#cve2026 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cve2026, aggregated by home.social.
-
CVE-2026-12503 (CRITICAL, CVSS 9.2) affects Loytec LIP-ME20xC: improper link resolution in larm_starter lets larmapp users escalate to root via /etc/passwd symlink. Limit access & monitor! https://radar.offseq.com/threat/cve-2026-12503-cwe-59-improper-link-resolution-before-file-access-link-following-in-loytec-lip-me20xc-acfbe89cb621dc0e #OffSeq #Vulnerability #ICS #Loytec #CVE2026
-
⚠️ CRITICAL THREAT: CVE-2026-25089 in FortiSandbox allows unauthenticated remote code execution. With active exploitation confirmed, immediate hardening is required. Deploy these compensating controls now to lock down your perimeter. https://thecybermind.co/mxq2
-
⚠️ CRITICAL THREAT: CVE-2026-25089 in FortiSandbox allows unauthenticated remote code execution. With active exploitation confirmed, immediate hardening is required. Deploy these compensating controls now to lock down your perimeter. https://thecybermind.co/mxq2
-
⚠️ CRITICAL THREAT: CVE-2026-25089 in FortiSandbox allows unauthenticated remote code execution. With active exploitation confirmed, immediate hardening is required. Deploy these compensating controls now to lock down your perimeter. https://thecybermind.co/mxq2
-
CVE-2026-11961 (CRITICAL): User Registration & Membership plugin (pre-5.2.3) allows unauthenticated users to assign arbitrary membership tiers, including admin, during signup. Disable or restrict registration until fixed. https://radar.offseq.com/threat/cve-2026-11961-cwe-269-improper-privilege-manageme-20cb46cff61ded54 #OffSeq #WordPress #CVE2026
-
via @dotnet : .NET and .NET Framework July 2026 servicing releases updates
https://ift.tt/0YxwhW3
#dotnet #dotnetcore #dotnetframework #servicingupdates #July2026 #securityupdates #CVE2026 #CVE2026-47300 #CVE2026-47302 #CVE2026-47303 #CVE2026-47304 #CVE2026-5052… -
via @dotnet : .NET and .NET Framework July 2026 servicing releases updates
https://ift.tt/0YxwhW3
#dotnet #dotnetcore #dotnetframework #servicingupdates #July2026 #securityupdates #CVE2026 #CVE2026-47300 #CVE2026-47302 #CVE2026-47303 #CVE2026-47304 #CVE2026-5052… -
via @dotnet : .NET and .NET Framework July 2026 servicing releases updates
https://ift.tt/0YxwhW3
#dotnet #dotnetcore #dotnetframework #servicingupdates #July2026 #securityupdates #CVE2026 #CVE2026-47300 #CVE2026-47302 #CVE2026-47303 #CVE2026-47304 #CVE2026-5052… -
via @dotnet : .NET and .NET Framework July 2026 servicing releases updates
https://ift.tt/0YxwhW3
#dotnet #dotnetcore #dotnetframework #servicingupdates #July2026 #securityupdates #CVE2026 #CVE2026-47300 #CVE2026-47302 #CVE2026-47303 #CVE2026-47304 #CVE2026-5052… -
via @dotnet : .NET and .NET Framework July 2026 servicing releases updates
https://ift.tt/0YxwhW3
#dotnet #dotnetcore #dotnetframework #servicingupdates #July2026 #securityupdates #CVE2026 #CVE2026-47300 #CVE2026-47302 #CVE2026-47303 #CVE2026-47304 #CVE2026-5052… -
June 2026 marked a pivotal shift in cybersecurity, with a record wave of critical zero-days and 15 devastating flaws targeting HTTP.sys, cloud nodes, and critical assets. Dive deep into the full CVE technical analysis on our blog:
https://denizhalil.com/2026/07/03/june-2026-cybersecurity-analysis/ 🛡️🔒
-
CVE-2026-12784 | HIGH severity in IM-Magic Partition Resizer ≤7.9.0: improper access controls in MDA_NTDRV.sys kernel driver. Local exploit is public. Restrict access or remove vulnerable versions. https://radar.offseq.com/threat/cve-2026-12784-improper-access-controls-in-im-magi-c8e575e26aa27402 #OffSeq #Vulnerability #SysSec #CVE2026
-
Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)
https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6
#HackerNews #Notepad++ #ZeroClick #RCE #PathTraversal #CVE2026 #52884 #Cybersecurity
-
Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)
https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6
#HackerNews #Notepad++ #ZeroClick #RCE #PathTraversal #CVE2026 #52884 #Cybersecurity
-
via @dotnet : .NET and .NET Framework June 2026 servicing releases updates
https://ift.tt/zfgkeIO
#dotnet #dotnet6 #dotnet7 #dotnet8 #dotnetcore #netservicing #updates #June2026 #securityupdates #CVE2026 #CVE2026-45591 #CVE2026-45491 #CVE2026-45490 #releaseNotes… -
via @dotnet : .NET and .NET Framework June 2026 servicing releases updates
https://ift.tt/zfgkeIO
#dotnet #dotnet6 #dotnet7 #dotnet8 #dotnetcore #netservicing #updates #June2026 #securityupdates #CVE2026 #CVE2026-45591 #CVE2026-45491 #CVE2026-45490 #releaseNotes… -
via @dotnet : .NET and .NET Framework June 2026 servicing releases updates
https://ift.tt/zfgkeIO
#dotnet #dotnet6 #dotnet7 #dotnet8 #dotnetcore #netservicing #updates #June2026 #securityupdates #CVE2026 #CVE2026-45591 #CVE2026-45491 #CVE2026-45490 #releaseNotes… -
via @dotnet : .NET and .NET Framework June 2026 servicing releases updates
https://ift.tt/zfgkeIO
#dotnet #dotnet6 #dotnet7 #dotnet8 #dotnetcore #netservicing #updates #June2026 #securityupdates #CVE2026 #CVE2026-45591 #CVE2026-45491 #CVE2026-45490 #releaseNotes… -
via @dotnet : .NET and .NET Framework June 2026 servicing releases updates
https://ift.tt/zfgkeIO
#dotnet #dotnet6 #dotnet7 #dotnet8 #dotnetcore #netservicing #updates #June2026 #securityupdates #CVE2026 #CVE2026-45591 #CVE2026-45491 #CVE2026-45490 #releaseNotes… -
🛑 HIGH: CVE-2026-10161 in TRENDnet TEW-432BRP (v3.10B20) — stack buffer overflow in formResetStatistic can be exploited remotely. No patch — device is EOL. Replace urgently! https://radar.offseq.com/threat/cve-2026-10161-stack-based-buffer-overflow-in-tren-3a604145 #OffSeq #Vuln #IoTSecurity #CVE2026 #Router
-
Researchers report "NGINX Rift" (CVE-2026-42945) is being probed and exploited days after disclosure — attackers are scanning exposed servers for the 18‑year bug. Patches released; teams urged to remediate. 🔍⚠️🛡️ #NGINX #infosec #CVE2026-42945 https://www.theregister.com/security/2026/05/18/nginx-rift-attackers-waste-no-time-targeting-exposed-servers/5241851
-
Researchers report "NGINX Rift" (CVE-2026-42945) is being probed and exploited days after disclosure — attackers are scanning exposed servers for the 18‑year bug. Patches released; teams urged to remediate. 🔍⚠️🛡️ #NGINX #infosec #CVE2026-42945 https://www.theregister.com/security/2026/05/18/nginx-rift-attackers-waste-no-time-targeting-exposed-servers/5241851
-
🌟 Oh no, another CVE just dropped! 🙄 It's a good thing we have an endless supply of version numbers and cryptic abbreviations to keep us entertained while the "experts" scramble to patch their precious AI toys. 🤖 Just sit back and watch as the "critical severity" takes a leisurely stroll through insecure headers, because who needs proper input validation in 2026 anyway? 😂
https://badhost.org/ #CVE2026 #AIsecurity #inputvalidation #cybersecurity #vulnerabilities #HackerNews #ngated -
🌟 Oh no, another CVE just dropped! 🙄 It's a good thing we have an endless supply of version numbers and cryptic abbreviations to keep us entertained while the "experts" scramble to patch their precious AI toys. 🤖 Just sit back and watch as the "critical severity" takes a leisurely stroll through insecure headers, because who needs proper input validation in 2026 anyway? 😂
https://badhost.org/ #CVE2026 #AIsecurity #inputvalidation #cybersecurity #vulnerabilities #HackerNews #ngated -
"Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/
#HackerNews #DirtyFrag #CVE2026 #Linux #Exploit #Cybersecurity #Vulnerability #RootAccess
-
"Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days
https://www.copahost.com/blog/dirty-frag-cve-2026-43284/
#HackerNews #DirtyFrag #CVE2026 #Linux #Exploit #Cybersecurity #Vulnerability #RootAccess
-
🚨 CVE-2026-31431 ("Copy Fail")
A Linux kernel flaw enabling reliable root privilege escalation from local access.
🔍 Affects most systems since ~2017
⚠️ High impact, stealthy exploitation
🛠️ Fix: Patch immediately & restrict AF_ALG if unused
🛡️ Mitigated in RELIANOID EE 8.6 and CE 7.10
👉 Technical troubleshooting guide: https://www.relianoid.com/resources/knowledge-base/troubleshooting/cve-2026-31431-linux-kernel-copy-fail-vulnerability/
#CyberSecurity #Linux #CVE2026 #InfoSec #DevSecOps -
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
#HackerNews #CPanel #WHM #Security #Vulnerability #Authentication #Bypass #CVE2026-41940 #Cybersecurity
-
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
#HackerNews #CPanel #WHM #Security #Vulnerability #Authentication #Bypass #CVE2026-41940 #Cybersecurity
-
Die Entdecker nennen die Lücke "Copy Fail": Ein 732-Byte-Python-Exploit erlaubt lokalen Root-Zugriff auf viele Linux-Distributionen seit 2017. CVE-2026-31431 (CVSS 7.8). Update-Kernel dringend empfohlen; Workarounds: algif_aead blacklisten / seccomp. 🔓🐧⚠️ #Linux #Cybersecurity #CVE2026-31431 https://www.heise.de/news/Copy-Fail-Linux-root-in-allen-grossen-Distributionen-mit-732-Byte-Python-11277590.html
1/2 Fix bellow
-
Die Entdecker nennen die Lücke "Copy Fail": Ein 732-Byte-Python-Exploit erlaubt lokalen Root-Zugriff auf viele Linux-Distributionen seit 2017. CVE-2026-31431 (CVSS 7.8). Update-Kernel dringend empfohlen; Workarounds: algif_aead blacklisten / seccomp. 🔓🐧⚠️ #Linux #Cybersecurity #CVE2026-31431 https://www.heise.de/news/Copy-Fail-Linux-root-in-allen-grossen-Distributionen-mit-732-Byte-Python-11277590.html
1/2 Fix bellow
-
via @dotnet : .NET and .NET Framework April 2026 servicing releases updates
https://ift.tt/wyUxFph
#DotNet #NET #NETCore #NETFramework #April2026 #ServicingUpdate #SecurityUpdate #CVE2026 #CVE2026-23666 #CVE2026-26171 #CVE2026-32178 #CVE2026-32203 #CVE2026-32226… -
via @dotnet : .NET and .NET Framework April 2026 servicing releases updates
https://ift.tt/wyUxFph
#DotNet #NET #NETCore #NETFramework #April2026 #ServicingUpdate #SecurityUpdate #CVE2026 #CVE2026-23666 #CVE2026-26171 #CVE2026-32178 #CVE2026-32203 #CVE2026-32226… -
via @dotnet : .NET and .NET Framework March 2026 servicing releases updates
https://ift.tt/hg0cdb3
#dotnet #dotnetcore #dotnetframework #servicingupdates #securityupdates #CVE2026 #CVE2026-26130 #CVE2026-26127 #CVE2026-26131 #ASP.NETCore #EntityFrameworkCore #Ru… -
via @dotnet : .NET and .NET Framework March 2026 servicing releases updates
https://ift.tt/hg0cdb3
#dotnet #dotnetcore #dotnetframework #servicingupdates #securityupdates #CVE2026 #CVE2026-26130 #CVE2026-26127 #CVE2026-26131 #ASP.NETCore #EntityFrameworkCore #Ru… -
via @dotnet : .NET and .NET Framework March 2026 servicing releases updates
https://ift.tt/hg0cdb3
#dotnet #dotnetcore #dotnetframework #servicingupdates #securityupdates #CVE2026 #CVE2026-26130 #CVE2026-26127 #CVE2026-26131 #ASP.NETCore #EntityFrameworkCore #Ru… -
via @dotnet : .NET and .NET Framework March 2026 servicing releases updates
https://ift.tt/hg0cdb3
#dotnet #dotnetcore #dotnetframework #servicingupdates #securityupdates #CVE2026 #CVE2026-26130 #CVE2026-26127 #CVE2026-26131 #ASP.NETCore #EntityFrameworkCore #Ru… -
via @dotnet : .NET and .NET Framework March 2026 servicing releases updates
https://ift.tt/hg0cdb3
#dotnet #dotnetcore #dotnetframework #servicingupdates #securityupdates #CVE2026 #CVE2026-26130 #CVE2026-26127 #CVE2026-26131 #ASP.NETCore #EntityFrameworkCore #Ru… -
CVE-2026-21902 represents a high-impact infrastructure exposure.
Affected platform: Junos OS Evolved on PTX series routers.
Attack vector: Unauthenticated network access.
Privilege level: Root execution.
Service: On-Box Anomaly Detection, enabled by default.Strategic risk:
• Traffic interception capability
• Policy manipulation
• Controller redirection
• Lateral pivoting
• Long-term foothold persistence
Although no exploitation has been observed, historically, high-performance routing infrastructure is a prime target due to its control-plane visibility and network centrality.Recommended actions:
– Immediate patch validation
– Control-plane traffic monitoring
– Service exposure review
– Network segmentation validation
– Threat hunting for anomalous routing behavior
Are infrastructure devices integrated into your continuous detection engineering pipeline?Source: https://www.securityweek.com/juniper-networks-ptx-routers-affected-by-critical-vulnerability/
Engage below.
Follow TechNadu for high-signal vulnerability intelligence.
Repost to strengthen security awareness.#Infosec #CVE2026 #Juniper #RouterSecurity #CriticalInfrastructure #ThreatModeling #DetectionEngineering #NetworkDefense #ZeroTrustArchitecture #CyberRisk #SecurityOperations #VulnerabilityManagement
-
CVE-2026-21902 represents a high-impact infrastructure exposure.
Affected platform: Junos OS Evolved on PTX series routers.
Attack vector: Unauthenticated network access.
Privilege level: Root execution.
Service: On-Box Anomaly Detection, enabled by default.Strategic risk:
• Traffic interception capability
• Policy manipulation
• Controller redirection
• Lateral pivoting
• Long-term foothold persistence
Although no exploitation has been observed, historically, high-performance routing infrastructure is a prime target due to its control-plane visibility and network centrality.Recommended actions:
– Immediate patch validation
– Control-plane traffic monitoring
– Service exposure review
– Network segmentation validation
– Threat hunting for anomalous routing behavior
Are infrastructure devices integrated into your continuous detection engineering pipeline?Source: https://www.securityweek.com/juniper-networks-ptx-routers-affected-by-critical-vulnerability/
Engage below.
Follow TechNadu for high-signal vulnerability intelligence.
Repost to strengthen security awareness.#Infosec #CVE2026 #Juniper #RouterSecurity #CriticalInfrastructure #ThreatModeling #DetectionEngineering #NetworkDefense #ZeroTrustArchitecture #CyberRisk #SecurityOperations #VulnerabilityManagement
-
CVE-2026-21902 represents a high-impact infrastructure exposure.
Affected platform: Junos OS Evolved on PTX series routers.
Attack vector: Unauthenticated network access.
Privilege level: Root execution.
Service: On-Box Anomaly Detection, enabled by default.Strategic risk:
• Traffic interception capability
• Policy manipulation
• Controller redirection
• Lateral pivoting
• Long-term foothold persistence
Although no exploitation has been observed, historically, high-performance routing infrastructure is a prime target due to its control-plane visibility and network centrality.Recommended actions:
– Immediate patch validation
– Control-plane traffic monitoring
– Service exposure review
– Network segmentation validation
– Threat hunting for anomalous routing behavior
Are infrastructure devices integrated into your continuous detection engineering pipeline?Source: https://www.securityweek.com/juniper-networks-ptx-routers-affected-by-critical-vulnerability/
Engage below.
Follow TechNadu for high-signal vulnerability intelligence.
Repost to strengthen security awareness.#Infosec #CVE2026 #Juniper #RouterSecurity #CriticalInfrastructure #ThreatModeling #DetectionEngineering #NetworkDefense #ZeroTrustArchitecture #CyberRisk #SecurityOperations #VulnerabilityManagement
-
CVE-2026-21902 represents a high-impact infrastructure exposure.
Affected platform: Junos OS Evolved on PTX series routers.
Attack vector: Unauthenticated network access.
Privilege level: Root execution.
Service: On-Box Anomaly Detection, enabled by default.Strategic risk:
• Traffic interception capability
• Policy manipulation
• Controller redirection
• Lateral pivoting
• Long-term foothold persistence
Although no exploitation has been observed, historically, high-performance routing infrastructure is a prime target due to its control-plane visibility and network centrality.Recommended actions:
– Immediate patch validation
– Control-plane traffic monitoring
– Service exposure review
– Network segmentation validation
– Threat hunting for anomalous routing behavior
Are infrastructure devices integrated into your continuous detection engineering pipeline?Source: https://www.securityweek.com/juniper-networks-ptx-routers-affected-by-critical-vulnerability/
Engage below.
Follow TechNadu for high-signal vulnerability intelligence.
Repost to strengthen security awareness.#Infosec #CVE2026 #Juniper #RouterSecurity #CriticalInfrastructure #ThreatModeling #DetectionEngineering #NetworkDefense #ZeroTrustArchitecture #CyberRisk #SecurityOperations #VulnerabilityManagement
