CVE-2026-23800

Overview

Modular DS
modular-connector

16 Jan 2026

Published

16 Jan 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

Pending

MITRE

KEV

Description

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0.

Statistics

1 Post

Last activity: 8 hours ago

Fediverse

TheHackerWire @thehackerwire

🔴 CVE-2026-23800 - Critical (10)

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

0
0
0
8h ago

CVE-2025-62507

Overview

redis
redis

04 Nov 2025

Published

06 Nov 2025

Updated

CVSS v4.0

HIGH (7.7)

EPSS

0.10%

MITRE

KEV

Description

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.

Statistics

1 Post

Last activity: 13 hours ago

Bluesky

今日視界 @g0rosato.bsky.social

剖析和利用 CVE-2025-62507：Redis 中的遠程代碼執行漏洞

0
0
0
13h ago

CVE-2026-23535

Overview

WeblateOrg
wlc

16 Jan 2026

Published

16 Jan 2026

Updated

CVSS v3.1

HIGH (8.1)

EPSS

Pending

MITRE

KEV

Description

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.

Statistics

1 Post

Last activity: 10 hours ago

Fediverse

TheHackerWire @thehackerwire

🟠 CVE-2026-23535 - High (8)

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23535/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

0
0
0
10h ago

CVE-2025-61937

Overview

AVEVA
Process Optimization

16 Jan 2026

Published

16 Jan 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

0.31%

MITRE

KEV

Description

The vulnerability, if exploited, could allow an unauthenticated miscreant to achieve remote code execution under OS system privileges of “taoimr” service, potentially resulting in complete compromise of the model application server.

Statistics

1 Post

Last activity: 9 hours ago

Fediverse

TheHackerWire @thehackerwire

🔴 CVE-2025-61937 - Critical (10)

The vulnerability, if exploited, could allow an unauthenticated
miscreant to achieve remote code execution under OS system privileges of
“taoimr” service, potentially resulting in complete compromise of the model application server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61937/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

0
0
0
9h ago