TheHackerWire

· 2mo ago

🔴 CVE-2026-60366 - Critical (10) Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unau... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-60366/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-60366 PoC, Exploit Status & Vulnerability Details | TheHackerWire

[No Public PoC] CVE-2026-60366 is a Critical severity vulnerability (CVSS 10). Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6015/

· 6mo ago

🟠 CVE-2026-6015 - High (8.8)

A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer over...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39911/

· 6mo ago

🟠 CVE-2026-39911 - High (8.8)

Hashgraph Guardian through version 3.5.0 contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows authenticated Standard Registry users to execute arbitrary code by passing user-supplied JavaSc...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39843/

· 6mo ago

🟠 CVE-2026-39843 - High (7.7)

Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw is incomplete which could lead to the same full read Server-Side Request Forgery when a normal html page contains a link tag wi...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-39843: Plane Server-Side Request Forgery (SSRF) - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-39843 affecting Plane (Server-Side Request Forgery (SSRF)) is a High severity flaw (CVSS 7.7). Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5978/

· 6mo ago

🔴 CVE-2026-5978 - Critical (9.8)

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5980/

· 6mo ago

🟠 CVE-2026-5980 - High (8.8)

A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of the file /goform/formSetMACFilter of the component POST Request Handler. This manipulation of the argument curTime causes buffer overflow....

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6124/

· 6mo ago

🟠 CVE-2026-6124 - High (8.8)

A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-6124: F451 Buffer Overflow - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-6124 affecting F451 (Buffer Overflow) is a High severity flaw (CVSS 8.8). A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5976/

· 6mo ago

🔴 CVE-2026-5976 - Critical (9.8)

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13914/

· 6mo ago

🟠 CVE-2025-13914 - High (8.7)

A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM

attacker to impersonate managed devices.

Due to insufficient SSH host key validation an attacker can ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5977/

· 6mo ago

🔴 CVE-2026-5977 - Critical (9.8)

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os comma...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40070/

· 6mo ago

🟠 CVE-2026-40070 - High (8.1)

BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::WalletClient#acquire_certificate persists certificate records to storage without verifying the certifier's signature over the certificate contents. In ac...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33785/

· 6mo ago

🟠 CVE-2026-33785 - High (8.8)

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices.

Any user l...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-33785: Junos Os Missing Authorization - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-33785 affecting Junos Os (Missing Authorization) is a High severity flaw (CVSS 8.8). A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39980/

· 6mo ago

🔴 CVE-2026-39980 - Critical (9.1)

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.5, the safeEjs.ts file does not properly sanitize EJS templates. Users with the Manage customization capability can run arbitrary Jav...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1584/

· 6mo ago

🟠 CVE-2026-1584 - High (7.5)

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL po...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-1584: Red Hat Hardened Images NULL Pointer - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-1584 affecting Red Hat Hardened Images (NULL Pointer Dereference) is a High severity flaw (CVSS 7.5). A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33784/

· 6mo ago

🔴 CVE-2026-33784 - Critical (9.8)

A Use of Default Password vulnerability in the Juniper Networks

Support Insights (JSI)

Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device.

vLWC software images ship with a...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-33784: Jsi Lwc Authentication Bypass - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-33784 affecting Jsi Lwc (Authentication Bypass) is a Critical severity flaw (CVSS 9.8). A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34020/

· 6mo ago

🟠 CVE-2026-34020 - High (7.5)

Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings.

The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact

...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-34020: Apache Openmeetings Security Vulnerability - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-34020 affecting Apache Openmeetings is a High severity flaw (CVSS 7.5). Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40046/

· 6mo ago

🟠 CVE-2026-40046 - High (7.5)

Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.

The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 (and future ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-40046: Apache Activemq Integer Overflow - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-40046 affecting Apache Activemq (Integer Overflow) is a High severity flaw (CVSS 7.5). Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30478/

· 6mo ago

🟠 CVE-2026-30478 - High (8.8)

A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-30478: N/a Security Vulnerability - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-30478 affecting N/a is a High severity flaw (CVSS 8.8). A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6025/

· 6mo ago

🔴 CVE-2026-6025 - Critical (9.8)

A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6016/

· 6mo ago

🟠 CVE-2026-6016 - High (8.8)

A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39981/

· 6mo ago

🟠 CVE-2026-39981 - High (8.8)

AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safe_join() function in the essential_abilities extension fails to validate that resolved file paths remain within the designated agent workspace. An authenticated attacker can u...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34578/

· 6mo ago

🟠 CVE-2026-34578 - High (8.2)

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector passes the login username directly into an LDAP search filter without calling ldap_escape(). An unauthenticated attacker can injec...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-34578: Core Authentication Bypass - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-34578 affecting Core (Authentication Bypass) is a High severity flaw (CVSS 8.2). OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34512/

· 6mo ago

🟠 CVE-2026-34512 - High (8.1)

OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termination functions without proper scope validation....

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33266/

· 6mo ago

🟠 CVE-2026-33266 - High (7.5)

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings.

The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-33266: Apache Openmeetings Security Vulnerability - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-33266 affecting Apache Openmeetings is a High severity flaw (CVSS 7.5). Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40088/

· 6mo ago

🔴 CVE-2026-40088 - Critical (9.6)

PraisonAI is a multi-agent teams system. Prior to 4.5.121, the execute_command function and workflow shell execution are exposed to user-controlled input via agent workflows, YAML definitions, and LLM-generated tool calls, allowing attackers to in...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40089/

· 6mo ago

🔴 CVE-2026-40089 - Critical (9.9)

Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery (SSRF) vulnerability in its API client (apps/dashboard/lib/api.ts). Installation...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-40089: Audiostreaming Stack Server-Side Request - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-40089 affecting Audiostreaming Stack (Server-Side Request Forgery (SSRF)) is a Critical severity flaw (CVSS 9.9). Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40069/

· 6mo ago

🟠 CVE-2026-40069 - High (7.5)

BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Network::ARC's failure detection only recognises REJECTED and DOUBLE_SPEND_ATTEMPTED. ARC responses with txStatus values of INVALID, MALFORMED, MINED_IN_STALE_BL...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-40069: Bsv Ruby Sdk Security Vulnerability - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-40069 affecting Bsv Ruby Sdk is a High severity flaw (CVSS 7.5). BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2,... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5975/

· 6mo ago

🔴 CVE-2026-5975 - Critical (9.8)

A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wanIdx leads to os command inj...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39942/

· 6mo ago

🟠 CVE-2026-39942 - High (8.5)

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0, the PATCH /files/{id} endpoint accepts a user-controlled filename_disk parameter. By setting this value to match the storage path of another user's ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-39942: Directus Improper Access Control - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-39942 affecting Directus (Improper Access Control) is a High severity flaw (CVSS 8.5). Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.17.0,... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33793/

· 6mo ago

🟠 CVE-2026-33793 - High (7.8)

An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system.

When a configurat...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6122/

· 6mo ago

🟠 CVE-2026-6122 - High (8.8)

A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page leads to stack-based buffer overflow. The attack m...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6121/

· 6mo ago

🟠 CVE-2026-6121 - High (8.8)

A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation of the argument GO causes stack-based buffer overflow. The attack m...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39974/

· 6mo ago

🟠 CVE-2026-39974 - High (8.5)

n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Prior to 2.47.4, an authenticated Server-Side Request Forgery in n8n-mcp allows a caller ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-39974 PoC, Exploit Status & Vulnerability Details | TheHackerWire

[No Public PoC] CVE-2026-39974 is a High severity vulnerability (CVSS 8.5). n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39983/

· 6mo ago

🟠 CVE-2026-39983 - High (8.6)

basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such as cd(), remove(), rename(), uploadFrom(), downloadTo(), list(), a...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6123/

· 6mo ago

🟠 CVE-2026-6123 - High (8.8)

A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys results in stack-based buffer overflow. Remote exploi...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-6123: F451 Buffer Overflow - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-6123 affecting F451 (Buffer Overflow) is a High severity flaw (CVSS 8.8). A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33788/

· 6mo ago

🟠 CVE-2026-33788 - High (7.8)

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs insta...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-33788: Junos Os Evolved Missing Authentication - Analysis & Fix | TheHackerWire

[No Public PoC] CVE-2026-33788 affecting Junos Os Evolved (Missing Authentication) is a High severity flaw (CVSS 7.8). A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks... Technical threat analysis, CVSS breakdown, and vendor patch guidance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40093/

· 6mo ago

🟠 CVE-2026-40093 - High (8.1)

nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp >= parent.timestamp for non-skip blocks and timestamp == parent.timestamp + MIN_PRODUCER_T...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33790/

· 6mo ago

🟠 CVE-2026-33790 - High (7.5)

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and res...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5979/

· 6mo ago

🟠 CVE-2026-5979 - High (8.8)

A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ of the component POST Request Handler. The manipulation of the argument curTime results in ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33778/

· 6mo ago

🟠 CVE-2026-33778 - High (7.5)

An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39853/

· 6mo ago

🟠 CVE-2026-39853 - High (7.8)

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS#7 signature, the code ...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack