#offseq — Public Fediverse posts

TSG Profleet CRITICAL SQL injection (CVE-2026-111472, CVSS 9.3): Unauthenticated attackers can manipulate DB via ‘Identificación’ in /cgi-bin/index.php. Restrict access, deploy WAF. https://radar.offseq.com/threat/cve-2026-111472-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-b09ea35526b07e08 #OffSeq #infosec #vuln #sqlinjection

sgl-project sglang (0.5.10 – 0.5.22) is affected by a CRITICAL eval injection (CVE-2026-111391, CVSS 9.2). Remote RCE is possible via /dumper/configure if DUMPER_SERVER_PORT is set. Patch ASAP! https://radar.offseq.com/threat/cve-2026-111391-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-injection-in-f8a10e538b599ada #OffSeq #CVE2026111391 #Python #Security

Critical RCE vulnerabilities patched in F5 NGINX & Juniper Junos OS — unauthenticated attackers could take full control via buffer overflows & memory corruption. No exploitation in the wild. Patch ASAP: https://radar.offseq.com/threat/f5-juniper-networks-patch-critical-vulnerabilities-85280fb8b973d5ad #OffSeq #infosec #RCE #networksecurity

CVE-2026-94388: CRITICAL SQL Injection in halfdata Green Popups (<7.6.3). Blind SQLi allows remote, unauthenticated data extraction. Patch status unclear — apply input validation. https://radar.offseq.com/threat/cve-2026-94388-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-999d0b4727612d6b #OffSeq #SQLInjection #Infosec #WordPress

CVE-2026-94169 (CRITICAL, CVSS 10) affects Theme-one The Grid <2.8.2. Improper code generation enables code injection — patch immediately to reduce exposure. Full advisory: https://radar.offseq.com/threat/cve-2026-94169-improper-control-of-generation-of-code-code-injection-in-theme-one-the-grid-bc4b07c2fb8ec549 #OffSeq #CVE #WordPress #infosec

CRITICAL: CVE-2026-103768 in ELEX WordPress HelpDesk (<=3.3.7) lets unauthenticated users upload dangerous files via initMailPart, risking remote code execution. Update or mitigate now. https://radar.offseq.com/threat/cve-2026-103768-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-elextensions-elex-wordpress-7d30032c4c181bd8 #OffSeq #WordPress #Infosec #RCE

CVE-2026-111312 (CRITICAL): OpenHealthForAll OpenHealth ≤0.2.0 lets unauthenticated users access, change, or delete any medical record via /api/health-data/[id]. Restrict endpoint access until patched. https://radar.offseq.com/threat/cve-2026-111312-missing-authentication-for-critical-function-in-openhealthforall-openhealth-459af705f709eb85 #OffSeq #CVE2026111312 #infosec #healthtech

CVE-2026-111322 (CRITICAL): coleam00 Archon 0.2.13 – 0.11.1 lacks auth on /api/*, risking remote command execution by unauthenticated users. Restrict API access & monitor; patch status unknown. https://radar.offseq.com/threat/cve-2026-111322-missing-authentication-for-critical-function-in-coleam00-archon-2baeaa2e1000cf2d #OffSeq #Vulnerability #CVE2026111322

CVE-2026-111356 (CRITICAL, CVSS 9.1) in magicblack MacCMS <=2026.1000.4056 allows unauthenticated brute-forcing of password recovery codes, risking account takeover. Rate limiting is advised until a patch is confirmed. https://radar.offseq.com/threat/cve-2026-111356-improper-restriction-of-excessive-authentication-attempts-in-magicblack-maccms-7a578a56fecd347f #OffSeq #CVE2026111356 #infosec #bruteforce

CVE-2026-110922: CRITICAL use-after-free in Chrome Prerender enables remote code execution via crafted HTML. Patch to 155.0.8059.84+ immediately. Details: https://radar.offseq.com/threat/cve-2026-110922-use-after-free-in-google-chrome-712d16481754e9e4 #OffSeq #Chrome #Vuln #Infosec

Deserialization of Untrusted Data in Link Whisper Free (<0.9.8) leads to object injection (CVE-2026-109686, CRITICAL, CVSS 9.8). Update now to protect your sites! https://radar.offseq.com/threat/cve-2026-109686-deserialization-of-untrusted-data-in-link-whisper-inc-link-whisper-free-8c1e9d53b6a1f923 #OffSeq #Vuln #InfoSec #WordPress

Fluent CRM <3.2.6 hit by CRITICAL CVE-2026-109694: incorrect privilege assignment enables unauth’d privilege escalation (CVSS 9.8) 🚨. Patch status TBC — restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-109694-incorrect-privilege-assignment-in-wp-manageninja-llc-fluent-crm-b55f33b4a658d6f8 #OffSeq #WordPress #Vuln #PrivilegeEscalation

CVE-2026-19863: EthereumAuthenticator (v12.1.0 – 12.1.12) has a CRITICAL flaw (CVSS 9.3) where login path substrings in resource URLs allow auth bypass. Patch status unconfirmed — adjust configs to mitigate. https://radar.offseq.com/threat/cve-2026-19863-cwe-288-28283b9ba5fdea3f #OffSeq #CVE202619863 #infosec #vuln

CVE-2026-16438 (CRITICAL, CVSS 9.4): Incorrect privilege assignment in Mitsubishi GENESIS64 & related products. Admin users can launch DCOM objects, risking DoS & data loss. Restrict admin access & monitor usage. https://radar.offseq.com/threat/cve-2026-16438-cwe-266-incorrect-privilege-assignment-in-mitsubishi-electric-corporation-genesis64-980e045a57b35746 #OffSeq #ICS #Vulnerability

Znuny ≤7.3.6 vulnerable to CRITICAL auth bypass (CVE-2026-93483). Attackers can forge the 'Remote-User' HTTP header to access any account, incl. admins. Avoid HTTPBasicAuth and check vendor guidance. https://radar.offseq.com/threat/in-znuny-through-736-an-attacker-can-bypass-specific-standard-login-procedures-and-gain-unauthorized-0c8a601d6b37802f #OffSeq #Znuny #CVE202693483 #infosec

CRITICAL: CVE-2026-108587 in 10Web Booster <=2.34.10 enables unauthenticated file upload (RCE via leaked REST nonce). Restrict wp-content/uploads & monitor uploads. Patch status pending. https://radar.offseq.com/threat/cve-2026-108587-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-10web-10web-booster-website-6312bf250c702c31 #OffSeq #WordPress #Vuln #RCE

D-Link DIR-868L v2.01b05 has a CRITICAL OS command injection (CVE-2026-110536, CVSS 10). Remote, unauthenticated exploit possible — public code released. No patch yet. Restrict access & check vendor guidance. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-868l-201b05-cve-2026-110536-3b13ecc45e7b5b0a #OffSeq #CVE2026110536 #infosec #routersecurity

CVE-2026-110770: Databasus 3.7.0 – 3.61.0 has a CRITICAL auth bypass flaw — unauthenticated attackers can brute-force password reset codes via /api/v1/users/reset-password. Patch unconfirmed — apply external mitigations. https://radar.offseq.com/threat/databasus-370-through-3610-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-6e4063880853e9f3 #OffSeq #CVE2026110770 #infosec

CVE-2026-110858 | GitPython 3.1.30 – 3.2.0: CRITICAL RCE via improper argument neutralization in Remote.pull(). Attackers can run arbitrary OS commands over SSH/local. Limit use & watch for patches. https://radar.offseq.com/threat/cve-2026-110858-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-in-eb08373a6f0fb8af #OffSeq #GitPython #RCE #infosec

CVE-2026-110867: CRITICAL vuln in renovatebot renovate (<44.60.1). Attackers can bypass allowlists via presets, setting restricted env vars & risking privilege escalation on self-hosted. Patch with 44.60.1+. https://radar.offseq.com/threat/cve-2026-110867-incorrect-authorization-in-renovatebot-renovate-241a3325f973ab24 #OffSeq #CVE2026110867 #Renovatebot #Infosec

TR7 ASP (TR7 Cyber Defense Inc.) is vulnerable to unauthenticated OS command injection (CVE-2026-16740, CVSS 9.8, CRITICAL). Remote attackers can fully compromise affected versions. Restrict access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-16740-cwe-306-missing-authentication-for-critical-function-in-tr7-cyber-defense-inc-tr7-asp-604c8853c8296eb5 #OffSeq #Vuln #TR7 #CVE202616740

Citrix, Fortinet, & Ivanti patched 29 vulnerabilities (many CRITICAL). Ivanti Connect Secure VPN zero-day (actively exploited) fixed; Fortinet FortiSIEM/FortiSandbox GUI critical bugs resolved. Apply updates ASAP. https://radar.offseq.com/threat/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products-cf133853998d0c8b #OffSeq #Vulnerability #Infosec #ZeroDay

CVE-2026-104748: CRITICAL privilege escalation in SimpleForm WordPress plugin (<=3.10.0). Unauth users can gain admin via exposed AJAX and weak nonce. Disable/limit access until patched. Full details: https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simpleform-form-maker-to-chat-apps-e30303ee252058a1 #OffSeq #WordPress #PrivilegeEscalation #CVE2026104748

CVE-2026-14851 (CRITICAL, CVSS 9.2): Copart billing service leaks PII & financial data via unauthenticated PDF invoice endpoints. Some URLs are indexed by search engines. Restrict access & block public indexing now. https://radar.offseq.com/threat/cve-2026-14851-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-copart-coparts-ef462fbc1a47157a #OffSeq #CVE #infosec #databreach

CVE-2026-89310: CRITICAL SQL injection in JTL-WMS (<2.0.7, <2.1.3, <2.2.1) 🛑 Remote code execution possible via unsanitized request body. No patch yet. Implement input validation & monitor vendor info: https://radar.offseq.com/threat/cve-2026-89310-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-4dc7d194ff0633df #OffSeq #SQLInjection #Vuln #Infosec

CVE-2026-104800: CRITICAL RCE flaw in streetforce1 AGE-GATE WordPress plugin (≤1.0). Unauthenticated attackers can run arbitrary code via unsafe admin.php endpoint. Remove or restrict plugin use ASAP. https://radar.offseq.com/threat/cve-2026-104800-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-streetforce1-age-gate-02cdeee893e722b9 #OffSeq #WordPress #Vuln #RCE

CVE-2026-87855: CRITICAL RCE in ntbyk JTL-Connector for WooCommerce (<=2.4.3). Unauthenticated file upload due to weak auth & validation. Restrict/disable plugin while awaiting patch. https://radar.offseq.com/threat/cve-2026-87855-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ntbyk-jtl-connector-for-8335c9f626fb9c36 #OffSeq #WordPress #Security #CVE202687855

CVE-2026-110447 (CRITICAL, CVSS 9.2) allows RCE via OS command injection in Collabora Online Built-in CODE Server <26.4.303 (richdocumentscode, Nextcloud). Exploited in the wild since Sept 2026. Patch required. https://radar.offseq.com/threat/cve-2026-110447-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f68ba52513af6028 #OffSeq #Infosec #Nextcloud #CVE2026110447

Ghostscript <10.08.0 is affected by CRITICAL CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows code execution via crafted PDFs. Patch to 10.08.0+. https://radar.offseq.com/threat/cve-2026-39919-heap-based-buffer-overflow-in-artifex-software-ghostscript-343c7db1b580e876 #OffSeq #Vuln #Ghostscript #Security

CVE-2026-110165 — CRITICAL use-after-free in Chrome Core for Android <155.0.8059.79. Allows remote code execution outside sandbox via crafted HTML. Patch ASAP: update to 155.0.8059.79+. Details: https://radar.offseq.com/threat/cve-2026-110165-use-after-free-in-google-chrome-a8d190779682275f #OffSeq #Chrome #Android #Infosec