Live feed · cooey

2026-07-30 NVD CVE

CVE-2026-66418: OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability t CRITICAL

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed...

audit-logsauthentication-bypassconfiguration-changescontents-security-policycross-site-scriptingcve-2026-66418endpoint-accessesfailed-login

2026-07-30 NVD CVE

CVE-2026-28323: SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass CRITICAL

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

authentication-bypasscisacmmc-level-2compliancecve-2026-28323defense-industrial-basedodfedramp-authorization

2026-07-30 NVD CVE

CVE-2026-44108: Due to a flaw in the execution order of scripts during shutdown, the firewall is CRITICAL

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally...

cisacmmc-level-2cve-2026-44108dodfirewallincident-responseinternal-servicesnetwork-security

2026-07-30 NVD CVE

CVE-2026-44091: An unauthenticated remote attacker can post a malicious ID to the MQTT Broker re CRITICAL

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.

cmmcconfiguration-integritycve-2026-44091defense-industrial-basefedrampincident-responsemalicious-idmqtt-broker

2026-07-30 CISA advisory

Toptech Systems RCU II+ and Multiload II+ ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

cisa-advisory

2026-07-30 CISA advisory

MikroTik RouterOS ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

api-vulnerabilitiescisa-advisorycisa-icsacritical-infrastructurecve-2026-14227cwes-613ics-advisoriesinformation-technology

2026-07-30 NVD CVE

CVE-2026-44090: Due to missing authentication, an unauthenticated remote attacker may access the CRITICAL

Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised.

authentication-bypassbrokers-exploitationcve-2026-44090devices-compromisefirewall-bypassiots-securitymissing-authenticationmqtt-broker

2026-07-30 NVD CVE

CVE-2026-48449: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi CRITICAL

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user...

adobe-campaign-classicarbitrary-code-executioncisacode-executioncve-2026-48449defense-industrial-basedodincorrect-authorization

2026-07-30 CISA advisory

MZ Automation GmbH libiec61850 ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...

bound-readcisacisa-advisorycritical-infrastructurecve-2026-56758cve-2026-63550cve-2026-65421cve-2026-66349

2026-07-30 CISA advisory

Schneider Electric IGSS ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Schneider Electric is aware of a vulnerability in...

arbitrary-code-executionbound-writecisa-advisorycisa-ics-advisoriescritical-infrastructurecve-2026-12927data-lossesics-vulnerabilities

2026-07-30 NVD CVE

CVE-2026-16610: The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to CRITICAL

The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save...

admin-and-sites-enhancementauthentication-bypasscode-executioncve-2026-16610cve-disclosureseval-exploitnvd-cveplugins-vulnerabilities

2026-07-30 NVD CVE

CVE-2026-44092: An unauthenticated remote attacker can inject malicious input into the ModbusSer CRITICAL

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.

availability-losscve-2026-44092input-injectioninput-validationintegrity-lossmodbus-servermqttnvd-cve

2026-07-30 NVD CVE

CVE-2026-44100: The CHARX JupiCore service allows an unauthenticated remote attacker to reconfig CRITICAL

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering.

charging-infrastructurecharging-pointcharxcve-2026-44100denialfiles-tamperingjupicorenvd-cve

2026-07-30 NVD CVE

CVE-2026-15435: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0. CRITICAL

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request...

compliance-riskcve-2026-15435directories-traversalfile-writeibm-apps-connect-enterprisenvd-cveremote-code-executionsecurity-patch

2026-07-30 NVD CVE

CVE-2026-44101: Due to missing authentication the CHARX OCPP Agent service allows an unauthentic CRITICAL

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to...

authenticationbackends-reconfigurationscharging-station-securitycharxcompliance-riskcve-2026-44101data-disclosuredenial

2026-07-30 NVD CVE

CVE-2026-7849: Due to improper neutralization of special elements, an unauthenticated remote at CRITICAL

Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as root.

cmmccommand-injectionconfigurations-vulnerabilitiescve-2026-7849defense-industrial-baseneutralization-failurenist-800-171nvd-cve

2026-07-30 NVD CVE

CVE-2026-44104: The firmware update process for the basemodule of the charging controller only v CRITICAL

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a...

charging-controllercmmc-level-2crc32-checksumcryptographic-signatures-verificationcve-2026-44104defense-industrial-basefedramp-authorizationfirmware

2026-07-30 NVD CVE

CVE-2026-4978: Improper neutralization of special elements used in an SQL command ('SQL injecti CRITICAL

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34.

cisacmmccompliance-riskcve-2026-4978defense-industrial-basedodincident-responsenist-800-171

2026-07-30 CISA advisory

NASA Core Flight System (cFS) Health & Safety (HS) Application ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-06.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

cfs-health-safety-applicationscisa-advisorycisa-ics-advisoriescontrol-systemcritical-infrastructurecve-2026-15352cve-2026-18064cwe-476

2026-07-30 NVD CVE

CVE-2026-66756: Improper Protection of Alternate Path vulnerability in Apache Tika. This issue CRITICAL

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.

2026-07-30 CISA advisory

MZ Automation lib60870 ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-11.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...

bound-readchemicals-sectorscisa-advisoriescisa-advisorycritical-infrastructurecve-2026-61893cve-2026-63033cwes-125

2026-07-30 NVD CVE

CVE-2026-67208: Juggle through 1.6.0 contains a remote code execution vulnerability that allows CRITICAL

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default...

compliance-riskcve-2026-67208default-credentialsdockerh2-databaseincident-responsejugglenvd-cve

2026-07-30 NVD CVE

CVE-2026-13379: The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remot CRITICAL

The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process

2026-07-30 CISA advisory

Open Source Software: Security Principles and Practices ↗

<p>Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our new Open Source Software: Security Principles and Practices guidance helps agencies...

c4-frameworkscisa-advisorycisa-guidancescisas-resourcefederal-agencies-compliancematerialopen-source-aiopen-source-software

2026-07-30 NVD CVE

CVE-2026-12940: IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote CRITICAL

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in...

code-executioncve-2026-12940environment-variable-injectionibm-langflowmcp-stdo-launchermodel-context-protocolnvd-cveopen-source-software

2026-07-30 NVD CVE

CVE-2026-17543: Improper escaping of backslashes in attacker-provided parameters would allow for CRITICAL

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

82x-befores-823383x-befores-833384x-befores-842485x-befores-859cve-2026-17543nvd-cvephp-vulnerabilitiessql-injection

2026-07-30 CISA advisory

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs ↗

<p>CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems (WWS) Sector. CISA urges critical infrastructure...

cisa-advisorycisas-alertcritical-infrastructurecyber-threats-actorscybersecurity-mitigationinternet-exposureip-allowlistingmicrologix-1400

2026-07-30 NVD CVE

CVE-2026-67594: Spikster through commit e1cdf8c contains a missing authentication vulnerability CRITICAL

Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is...

api-enumerationapi-vulnerabilitiesauthentication-bypasscapiauth-middlewarecommit-e1cdf8ccve-2026-67594database-user-creationfile-write

2026-07-30 NVD CVE

CVE-2026-66421: OpenClaw Dashboard contains a stored cross-site scripting vulnerability that all CRITICAL

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup...

admins-endpointsagents-transcriptscooeycross-site-scriptingcve-2026-66421html-injectionjavascript-executionnvd-cve

2026-07-30 CISA advisory

Mitsubishi Electric CC-Link IE TSN Communication Protocol ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-07.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability...

automationcc-links-ie-tsnscisacisa-advisorycontrol-systemcve-2026-13584denialicsa-26-211-07

2026-07-30 NVD CVE

CVE-2026-17544: Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with s CRITICAL

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

2026-07-30 NVD CVE

CVE-2026-14522: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0. HIGH

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.

arbitrary-commandscrlf-character-neutralizationscve-2026-14522ibm-apps-connect-enterprisenvd-cveremote-attacksvulnerability

2026-07-30 CISA advisory

Johnson Controls OpenBlue Employee ↗

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities...

cisa-advisory

2026-07-29 News

The First Federal Guidance on AI Agents Is Here. Most Agencies Can’t Meet It Yet. ↗

By: Larry Kovalsky, Director, Federal Solutions Engineering, Netskope In May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA), together with Five Eyes partners,...

2026-07-29 NVD CVE

CVE-2026-14529: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv CRITICAL

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature...

applications-securitycve-2026-14529cybersecuritydefense-industrial-basedfar-252-204-7012ibmnist-800-171nvd-cve

2026-07-29 NVD CVE

CVE-2026-65890: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20 CRITICAL

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.

2026-07-29 NVD CVE

CVE-2026-33267: Improper Input Validation vulnerability in Apache Traffic Server. This issue af CRITICAL

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15...

2026-07-29 NVD CVE

CVE-2026-65888: Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.2 CRITICAL

Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any given user on the target site.

2026-07-29 NVD CVE

CVE-2026-65887: Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gri CRITICAL

Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding...

2026-07-29 NVD CVE

CVE-2026-18072: The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick CRITICAL

The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress is vulnerable to Authentication Bypass via a Hardcoded Backdoor in version 10.8.7. The vulnerability exists...

administrator-privilegesadvanced-responsive-video-embedderauthentication-bypasscve-2026-18072cybersecuritydeveloper-account-compromisehardcoded-credentialkick