Live and recent posts from across the Fediverse tagged #tenda, aggregated by home.social.
π CVE-2026-79803 - High (8.8)
A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.
π https://www.thehackerwire.com/vulnerability/CVE-2026-79803/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79802 - High (8.8)
A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated p...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79802/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-79801 - Critical (9.8)
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to e...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79801/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79800 - High (8.8)
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges o...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79800/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79799 - High (8.8)
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful ex...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79799/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-79798 - Critical (9.9)
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful e...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79798/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79797 - High (8.8)
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthentica...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79797/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-79796 - Critical (9.8)
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attac...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79796/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79808 - High (7.8)
A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the avai...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79808/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79807 - High (7.8)
A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute at...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79807/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-79806 - High (7.8)
A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges ...
π https://www.thehackerwire.com/vulnerability/CVE-2026-79806/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-79805 - Critical (9.8)
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.
π https://www.thehackerwire.com/vulnerability/CVE-2026-79805/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105797 - High (8.8)
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-pri...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105797/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105796 - High (8.8)
Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a termin...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105796/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105793 - Critical (9.1)
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes it to `adb ...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105793/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-104073 - High (7.6)
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Djang...
π https://www.thehackerwire.com/vulnerability/CVE-2026-104073/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106118 - High (7.5)
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. T...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106118/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106440 - High (7.8)
Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hyd...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106440/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106443 - High (8.8)
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to Pillow's generic image d...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106443/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106442 - High (7.8)
Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompletely checks the effective callable selected by the target field. E...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106442/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106441 - High (7.8)
Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without applying Hydra's target policy to handler class values or formatte...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106441/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-63697 - High (7.6)
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
π https://www.thehackerwire.com/vulnerability/CVE-2026-63697/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-86362 - High (8.2)
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
π https://www.thehackerwire.com/vulnerability/CVE-2026-86362/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-86361 - High (8.2)
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privi...
π https://www.thehackerwire.com/vulnerability/CVE-2026-86361/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-86360 - Critical (9.6)
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, l...
π https://www.thehackerwire.com/vulnerability/CVE-2026-86360/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-63688 - Critical (10)
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this ...
π https://www.thehackerwire.com/vulnerability/CVE-2026-63688/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-104070 - Critical (9.8)
The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the...
π https://www.thehackerwire.com/vulnerability/CVE-2026-104070/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-104850 - High (7.5)
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide whi...
π https://www.thehackerwire.com/vulnerability/CVE-2026-104850/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-101207 - High (8.8)
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote a...
π https://www.thehackerwire.com/vulnerability/CVE-2026-101207/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-106113 - High (7.5)
ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image and applying HistogramEqualization can produce a non-finite or out-of-range luminance in ColorNumerics.GetBT709Luminance...
π https://www.thehackerwire.com/vulnerability/CVE-2026-106113/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-63692 - Critical (10)
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of...
π https://www.thehackerwire.com/vulnerability/CVE-2026-63692/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105845 - Critical (9.8)
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105845/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-61411 - High (7.7)
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Informati...
π https://www.thehackerwire.com/vulnerability/CVE-2026-61411/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-67273 - Critical (9.6)
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
π https://www.thehackerwire.com/vulnerability/CVE-2026-67273/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-67270 - High (8.2)
Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, lead...
π https://www.thehackerwire.com/vulnerability/CVE-2026-67270/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-76105 - High (7.7)
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
π https://www.thehackerwire.com/vulnerability/CVE-2026-76105/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105293 - High (8.1)
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as thro...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105293/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105295 - High (7.5)
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid ...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105295/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105220 - High (7.8)
Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScra...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105220/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105219 - High (7.5)
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an untermina...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105219/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105089 - High (8.7)
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 URL. The value is rendered unescaped in YouPHPFlix2 templates and chann...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105089/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105086 - High (8.7)
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString() strips tags before decoding entitie...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105086/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105135 - Critical (10)
A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agent. The manipulation of the argument inputs leads to code injection....
π https://www.thehackerwire.com/vulnerability/CVE-2026-105135/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105134 - Critical (10)
A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os comman...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105134/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-103355 - Critical (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection...
π https://www.thehackerwire.com/vulnerability/CVE-2026-103355/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-97307 - High (7.5)
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17.
π https://www.thehackerwire.com/vulnerability/CVE-2026-97307/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105208 - High (7.7)
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An atta...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105208/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105207 - Critical (9.8)
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permission, including on identify-only Login V2 sessions and via the User S...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105207/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π΄ CVE-2026-105215 - Critical (9.1)
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105215/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
π CVE-2026-105213 - High (8.2)
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users of a deactivated organization who hold valid credentials, an existing session, or a refres...
π https://www.thehackerwire.com/vulnerability/CVE-2026-105213/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack