24h | 7d | 30d

CVE-2026-115884

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 1 Post
Last activity: 14 hours ago

Fediverse

Profile picture fallback
🛡️ #1 hacks.gr @hacksgr

GoAhead embedded web server version 6.1.1 fixes 11 advisories, including a critical OpenSSL revocation check bypass tracked as CVE-2026-115881 and rated 9.1.

The server loaded certificate revocation lists into its default TLS backend but never enabled checking, allowing revoked client certificates to pass login on mutual-TLS setups.

Mbed TLS builds are unaffected.

A LibreSSL legacy verifier issue (CVE-2026-115884) is als…

en.hacks.gr/sovara-provlimata-

#GoAhead #OpenSSL #CVE_2026_115881 #EmbedThis

  • 0
  • 0
  • 0
  • 14h ago

CVE-2026-111585

Overview

  • TeamViewer
  • Full Client
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
Pending
KEV

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

securityonline.info/teamviewer

  • 0
  • 1
  • 0
  • 1h ago

CVE-2026-92372

Overview

  • TeamViewer
  • Full Client
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
Pending
KEV

Description

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to open a specially crafted TeamViewer session recording (.tvs). Missing destination bounds checking in the decoder allows crafted screen-image data to cause an out-of-bounds write to the image buffer. Exploitation requires user interaction.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

securityonline.info/teamviewer

  • 0
  • 1
  • 0
  • 1h ago

CVE-2026-92374

Overview

  • TeamViewer
  • Full Client
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
Pending
KEV

Description

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful exploitation can lead to local privilege escalation to root.

Statistics

  • 1 Post
  • 1 Interaction
Last activity: 1 hour ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

securityonline.info/teamviewer

  • 0
  • 1
  • 0
  • 1h ago

CVE-2023-4863

Overview

  • Google
  • Chrome
12 Sep 2023
Published
21 Oct 2025
Updated
CVSS
Pending
EPSS
99.98%
KEV

Description

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Critical flaws enable code execution, authentication bypass, and arbitrary operations; patch affected products. - IOCs: CVE-2023-4863, CVE-2026-16436, CVE-2026-16437 - #CVE #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-16437

Overview

  • Mitsubishi Electric Corporation
  • GENESIS
15 Oct 2026
Published
16 Oct 2026
Updated
CVSS v4.0
HIGH (7.1)
EPSS
0.09%
KEV

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows an authenticated local user with administrative privileges to unlock the system by tampering with the management file that stores the challenge response. Administrators are able to read and write the management file. But the management file is protected by Windows. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Critical flaws enable code execution, authentication bypass, and arbitrary operations; patch affected products. - IOCs: CVE-2023-4863, CVE-2026-16436, CVE-2026-16437 - #CVE #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-114597

Overview

  • The EPICS Community
  • EPICS Base
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v3.1
HIGH (7.5)
EPSS
Pending
KEV

Description

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ EPICS Base <=7.0.10 flaws enable DoS, memory disclosure, corruption, or code execution; update to 7.0.11. - IOCs: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597 - #CVE #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-28864

Overview

  • Apple
  • iOS and iPadOS
25 Mar 2026
Published
26 Oct 2026
Updated
CVSS
Pending
EPSS
0.18%
KEV

Description

This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPadOS 26.7.2, macOS Sequoia 15.7.5, macOS Sequoia 15.8.2, macOS Sonoma 14.8.5, macOS Tahoe 26.4, macOS Tahoe 26.7.2, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items.

Statistics

  • 1 Post
Last activity: 23 hours ago

Fediverse

Profile picture fallback
ekiledjian @edwardk

Apple Patches for October 2026, (Mon, Oct 26th)

Apple has released its October 2026 security updates, covering 304 vulnerabilities across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari, according to the SANS Internet Storm Center. No new vulnerability in this release is marked as already exploited, but the update delivers iOS 18 patches for CVE-2026-86950, an already-exploited CoreGraphics flaw first patched a month ago; other notable fixes include CVE-2026-86990, which let a malicious app access the camera without permission, and CVE-2026-28864, which let a local attacker access a user’s Keychain items. isc.sans.edu/diary/rss/33458

  • 0
  • 0
  • 0
  • 23h ago

CVE-2026-16436

Overview

  • Mitsubishi Electric Corporation
  • GENESIS
15 Oct 2026
Published
16 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
0.32%
KEV

Description

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.

Statistics

  • 1 Post
Last activity: 17 hours ago

Bluesky

Profile picture fallback
boredchilada @cyfar.ca
~Cisa~ Critical flaws enable code execution, authentication bypass, and arbitrary operations; patch affected products. - IOCs: CVE-2023-4863, CVE-2026-16436, CVE-2026-16437 - #CVE #ICS #ThreatIntel
  • 0
  • 0
  • 0
  • 17h ago

CVE-2026-111460

Overview

  • Moxa
  • OnCell G3150A-LTE Series
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v4.0
HIGH (7.7)
EPSS
0.30%
KEV

Description

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications.

Statistics

  • 1 Post
Last activity: 7 hours ago

Fediverse

Profile picture fallback
Daily CyberSecurity @DailyCyberSecurity

Moxa discloses three Moxa vulnerabilities in MRC Client and the end-of-life OnCell G3150A-LTE, including hard-coded keys and command injection.

securityonline.info/moxa-vulne

  • 0
  • 0
  • 0
  • 7h ago
Showing 71 to 80 of 89 CVEs