@thehackerwire.bsky.socialš CVE-2026-108758 - High (8.2)
Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::regist...
https://www.thehackerwire.com/vulnerability/CVE-2026-108758/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108853 - High (8.1)
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allow...
https://www.thehackerwire.com/vulnerability/CVE-2026-108853/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš“ CVE-2026-108860 - Critical (9.1)
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticate...
https://www.thehackerwire.com/vulnerability/CVE-2026-108860/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108963 - High (8.8)
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., ma...
https://www.thehackerwire.com/vulnerability/CVE-2026-108963/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108976 - High (7.8)
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename becaus...
https://www.thehackerwire.com/vulnerability/CVE-2026-108976/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@euvd-bot.bsky.socialšØ EUVD-2026-97123 š 8.8/10 š¢ David-Crty š databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97123 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.socialšØ EUVD-2026-97124 š 7.8/10 š¢ GNU š GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inpu... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97124 #cybersecurity #infosec #cve #euvd
@potato.softwarešØ EUVD-2026-97122
š 5.3/10
š¢ zhayujie
š A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call A...
š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97122
@euvd-bot.bsky.socialšØ EUVD-2026-97121 š 6.1/10 š¢ Cohesity š Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. ... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97121 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.socialšØ EUVD-2026-97122 š 5.3/10 š¢ zhayujie š A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call A... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97122 #cybersecurity #infosec #cve #euvd
@yazoul-alerts.bsky.socialā ļø A leak site post is not a breach. But it's also not nothing.
A threat actor calling itself N0n alleges it hit an unnamed company.
No record count.
https://www.yazoul.net/intel/claim/2026-10-05-company-2-ransomware-claim-by-n0n-october-2026/
by Yazoul AI #CVE #CyberSecurity
@thehackerwire.bsky.socialš CVE-2026-108859 - High (7.5)
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...
https://www.thehackerwire.com/vulnerability/CVE-2026-108859/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108865 - High (8.2)
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthent...
https://www.thehackerwire.com/vulnerability/CVE-2026-108865/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108863 - High (7.5)
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthe...
https://www.thehackerwire.com/vulnerability/CVE-2026-108863/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108905 - High (7.5)
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in T...
https://www.thehackerwire.com/vulnerability/CVE-2026-108905/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.socialš CVE-2026-108902 - High (8.1)
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the p...
https://www.thehackerwire.com/vulnerability/CVE-2026-108902/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@euvd-bot.bsky.socialšØ EUVD-2026-97111 š 7.8/10 š¢ zephyrproject š The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c ... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97111 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.socialšØ EUVD-2026-97112 š 6.8/10 š¢ zephyrproject š The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT9... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97112 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.socialšØ EUVD-2026-97113 š 7.1/10 š¢ zephyrproject š net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first chec... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97113 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.socialšØ EUVD-2026-97114 š 4.8/10 š¢ zephyrproject š The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key || four-tuple) plus a uptim... š https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97114 #cybersecurity #infosec #cve #euvd