Overview
- TP-Link Systems Inc.
- Kasa EC71 v4
Description
Statistics
- 2 Posts
- 306 Interactions
Fediverse
The LG TV network scanning story breaking today includes UDP 9999 Kasa discovery broadcasts every 25 seconds. That's the exact port I documented in CVE-2026-13230 as returning unauthenticated precise GPS coordinates from Kasa cameras with no authentication. Any LG TV + unpatched Kasa camera on the same network = GPS harvesting every 25 seconds. @briankrebs Advisory: https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md
@ohunt I can't speak to the CFAA since I'm no lawyer. Exploitation in this exact scenario isn't a valid classifier either since the underlying vuln of CVE-2026-13230 is a lack of meaningful protection, it equates to intercepting HTTP at this point. Ask and receive. However the protocol that operates on UDP 9999 has been broken for about 10 years now and has an RCE vuln on a different device class.
Overview
- N-able
- N-central
Description
Statistics
- 9 Posts
- 1 Interaction
Fediverse
CVE-2026-86218: N-able N-central on-prem RCE (CRITICAL) enables unauthenticated code execution. Hotfix 4 (2026.3) required ASAP. Nearly 1,500 exposed servers tracked. Patch now: https://radar.offseq.com/threat/n-able-patches-max-severity-n-central-flaw-amid-ongoing-attacks-2b55ee46bb903037 #OffSeq #Nable #RCE #SysAdmin #Infosec
The N-able N-central vulnerability CVE-2026-86218 is a CVSS 10 pre-auth RCE reported exploited in the wild. Apply 2026.3 HF4 immediately.
#Nable #Ncentral #CVE202686218 #PreAuthRCE #RMM #ZeroDay #Huntress #Infosec
Active N-central vulnerability exploitation targets IT servers. Patch the critical N-central vulnerability now to stop pre-auth RCE attacks.
📰 N-able N-central Hit by Actively Exploited CVSS 10.0 RCE Flaw
🚨 URGENT: N-able N-central is being actively exploited via a CVSS 10.0 RCE zero-day (CVE-2026-86218). Unauthenticated attackers can take over RMM servers. On-prem customers must apply Hotfix 4 immediately. #CyberSecurity #RMM #MSP
⚠️ CRITICAL: N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
N-able N-central RMM platform contains a critical unauthenticated RCE vulnerability (CVE-2026-86218, CVSS 10.0) affecting all builds before 2026.3.1.14. While N-able denies confirmed exploitation, incident reports indicate active wild exploitation. Any organization running N-central is at immediate…
🤖 AI generated summary
⚠️ CRITICAL: N-able patches max severity N-central flaw amid ongoing attacks
N-able has released emergency patches for three vulnerabilities in N-central RMM, including a critical unauthenticated RCE (CVE-2026-86218) and two high-severity authentication bypasses. Evidence indicates active exploitation in customer environments. Any organization running N-central is at immedi…
🤖 AI generated summary
Bluesky
Description
Statistics
- 7 Posts
- 7 Interactions
Fediverse
🐀 ZERO-DAY CHROMIUM
La vulnerabilità CVE-2026-85046 nel motore V8 viene sfruttata attivamente. Il problema riguarda Chrome e richiede attenzione anche per i browser basati su Chromium, come Brave, Edge, Vivaldi e Opera.
Controlla la versione installata e aggiorna subito: la privacy non può sostituire una patch di sicurezza.
Geopolitical tensions escalated in the Strait of Hormuz with Iran-US vessel clashes reported (Sept 6). In cybersecurity, Google patched an actively exploited Chrome zero-day (CVE-2026-85046), while the FBI is probing a breach at an ID verification company that may have exposed millions of driver's licenses (Sept 6). AI integration into ALPRs also raises new privacy concerns (Sept 7).
Since I saw people asking, yes it included a fix for the zero day CVE-2026-85046 (Type confusion in V8)
Google corrige un día cero de V8 en Chrome que se explota de forma activa
Google ha distribuido una actualización urgente de Chrome para corregir CVE-2026-85046, un zero-day en V8 con explotación activa. La solución pasa por actualizar a Chrome 152.0.7977.82 o superior y reiniciar el navegador para aplicar el parche.
Geopolitical tensions escalate as Iran announces a "restricted zone" near the Strait of Hormuz, following reports of attacks on vessels. In technology, OpenAI's GPT-6 Astra has achieved "Critical" cyber capabilities, able to discover and exploit vulnerabilities, alongside a $1B pledge for cyber defense. Cybersecurity highlights include a $320M Liquid Network hack and Google patching its sixth Chrome zero-day (CVE-2026-85046) under active exploitation this year.
Bluesky
Overview
- Adobe
- Adobe Commerce
Description
Statistics
- 4 Posts
Fediverse
Adobe Commerce faces a CRITICAL (CVSS 10) template engine flaw (CVE-2026-75650) allowing arbitrary code execution with no user interaction required. Update and monitor for patches. https://radar.offseq.com/threat/cve-2026-75650-improper-neutralization-of-special-elements-used-in-a-template-engine-cwe-1336-in-adobe-1ba4ab0d2a763031 #OffSeq #AdobeCommerce #CVE202675650 #infosec
An Adobe Commerce vulnerability, CVE-2026-75650 (CVSS 10), enables unauthenticated arbitrary code execution and is exploited in the wild. Patch now.
#AdobeCommerce #Magento #StyleSmuggler #CVE202675650 #RCE #Ecommerce #ExploitedInTheWild #Infosec
Bluesky
Overview
- Microsoft
- Windows 10 Version 1607
Description
Statistics
- 2 Posts
- 1 Interaction
Fediverse
A Windows HTTP.sys vulnerability, CVE-2026-62735 (CVSS 7.8), now has public details and a PoC. It escalates local users to SYSTEM. Patch now.
#Windows #HTTPsys #CVE202662735 #PrivilegeEscalation #Pwn2Own #SYSTEM #Infosec #PoC
Overview
Description
Statistics
- 2 Posts
Fediverse
A Dell Secure Connect Gateway vulnerability (CVE-2026-80172, CVSS 9.8) grants unauthorized access via forged admin tokens. Patch SCG now.
#Dell #SecureConnectGateway #CVE202680172 #RCE #UnauthorizedAccess #PatchNow #Infosec #SCG
https://securityonline.info/dell-scg-cve-2026-80172/?utm_source=mastodon&utm_medium=jetpack_social
Overview
- Proxmox Server Solutions GmbH
- Proxmox Virtual Environment (VE)
Description
Statistics
- 3 Posts
Fediverse
🚨 In this week’s newsletter, we cover CVE-2023-54391, a critical authentication bypass affecting Proxmox VE that is seeing exploitation attempts. We break down how attackers can bypass password verification with a single unauthenticated request and what defenders should do next.
Read the full analysis and protect your systems 👉 https://www.crowdsec.net/vulntracking-report/cve-2023-54391-proxmox-ve-authentication-bypass
Overview
- NetScaler
- ADC
Description
Statistics
- 2 Posts
Fediverse
Hackers are actively exploiting CVE-2026-19490, a critical authentication bypass vulnerability in Citrix NetScaler. Update your systems immediately.
#CitrixNetScaler #CyberSecurity #Vulnerability #NetworkSecurity #Infosec
Overview
Description
Statistics
- 3 Posts
- 2 Interactions
Fediverse
SonicWall SMA 1000 vulnerabilities are exploited in the wild. Public PoC exploit code is disclosed for the critical SonicWall SMA 1000 exploit chain.
#SonicWall #SMA1000 #CVE202683548 #Vulnerability #CyberSecurity
Bluesky
Overview
- Mikrotik
- RouterOS
Description
Statistics
- 3 Posts
- 3 Interactions
Fediverse
📰 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit
🚨 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity
⚠️ CRITICAL: Hackers exploit new MikroTik RouterOS flaws to hijack routers
Attackers are actively exploiting two chained critical vulnerabilities in MikroTik RouterOS (CVE-2026-67276 and CVE-2026-86060) to achieve full admin control of exposed routers. A third flaw (CVE-2026-67277) in the bandwidth-test service can cause memory leaks or crashes. Any unpatched MikroTik rou…
🤖 AI generated summary