Resultados

2 casos · pág. 1/1

cert.ssi.gouv.fr · há 5h high

CERT-FR: Multiple Roundcube Webmail vulnerabilities allow RCE, SSRF, XSS and CSRF; fixed in 1.6.20 and 1.7.5

CERT-FR advisory CERTFR-2026-AVI-1340 reports multiple vulnerabilities in Roundcube Webmail. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, server-side request forgery (SSRF) and cross-site scripting (XSS). The advisory's impact list also includes CSRF and security policy bypass. Fixe…

thehackernews.com · há 2h high

ThreatsDay bulletin: Zeabur, PingCAP, Genesys and Andromeda breaches, Bluesky phishing, Laravel, GLPI and Eptura Archibus flaws

This weekly roundup covers a cluster of breaches, critical vulnerabilities and law-enforcement actions. Bluesky confirmed more than 4,500 accounts compromised in a phishing campaign using a fake government payment offer. Zeabur will shut down after a second breach this year that exposed over 3.2 million environment variable records and da…

CVE-2026-65162 CVE-2026-114509 CVE-2026-107186 technology cloud