/
vendors:WSO2 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · high

CISA adds WSO2 CVE-2026-5430 and Adobe Commerce/Magento CVE-2026-71362 to KEV catalog over active exploitation

CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-5430, a path traversal flaw in multiple WSO2 products, and CVE-2026-71362, an incorrect authorization flaw in Adobe Commerce and Magento. CISA describes these vulnerability types as a frequent attack vecto…

Evooo1Bot: Mirai-based Linux botnet with encrypted C2, 28-command admin interface and reverse SOCKS relay

FortiGuard Labs describes Evooo1Bot, a Linux botnet that embeds the Mirai DDoS engine in a more modular and capable framework. It uses encrypted C2 communications, layered string obfuscation (AES-256-CTR, ChaCha20, XOR-based key derivation) and a 28-command remote administration interface. It also ships an integrated exploit arsenal again…