#tenda — Public Fediverse posts

🟠 CVE-2026-81481 - High (7.5)

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81481/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92919 - High (8.1)

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92919/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92918 - High (8.8)

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and repla...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86320 - High (7.8)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86320/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78428 - High (8)

For users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78428/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87024 - High (7.5)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86865 - High (8.8)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86865/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Tenda: 1372 CVEs, 98% unpatched, Trust Score D. Avg CVSS 8.11, peak 10.0. Cheap routers, costly exposure. Check your edge gear. https://www.valtersit.com/vendors/tenda/ #cybersecurity #infosec #Tenda

🔴 CVE-2026-70416 - Critical (10)

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61595 - High (7.7)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djust.tenants` isolation was enforced only on the HTTP path. The current tenant was stored in `threading.local(...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-92397 - Critical (9.1)

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92397/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack