Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send its funds, but only where the owner had made the Hub reachable from the internet. Alby Hub is a self-hosted Lightning wallet, meaning the owner runs it on their own...

SAP NetWeaver Information Disclosure (3750721)

The version of the SAP NetWeaver kernel detected on the remote host is affected by an information disclosure vulnerability as referenced in SAP Security Note 3750721: - SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to...

CVE-2026-72926

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-72964

CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...

EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

EUVD-2026-73256

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

CVE-2026-72983

CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-76968

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

EUVD-2026-72585

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

PT-2026-86960

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

CVE-2026-72983: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-68895: Numeric Truncation Error

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

CVE-2026-76968: Exposure of Sensitive System Information to an Unauthorized Control Sphere

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

CVE-2026-16876

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet...

Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks

Grid-connected solar distributed energy resources DERs, such as solar inverters and monitoring platforms, have been deployed at unprecedented scale over the past few years, with global solar capacity more than doubling since 2022. To support monitoring and control, many of these systems are...