Totolink A3002MU faces a CRITICAL buffer overflow (CVE-2026-90606, CVSS 9.4). Remote exploit possible; public PoC exists. Assess exposure & restrict remote access. https://radar.offseq.com/threat/cve-2026-90606-buffer-overflow-in-totolink-a3002mu-ff1e560ec5dedad6 #OffSeq #CVE202690606 #Vulnerability

LangBot 4.0.8.1 – 4.10.10 has a CRITICAL flaw: weak password reset keys & no rate limiting enable admin password takeovers. Upgrade to 4.10.11+ ASAP. https://radar.offseq.com/threat/cve-2026-90562-insufficient-entropy-in-langbot-app-langbot-e9a2899a1e2d1fa5 #OffSeq #CVE202690562 #AppSec

irontec sngrep <=1.8.4 hit by CRITICAL stack buffer overflow (CVE-2026-90558). Malicious SIP headers can crash or lead to RCE. Avoid untrusted SIP packets, check vendor for fixes. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq...

CVE-2026-90456: CRITICAL in CISA Malcolm (<=26.05.x). Default admin password in inventory module enables takeover if setup isn't run. Regenerate creds now. https://radar.offseq.com/threat/cve-2026-90456-cwe-1392-use-of-default-credentials-in-cisa-malcolm-2141cfec27dc9c24 #OffSeq #CISAMalcolm #sec...

Cloud Foundry UAA faces a CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users can escalate to uaa.admin via wildcard group mapping. Check configs & stay tuned for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #Cloud...

CRITICAL PaperCut NG/MF zero-days (CVE-2026-82078, CVE-2026-81578) exploited by AI-powered attacks. Remote code exec, credential theft, & domain admin access in 48 countries. Patch now: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #ZeroDa...

CRITICAL RCE (CVE-2025-14733) in WatchGuard Firebox (Fireware OS 11.x+, 12.x+, 2025.1 – 2025.1.3) is being exploited by ransomware gangs. Patch now and review VPN settings! https://radar.offseq.com/threat/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks-43ee9be28a996ee8 #OffSeq #Watch...

Chrome HIGH severity zero-day patched after active exploitation. No CVE or version info yet. Update Chrome now to reduce risk. Full details: https://radar.offseq.com/threat/google-warns-of-new-chrome-zero-day-bug-exploited-in-attacks-6560a13f4031475b #OffSeq #Chrome #ZeroDay

Google Chrome CRITICAL vuln (CVE-2026-87628): Cast component use-after-free in <153.0.8010.36 enables code exec outside sandbox. Patch status TBC – review https://radar.offseq.com/threat/cve-2026-87628-use-after-free-in-google-chrome-1e9eb757633453cf #OffSeq #Chrome #Security

Red Hat ELS 9.2 389-ds-base has CRITICAL vulns: heap overflow, privilege escalation, & LDAP ACI bypass. Update to 9.2.4+ now to secure your directory servers. https://radar.offseq.com/threat/red-hat-security-advisory-389-ds-base-security-bug-fix-and-enhancement-update-0c583247a0fb050c #OffSeq #Re...

Red Hat 389-ds-base (RHEL 9.4) hit by CRITICAL vulns: heap overflow, privilege escalation, ACI bypass. Patch now via RHSA-2026:64781 https://radar.offseq.com/threat/red-hat-security-advisory-389-ds-base-security-bug-fix-and-enhancement-update-c933f76430be2c96 #OffSeq #RedHat #LDAP

CRITICAL: D-Link DIR-895L (A1_102b07) stack buffer overflow (CVE-2026-86509) can be exploited via LAN. Exploit is public — apply controls and watch for patches. https://radar.offseq.com/threat/cve-2026-86509-stack-based-buffer-overflow-in-d-link-dir-895l-9794ccee4cffa64a #OffSeq #CVE202686509 #Io...

D-Link DIR-822A A_101 faces a CRITICAL stack buffer overflow (CVE-2026-86296). Remote code execution possible — public exploit exists. Isolate devices & monitor now. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vul...

CRITICAL CVE-2026-86478 in JetBrains YouTrack (<2025.3.161254, <2026.1.14042): improper authentication lets attackers take over accounts. Check the vendor advisory for patch info. https://radar.offseq.com/threat/cve-2026-86478-cwe-290-in-jetbrains-youtrack-04f74ce17c2670a8 #OffSeq #YouTrack #CVE2...

JetBrains Hub faces a CRITICAL vuln (CVE-2026-86480, CVSS 9.8) enabling unauthenticated superuser escalation. No fix yet — restrict access, monitor for rogue services. More: https://radar.offseq.com/threat/cve-2026-86480-cwe-306-in-jetbrains-hub-86541d52679a2997 #OffSeq #JetBrains #CVE202686480

Critical off-by-one vuln in D-Link DIR-605 routers (B1v202WWB03): CVE-2026-86297. Exploit code is public, but attacks are complex. No patch yet — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-86297-off-by-one-in-d-link-dir-605-32dadd3396efded0 #OffSeq #CVE202686297 #RouterSecurity

N-able N-central CRITICAL RCE (CVE-2026-86218) threatens on-prem servers — 1,500+ exposed. Apply Hotfix 4 immediately to prevent remote compromise. Details: https://radar.offseq.com/threat/n-able-patches-max-severity-n-central-flaw-amid-ongoing-attacks-2b55ee46bb903037 #OffSeq #Vulnerability #Pat...

Advantech WISE-6610-NB devices hit by CRITICAL command injection (CVE-2026-79698, CVSS 9.4). Remote exploit available. Upgrade to 1.2.4_20260821 now. https://radar.offseq.com/threat/cve-2026-79698-command-injection-in-advantech-wise-6610-nb-dbc89cbd83837238 #OffSeq #ICS #Security