Description of the security update for Microsoft Exchange Server 2016 CU23: February 10, 2026 (KB5074995)

None None...

Description of the security update for Microsoft Exchange Server 2019 CU15: February 10, 2026 (KB5074993)

None None...

Microsoft Exchange Server Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Siemens Solid Edge

SUMMARY Solid Edge uses PS/IGES Parasolid Translator Component that contains an out of bounds read that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to...

Security Updates for Microsoft Exchange Server (February 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the February, 2026 security bulletin. - User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an...

PT-2026-7408

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A flaw in Microsoft Exchange Server’s user interface can lead to the misrepresentation of critical information. This allows an unauthorized attacker to conduct spoofing...

KLA90879 SUI vulnerability in Microsoft Server Software

A spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-21527 Exploitation Related products Microsoft-Exchange-Server CVE list CVE-2026-21527 high KB list 5074992 Solution Install necessa...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are security vulnerabilities in Microsoft Exchange Server. Attackers use these...

org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users

A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...

CVE-2026-2152

creationtimestamp| type| source ---|---|--- 2026-02-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116035251770655833 2026-02-08 13:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mee25goix22b 2026-02-08 23:43:08+00:00| seen|...

CVE-2026-2140

creationtimestamp| type| source ---|---|--- 2026-02-08 07:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medfzphaux2u 2026-02-08 07:30:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033836206401561...

CVE-2026-23741

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/astcoredumper runs as root, as noted by the NOTES tag on line 689 of the astcoredumper file. The script will source the conten...

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23739

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the astxmlopen function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing...

CVE-2026-23738

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using aststrappend. The...

CVE-2026-0665

creationtimestamp| type| source ---|---|--- 2026-02-06 14:39:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116024196776648851...

CVE-2026-24926

creationtimestamp| type| source ---|---|--- 2026-02-06 08:47:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022814553754757 2026-02-06 09:17:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me6l34eepx27...

DCN DCME-320 命令注入漏洞

DCN DCME-320 is an Internet exchange gateway router developed by China's DCN Technology Co., Ltd. Versions of DCN DCME-320 prior to 20260121 contained a command injection vulnerability. This vulnerability stemmed from incorrect operations with the parameter iplist in the function applyconfig with...

CVE-2026-23098

creationtimestamp| type| source ---|---|--- 2026-02-05 06:42:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116016659253283238 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen|...