/
ttps_attack:T1190 × latest_source_host:securityaffairs.com × limpar

Resultados

3 casos · pág. 1/1

securityaffairs.com · · 3 fontes · 3 atualizações critical

SiteGuard Server Edition WAF flaw CVE-2026-106931 exploited in the wild for root/SYSTEM command execution

EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…

securityaffairs.com · high

Unpatched 16-year-old Broadcom Wi-Fi WPS flaw enables unauthenticated RCE on routers, affecting 1.5M+ gateways in Belgium

Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …

securityaffairs.com · high

AfD hosting provider breached; hexane.cc publishes AI summaries of 421,179 allegedly stolen party emails

Germany's Alternative für Deutschland (AfD) confirmed on 19 October 2026 that a hosting provider used by the party was hacked in September and that mailboxes were copied. The anonymous site hexane.cc went online claiming to index 421,179 internal party emails. It does not publish the emails. It shows AI-generated summaries sorted into cat…