Citrix NetScaler security snafus get even worse amid more 0-day reports

www.theregister.com/security/202...

#Cybersecurity #Vulnerability #AktiivinenHyväksikäyttö

🟠 CVE-2026-58815 - High (7.8)

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. ...

https://www.thehackerwire.com/vulnerability/CVE-2026-58815/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-55286 - High (7.8)

In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect...

https://www.thehackerwire.com/vulnerability/CVE-2026-55286/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-55280 - High (8.8)

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This co...

https://www.thehackerwire.com/vulnerability/CVE-2026-55280/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-55270 - High (7.8)

In dialInternal in multiple locations, there is a possible permission bypass due to a confused de...

https://www.thehackerwire.com/vulnerability/CVE-2026-55270/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-58859 - High (7.8)

In multiple places, there is a possible denial of service due to an uncaught exception. This cou...

https://www.thehackerwire.com/vulnerability/CVE-2026-58859/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-100511 - High (8.8)

Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-g...

https://www.thehackerwire.com/vulnerability/CVE-2026-100511/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103066 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...

https://www.thehackerwire.com/vulnerability/CVE-2026-103066/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105650 - High (8.1)

Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an at...

https://www.thehackerwire.com/vulnerability/CVE-2026-105650/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105675 - High (7.5)

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permissi...

https://www.thehackerwire.com/vulnerability/CVE-2026-105675/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105691 - Critical (9.9)

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter place...

https://www.thehackerwire.com/vulnerability/CVE-2026-105691/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97257 - High (8.8)

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-...

https://www.thehackerwire.com/vulnerability/CVE-2026-97257/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105634 - High (8.1)

Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial...

https://www.thehackerwire.com/vulnerability/CVE-2026-105634/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105642 - High (8.8)

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing libra...

https://www.thehackerwire.com/vulnerability/CVE-2026-105642/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105641 - Critical (9.8)

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ a...

https://www.thehackerwire.com/vulnerability/CVE-2026-105641/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

Citrix patched a critical zero-day in NetScaler causing denial-of-service attacks, actively exploited and posing risks to government and enterprise systems.

CVE-2026-88779 #Vulnerability #ZeroDay #infosec

Full synthesis & sources: yasna.io

🔴 CVE-2026-105640 - Critical (9.1)

Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses ret...

https://www.thehackerwire.com/vulnerability/CVE-2026-105640/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105639 - Critical (9.8)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a lo...

https://www.thehackerwire.com/vulnerability/CVE-2026-105639/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105638 - Critical (9.1)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login u...

https://www.thehackerwire.com/vulnerability/CVE-2026-105638/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-58865 - High (7.5)

In multiple functions of PduParser.java, there is a possible persistent denial of service due to ...

https://www.thehackerwire.com/vulnerability/CVE-2026-58865/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack