24h | 7d | 30d

CVE-2026-114613

Overview

  • msgpack
  • msgpack-python
22 Oct 2026
Published
23 Oct 2026
Updated
CVSS v3.1
HIGH (7.5)
EPSS
0.44%
KEV

Description

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled MessagePack data. Both unpackb() and the streaming Unpacker API are affected. The pure-Python fallback does not exhibit this leak in the reported tests. This issue is fixed in version 1.2.3.

Statistics

  • 1 Post
Last activity: 1 hour ago

Bluesky

Profile picture fallback
Lambda Watchdog @lambdawatchdog.bsky.social
🚨 New HIGH CVE detected in AWS Lambda 🚨 CVE-2026-114613 impacts msgpack in 4 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/780 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-109932

Overview

  • undici
  • undici
15 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
MEDIUM (5.9)
EPSS
0.32%
KEV

Description

undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memory by a malicious or compromised WebSocket server. For every PING frame received, the client automatically writes a PONG response and ignores the backpressure signal from the socket write, so a server that streams small PING frames while never reading the client's PONGs makes the outbound write queue and heap grow without bound until the Node.js process runs out of memory and terminates. The attack is remote and unauthenticated, needs only a normal WebSocket connection, and is asymmetric, since small inbound PINGs produce a much larger retained outbound queue, with availability the only impact. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which pause WebSocket frame parsing when the automatic PONG response hits socket backpressure and resume on drain, bounding the outbound queue, and users should upgrade to one of those versions or later. There is no workaround.

Statistics

  • 1 Post
Last activity: 1 hour ago

Bluesky

Profile picture fallback
Lambda Watchdog @lambdawatchdog.bsky.social
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2026-109932 impacts undici in 4 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/783 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-96951

Overview

  • Microsoft
  • Outlook.com
13 Oct 2026
Published
26 Oct 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
9.81%
KEV

Description

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
Last activity: 16 hours ago

Bluesky

Profile picture fallback
Undercode Testing @undercode.bsky.social
CVE-2026-96951 Exploitation and Mitigation: Ensuring Post-Patch Security Posture + Video Introduction: Patch Tuesday releases critical security updates intended to remediate high-risk vulnerabilities across corporate infrastructure, but installing an update does not guarantee complete threat…
  • 0
  • 0
  • 0
  • 16h ago

CVE-2026-90940

Overview

  • 201206030
  • novel-plus
14 Sep 2026
Published
24 Sep 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
0.55%
KEV

Description

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation by accessing the cache/refresh endpoint with the known default password, forcing unnecessary database queries to repopulate the cache.

Statistics

  • 1 Post
Last activity: 9 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-90940 novel-plus: hardcoded default cache password lets anonymous attackers invalidate caches (CVSS 5.3, DoS via forced DB reloads). Patch under review - restrict the endpoint now. #CVE #infosec valtersit.com/cve/CVE-2026-909

  • 0
  • 0
  • 0
  • 9h ago

CVE-2026-87018

Overview

  • undici
  • undici
15 Oct 2026
Published
16 Oct 2026
Updated
CVSS v3.1
HIGH (7.5)
EPSS
0.19%
KEV

Description

undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not match the requested host. Node.js re-runs hostname verification on the renegotiated handshake and destroys the socket with a certificate-altname error, but undici's established-socket error handler asserted that this error code could never occur, so the peer-controlled error became an uncaught assertion that terminates the Node.js process, affecting both the HTTP/1.1 and HTTP/2 paths. A malicious or compromised HTTPS endpoint reached through undici or the global fetch() can crash the client with a single server-initiated renegotiation, taking down all in-flight requests and background work in the process, and exploitation needs no CA compromise because the attacker controls the endpoint and can present two ordinary valid certificates. Only TLS 1.2 is affected, since TLS 1.3 does not support renegotiation. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. As a workaround, restrict outbound connections to TLS 1.3 so renegotiation cannot occur, when the target endpoints support it.

Statistics

  • 1 Post
Last activity: 1 hour ago

Bluesky

Profile picture fallback
Lambda Watchdog @lambdawatchdog.bsky.social
🚨 New HIGH CVE detected in AWS Lambda 🚨 CVE-2026-87018 impacts undici in 4 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/782 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
  • 0
  • 0
  • 0
  • 1h ago

CVE-2026-86552

Overview

  • ZTE
  • SmartLife
20 Sep 2026
Published
21 Sep 2026
Updated
CVSS v3.1
MEDIUM (5.4)
EPSS
0.36%
KEV

Description

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface /account/person/signup.serv. Email ownership is not verified prior to registration.

Statistics

  • 1 Post
Last activity: 11 hours ago

Fediverse

Profile picture fallback
Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-86552: SmartLife app auth flaw lets attackers register accounts with any email, no verification, via /account/person/signup.serv. CVSS 5.4, patch status unknown. Audit your exposure and lock down registration now. #CVE #infosec #cybersecurity valtersit.com/cve/CVE-2026-865

  • 0
  • 0
  • 0
  • 11h ago

CVE-2026-107671

Overview

  • Veeam
  • ONE
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (8.5)
EPSS
0.35%
KEV

Description

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

Statistics

  • 2 Posts
  • 4 Interactions
Last activity: 13 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

securityonline.info/veeam-vuln

  • 0
  • 0
  • 0
  • 14h ago
Profile picture fallback
Dark Web Informer :verified_paw: @DarkWebInformer

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: veeam.com/kb4948, veeam.com/kb4951

  • 1
  • 3
  • 0
  • 13h ago

CVE-2026-111459

Overview

  • Moxa
  • Moxa Remote Connect Suite (MRC Client)
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (7.6)
EPSS
0.17%
KEV

Description

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications.

Statistics

  • 2 Posts
Last activity: 12 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.

securityonline.info/moxa-vulne

  • 0
  • 0
  • 0
  • 12h ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cybergcca~ Critical PHP RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619 are in CISA KEV; update affected products. - IOCs: CVE-2026-109618, CVE-2026-109619, CVE-2026-111459 - #CVE #Cybersecurity #ThreatIntel
  • 0
  • 0
  • 0
  • 21h ago

CVE-2026-98432

Overview

  • Linux
  • Linux
15 Oct 2026
Published
24 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
0.39%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Statistics

  • 1 Post
Last activity: 5 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

Anthropic's Frontier Red Team reported that an unreleased AI model successfully found and chained security flaws across Chrome, Safari, Android, Windows, and Linux to build working lab exploits.

The research included a Chrome chain executing code outside the sandbox, a Safari data-reading bug, an Android USB data-extraction flaw, plus CVE-2026-33096 on Windows and CVE-2026-98432 on Linux.

All issues were reported to vendors first a…

en.hacks.gr/techniti-noimosyni

#Anthropic #Claude #Android #Chrome

  • 0
  • 0
  • 0
  • 5h ago

CVE-2026-103594

Overview

  • WatchGuard
  • Fireware OS
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.5)
EPSS
0.43%
KEV

Description

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by tampering with a FireCloud Gateway configuration payload.

Statistics

  • 1 Post
Last activity: 13 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

securityonline.info/watchguard

  • 0
  • 0
  • 0
  • 13h ago
Showing 61 to 70 of 89 CVEs