CVE-2025-30412

The CVE-2025-30412 entry concerns a sensitive data disclosure and manipulation due to improper authentication affecting Acronis Cyber Protect 16 (Linux, Windows) before build 39938 and Acronis Cyber Protect 15 (Linux, Windows) before build 41800. The vulnerability involves failure to enforce auth...

CVE-2025-30411

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39938, Acronis Cyber Protect 15 Linux, Windows before build 41800...

CVE-2025-30411

CVE-2025-30411 affects Acronis Cyber Protect 16 (Linux/Windows) before build 39938 and Cyber Protect 15 before build 41800. The issue arises from improper authentication, enabling sensitive data disclosure and manipulation. CVSS v3.0 base score 10.0 (CRITICAL), attack vector NETWORK, no privilege...

CVE-2025-30411

Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39938, Acronis Cyber Protect 15 Linux, Windows before build 41800...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an integrated network protection solution for businesses and enterprises developed by the Swiss company Acronis. It combines features such as backup, anti-malware, network security, and endpoint management e.g., vulnerability assessment, URL filtering, patch management,...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an integrated network protection solution for businesses and enterprises developed by the Swiss company Acronis. It combines features such as backup, anti-malware, network security, and endpoint management e.g., vulnerability assessment, URL filtering, patch management,...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an integrated network protection solution for businesses and enterprises developed by the Swiss company Acronis. It combines features such as backup, anti-malware, network security, and endpoint management e.g., vulnerability assessment, URL filtering, patch management,...

Acronis Cyber Protect 访问控制错误漏洞

Acronis Cyber Protect is an enterprise-oriented network protection solution developed by the Swiss company Acronis. It combines features such as backup, anti-malware, network security, and endpoint management including vulnerability assessment, URL filtering, patch management, etc.. Versions prio...

Adapt, Protect, and Extend: How Partners Can Help Orgs Unlock ROI from AI

...

CVE-2026-20630

Summary: CVE-2026-20630 describes a permissions-related information-disclosure vulnerability in macOS Tahoe. Exploitation could allow an app to access protected user data. The issue is addressed in macOS Tahoe 26.3. The CVSS vector indicates a local attack with low complexity and requires low pri...

Industrialized Ransomware: Confronting the New Reality

Read about the new ransomware reality and what most security strategies get wrong. Learn how to protect your organization in 2026...

Common Crypto Scams and How to Protect Your Funds in 2026

Crypto scams are surging worldwide, from pig butchering to fake trading platforms and deepfakes, draining victims while fraud teams struggle to keep up...

Android Security Bulletin—February 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-02-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CTT-NFS-Vortex-RCE New Physics Disclosure This repository cont...

I scan, you scan, we all scan for... knowledge?

Welcome to this week's edition of the Threat Source newsletter. " Upon us all a little rain must fall" -- Led Zeppelin, via Henry Wadsworth Longfellow I recently bumped into a colleague with whom I spent several years working in an MSSP environment. We had very different roles within the...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26990)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26990 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2...

CVE-2026-22031 Fastify Middie Middleware Path Bypass

@fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @fastify/middie prior to version 9.1.0 where middleware registered with a specific path prefix can be bypassed using URL-encoded characters e.g., /%61dmin instead of /admin. While...

Fedora 42 : foomuuri (2026-63f333201f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-63f333201f advisory. Upstream update to v0.31 with fixes to CVE-2025-67603 and CVE-2025-67858. CVE-2025-67603: Add PolicyKit authorization to D-Bus methods...

CVE-2021-33820

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

CVE-2021-33818

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...