#vulnerability — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #vulnerability, aggregated by home.social.
-
This Cisco vulnerability has been fixed.
Rapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability
-
This Cisco vulnerability has been fixed.
Rapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability
-
This Cisco vulnerability has been fixed.
Rapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability
-
This Cisco vulnerability has been fixed.
Rapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability
-
This Cisco vulnerability has been fixed.
Rapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability
-
I'm almost inclined to gloat after the 4000 (mere change) layoffs because "look, we're drowning in money. Who needs people?"
- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability
-
I'm almost inclined to gloat after the 4000 (mere change) layoffs because "look, we're drowning in money. Who needs people?"
- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability
-
I'm almost inclined to gloat after the 4000 (mere change) layoffs because "look, we're drowning in money. Who needs people?"
- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability
-
I'm almost inclined to gloat after the 4000 (mere change) layoffs because "look, we're drowning in money. Who needs people?"
- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability
-
I'm almost inclined to gloat after the 4000 (mere change) layoffs because "look, we're drowning in money. Who needs people?"
- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability
-
CISA has listed several industrial vulnerabilities https://www.cisa.gov/ #CISA #vulnerability #infosec
-
What makes you an artist? 🎨🎶
#artist #creative #creativity #art #music #musician #painter #poet #painting #songwriter #perfectionism #poetry #playmusic #independentmusician #musicians #songwriting #musicquotes #musiclovers #makeart
#expression #inspirationalquotes #quotes #artquotes #quote #motivation #inspiration #motivationalquotes #quoteoftheday #creativeart #mindset #artlovers #lifequotes #makearteveryday #creativeprocess #creativeexpression #work #vulnerability -
What makes you an artist? 🎨🎶
#artist #creative #creativity #art #music #musician #painter #poet #painting #songwriter #perfectionism #poetry #playmusic #independentmusician #musicians #songwriting #musicquotes #musiclovers #makeart
#expression #inspirationalquotes #quotes #artquotes #quote #motivation #inspiration #motivationalquotes #quoteoftheday #creativeart #mindset #artlovers #lifequotes #makearteveryday #creativeprocess #creativeexpression #work #vulnerability -
What makes you an artist? 🎨🎶
#artist #creative #creativity #art #music #musician #painter #poet #painting #songwriter #perfectionism #poetry #playmusic #independentmusician #musicians #songwriting #musicquotes #musiclovers #makeart
#expression #inspirationalquotes #quotes #artquotes #quote #motivation #inspiration #motivationalquotes #quoteoftheday #creativeart #mindset #artlovers #lifequotes #makearteveryday #creativeprocess #creativeexpression #work #vulnerability -
What makes you an artist? 🎨🎶
#artist #creative #creativity #art #music #musician #painter #poet #painting #songwriter #perfectionism #poetry #playmusic #independentmusician #musicians #songwriting #musicquotes #musiclovers #makeart
#expression #inspirationalquotes #quotes #artquotes #quote #motivation #inspiration #motivationalquotes #quoteoftheday #creativeart #mindset #artlovers #lifequotes #makearteveryday #creativeprocess #creativeexpression #work #vulnerability -
What makes you an artist? 🎨🎶
#artist #creative #creativity #art #music #musician #painter #poet #painting #songwriter #perfectionism #poetry #playmusic #independentmusician #musicians #songwriting #musicquotes #musiclovers #makeart
#expression #inspirationalquotes #quotes #artquotes #quote #motivation #inspiration #motivationalquotes #quoteoftheday #creativeart #mindset #artlovers #lifequotes #makearteveryday #creativeprocess #creativeexpression #work #vulnerability -
→ #Mythos finds a curl vulnerability
https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/“AI powered code #analyzers are significantly better at finding security flaws and mistakes in #source code than any traditional code analyzers did in the past. All modern AI models are good at this now. Anyone with time and some experimental spirits can find #security problems now.”
“We have not seen any AI so far report a #vulnerability that would somehow be of a novel kind or something totally new.”
-
📰 PraisonAI Auth Bypass (CVE-2026-44338) Exploited Within Four Hours of Disclosure
The disclosure-to-exploit window has collapsed. ⏱️ A critical auth bypass in PraisonAI (CVE-2026-44338) was exploited by automated scanners in under 4 hours. A stark reminder to patch immediately. #CyberSecurity #Vulnerability #Automation #AI
-
📰 PraisonAI Auth Bypass (CVE-2026-44338) Exploited Within Four Hours of Disclosure
The disclosure-to-exploit window has collapsed. ⏱️ A critical auth bypass in PraisonAI (CVE-2026-44338) was exploited by automated scanners in under 4 hours. A stark reminder to patch immediately. #CyberSecurity #Vulnerability #Automation #AI
-
📰 PraisonAI Auth Bypass (CVE-2026-44338) Exploited Within Four Hours of Disclosure
The disclosure-to-exploit window has collapsed. ⏱️ A critical auth bypass in PraisonAI (CVE-2026-44338) was exploited by automated scanners in under 4 hours. A stark reminder to patch immediately. #CyberSecurity #Vulnerability #Automation #AI
-
📰 PraisonAI Auth Bypass (CVE-2026-44338) Exploited Within Four Hours of Disclosure
The disclosure-to-exploit window has collapsed. ⏱️ A critical auth bypass in PraisonAI (CVE-2026-44338) was exploited by automated scanners in under 4 hours. A stark reminder to patch immediately. #CyberSecurity #Vulnerability #Automation #AI
-
Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅
Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇
https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/
#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic
-
Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅
Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇
https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/
#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic
-
Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅
Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇
https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/
#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic
-
Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅
Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇
https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/
#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic
-
Me demoré una semana en terminar este artículo sobre #copyfail para el blog de JuncoTIC, levanto la cabeza, y me encuentro con #DirtyFrag y ahora #Fragnesia... así no se puede 😅
Así que nada, que lo disfruten, y comenten si encuentran algún error, por si se me ha escapado algo 👇👇👇
https://juncotic.com/copyfail-vulnerabilidad-del-sistema-criptografico-de-linux/
#gnu #linux #copyfail #vulnerability #infosec #cybersecurity #ciberseguridad #crypto #encryption #cryptography #aead #cve #juncotic
-
#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability
A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security -
#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability
A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security -
#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability
A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security -
#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability
A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security -
#Fragnesia Made Public As Latest #Linux Local #PrivilegeEscalation #Vulnerability
A new Linux local privilege escalation flaw called Fragnesia has been disclosed as a Dirty Frag-like vulnerability, allowing arbitrary byte writes into the #kernel page cache of read-only files through a separate ESP/XFRM logic bug.
#dirtyfrag #security -
#Linux bitten by second severe #vulnerability in as many weeks
Linux users have been bitten by yet another vulnerability that gives #containers and untrusted users the ability to gain #root access, marking the second time in as many weeks that a severe threat has caught defenders off guard.
#security #privacy -
This affects so many companies..
-
Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....
National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.
Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence
-
Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....
National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.
Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence
-
Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....
National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.
Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence
-
Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....
National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.
Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence
-
Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....
National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.
Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence
-
Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi
-
Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi
-
Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi
-
Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi
-
Android RCE via Wireless Debugging: From Network Access to Shell https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/?utm_source=rss&utm_medium=rss&utm_campaign=android-rce-via-wireless-debugging-from-network-access-to-shell #NetHunterHacker #Vulnerability #CVE‑2026‑0073 #vulnerability #uConsole #Wi-Fi
-
🟠 CVE-2026-44548 - High (8.1)
ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with th...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44548/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🔴 CVE-2026-44547 - Critical (9.6)
ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 is incomplete. The hardening commit was merged and then silently stripped from src/api/routes/public/public-user.php by an unrelated PR before any...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44547/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
🟠 CVE-2026-8108 - High (7.8)
The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8108/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
-
Critical Alert: Microsoft Patches 137 Vulnerabilities in May 2026 Update
#CyberSecurity #PatchTuesday #InfoSec #Microsoft #WindowsUpdate #ZeroClick #Vulnerability #TechNews #ITSecurity #May2026