CVE-2026-55591 Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest in src/serverroutes.ts accepted attacker-controlled host, port, useTLS, and selfsignedcert parameters from the testSignalKConnection, requestAccess, and checkAccessRequest endpoints...

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens...

PT-2026-92432

Name of the Vulnerable Software and Affected Versions SD-WAN Orchestrator affected versions not specified Description An authenticated remote attacker with read-only privileges can cause the exposure of sensitive configuration information by sending a specially crafted request to the cache...

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries...

Credential Exposure Through Environment Variables

This plugin identifies credentials or secrets that are potentially exposed to malicious actors by environment variables on the target host. Attackers who establish a foothold on a target can escalate or move laterally using passwords, access tokens or API keys stored in local environment variable...

PT-2026-90512

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A file-transfer interface requiring valid credentials fails to restrict shell metacharacters in uploaded filenames. An automated process subsequently uses these...

PT-2026-93254

Name of the Vulnerable Software and Affected Versions Acronis Backup plugin for cPanel & WHM Linux versions prior to 1.9.3.1021 Acronis Backup extension for Plesk Linux versions prior to 1.8.11.638 Acronis Backup plugin for DirectAdmin Linux versions prior to 1.2.3.238 Description Local privilege...

PT-2026-90490

TRC analysis reveals attackers exploiting MikroTik RouterOS vulnerabilities to compromise network infrastructure and pivot across segments. Missing authentication flaws CVE-2024-67277 and command injection CVE-2024-86060 enable total device control. Runtime segmentation helps contain...

PT-2026-90491

TRC analysis reveals attackers exploiting MikroTik RouterOS vulnerabilities to compromise network infrastructure and pivot across segments. Missing authentication flaws CVE-2024-67277 and command injection CVE-2024-86060 enable total device control. Runtime segmentation helps contain...

CVE-2026-34223

Siemens Desigo CC clients (ClickOnce V6/V7, family V8/V9, Flex V6/V7, and Installed V6/V7, all versions) are affected by a Client Code Execution (CCE) vulnerability caused by insufficient input validation when processing scripts embedded in user-defined graphics documents. An attacker who crafts ...

Siemens Desigo CC family

SUMMARY A Client Code Execution CCE vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that...

ROS-20260907-73-0090

The vulnerability of the udev component of the Systemd service management subsystem is related to improper resource movement between different areas. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the udev component of the Systemd initialization and service management subsystem, which allows a hacker to trigger a system failure.

The vulnerability of the udev component of the Systemd service management subsystem is related to improper resource movement between different areas. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-81694: Improper Output Neutralization for Logs

openssl-encrypt pip package, versions = 1.4.8 fails to sanitize filenames read from untrusted drive data outside the AES-GCM authenticated manifest before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control...

PT-2026-82281

Name of the Vulnerable Software and Affected Versions ZoneMinder affected versions not specified Description An authenticated OS command injection issue exists in the event export functionality. An authenticated user with View Events permission can execute arbitrary operating system commands on t...

PT-2026-82269

Name of the Vulnerable Software and Affected Versions PayRange API affected versions not specified Description The PayRange API lacks proper authorization on management endpoints, allowing public access to verbose details of every device on the network, regardless of whether the requester has an...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...