#cve — Public Fediverse posts

Security Tip: Don't let CVSS scores be your only guide. 🛡️ While a high severity score is important, real-world risk is driven by active exploitation. Integrate the CISA Known Exploited Vulnerabilities (KEV) catalog into your patch management workflow. If an attacker is already using it, it should be at the top of your list, regardless of the score. Track active threats at https://cvedatabase.com #InfoSec #CyberSecurity #PatchManagement #CVE

🚨 EUVD-2026-33030

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization ch...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33030

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33031

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a speci...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33031

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33032

📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kib...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33032

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33033

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: Kibana, Kibana, Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent policy configuration by injecting values into ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33033

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33034

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections manag...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33034

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33035

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: Kibana
🏢 Vendor: Elastic
📅 Updated: 2026-05-28

📝 Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress control...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33035

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33036

📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services, Oracle Hospitality OPERA 5 Property Services (+2 more)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33036

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33037

📊 Score: 7.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33037

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33038

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33038

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33039

📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Or...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33039

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33040

📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33040

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33041

📊 Score: 7.4/10 (CVSS v3.1)
📦 Product: Oracle Payments
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with netwo...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33041

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33042

📊 Score: 9.1/10 (CVSS v3.1)
📦 Product: Oracle Internet Procurement Connector
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33042

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33043

📊 Score: 8.5/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33043

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33044

📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Financials Common Modules
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33044

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33045

📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle iAssets
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33045

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33046

📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: Oracle Public Sector Financials (International)
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitabl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33046

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33047

📊 Score: 9.9/10 (CVSS v3.1)
📦 Product: Oracle Universal Work Queue
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabilit...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33047

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33048

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33048

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33049

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33049

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33050

📊 Score: 8.1/10 (CVSS v3.1)
📦 Product: Oracle Payroll
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33050

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33051

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33051

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33052

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Oracle REST Data Services
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33052

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33013

📊 Score: 9.0/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compro...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33013

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33015

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33015

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-33014

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Oracle Database Server
🏢 Vendor: Oracle Corporation
📅 Updated: 2026-05-28

📝 Vulnerability in the Net Service component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33014

#cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2026-45047 - High (7.5)

bird-lg-go is a BIRD looking glass in Go. Prior to 1.4.5, the apiHandler (and similarly webHandlerTelegramBot) processes user-provided JSON payloads by directly using json.NewDecoder(r.Body).Decode(&request) without restricting the maximum read si...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45047/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

UPDATE - I've updated my entry on the status of Ubuntu and CVE-2026-46333. The official Ubuntu security bulletin presents conflicting information, which also conflicts with Canonical's own Luci Stanescu about the subject.

My recommendation: set `kernel.yama.ptrace_scope` to at least 2 anyway unless you *need* unprivileged users to have ptrace access. Better to be safe than sorry.

#cve #cve_2026_46333 #linux #security #ssh_keysign_pwn

UPDATE - I've updated my entry on the status of Ubuntu and CVE-2026-46333. The official Ubuntu security bulletin presents conflicting information, which also conflicts with Canonical's own Luci Stanescu about the subject.

My recommendation: set `kernel.yama.ptrace_scope` to at least 2 anyway unless you *need* unprivileged users to have ptrace access. Better to be safe than sorry.

#cve #cve_2026_46333 #linux #security #ssh_keysign_pwn

Больше, чем просто безопасность, или Зачем контролировать зависимости

Привет, Хабр! Меня зовут Артём Бердашкевич, в Positive Technologies руковожу направления DevSecOps. Сегодня хочу поговорить о теме, которая с годами становится только острее — о контроле зависимостей и о том, почему привычных подходов к нему уже катастрофически не хватает. Современная разработка давно превратилась в сборку из готовых компонентов, где мы почти не пишем код с нуля, а комбинируем фреймворки, библиотеки и модули с открытым исходным кодом. Такой подход радикально ускоряет вывод продуктов на рынок, но за скорость приходится платить прозрачностью. Команда часто не знает точный состав своего приложения до финальной сборки. Почему это стало большой проблемой и что с ней делать — читайте под катом.

https://habr.com/ru/companies/pt/articles/1040080/

#cybersecurity #devsecops #sca #легаси #зависимости #cve #безопасная_разработка #docker #sandbox #appsec

🟠 CVE-2026-42735 - High (8.2)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42735 - High (8.2)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42735 - High (8.2)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42735/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42755 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42755 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42755 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42755/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42748 - Critical (9.9)

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42748 - Critical (9.9)

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42748 - Critical (9.9)

Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔍 Lambda Watchdog detected that CVE-2026-42264 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/504 #AWS #Lambda #Security #CVE #DevOps #SecOps

#OT #Advisory VDE-2026-059
Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-059/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-059.json

#OT #Advisory VDE-2026-059
Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-059/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-059.json

#OT #Advisory VDE-2026-059
Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-059/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-059.json

#OT #Advisory VDE-2026-054
MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini

Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-054/

#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json

#OT #Advisory VDE-2026-054
MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini

Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-054/

#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json

#OT #Advisory VDE-2026-054
MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini

Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
#CVE CVE-2026-40851, CVE-2026-40852

https://certvde.com/en/advisories/vde-2026-054/

#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json

#OT #Advisory VDE-2026-058
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Multiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual
#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820

https://certvde.com/en/advisories/vde-2026-058/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json

#OT #Advisory VDE-2026-058
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Multiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual
#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820

https://certvde.com/en/advisories/vde-2026-058/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json

#OT #Advisory VDE-2026-058
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Multiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual
#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820

https://certvde.com/en/advisories/vde-2026-058/

#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json