CVE-2026-10163

Overview

Edimax
BR-6478AC

31 May 2026

Published

31 May 2026

Updated

CVSS v4.0

HIGH (8.7)

EPSS

0.04%

MITRE

KEV

Description

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Statistics

1 Post

Last activity: 14 hours ago

Fediverse

OffSequence @offseq

🚩 CVE-2026-10163: HIGH severity buffer overflow in Edimax BR-6478AC v1.23 (CVSS 8.7). Remotely exploitable via POST to formUSBAccount — no patch yet. Restrict admin access & monitor advisories. More: https://radar.offseq.com/threat/cve-2026-10163-buffer-overflow-in-edimax-br-6478ac-f676c6a9 #OffSeq #Vulnerability #Edimax #RouterSecurity

0
0
0
14h ago

CVE-2024-29876

Overview

Sentrifugo
Sentrifugo

21 Mar 2024

Published

12 Aug 2024

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.76%

MITRE

KEV

Description

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/reports/activitylogreport, 'sortby' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it.

Statistics

1 Post

Last activity: 17 hours ago

Fediverse

Hugo | DevOps | Cybersecurity @hugovalters

CVE-2024-29876 - Critical SQLi in Sentrifugo 3.2. Remote extraction of all database data via sortby parameter. CVSS 9.8. Unpatched. Isolate or upgrade immediately. #CVE #infosec #Sentrifugo

https://www.valtersit.com/cve/CVE-2024-29876/

0
0
0
17h ago

CVE-2026-41615

Overview

Microsoft
Microsoft Authenticator for Android

14 May 2026

Published

26 May 2026

Updated

CVSS v3.1

CRITICAL (9.6)

EPSS

0.08%

MITRE

KEV

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Statistics

1 Post

Last activity: 6 hours ago

Bluesky

CyberVeille @cyberveille-ch.bsky.social

📢 CVE-2026-41615 : Divulgation d'informations dans Microsoft Authenticator, versions vulnérables identifiées 📝 ## 🔍 Contexte … https://cyberveille.ch/posts/2026-05-31-cve-2026-41615-divulgation-d-informations-dans-microsoft-authenticator-versions-vulnerables-identifiees/ #CVE_2026_41615 #Cyberveille

0
0
0
6h ago

CVE-2026-9873

Overview

Google
Chrome

28 May 2026

Published

30 May 2026

Updated

CVSS

Pending

EPSS

0.08%

MITRE

KEV

Description

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

Statistics

1 Post

Last activity: 11 hours ago

Fediverse

ThreatNoir @threatnoir

⚠️ CRITICAL: Chrome 148 Update Patches 151 Vulnerabilities

Google released Chrome 148 patching 151 vulnerabilities, including 22 critical-severity flaws that enable remote code execution and sandbox escape. CVE-2026-9872 and CVE-2026-9873 are the most severe, allowing attackers to break out of the Chrome sandbox and execute arbitrary code. This affects all…

https://threatnoir.com/focus

#infosec #cybersecurity

0
0
0
11h ago

CVE-2026-9872

Overview

Google
Chrome

28 May 2026

Published

30 May 2026

Updated

CVSS

Pending

EPSS

0.07%

MITRE

KEV

Description

Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Statistics

1 Post

Last activity: 11 hours ago

Fediverse

ThreatNoir @threatnoir

⚠️ CRITICAL: Chrome 148 Update Patches 151 Vulnerabilities

Google released Chrome 148 patching 151 vulnerabilities, including 22 critical-severity flaws that enable remote code execution and sandbox escape. CVE-2026-9872 and CVE-2026-9873 are the most severe, allowing attackers to break out of the Chrome sandbox and execute arbitrary code. This affects all…

https://threatnoir.com/focus

#infosec #cybersecurity

0
0
0
11h ago