CVE-2026-120861

A memory overflow and improper handling vulnerability exists in the GSLB and geolocation (specifically MEP, static-proximity, and config-sync) components of Citrix NetScaler . This flaw can lead to unpredictable behavior , erroneous behavior , or a Denial of Service (DoS) condition. The vulnerabi...

CVE-2026-126259

A missing authentication for critical functionality vulnerability (CWE-306 ) in Fortinet FortiOS affects versions 8.0.0 , 7.6.0 through 7.6.7 , 7.4.0 through 7.4.12 , and 7.2.0 through 7.2.13 . An unauthenticated attacker can execute commands as a super admin by sending crafted HA packets in envi...

CVE-2026-126259

A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker with HA FGSP + standalone-config-sync, or autoscale to execute command as super adm...

PT-2026-145171

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS version 8.0.0 Fortinet FortiOS versions 7.6.0 through 7.6.7 Fortinet FortiOS versions 7.4.0 through 7.4.12 Fortinet FortiOS versions 7.2.0 through 7.2.13 Description A missing authentication for critical function allows an...

PT-2026-145170

@Fortinet released eight FortiOS advisories covering three critical vulnerabilities. CVE-2026-126259 permits unauthenticated super-admin command execution in FGSP+config-sync or auto-scale HA setups via crafted packets. CVE-2026-126254 allows malicious BGP attribute propagation from iBGP peers du...

Unauthenticated adjacent command execution via HA

A missing authentication for critical function vulnerability CWE-306 in FortiOS may allow an unauthenticated attacker with HA FGSP + standalone-config-sync, or autoscale to execute command as super admin via crafted HA packets...

CVE-2026-12264

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to arbitrary file write via HA Failover Config sync upload leading to code execution as root...

EUVD-2026-88226

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

CVE-2026-12264: Unrestricted Upload of File with Dangerous Type

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code execution...

PT-2026-99857

Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central versions prior to 6201 Description An authenticated arbitrary file write issue exists during the HA Failover Config sync upload process, which can lead to remote code execution. Remote code execution is a type of attac...

Malicious code in config-sync-stream-jasmine (npm)

Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in git-config-sync (PyPI)

Source: amazon-inspector 8e49db03099f1d6053a9ebada346c3816399bc47918c92d765162128a095c401 On import gitconfigsync, the package's core.py spawns a daemon thread after a 3-15 second random delay that walks /.ssh, /.aws, /.ethereum, /.config, /.docker, /.kube, and the current working directory,...

Malicious code in git-config-sync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49db03099f1d6053a9ebada346c3816399bc47918c92d765162128a095c401 On import gitconfigsync, the package's core.py spawns a daemon thread after a 3-15 second random delay that walks /.ssh, /.aws, /.ethereum, /.config,...

MAL-2026-4273 Malicious code in git-config-sync (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e49db03099f1d6053a9ebada346c3816399bc47918c92d765162128a095c401 On import gitconfigsync, the package's core.py spawns a daemon thread after a 3-15 second random delay that walks /.ssh, /.aws, /.ethereum, /.config,...

Malicious Package

Overview git-config-sync is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package was linked to a supply chain attack and contained code designed to steal developer secrets, crypto wallets, SSH keys, and cloud...

CVE-2026-33159

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config Sync updater index, obtain signed data, and execute state-changing Config Sync actions regenerate-yaml, apply-yaml-chang...

CVE-2025-64998

Exposure of session signing secret in Checkmk 2.4.0p23, 2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on the central site by forging session cookies...

CVE-2026-33159

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config Sync updater index, obtain signed data, and execute state-changing Config Sync actions regenerate-yaml, apply-yaml-chang...

CVE-2026-33159 Craft CMS: Unauthenticated users could execute project configuration sync operations that should be restricted trusted users

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config Sync updater index, obtain signed data, and execute state-changing Config Sync actions regenerate-yaml, apply-yaml-chang...

CVE-2026-33159

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, guest users can access Config Sync updater index, obtain signed data, and execute state-changing Config Sync actions regenerate-yaml, apply-yaml-chang...