to assign 8 or 16 GB RAM to the graphics part of the CPU and use that to do a whole range of useful things like as offloading an image models text encoder if you have some older graphics card like a RX 6600 with only 8 GB VRAM.

It's not like I bought anything new or expected to get this new feature. I just updated the BIOS and unexpectedly got the ability to assign up to 16 GB VRAM to the integrated graphics chip. If you have some old AM4 board with a G series CPU and you play around with local models then you should see if there is a new BIOS for your board that may or may not give you the ability to bump the iGPUs memory from 2 to 16 GB.

#ai #localai #amd #apu

  • 1
  • 0
  • 0
  • 15h ago

Overview

  • Cisco
  • Cisco Catalyst SD-WAN Manager

30 Sep 2026
Published
02 Oct 2026
Updated

CVSS v3.1
CRITICAL (9.8)
EPSS
1.82%

Description

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.

Statistics

  • 1 Post

Last activity: 6 hours ago

Fediverse

Profile picture fallback

📰 Cisco and SonicWall Flaws Under Active Exploit; CISA Issues KEVs

🚨 CRITICAL PATCH NOW: Actively exploited zero-days in Cisco Catalyst SD-WAN Manager (CVE-2026-76504) & SonicWall SMA 1000 (CVE-2026-102255) added to CISA KEV. Flaws allow auth bypass & RCE. #Vulnerability #PatchTuesday #CISA

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 6h ago

Overview

  • SonicWall
  • SMA1000

07 Oct 2026
Published
07 Oct 2026
Updated

CVSS
Pending
EPSS
0.48%

KEV

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Statistics

  • 1 Post

Last activity: 6 hours ago

Fediverse

Profile picture fallback

📰 Cisco and SonicWall Flaws Under Active Exploit; CISA Issues KEVs

🚨 CRITICAL PATCH NOW: Actively exploited zero-days in Cisco Catalyst SD-WAN Manager (CVE-2026-76504) & SonicWall SMA 1000 (CVE-2026-102255) added to CISA KEV. Flaws allow auth bypass & RCE. #Vulnerability #PatchTuesday #CISA

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 6h ago

Overview

  • PaperCut
  • PaperCut MF/NG

28 Aug 2026
Published
13 Sep 2026
Updated

CVSS v4.0
CRITICAL (9.4)
EPSS
63.53%

Description

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process.

Statistics

  • 1 Post

Last activity: 4 hours ago

Fediverse

Profile picture fallback

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) labs.watchtowr.com/death-by-a-

  • 0
  • 0
  • 0
  • 4h ago

Overview

  • PaperCut
  • PaperCut MF/NG

28 Aug 2026
Published
13 Sep 2026
Updated

CVSS v4.0
HIGH (8.8)
EPSS
85.58%

Description

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.

Statistics

  • 1 Post

Last activity: 4 hours ago

Fediverse

Profile picture fallback

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) labs.watchtowr.com/death-by-a-

  • 0
  • 0
  • 0
  • 4h ago

Overview

  • PaperCut
  • PaperCut NG/MF

24 Sep 2026
Published
25 Sep 2026
Updated

CVSS v4.0
HIGH (7.3)
EPSS
0.74%

KEV

Description

An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.

Statistics

  • 1 Post

Last activity: 4 hours ago

Fediverse

Profile picture fallback

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) labs.watchtowr.com/death-by-a-

  • 0
  • 0
  • 0
  • 4h ago
Showing 31 to 38 of 38 CVEs