31 casos · pág. 1/2
CERT-FR advisory CERTFR-2026-AVI-1342 reports a large batch of vulnerabilities in Microsoft Edge that could let an attacker achieve remote arbitrary code execution and cause an additional security issue the vendor has not specified. The advisory lists more than 130 Microsoft security bulletins dated 16 October 2026, from CVE-2026-102322 t…
Pillar Security researcher Eilon Cohen disclosed on October 19 a critical remote code execution flaw in the open-source agentic AI coding tool OpenCode (developed by Anomaly), affecting versions 1.0.137 to 1.18.32 on Windows and WSL. A malicious remote MCP server can execute arbitrary code on a developer's machine during the MCP OAuth aut…
A command injection vulnerability, CVE-2026-4802, was disclosed in Cockpit, the web-based Linux administration tool from Red Hat. It was found by Hakai's Research team. Any authenticated user, including low-privilege accounts such as viewer, can inject OS commands through the system logs filter feature and obtain remote code execution on …
A high-severity vulnerability, CVE-2026-33725 (CVSS v3.1 7.2), affects Metabase Enterprise and allows an authenticated administrator to achieve remote command execution. It was discovered by Hacktron AI and Rahul Maini. The flaw lies in the /api/ee/serialization/import route, where the subname field of an imported YAML is concatenated uns…
F5 Labs analyzes CVE-2025-23061 and its predecessor CVE-2024-53900, a CVSS 9.0 flaw in the Mongoose MongoDB client library that allows remote code execution on Node.js API servers. The bug abuses the populate method, which accepts a $where clause containing arbitrary JavaScript. The initial fix for CVE-2024-53900 blocked only top-level $w…
Sansec warns that a maximum-severity flaw, CVE-2026-103849 (dubbed BlockStrap), in Magento Open Source and Adobe Commerce could allow attackers to execute arbitrary PHP code on store servers. No in-the-wild exploitation has been observed yet, but Sansec identified four potential attack paths in under 24 hours and expects mass exploitation…
CERT-FR advisory CERTFR-2026-AVI-1320, published 15 October 2026, reports multiple vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem that allow a remote attacker to execute arbitrary code and bypass the security policy. The advisory references CVE-2026-100232 and CVE-2026-96540, based on SonicWall bulletin SNWLID-2026-00…
CERT-FR advisory CERTFR-2026-AVI-1321, published 15 October 2026, reports multiple vulnerabilities in Drupal core that allow a remote attacker to execute arbitrary code and perform indirect code injection (XSS). The advisory references CVE-2026-108097, CVE-2026-108514 and CVE-2026-108515, based on three Drupal security bulletins dated 14 …
The Hakai Yokai Research Team disclosed CVE-2026-12191, an insecure deserialization flaw (CWE-502) in openpilot, the open-source Level 2 driver assistance system from comma.ai that supports over 275 vehicle models. The modeld process calls Python pickle.load() / pickle.loads() on model and metadata files with no validation, signature or h…
Researchers at AI pen-testing startup Xbow used OpenAI's GPT-5.6 Sol model to help chain three zero-day vulnerabilities in Google Chrome into a full-chain exploit that executes code outside the browser sandbox on Windows. Xbow estimates about one billion users could be affected. Google fixed all three flaws and paid a $250,000 bounty, its…
Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …
Researcher Quentin Kaiser (QTNKSR) disclosed a memory corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It allows an unauthenticated attacker within wireless range to disclose memory and execute code, including as root, on vulnerable routers. The attacker does not need the Wi-Fi password, network membership or a co…
Researcher Quentin Kaiser disclosed on October 16 an unauthenticated memory-corruption flaw in Broadcom's Wi-Fi Protected Setup (WPS) implementation. It lets an attacker within radio range execute code as root on affected routers, with no Wi-Fi password or pairing step. Kaiser demonstrated working exploits against Belgian ISP gateways: th…
CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality …
CERT-FR advisory CERTFR-2026-AVI-1332, published 16 October 2026, reports multiple vulnerabilities in Microsoft products that may allow remote arbitrary code execution, privilege escalation, remote denial of service and breach of data confidentiality. The advisory is based on Microsoft security bulletins dated 15 October 2026 for four CVE…
CERT-FR advisory CERTFR-2026-AVI-1310 reports multiple vulnerabilities in Citrix products, based on Citrix security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data integrity and con…
CERT-FR advisory CERTFR-2026-AVI-1316 reports multiple vulnerabilities across Microsoft products, based on Microsoft security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data …
CERT-FR advisory CERTFR-2026-AVI-1315 reports multiple vulnerabilities in Microsoft Azure components, published on 14 October 2026. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft published the corresponding security bulletins on 13 October 2026. …
Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…
Hacktron researcher sudi disclosed a vulnerability in the browser extension bundled with Google's AI IDE Antigravity, which is built on the same internals as Windsurf. The extension's externallyconnectable setting allows any web page to send messages to it. The SaveScreenRecording action forwards attacker-controlled filename and L fields …
