Microsoft Patches Exploited Entra ID Vulnerability

www.securityweek.com/microsoft-ro...

#Cybersecurity #ThreatIntel #Vulnerability

Discover the latest JetBrains software vulnerabilities, including TeamCity RCE bugs and Exposed SQLi flaws. Apply security patches immediately.

#JetBrains #Vulnerability #TeamCity #CyberSecurity #CVE2026108474

The gap between a patch being released and a server being popped has shrunk to a window so small you can't even fit a morning coffee in it.

#vulnerability #phishing #infosec

I learned the rules
When I was young
Boys don’t cry

You can cry if you break a bone
But you never cry over feelings

INSURGENCY OF VULNERABILITY byporevolution.com/2026/08/insu...
inspired by @boundeagle1.bsky.social
#vulnerability #masculinity #intiamcy #poetry #poem #prophecy #menswork #joy

🟠 CVE-2026-107805 - High (7.5)

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signa...

https://www.thehackerwire.com/vulnerability/CVE-2026-107805/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108101 - High (7.5)

HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in Plant...

https://www.thehackerwire.com/vulnerability/CVE-2026-108101/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108107 - Critical (9.8)

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radiu...

https://www.thehackerwire.com/vulnerability/CVE-2026-108107/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108106 - High (7.5)

Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that all...

https://www.thehackerwire.com/vulnerability/CVE-2026-108106/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108109 - Critical (9.1)

PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password ...

https://www.thehackerwire.com/vulnerability/CVE-2026-108109/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-28745 - High (7.5)

Usernames and passwords, including the default credentials, are stored in the configuration file ...

https://www.thehackerwire.com/vulnerability/CVE-2026-28745/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-15340 - Critical (9.8)

lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

https://www.thehackerwire.com/vulnerability/CVE-2026-15340/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-39460 - High (8.1)

Usernames and passwords, including the default factory credentials, are stored in plaintext withi...

https://www.thehackerwire.com/vulnerability/CVE-2026-39460/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-39453 - High (8.3)

Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be...

https://www.thehackerwire.com/vulnerability/CVE-2026-39453/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-33367 - High (8.1)

SNMP can be used to perform administrative actions such as retrieving configuration files, modify...

https://www.thehackerwire.com/vulnerability/CVE-2026-33367/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75346 - High (7.5)

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit...

https://www.thehackerwire.com/vulnerability/CVE-2026-75346/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75351 - High (7.5)

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP Forward...

https://www.thehackerwire.com/vulnerability/CVE-2026-75351/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108264 - Critical (9.1)

Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other m...

https://www.thehackerwire.com/vulnerability/CVE-2026-108264/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108263 - Critical (9.9)

Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, ...

https://www.thehackerwire.com/vulnerability/CVE-2026-108263/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-108261 - Critical (9.3)

Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, th...

https://www.thehackerwire.com/vulnerability/CVE-2026-108261/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-108260 - High (7.6)

Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packag...

https://www.thehackerwire.com/vulnerability/CVE-2026-108260/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack