24h | 7d | 30d

CVE-2026-84682

Overview

  • TP-Link Systems Inc.
  • Archer AX90 v1
01 Oct 2026
Published
02 Oct 2026
Updated
CVSS v4.0
HIGH (7.7)
EPSS
1.04%
KEV

Description

A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device boot.  Successful exploitation may result in complete device compromise through arbitrary command execution with root privileges.

Statistics

  • 1 Post
Last activity: 4 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

TP-Link vulnerabilities include Tapo camera vulnerabilities like CVE-2026-102369 (CVSS 8.7) plus router and Deco flaws. Update firmware now.

securityonline.info/tp-link-vu

  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-86360

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Dell System Update flaw CVE-2026-86360 (CVSS 9.6) could let attackers run code as root. Dell fixes five bugs in DSU 2.3.0.0. Patch now.

securityonline.info/dell-syste

  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-63292

Overview

  • Apache Software Foundation
  • Apache HTTP Server
01 Oct 2026
Published
01 Oct 2026
Updated
CVSS
Pending
EPSS
0.58%
KEV

Description

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

Statistics

  • 1 Post
Last activity: 16 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Apache HTTP Server 2.4.69 fixes 20 flaws, including CVE-2026-63292, a mod_vhost_alias stack overflow that may enable code execution.

securityonline.info/apache-htt

  • 0
  • 0
  • 0
  • 16h ago

CVE-2026-57941

Overview

  • Apache Software Foundation
  • Apache HTTP Server
01 Oct 2026
Published
01 Oct 2026
Updated
CVSS
Pending
EPSS
0.44%
KEV

Description

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Statistics

  • 1 Post
Last activity: 16 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Apache HTTP Server 2.4.69 fixes 20 flaws, including CVE-2026-63292, a mod_vhost_alias stack overflow that may enable code execution.

securityonline.info/apache-htt

  • 0
  • 0
  • 0
  • 16h ago

CVE-2026-94592

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 23 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Armatura One flaws enable unauthenticated code execution and database or access-control takeover; patch to 4.7.2 or 4.6.1_USA. - IOCs: CVE-2023-46604, CVE-2026-94591, CVE-2026-94592 - #CVE202346604 #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 23h ago

CVE-2026-102294

Overview

  • TP-Link System Inc.
  • TL-WR841N v14
01 Oct 2026
Published
02 Oct 2026
Updated
CVSS v4.0
HIGH (8.5)
EPSS
0.92%
KEV

Description

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands.  Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration or services, and disruption of device operation.

Statistics

  • 1 Post
Last activity: 4 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

TP-Link vulnerabilities include Tapo camera vulnerabilities like CVE-2026-102369 (CVSS 8.7) plus router and Deco flaws. Update firmware now.

securityonline.info/tp-link-vu

  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-63692

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 17 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 (CVSS 10) allow admin takeover. Upgrade to 1.18.0.

securityonline.info/dell-conta

  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-94591

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 23 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Armatura One flaws enable unauthenticated code execution and database or access-control takeover; patch to 4.7.2 or 4.6.1_USA. - IOCs: CVE-2023-46604, CVE-2026-94591, CVE-2026-94592 - #CVE202346604 #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 23h ago

CVE-2026-86362

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Dell System Update flaw CVE-2026-86360 (CVSS 9.6) could let attackers run code as root. Dell fixes five bugs in DSU 2.3.0.0. Patch now.

securityonline.info/dell-syste

  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-8763

Overview

  • Legion of the Bouncy Castle Inc.
  • BC-JAVA
  • bcprov
03 Aug 2026
Published
03 Aug 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
0.43%
KEV

Description

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

Statistics

  • 3 Posts
Last activity: 23 hours ago

Bluesky

Profile picture fallback
GCP Weekly @gcpweekly.bsky.social
CVE-2026-13506 CVE-2026-49844 CVE-2026-50645 CVE-2026-8763 N/A Security fixes for apigee-mint-task-scheduler. This addresses the following vulnerabilities: CVE-2026-13506 CVE-2026-49844 CVE-2026-50645 CVE-2026-8763 N/A Security fixes for apigee-operators. This addresses the
  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
GCP Weekly @gcpweekly.bsky.social
Security fixes for apigee-synchronizer. This addresses the following vulnerabilities: CVE-2026-13506 CVE-2026-49844 CVE-2026-50645 CVE-2026-8763 N/A Security fixes for apigee-watcher. This addresses the following vulnerability: CVE-2026-81870
  • 0
  • 0
  • 1
  • 23h ago
Showing 71 to 80 of 164 CVEs