Live feed · cooey

2026-08-09 NVD CVE

CVE-2026-71989: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

nvd-cve

2026-08-09 NVD CVE

CVE-2026-71990: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the...

axe6600command-injectioncve-2026-71990firmwaremsinvd-cveradixremote-attacks

2026-08-09 NVD CVE

CVE-2026-19348: A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea CRITICAL

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1....

add-actcommand-injectioncve-2026-19348enable-1exploitm300-wi-fi-repeaternet-smacfilter-confnvd-cve

2026-08-09 NVD CVE

CVE-2026-71986: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

arbitrary-code-executionaxe6600command-injectioncve-2026-71986dmzfirmwaremalicious-commandsmsi

2026-08-09 NVD CVE

CVE-2026-71985: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers...

nvd-cve

2026-08-09 NVD CVE

CVE-2026-71992: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

arbitrary-code-executionaxe6600command-injectioncve-2026-71992firmwarefirmware-vulnerabilitiesmacfiltermsi

2026-08-09 NVD CVE

CVE-2026-71987: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

nvd-cve

2026-08-09 NVD CVE

CVE-2026-71988: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

nvd-cve

2026-08-09 NVD CVE

CVE-2026-71984: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can...

arbitrary-code-executionaxe6600command-injectioncve-2026-71984firmwaremalicious-commandsmsinvd-cve

2026-08-08 NVD CVE

CVE-2026-71958: D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71983: MSI Radix AXE6600 router firmware version v781521 contains a command injection v CRITICAL

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71954: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71953: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71955: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71956: D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71950: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71949: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71948: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71951: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formIMEISetup interface. A remote attacker can inject...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-14526: The AI Copilot – Content Generator plugin for WordPress is vulnerable to authori CRITICAL

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to...

administrator-accountai-copilotauthorization-bypasscontents-generatorcve-2026-14526frontend-pagejavascriptmalicious-workflow

2026-08-08 NVD CVE

CVE-2026-71944: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71945: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71946: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPingDiagnosticRun interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71957: D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71947: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can...

nvd-cve

2026-08-08 NVD CVE

CVE-2026-71952: D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 CRITICAL

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formPinManageSetup interface. A remote attacker can inject...

nvd-cve

2026-08-07 CISA advisory

CPDLC over ATN-B1 Vulnerabilities ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-219-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>ATN-B1 CPDLC relies on legacy clear text...

attackaviationcisa-advisorycommunicationcybersecurityexploitinfrastructuremitigation

2026-08-07 CISA advisory

CISA Adds One Known Exploited Vulnerability to Catalog ↗

<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation....

bod-26-04cisacisa-advisorycommand-injectioncve-2026-8037cverecordcyber-attacksfederal-agencies

2026-08-07 NVD CVE

CVE-2026-56793: Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Im HIGH

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...

cve-2026-56793cybersecuritydelldfar-252-204-7012improper-authenticationincident-responsenist-800-171nvd-cve

2026-08-07 NVD CVE

CVE-2026-14365: The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress i CRITICAL

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that...

authorization-bypassnvd-cvepasswords-manipulationsunauthenticated-attacksuser-accountvulnerabilitywordpress-plugin

2026-08-07 NVD CVE

CVE-2026-70332: Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unau CRITICAL

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

microsoftnetworks-spoofingnvd-cveoffice-sharepointssrfvulnerability

2026-08-07 NVD CVE

CVE-2026-14364: The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress i CRITICAL

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3. This is due to the...

accounts-takeovernvd-cvepassword-reset-validationtruebookerunauthenticated-attacksvulnerabilitywordpress-plugin

2026-08-07 NVD CVE

CVE-2026-62836: Improper restriction of communication channel to intended endpoints in Azure SQL HIGH

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

azure-sqlimproper-restrictions-communicationsnetworks-vulnerabilitiesnvd-cveprivileges-elevationunauthorized-attacks

2026-08-07 NVD CVE

CVE-2026-68823: Exposed dangerous method or function in Azure Confidential Ledger allows an auth CRITICAL

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

authentication-breachazure-confidential-ledgersincident-responsenist-800-171nvd-cveransomwarevulnerability

2026-08-07 CISA KEV

Progress LoadMaster Command Injection Vulnerability HIGH ◈ 2 sources · orig. NVD CVE

Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.

appliance-executioncisa-kevcommand-injectionprogress-loadmastersprogress-loadmasters-vulnerabilitiesunauthenticated-attacksunsanitized-inputs

2026-08-07 NVD CVE

CVE-2026-62830: Missing authorization in Azure SRE Agent allows an authorized attacker to elevat CRITICAL

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

authorized-accessazure-sres-agentsmissing-authorizationnetworks-attacksnvd-cveprivileges-elevation

2026-08-07 NVD CVE

CVE-2026-50515: Deserialization of untrusted data in Azure Service Bus allows an authorized atta CRITICAL

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

azure-service-busdeserializationexecution-codenetworknvd-cveuntrusted-datavulnerability

2026-08-07 NVD CVE

CVE-2026-63508: Missing authentication for critical function in Microsoft Planetary Computer Pro CRITICAL

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

authenticationcve-2026-63508microsoftnetworks-attacksnvd-cveplanetary-computer-proprivileges-escalationunauthorized-access

2026-08-06 NVD CVE

CVE-2026-64993: Dell RVTools versions prior to 4.8.1, contains an improper certificate validatio MEDIUM

Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of...

collectorconfidentialitycve-2026-64993delldell-rvtoolimproper-certificate-validationintegrityloss

2026-08-06 NVD CVE

CVE-2026-54489: Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10. CRITICAL

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this...

active-session-credentialsadministratorauthenticate-usercritical-vulnerabilitycve-2026-54489dell-virtual-storage-integratorimpersonationinformation-disclosure