CRITICAL vulnerability in Chrome’s Prerender (CVE-2026-110922) allows remote code execution via crafted HTML. Update to 155.0.8059.84 or later to stay protected. 🚨 https://radar.offseq.com/threat/cve-2026-110922-use-after-free-in-google-chrome-712d16481754e9e4 #OffSeq #Chrome #Security

EthereumAuthenticator v12.1.0 – 12.1.12 faces a CRITICAL vulnerability (CVE-2026-19863). Unauthenticated users may access protected resources via login path substring issue. Review routing configs now. https://radar.offseq.com/threat/cve-2026-19863-cwe-288-28283b9ba5fdea3f #OffSeq #CVE202619863 #...

CVE-2026-110867 (CRITICAL, CVSS 9.0) in renovatebot renovate allows attackers to override restricted env vars on self-hosted systems. Upgrade to 44.60.1+ now. https://radar.offseq.com/threat/cve-2026-110867-incorrect-authorization-in-renovatebot-renovate-241a3325f973ab24 #OffSeq #CVE2026110867 #R...

Ghostscript users: CRITICAL CVE-2026-39919 enables code execution via heap buffer overflow in JPEG 2000 output. Update to 10.08.0+ to mitigate. https://radar.offseq.com/threat/cve-2026-39919-heap-based-buffer-overflow-in-artifex-software-ghostscript-343c7db1b580e876 #OffSeq #Ghostscript #Vulnerab...

CRITICAL use-after-free bug in Chrome for Android (CVE-2026-110165) lets attackers run code outside the sandbox. Update Chrome to 155.0.8059.79+ now. Details: https://radar.offseq.com/threat/cve-2026-110165-use-after-free-in-google-chrome-a8d190779682275f #OffSeq #Android #Chrome

Wavlink WL-WN592AX6 (v250422) hit by CRITICAL OS command injection (CVE-2026-109110). Public exploit out, no vendor patch yet. Restrict device access and watch for attacks. 🚨 https://radar.offseq.com/threat/cve-2026-109110-os-command-injection-in-wavlink-wl-wn592ax6-254609e635513843 #OffSeq #IoTS...

CRITICAL: IBM i 7.3 – 7.6 HTTP Server Admin code injection flaw (CVE-2026-96119, CVSS 9.9). Remote authenticated attackers can execute code. Patch now. https://radar.offseq.com/threat/cve-2026-96119-cwe-94-improper-control-of-generation-of-code-code-injection-f55b8a017b9f656e #OffSeq #IBM #CVE202...

Bricksforge plugin <=3.1.8.9 hit by HIGH severity vuln (CVE-2026-85097) with active exploits. Unauthenticated RCE possible. Update to 3.1.8.10 ASAP. https://radar.offseq.com/threat/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild-294d102eaf91b415 #OffSeq #WordPress #CyberAlert

HIGH-severity out-of-bounds write in sahlberg libnfs (0 – 6.0.2) risks memory corruption. No patch — avoid untrusted data. CVE-2026-108985 full details: https://radar.offseq.com/threat/cve-2026-108985-cwe-787-out-of-bounds-write-in-sahlberg-libnfs-7373951959413281 #OffSeq #Vulnerability #Security

erzhongxmu JEEWMS 2026.09.27-W39 faces a MEDIUM severity SQL injection (CVE-2026-108781) via 'searchstr'. Exploit code is public. Add input validation now — no patch available. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #Vulnerabili...

Piotnet Forms up to 1.0.30 hit by HIGH severity XSS (CVE-2026-96227). Unauthenticated attackers can upload files executing JS. Restrict uploads & monitor for patches. https://radar.offseq.com/threat/cve-2026-96227-cwe-79-cross-site-scripting-xss-in-piotnet-forms-5a16ad1f17e57c01 #OffSeq #WordPres...

ThemeREX Gutentype users: CRITICAL CVE-2026-62046 (≤2.1.12) allows object injection via deserialization. Patch status unconfirmed — check advisories, update ASAP. https://radar.offseq.com/threat/cve-2026-62046-deserialization-of-untrusted-data-in-themerex-group-gutentype-f4d0a8ac3919ab35 #OffSeq ...

ThemeREX Booklovers plugin (<=2.13.0) hit by CRITICAL object injection flaw (CVE-2026-62045, CVSS 9.8). Review your installs & restrict exposure until patched. https://radar.offseq.com/threat/cve-2026-62045-deserialization-of-untrusted-data-in-themerex-group-booklovers-71a61b206a138f37 #OffSeq #C...

Privasys ra-tls-clients <0.5.0 hit by CRITICAL origin validation bug (CVE-2026-108269, CVSS 9.1) — attackers can relay genuine quotes. Upgrade to 0.5.0+ now! https://radar.offseq.com/threat/cve-2026-108269-cwe-346-origin-validation-error-in-privasys-ra-tls-clients-1e6de81a7e6f2eb8 #OffSeq #CVE202...

JetBrains Exposed <1.5.1 hit by CRITICAL SQL injection (CVSS 9.8). Attackers can run arbitrary SQL — upgrade to 1.5.1+ ASAP to protect your database. https://radar.offseq.com/threat/cve-2026-108474-cwe-89-in-jetbrains-exposed-73385fdc0142aed6 #OffSeq #JetBrains #Vuln

PX-lab Zombify ≤1.7.7 has a CRITICAL flaw (CVE-2026-94503) enabling web shell upload and full system compromise. No patch — restrict upload features now. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE2...

CRITICAL RCE vulnerability targets Citrix NetScaler ADC & Gateway. Immediate patching is a must to block remote code execution. Check Citrix advisories for guidance. https://radar.offseq.com/threat/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately-9fd45a98dc5afb78 #OffSeq #Citrix #N...

Apple iCloud CRITICAL vulnerability disclosed. Apple says no security risk; details & PoC coming soon. No patch, no exploits reported. Monitor for updates. https://radar.offseq.com/threat/apple-icloud-critical-vulnerability-full-technical-details-coming-soon-4e7a26fe66456323 #OffSeq #Apple #iCloud

CVE-2026-88131: Microsoft Dataverse deserialization bug (CRITICAL, CVSS 9.8) enables unauthenticated RCE. Patch immediately using Microsoft’s fix: https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #Mi...

Infoblox NIOS 9.0.x – 9.1.0 hit by CRITICAL CVE-2026-107510. High-priv users can escalate via argument injection. Limit admin access & watch for patches. https://radar.offseq.com/threat/cve-2026-107510-vulnerability-in-infoblox-nios-dd277637e9e73e9d #OffSeq #Vulnerability