Live feed · cooey

2026-08-13 NVD CVE

CVE-2026-19297: IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain una CRITICAL

IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts.

authenticationcve-2026-19297ibmlangflownvd-cveossremote-attackerssecurity

2026-08-13 NVD CVE

CVE-2026-19747: A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B CRITICAL

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE...

attack-vectorscommand-injectioncve-2026-19747cybersecurityexploitnetwork-securitynetworks-devicesnvd-cve

2026-08-13 NVD CVE

CVE-2026-17482: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to e CRITICAL

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.

cve-2026-17482documentationfile-pathibmibm-documentation-offlineimproper-controlnvd-cveremote-code-execution

2026-08-13 CISA advisory

Johnson Controls Metasys ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-14.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

cisacisa-advisorycritical-infrastructurecross-site-scriptingcve-2026-34491cwes-79icicsa-26-225-14

2026-08-13 NVD CVE

CVE-2026-72776: AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution v CRITICAL

AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected...

agenticseekapi-vulnerabilitiesbashinterpretercommand-injectioncors-misconfigurationcvecve-2026-72776host-level-compromise

2026-08-13 CISA advisory

Flow Neuroscience FL-100 ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-225-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

bluetoothbrain-stimulationcisacisa-advisorycve-2026-18164cwe-798cybersecurityfirmware

2026-08-13 NVD CVE

CVE-2026-72839: filebrowser through 2.63.16 fails to properly restrict scope and permissions whe CRITICAL

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server...

access-controlcve-2026-72839default-settingsfile-managementfile-systemfilebrowserfiles-accessfiles-downloads

2026-08-13 CISA advisory

Siemens LOGO! Soft Comfort ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-13.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Siemens LOGO! Soft Comfort contains multiple...

brute-forces-attackcisacisa-advisorycve-2026-57262cve-2026-57263dictionary-attackhard-coded-cryptographic-keysics-securities

2026-08-13 NVD CVE

CVE-2026-72842: luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privile CRITICAL

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit...

acl-inconsistencyauthorization-checkscontainer-managementcve-2026-72842host-side-scriptlow-privileges-authenticate-userlucuses-apps-lxcnetwork-security

2026-08-13 NVD CVE

CVE-2026-73533: Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introd CRITICAL

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file...

administrator-accountbackdoorcve-2026-73533decommissionedmalicious-codeninja-table-pronvd-cvepersistent-file

2026-08-13 NVD CVE

CVE-2026-53791: rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that all CRITICAL

rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source...

access-controls-bypassallow-deny-rulecve-2026-53791daemonforged-source-addressip-spoofingnetwork-securitynvd-cve

2026-08-13 CISA advisory

Siemens License Server (SLS) ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-07.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Siemens License Server is affected by multiple...

cisacisa-advisorycvecve-2026-69108cve-2026-69109icicsa-26-225-07industrial-control-system

2026-08-13 NVD CVE

CVE-2026-73532: Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introdu CRITICAL

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file...

administrator-accountbackdoorcve-2026-73532decommissionedfluent-forms-prosmalicious-codenvd-cvepersistent-file

2026-08-13 CISA advisory

Siemens Parasolid ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-10.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Parasolid is affected by an out of bounds read...

bound-readcisacisa-advisorycritical-manufacturingcve-2026-64629cvss-31cwes-125firewall

2026-08-13 NVD CVE

CVE-2026-67614: CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the We CRITICAL

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an...

authenticationcve-2026-67614cyberpanelfastapihard-coded-secretjwtnvd-cveremote-attacks

2026-08-13 CISA advisory

Siemens Desigo DXR and PXC Controllers ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-08.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>A vulnerability in Desigo DXR and PXC controllers...

bacnetcisacisa-advisorycvecve-2026-59693cwe-754denialdesigo-dxr

2026-08-13 NVD CVE

CVE-2026-72851: Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability i CRITICAL

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to...

automationbudibasecve-2026-72851data-modificationdatasourcedatum-exfiltrationexecutives-queriesjson

2026-08-13 NVD CVE

CVE-2026-18249: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses.

2026-08-13 NVD CVE

CVE-2026-18193: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security re HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses.

2026-08-13 NVD CVE

CVE-2026-17101: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication.

2026-08-13 NVD CVE

CVE-2026-17481: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to e HIGH

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.

arbitrary-code-executioncve-2026-17481documentationibmimproper-outputs-neutralizationlognvd-cveoffline

2026-08-13 NVD CVE

CVE-2026-16961: IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could s HIGH

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

cvecve-2026-16961data-deletiondata-modificationdatabaseibmibm-iinformation-disclosure

2026-08-13 NVD CVE

CVE-2026-16867: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server reso HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation.

authenticate-userauthenticationcve-2026-16867ibm-iimproper-authenticationntlm-session-negotiationnvd-cveremote-attackers

2026-08-13 NVD CVE

CVE-2026-17206: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

arbitrary-code-executionbuffer-overflowcve-2026-17206ibmibm-invd-cveoperating-systemsremote-code-execution

2026-08-13 NVD CVE

CVE-2026-17197: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security re HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

client-asserted-identitycve-2026-17197ibmibm-iibm-i-7-3ibm-i-7-4ibm-i-7-5ibm-i-7-6

2026-08-13 CISA advisory

Johnson Controls Inc. Airwall ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...

airwallarbitrary-file-readscisacisa-advisorycommercial-facilitycritical-infrastructurecritical-manufacturingcve-2026-34492

2026-08-13 NVD CVE

CVE-2026-16815: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of HIGH

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow.

cve-2026-16815denialibm-iibm-i-7-3ibm-i-7-4ibm-i-7-5ibm-i-7-6nvd-cve

2026-08-13 NVD CVE

CVE-2026-72841: luci-app-openvpn fails to properly validate the instance_name2 parameter during CRITICAL

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers...

authenticate-usercve-2026-72841files-uploadluci-apps-openvpnmalicious-payloadsnvd-cveopenvpnpath-traversal

2026-08-13 CISA advisory

Siemens Solid Edge ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-12.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Solid Edge is affected by multiple file parsing...

bound-readbound-writecisacisa-advisorycve-2026-50058cve-2026-50059cve-2026-50060cve-2026-50061

2026-08-13 NVD CVE

CVE-2026-14525: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphe CRITICAL

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.

application-serverauthentication-bypasscve-2026-14525featureibmlibertynvd-cvertcomm-10

2026-08-13 CISA advisory

ANDRITZ HIPASE-250 and 250 SCALA ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...

andrutzandrutz-250-scalaandrutz-hipase-250cisacisa-advisorycvecve-2026-65309cve-2026-65310

2026-08-13 NVD CVE

CVE-2026-72850: Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authe CRITICAL

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .....

arbitrary-file-writeauthenticate-attacksauthenticationbudibasecloud-storagecve-2026-72850exportfile-traversal

2026-08-12 News

Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition ↗

Attackers continue to target critical infrastructure and government-linked organizations in the country, mirroring the increased activity across Latin America.

2026-08-12 NVD CVE

CVE-2026-72508: A flaw was found in the multicloud-operators-subscription component of Red Hat A CRITICAL

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating...

nvd-cve

2026-08-12 NVD CVE

CVE-2026-73268: A flaw was found in the cluster-curator-controller component of multicluster eng CRITICAL

A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is...

nvd-cve

2026-08-12 NVD CVE

CVE-2024-27253: IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated CRITICAL

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.

nvd-cve

2026-08-12 NVD CVE

CVE-2026-17083: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary CRITICAL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

nvd-cve

2026-08-12 NVD CVE

CVE-2025-41769: The device's PROFINET service is affected by a buffer overflow vulnerability tha CRITICAL

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or...

arbitrary-code-executionbuffer-overflowcve-2025-41769default-configurationdevice-rebootexploitindustrial-control-systemnetworks-vulnerabilities

2026-08-12 NVD CVE

CVE-2026-71471: A flaw was found in acm-search-v2-rhel9. An attacker with administrative privile CRITICAL

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the...

nvd-cve

2026-08-12 NVD CVE

CVE-2026-72526: A flaw was found in the multicloud-integrations component. The Application propa CRITICAL

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A...

annotation-validationapplications-custom-resourceargos-cdcluster-managementcode-executioncve-2026-72526hub-clustermanifest-synchronization