24h | 7d | 30d

CVE-2026-123158

Overview

  • OpenBSD
  • OpenSSH
05 Nov 2026
Published
08 Nov 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
1.01%
KEV

Description

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.

Statistics

  • 5 Posts
Last activity: Last hour

Fediverse

Profile picture fallback
ThreatNoir @threatnoir

2026-W45 — Weekly Threat Roundup

🔓 OpenSSH 'SSHole' (CVE-2026-123158) was exploited within hours of disclosure, granting root access on Alpine Linux and other musl-based systems — patch immediately.
🤖 The ARTEX AI hacking framework is now a full threat ecosystem: exposed on 1,465 public servers, used to breach South Korean banks…

threatnoir.com/weekly/2026-w45

🤖 AI generated summary

  • 0
  • 0
  • 0
  • 9h ago
Profile picture fallback
ThreatNoir @threatnoir

⚠️ CRITICAL: Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

OpenSSH vulnerability CVE-2026-123158 (SSHole) is under active exploitation within hours of disclosure. Unauthenticated attackers can gain root access on Linux systems with passwordless accounts by sending oversized passwords. Any exposed OpenSSH instance is at immediate risk of full compromise.

threatnoir.com/focus

🤖 AI generated summary

  • 0
  • 0
  • 0
  • 1h ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
Deep Dive Analysis of CVE-2026-123158 (SSHole): OpenSSH Authentication Bypass on musl-libc Systems + Video Introduction: CVE-2026-123158, widely known as "SSHole," is a high-severity authentication bypass vulnerability affecting OpenSSH server deployments running on lightweight, musl libc-based…
  • 0
  • 0
  • 0
  • 19h ago
Profile picture fallback
OpsMatters @opsmatters.com
The latest update for #getastra includes "CVE-2026-123158 (sshole)" and "Nvidia Brev Security Breach: SSH Keys for Customer VMs Exposed". #cybersecurity #webprotection #pentesting https://opsmtrs.com/3KjMi92
  • 0
  • 0
  • 0
  • 9h ago
Profile picture fallback
SANS.edu Internet Storm Center @sansisc.bsky.social
Scans for Sshole Vulnerability (CVE-2026-123158) https://isc.sans.edu/diary/33498
  • 0
  • 0
  • 0
  • Last hour

CVE-2026-98432

Overview

  • Linux
  • Linux
15 Oct 2026
Published
03 Nov 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
0.76%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Statistics

  • 2 Posts
  • 44 Interactions
Last activity: 6 hours ago

Fediverse

Profile picture fallback
Erik Nygren :verified: @nygren

#Ubuntu / @ubuntu - what is up with not having fixed ubuntu.com/security/CVE-2026-9 and ubuntu.com/security/CVE-2026-9 three weeks after they were released? There's got to be some backstory here, but if there is you should be explaining and communicating effectively on it. Myself and many of my peers who have been using and recommending Ubuntu for many years are now strongly considering whether we need to re-evaluate our go-to choice for OS. Prompt patch availability for security vulnerabilities in the kernel and core OS components is table stakes for an OS distribution.

  • 4
  • 5
  • 0
  • 22h ago

Bluesky

Profile picture fallback
EULE (EU Linux Evolution) @eulinuxevolutionde.eurosky.social
FRITZ!Box: Kritische Linux-Lücke CVE-2026-98432 www.windows-faq.de/2026/11/07/f... #Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #FRITZ #FRITZBox #CVE #OpenSource
  • 8
  • 27
  • 0
  • 6h ago

CVE-2026-123551

Overview

  • OpenIdentityPlatform
  • OpenAM
08 Nov 2026
Published
08 Nov 2026
Updated
CVSS v4.0
CRITICAL (10.0)
EPSS
0.43%
KEV

Description

OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session tokens from the notification WebSocket. Attackers can bypass the agent-only check through an unvalidated internal forward on legacy Liberty ID-FF endpoints, collecting iPlanetDirectoryPro tokens to hijack user and administrator sessions.

Statistics

  • 2 Posts
Last activity: 11 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-123551: CRITICAL info disclosure in OpenAM (14.0.0 – <16.1.4). Unauth attackers can hijack user/admin sessions by stealing tokens via notification WebSocket. Upgrade to 16.1.4 ASAP. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 11h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CVE Radar | CVE-2026-123551 | CVSS 10.0 OpenAM Session Token Disclosure CVE-2026-123551 affects OpenAM versions from 14.0.0 before 16.1.4. Full analysis: https://t.me/aiutocomputerhelp_lab/1393
  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-114713

Overview

  • UnrealIRCd
  • UnrealIRCd
08 Nov 2026
Published
08 Nov 2026
Updated
CVSS v3.1
HIGH (8.6)
EPSS
0.29%
KEV

Description

The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that are executed with server authority.

Statistics

  • 1 Post
  • 2 Interactions
Last activity: 4 hours ago

Fediverse

Profile picture fallback
UnrealIRCd @unrealircd

RE: fosstodon.org/@unrealircd/1175

⚠️ We are now seeing attempts by bad guys to actively exploit CVE-2026-114713 in UnrealIRCd on the internet. If you have not hot-patched or upgraded, do so ASAP! #IRC #infosec

  • 1
  • 1
  • 0
  • 4h ago

CVE-2026-1242

Overview

  • blockspare
  • BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites
19 Sep 2026
Published
19 Sep 2026
Updated
CVSS v3.1
MEDIUM (4.3)
EPSS
0.30%
KEV

Description

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND (&&) operator instead of an OR (||) operator. This makes it possible for authenticated attackers, with Subscriber-level access and above, to bypass authorization checks and create arbitrary posts.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 18 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-1242 BlockSpare WordPress plugin authorization bypass (CVSS 4.3): an && vs || logic flaw lets Subscriber-level users create arbitrary posts. Unpatched. Restrict plugin access now. #CVE #infosec #WordPress valtersit.com/cve/CVE-2026-124

  • 1
  • 0
  • 0
  • 18h ago

CVE-2026-111497

Overview

  • Google
  • Brotli
  • github.com/google/brotli
22 Oct 2026
Published
06 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
82.64%
KEV

Description

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Statistics

  • 2 Posts
Last activity: 4 hours ago

Bluesky

Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
C3RB3R Ransomware Mass-Encrypting Internet-Exposed Synology NAS and Active Exploitation of Node2Shell (CVE-2026-111497)
  • 0
  • 0
  • 0
  • 4h ago
Profile picture fallback
GCP Weekly @gcpweekly.bsky.social
fixes for apigee-fluent-bit. This addresses the following vulnerabilities: CVE-2026-111497 CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-5450 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-58050 CVE-2026-58051 CVE-2026-5928 CVE-2026-66032 CVE-2026-66033
  • 0
  • 0
  • 0
  • 10h ago

CVE-2026-123614

Overview

  • imgproxy
  • imgproxy
08 Nov 2026
Published
08 Nov 2026
Updated
CVSS v4.0
CRITICAL (9.3)
EPSS
0.66%
KEV

Description

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vips/icoload.c, corrupting heap memory to crash the process or achieve code execution.

Statistics

  • 2 Posts
  • 1 Interaction
Last activity: 8 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

imgproxy 4.0.0 – 4.0.15 hit by CRITICAL CVE-2026-123614: Integer overflow in ICO loader allows RCE or crashes via crafted images. Upgrade to 4.0.16+ ASAP! Severity: 9.8. Details: radar.offseq.com/threat/imgpro

  • 0
  • 1
  • 0
  • 8h ago
Profile picture fallback
OffSequence @offseq

imgproxy versions 4.0.0 – <4.0.16 impacted by CVE-2026-123614 (CRITICAL): Heap-based buffer overflow in ICO loader may allow remote code execution or DoS. Patch to 4.0.16+ now. 🔒 radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 12h ago

CVE-2026-8354

Overview

  • celomitan
  • Gum Addon for Elementor
19 Sep 2026
Published
19 Sep 2026
Updated
CVSS v3.1
MEDIUM (6.4)
EPSS
0.35%
KEV

Description

The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' parameter in all versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 4 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-8354: stored XSS in Gum Addon for Elementor (WordPress) up to 1.3.15 via pop_tag, contributor+ can inject scripts. CVSS 6.4, no patch known. Update or disable the plugin now. #CVE #WordPress #infosec valtersit.com/cve/CVE-2026-835

  • 0
  • 1
  • 0
  • 4h ago

CVE-2026-83844

Overview

  • Microsoft
  • Microsoft Paint
13 Oct 2026
Published
07 Nov 2026
Updated
CVSS v3.1
HIGH (7.0)
EPSS
0.38%
KEV

Description

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 7 hours ago

Bluesky

Profile picture fallback
Hacker News @mm-hacker-news.bsky.social
MS Paint Remote Code Execution Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83844
  • 0
  • 1
  • 0
  • 7h ago

CVE-2026-119977

Overview

  • WordPress Foundation
  • WordPress
31 Oct 2026
Published
04 Nov 2026
Updated
CVSS v3.1
HIGH (8.1)
EPSS
1.16%
KEV

Description

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.

Statistics

  • 1 Post
Last activity: 23 hours ago

Fediverse

Profile picture fallback
AllAboutSecurity @allaboutsecurity

WordPress-Sicherheitslücke: Über 240.000 Angriffe auf das Core-Update

Seit dem 28. Oktober 2026 versuchen Angreifer, eine Schwachstelle im Upgrade-Prozess des WordPress-Kerns auszunutzen. Die Lücke CVE-2026-119977 kann eine Remote-Code-Ausführung ermöglichen. Die Wordfence-Firewall hat bislang mehr als 240.000 Versuche blockiert.

all-about-security.de/wordpres

#wordpress #security #schwachstellen

  • 0
  • 0
  • 0
  • 23h ago
Showing 1 to 10 of 95 CVEs