#secops — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #secops, aggregated by home.social.
-
2026-08-13 RDP #Honeypot IOCs - 10335 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 7467
178.128.32.226 - 1044
155.117.13.211 - 888Top ASNs:
AS24940 - 7467
AS14061 - 1044
AS16276 - 888Top Accounts:
hello - 10242
Test - 24
Administr - 12Top ISPs:
Hetzner Online GmbH - 7467
DigitalOcean, LLC - 1044
OVH SAS - 888Top Clients:
Unknown - 10335Top Software:
Unknown - 10335Top Keyboards:
Unknown - 10335Top IP Classification:
hosting - 8307
hosting & proxy - 1110
Unknown - 903Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 10335 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 7467
178.128.32.226 - 1044
155.117.13.211 - 888Top ASNs:
AS24940 - 7467
AS14061 - 1044
AS16276 - 888Top Accounts:
hello - 10242
Test - 24
Administr - 12Top ISPs:
Hetzner Online GmbH - 7467
DigitalOcean, LLC - 1044
OVH SAS - 888Top Clients:
Unknown - 10335Top Software:
Unknown - 10335Top Keyboards:
Unknown - 10335Top IP Classification:
hosting - 8307
hosting & proxy - 1110
Unknown - 903Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 10335 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 7467
178.128.32.226 - 1044
155.117.13.211 - 888Top ASNs:
AS24940 - 7467
AS14061 - 1044
AS16276 - 888Top Accounts:
hello - 10242
Test - 24
Administr - 12Top ISPs:
Hetzner Online GmbH - 7467
DigitalOcean, LLC - 1044
OVH SAS - 888Top Clients:
Unknown - 10335Top Software:
Unknown - 10335Top Keyboards:
Unknown - 10335Top IP Classification:
hosting - 8307
hosting & proxy - 1110
Unknown - 903Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 10335 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 7467
178.128.32.226 - 1044
155.117.13.211 - 888Top ASNs:
AS24940 - 7467
AS14061 - 1044
AS16276 - 888Top Accounts:
hello - 10242
Test - 24
Administr - 12Top ISPs:
Hetzner Online GmbH - 7467
DigitalOcean, LLC - 1044
OVH SAS - 888Top Clients:
Unknown - 10335Top Software:
Unknown - 10335Top Keyboards:
Unknown - 10335Top IP Classification:
hosting - 8307
hosting & proxy - 1110
Unknown - 903Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 6890 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4978
178.128.32.226 - 696
155.117.13.211 - 592Top ASNs:
AS24940 - 4978
AS14061 - 696
AS16276 - 592Top Accounts:
hello - 6828
Test - 16
Administr - 8Top ISPs:
Hetzner Online GmbH - 4978
DigitalOcean, LLC - 696
OVH SAS - 592Top Clients:
Unknown - 6890Top Software:
Unknown - 6890Top Keyboards:
Unknown - 6890Top IP Classification:
hosting - 5538
hosting & proxy - 740
Unknown - 602Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 6890 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4978
178.128.32.226 - 696
155.117.13.211 - 592Top ASNs:
AS24940 - 4978
AS14061 - 696
AS16276 - 592Top Accounts:
hello - 6828
Test - 16
Administr - 8Top ISPs:
Hetzner Online GmbH - 4978
DigitalOcean, LLC - 696
OVH SAS - 592Top Clients:
Unknown - 6890Top Software:
Unknown - 6890Top Keyboards:
Unknown - 6890Top IP Classification:
hosting - 5538
hosting & proxy - 740
Unknown - 602Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 6890 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4978
178.128.32.226 - 696
155.117.13.211 - 592Top ASNs:
AS24940 - 4978
AS14061 - 696
AS16276 - 592Top Accounts:
hello - 6828
Test - 16
Administr - 8Top ISPs:
Hetzner Online GmbH - 4978
DigitalOcean, LLC - 696
OVH SAS - 592Top Clients:
Unknown - 6890Top Software:
Unknown - 6890Top Keyboards:
Unknown - 6890Top IP Classification:
hosting - 5538
hosting & proxy - 740
Unknown - 602Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 6890 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4978
178.128.32.226 - 696
155.117.13.211 - 592Top ASNs:
AS24940 - 4978
AS14061 - 696
AS16276 - 592Top Accounts:
hello - 6828
Test - 16
Administr - 8Top ISPs:
Hetzner Online GmbH - 4978
DigitalOcean, LLC - 696
OVH SAS - 592Top Clients:
Unknown - 6890Top Software:
Unknown - 6890Top Keyboards:
Unknown - 6890Top IP Classification:
hosting - 5538
hosting & proxy - 740
Unknown - 602Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 3445 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2489
178.128.32.226 - 348
155.117.13.211 - 296Top ASNs:
AS24940 - 2489
AS14061 - 348
AS16276 - 296Top Accounts:
hello - 3414
Test - 8
Administr - 4Top ISPs:
Hetzner Online GmbH - 2489
DigitalOcean, LLC - 348
OVH SAS - 296Top Clients:
Unknown - 3445Top Software:
Unknown - 3445Top Keyboards:
Unknown - 3445Top IP Classification:
hosting - 2769
hosting & proxy - 370
Unknown - 301Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 3445 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2489
178.128.32.226 - 348
155.117.13.211 - 296Top ASNs:
AS24940 - 2489
AS14061 - 348
AS16276 - 296Top Accounts:
hello - 3414
Test - 8
Administr - 4Top ISPs:
Hetzner Online GmbH - 2489
DigitalOcean, LLC - 348
OVH SAS - 296Top Clients:
Unknown - 3445Top Software:
Unknown - 3445Top Keyboards:
Unknown - 3445Top IP Classification:
hosting - 2769
hosting & proxy - 370
Unknown - 301Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 3445 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2489
178.128.32.226 - 348
155.117.13.211 - 296Top ASNs:
AS24940 - 2489
AS14061 - 348
AS16276 - 296Top Accounts:
hello - 3414
Test - 8
Administr - 4Top ISPs:
Hetzner Online GmbH - 2489
DigitalOcean, LLC - 348
OVH SAS - 296Top Clients:
Unknown - 3445Top Software:
Unknown - 3445Top Keyboards:
Unknown - 3445Top IP Classification:
hosting - 2769
hosting & proxy - 370
Unknown - 301Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 3445 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2489
178.128.32.226 - 348
155.117.13.211 - 296Top ASNs:
AS24940 - 2489
AS14061 - 348
AS16276 - 296Top Accounts:
hello - 3414
Test - 8
Administr - 4Top ISPs:
Hetzner Online GmbH - 2489
DigitalOcean, LLC - 348
OVH SAS - 296Top Clients:
Unknown - 3445Top Software:
Unknown - 3445Top Keyboards:
Unknown - 3445Top IP Classification:
hosting - 2769
hosting & proxy - 370
Unknown - 301Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
🖼️ RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.
Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensió; ImageMagick llegeix el contingut real → Ghostscript executa. XML-RPC i portades MP3 saltaven la validació.
El patch inspecciona bytes reals: bloqueja PostScript/EPS, PDF sense `%PDF-` i gzip/bzip2.
https://blog.elhacker.net/2026/08/vulnerabilidad-rce-en-wordpress-imagick.html
#WordPress #SecOps #ImageMagick -
🖼️ RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.
Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensió; ImageMagick llegeix el contingut real → Ghostscript executa. XML-RPC i portades MP3 saltaven la validació.
El patch inspecciona bytes reals: bloqueja PostScript/EPS, PDF sense `%PDF-` i gzip/bzip2.
https://blog.elhacker.net/2026/08/vulnerabilidad-rce-en-wordpress-imagick.html
#WordPress #SecOps #ImageMagick -
🖼️ RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.
Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensió; ImageMagick llegeix el contingut real → Ghostscript executa. XML-RPC i portades MP3 saltaven la validació.
El patch inspecciona bytes reals: bloqueja PostScript/EPS, PDF sense `%PDF-` i gzip/bzip2.
https://blog.elhacker.net/2026/08/vulnerabilidad-rce-en-wordpress-imagick.html
#WordPress #SecOps #ImageMagick -
🖼️ RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.
Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensió; ImageMagick llegeix el contingut real → Ghostscript executa. XML-RPC i portades MP3 saltaven la validació.
El patch inspecciona bytes reals: bloqueja PostScript/EPS, PDF sense `%PDF-` i gzip/bzip2.
https://blog.elhacker.net/2026/08/vulnerabilidad-rce-en-wordpress-imagick.html
#WordPress #SecOps #ImageMagick -
🖼️ RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.
Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensió; ImageMagick llegeix el contingut real → Ghostscript executa. XML-RPC i portades MP3 saltaven la validació.
El patch inspecciona bytes reals: bloqueja PostScript/EPS, PDF sense `%PDF-` i gzip/bzip2.
https://blog.elhacker.net/2026/08/vulnerabilidad-rce-en-wordpress-imagick.html
#WordPress #SecOps #ImageMagick -
----------------
🎯 AI
===================Recent reports from Anthropic and Google describe offensive AI agents executing substantial parts of intrusions, including vulnerability research and autonomous command generation. A notable July 2026 incident involving OpenAI and Hugging Face demonstrated AI models chaining vulnerabilities across environments to pursue an objective. The core issue for defenders is not detection, but the cost of automated response.
The Response Window Compression
An AI agent operates in a loop: it executes an action, inspects the result, and decides the next step. If an EDR blocks a command, an adaptive offensive agent treats the block as feedback, modifies its approach, and attempts another route. This compresses the response window for SOCs, as manual investigation becomes the slowest part of the defense.The Asymmetry of Errors
The fundamental challenge for defensive AI is the asymmetry in the cost of being wrong. An offensive agent can generate broken commands or select the wrong exploit and remain useful. It only needs one path to succeed. A defensive agent operating in production faces different constraints. If it incorrectly isolates a critical server, terminates a legitimate administrator's process, or disables an essential account, the wrong assessment becomes a production incident.Current Industry Approaches
Existing defensive products reflect this risk. Microsoft states its automatic attack disruption uses incident-level correlation and maintains at least 99 percent precision for containment actions. These actions are reversible, and organizations can exclude critical users, devices, and IP ranges. Google similarly combines adaptive agents with deterministic playbook steps in SecOps, ensuring critical actions remain under explicit control.Implications for Defense
Collecting more evidence or searching systems for artifacts carries a low operational cost. Isolating a privileged account belongs to a completely different risk category. Defenders require significantly stronger guarantees and precision thresholds before allowing an AI system to autonomously change production environments. -
2026-08-12 RDP #Honeypot IOCs - 3636 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2847
155.117.13.211 - 390
103.178.235.50 - 150Top ASNs:
AS24940 - 2847
AS16276 - 390
AS140810 - 150Top Accounts:
hello - 3516
Domain - 27
Test - 18Top ISPs:
Hetzner Online GmbH - 2847
OVH SAS - 390
VPSTTT - 150Top Clients:
Unknown - 3636Top Software:
Unknown - 3636Top Keyboards:
Unknown - 3636Top IP Classification:
hosting - 3072
Unknown - 393
hosting & proxy - 153Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 3636 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2847
155.117.13.211 - 390
103.178.235.50 - 150Top ASNs:
AS24940 - 2847
AS16276 - 390
AS140810 - 150Top Accounts:
hello - 3516
Domain - 27
Test - 18Top ISPs:
Hetzner Online GmbH - 2847
OVH SAS - 390
VPSTTT - 150Top Clients:
Unknown - 3636Top Software:
Unknown - 3636Top Keyboards:
Unknown - 3636Top IP Classification:
hosting - 3072
Unknown - 393
hosting & proxy - 153Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 3636 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2847
155.117.13.211 - 390
103.178.235.50 - 150Top ASNs:
AS24940 - 2847
AS16276 - 390
AS140810 - 150Top Accounts:
hello - 3516
Domain - 27
Test - 18Top ISPs:
Hetzner Online GmbH - 2847
OVH SAS - 390
VPSTTT - 150Top Clients:
Unknown - 3636Top Software:
Unknown - 3636Top Keyboards:
Unknown - 3636Top IP Classification:
hosting - 3072
Unknown - 393
hosting & proxy - 153Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 3636 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2847
155.117.13.211 - 390
103.178.235.50 - 150Top ASNs:
AS24940 - 2847
AS16276 - 390
AS140810 - 150Top Accounts:
hello - 3516
Domain - 27
Test - 18Top ISPs:
Hetzner Online GmbH - 2847
OVH SAS - 390
VPSTTT - 150Top Clients:
Unknown - 3636Top Software:
Unknown - 3636Top Keyboards:
Unknown - 3636Top IP Classification:
hosting - 3072
Unknown - 393
hosting & proxy - 153Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 2424 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1898
155.117.13.211 - 260
103.178.235.50 - 100Top ASNs:
AS24940 - 1898
AS16276 - 260
AS140810 - 100Top Accounts:
hello - 2344
Domain - 18
Test - 12Top ISPs:
Hetzner Online GmbH - 1898
OVH SAS - 260
VPSTTT - 100Top Clients:
Unknown - 2424Top Software:
Unknown - 2424Top Keyboards:
Unknown - 2424Top IP Classification:
hosting - 2048
Unknown - 262
hosting & proxy - 102Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 2424 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1898
155.117.13.211 - 260
103.178.235.50 - 100Top ASNs:
AS24940 - 1898
AS16276 - 260
AS140810 - 100Top Accounts:
hello - 2344
Domain - 18
Test - 12Top ISPs:
Hetzner Online GmbH - 1898
OVH SAS - 260
VPSTTT - 100Top Clients:
Unknown - 2424Top Software:
Unknown - 2424Top Keyboards:
Unknown - 2424Top IP Classification:
hosting - 2048
Unknown - 262
hosting & proxy - 102Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 2424 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1898
155.117.13.211 - 260
103.178.235.50 - 100Top ASNs:
AS24940 - 1898
AS16276 - 260
AS140810 - 100Top Accounts:
hello - 2344
Domain - 18
Test - 12Top ISPs:
Hetzner Online GmbH - 1898
OVH SAS - 260
VPSTTT - 100Top Clients:
Unknown - 2424Top Software:
Unknown - 2424Top Keyboards:
Unknown - 2424Top IP Classification:
hosting - 2048
Unknown - 262
hosting & proxy - 102Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 2424 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1898
155.117.13.211 - 260
103.178.235.50 - 100Top ASNs:
AS24940 - 1898
AS16276 - 260
AS140810 - 100Top Accounts:
hello - 2344
Domain - 18
Test - 12Top ISPs:
Hetzner Online GmbH - 1898
OVH SAS - 260
VPSTTT - 100Top Clients:
Unknown - 2424Top Software:
Unknown - 2424Top Keyboards:
Unknown - 2424Top IP Classification:
hosting - 2048
Unknown - 262
hosting & proxy - 102Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 1212 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 949
155.117.13.211 - 130
103.178.235.50 - 50Top ASNs:
AS24940 - 949
AS16276 - 130
AS140810 - 50Top Accounts:
hello - 1172
Domain - 9
Test - 6Top ISPs:
Hetzner Online GmbH - 949
OVH SAS - 130
VPSTTT - 50Top Clients:
Unknown - 1212Top Software:
Unknown - 1212Top Keyboards:
Unknown - 1212Top IP Classification:
hosting - 1024
Unknown - 131
hosting & proxy - 51Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 1212 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 949
155.117.13.211 - 130
103.178.235.50 - 50Top ASNs:
AS24940 - 949
AS16276 - 130
AS140810 - 50Top Accounts:
hello - 1172
Domain - 9
Test - 6Top ISPs:
Hetzner Online GmbH - 949
OVH SAS - 130
VPSTTT - 50Top Clients:
Unknown - 1212Top Software:
Unknown - 1212Top Keyboards:
Unknown - 1212Top IP Classification:
hosting - 1024
Unknown - 131
hosting & proxy - 51Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 1212 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 949
155.117.13.211 - 130
103.178.235.50 - 50Top ASNs:
AS24940 - 949
AS16276 - 130
AS140810 - 50Top Accounts:
hello - 1172
Domain - 9
Test - 6Top ISPs:
Hetzner Online GmbH - 949
OVH SAS - 130
VPSTTT - 50Top Clients:
Unknown - 1212Top Software:
Unknown - 1212Top Keyboards:
Unknown - 1212Top IP Classification:
hosting - 1024
Unknown - 131
hosting & proxy - 51Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 1212 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 949
155.117.13.211 - 130
103.178.235.50 - 50Top ASNs:
AS24940 - 949
AS16276 - 130
AS140810 - 50Top Accounts:
hello - 1172
Domain - 9
Test - 6Top ISPs:
Hetzner Online GmbH - 949
OVH SAS - 130
VPSTTT - 50Top Clients:
Unknown - 1212Top Software:
Unknown - 1212Top Keyboards:
Unknown - 1212Top IP Classification:
hosting - 1024
Unknown - 131
hosting & proxy - 51Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps
-
CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps
-
CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps
-
CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps
