PT-2026-84457

🚨 CVE-2026-57582 - high 🚨 GeoNetwork - Reflected Cross-Site Scripting GeoNetwork versions 4.4.5 through 4.4.11 are vulnerable to reflected cross-site scrip... 👾 https://t.co/d5ACzb8SNg @pdnuclei NucleiTemplates cve...

PT-2026-84459

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.4.12 GeoNetwork versions prior to 4.2.17 Description An unprotected API endpoint used for creating new formatters via file upload allows unauthenticated attackers to upload arbitrary .xsl or .zip files. This...

CVE-2026-79749

MCPHub (a hub for centrally managing and orchestrating multiple MCP servers/APIs) has an SSRF guard bypass in its isBlockedIpv6 function within src/utils/ssrf.ts. Prior to version 1.0.32 , the guard only blocked loopback, link-local, unique-local, IPv4-mapped, and IPv4-compatible IPv6 addresses, ...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-80636

CVE-2026-80636 affects the Linux kernel netfilter conntrack subsystem. The vulnerability stems from the ct extension genid infrastructure (introduced by commit c56716c69ce1), which disables all ct extensions for unconfirmed conntracks—causing them to be NULL —when this behavior should only apply ...

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice DoJ on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been attributed to a Chinese state-sponsored...

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" against the nation and its enablers. "We are launching an economic onslaught against Iran's financial connections around t...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

EUVD-2026-65469

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...

Critical: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 Technology Preview security update

A new set of Red Hat Update Infrastructure container images is now available as a Technology Preview in the Red Hat container registry. Technology Preview features are not fully supported, may not be functionally complete, and are not suitable for deployment in production...

Oracle Essbase (August 2026 CSPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the August 2026 Critical Security Patch Update CSPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in Oracle Essbase component: Essbase Web Platform Apache HTTP Server. The...

USN-8630-4 linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

USN-8644-2: Linux kernel (GCP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...

USN-8656-1 linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence AI-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers PLCs to conduct reconnaissance and...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-route53, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-lambda, hugo, crossplane-provider-aws-kinesis, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-s3,...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the FlatFileItemReader when handling specially crafted input files that exploit the way multi-line records are assembled. An attacker can cause excessive CPU and memory consumptio...