24h | 7d | 30d

CVE-2026-96652

Overview

  • Plex
  • Media Server
23 Sep 2026
Published
21 Oct 2026
Updated
CVSS v3.1
MEDIUM (4.3)
EPSS
1.82%
KEV

Description

Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination.

Statistics

  • 1 Post
Last activity: 10 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Malpedia~ Critical RCEs, active exploitation, leaked keys and AI-enabled attacks demand urgent patching and exposure review. - IOCs: CVE-2026-109618, CVE-2026-109619, CVE-2026-96652 - #CVE-2026-109618 #RCE #SupplyChain #ThreatIntel
  • 0
  • 0
  • 0
  • 10h ago

CVE-2026-111460

Overview

  • Moxa
  • OnCell G3150A-LTE Series
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (7.7)
EPSS
0.30%
KEV

Description

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

Statistics

  • 1 Post
Last activity: 21 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.

securityonline.info/moxa-vulne

  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-111461

Overview

  • Moxa
  • OnCell G3150A-LTE Series
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (7.5)
EPSS
1.37%
KEV

Description

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.

Statistics

  • 1 Post
Last activity: 21 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.

securityonline.info/moxa-vulne

  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-88772

Overview

  • Citrix NetScaler
  • ADC
27 Sep 2026
Published
28 Sep 2026
Updated
CVSS v4.0
CRITICAL (9.5)
EPSS
78.16%
KEV

Description

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Statistics

  • 1 Post
Last activity: 8 hours ago

Fediverse

Profile picture fallback
CyberNetsecIO @netsecio

📰 Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 8h ago

CVE-2026-88771

Overview

  • Citrix NetScaler
  • ADC
27 Sep 2026
Published
29 Sep 2026
Updated
CVSS v4.0
CRITICAL (9.5)
EPSS
82.16%
KEV

Description

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

Statistics

  • 1 Post
Last activity: 8 hours ago

Fediverse

Profile picture fallback
CyberNetsecIO @netsecio

📰 Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow

🔗 cyber.netsecops.io/articles/ci

  • 0
  • 0
  • 0
  • 8h ago

CVE-2026-105477

Overview

  • Veeam
  • Agent for Linux
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (7.3)
EPSS
0.13%
KEV

Description

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.

Statistics

  • 1 Post
  • 4 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: veeam.com/kb4948, veeam.com/kb4951

  • 1
  • 3
  • 0
  • 22h ago

CVE-2026-108141

Overview

  • Veeam
  • Backup and Replication
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
MEDIUM (5.9)
EPSS
0.36%
KEV

Description

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.

Statistics

  • 1 Post
  • 4 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: veeam.com/kb4948, veeam.com/kb4951

  • 1
  • 3
  • 0
  • 22h ago

CVE-2026-108140

Overview

  • Veeam
  • Backup and Replication
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
MEDIUM (5.9)
EPSS
0.36%
KEV

Description

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.

Statistics

  • 1 Post
  • 4 Interactions
Last activity: 22 hours ago

Fediverse

Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: veeam.com/kb4948, veeam.com/kb4951

  • 1
  • 3
  • 0
  • 22h ago
Showing 91 to 98 of 98 CVEs