https://cyberdeltaforce.ai/news/69031310b6ff3893bfe5 CyberDeltaForce en 2026-09-04T04:18:06.197Z CVE-2026-85050: Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the san https://cyberdeltaforce.ai/news/87b316a5b7192a9964b9 CyberDeltaForce en 2026-09-04T04:18:04.610Z CVE-2026-85047: Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute https://cyberdeltaforce.ai/news/72799ad71ff7bb42d5f8 CyberDeltaForce en 2026-09-04T04:18:02.517Z CVE-2026-85042: Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a craft https://cyberdeltaforce.ai/news/0559a285837ef07f76c5 CyberDeltaForce en 2026-09-03T16:07:05.237Z CVE-2026-64303: In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengi https://cyberdeltaforce.ai/news/420e41dbedae1b0cd236 CyberDeltaForce en 2026-09-02T20:55:56.223Z CVE-2026-9586: An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning https://cyberdeltaforce.ai/news/100625050bfeec8edf6a CyberDeltaForce en 2026-09-04T10:17:13.900Z CVE-2026-85184: @fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the https://cyberdeltaforce.ai/news/d5545408b64065e52101 CyberDeltaForce en 2026-09-04T10:17:13.340Z CVE-2026-82923: The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauth https://cyberdeltaforce.ai/news/843ba8df966d9e43e4fb CyberDeltaForce en 2026-09-04T03:17:41.507Z CVE-2026-53649: Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authent https://cyberdeltaforce.ai/news/5295f492151172ef48ac CyberDeltaForce en 2026-09-03T15:35:09.090Z CVE-2026-64066: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_t https://cyberdeltaforce.ai/news/7ea90882eedb89aa6cfe CyberDeltaForce en 2026-09-03T15:17:29.593Z CVE-2026-4408: A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check p https://cyberdeltaforce.ai/news/c379cb0710cec999b120 CyberDeltaForce en 2026-09-03T03:15:24.410Z CVE-2025-13872: Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attac https://cyberdeltaforce.ai/news/1fd79b68639faa82759e CyberDeltaForce en 2026-09-03T03:15:19.900Z CVE-2025-13828: SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update setting https://cyberdeltaforce.ai/news/6a4bc01bd51fffdc159a CyberDeltaForce en 2026-09-02T19:40:37.857Z CVE-2026-13737: CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance r https://cyberdeltaforce.ai/news/9c76acdf0df922544658 CyberDeltaForce en 2026-09-02T19:40:37.857Z CVE-2026-13738: CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to reso https://cyberdeltaforce.ai/news/cd778c651279d4116f9e CyberDeltaForce en 2026-09-04T14:13:32.820Z CVE-2024-28056: Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authenticat https://cyberdeltaforce.ai/news/9801878fa114be96e10b CyberDeltaForce en 2026-09-03T19:17:26.960Z CVE-2026-15630: A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a https://cyberdeltaforce.ai/news/b882a8b214190cd12610 CyberDeltaForce en 2026-09-03T02:15:24.373Z CVE-2023-7309: A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Ma https://cyberdeltaforce.ai/news/9c9256db71af54df3321 CyberDeltaForce en 2026-09-03T02:15:23.707Z CVE-2023-7305: SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or u https://cyberdeltaforce.ai/news/7522b7fa9dbb7f42f1fe CyberDeltaForce en 2026-09-03T02:15:17.453Z CVE-2023-7249: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Trave https://cyberdeltaforce.ai/news/55d8c097940381ca0ef3 CyberDeltaForce en 2026-09-04T13:45:35.430Z CVE-2019-3773: Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XML External Entity Injection (X https://cyberdeltaforce.ai/news/8e04c97c13a1ece67de8 CyberDeltaForce en 2026-09-04T13:19:54.190Z CVE-2026-46595: Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than pub https://cyberdeltaforce.ai/news/46408ca908c07270ef14 CyberDeltaForce en 2026-09-04T13:19:52.127Z CVE-2026-45411: vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async ge https://cyberdeltaforce.ai/news/5a523206528f0b3f546d CyberDeltaForce en 2026-09-04T13:19:51.380Z CVE-2026-44005: vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and https://cyberdeltaforce.ai/news/653ccf7f9f83e2dc5e91 CyberDeltaForce en 2026-09-04T13:19:49.600Z CVE-2026-42508: Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checke https://cyberdeltaforce.ai/news/9c5f73ab8a654174ca93 CyberDeltaForce en 2026-09-04T13:19:36.840Z CVE-2026-39832: When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination https://cyberdeltaforce.ai/news/a86e245400b9ee24396b CyberDeltaForce en 2026-09-04T13:19:35.617Z CVE-2026-39830: A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goro https://cyberdeltaforce.ai/news/b8c51aa2faac5c70b9a9 CyberDeltaForce en 2026-09-04T13:19:25.650Z CVE-2026-33937: Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-p https://cyberdeltaforce.ai/news/297e678e7ef6e45f6786 CyberDeltaForce en 2026-09-04T13:18:55.120Z CVE-2026-33228: flatted is a circular JSON parser. Prior to version 3.4.2, the parse() function in flatted can use attacker-controlled string values from the parsed J https://cyberdeltaforce.ai/news/a3875d761017a5ff32d5 CyberDeltaForce en 2026-09-04T13:18:48.943Z CVE-2026-33186: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of t https://cyberdeltaforce.ai/news/90600e0b4f2176580f85 CyberDeltaForce en 2026-09-04T13:18:39.603Z CVE-2026-29063: Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutab https://cyberdeltaforce.ai/news/2cbc5b6521ec94e5f092 CyberDeltaForce en 2026-09-04T13:18:08.443Z CVE-2025-62718: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization w https://cyberdeltaforce.ai/news/166368e5b024a5374276 CyberDeltaForce en 2026-09-04T13:17:56.847Z CVE-2025-61140: The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution. https://cyberdeltaforce.ai/news/f7877695bc504502b4ea CyberDeltaForce en 2026-09-04T13:17:52.707Z CVE-2025-10263: Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex https://cyberdeltaforce.ai/news/a6d4e48846649e034b66 CyberDeltaForce en 2026-09-03T21:17:20.907Z CVE-2026-19315: A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sen https://cyberdeltaforce.ai/news/07fefc4dc43d910272d1 CyberDeltaForce en 2026-09-03T21:17:20.650Z CVE-2026-19313: An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sendin https://cyberdeltaforce.ai/news/533cadab0b2ebc70e3ad CyberDeltaForce en 2026-09-03T13:08:19.890Z CVE-2026-64080: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification hand https://cyberdeltaforce.ai/news/0b84050ba2262fcfa7f1 CyberDeltaForce en 2026-09-03T13:05:58.957Z CVE-2026-53006: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull( https://cyberdeltaforce.ai/news/712d3f4761b522e00e9f CyberDeltaForce en 2026-09-03T13:05:47.223Z CVE-2026-43114: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New te https://cyberdeltaforce.ai/news/ac1f62e3ccd7369695e0 CyberDeltaForce en 2026-09-02T17:35:28.727Z CVE-2026-61317: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affect https://cyberdeltaforce.ai/news/e26c5250a4754390791b CyberDeltaForce en 2026-09-04T04:18:05.100Z CVE-2026-85048: Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute ar https://cyberdeltaforce.ai/news/3809e8c8da7cbb4de688 CyberDeltaForce en 2026-09-03T15:17:26.760Z CVE-2026-42010: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL cha https://cyberdeltaforce.ai/news/350390eac2e9128920c5 CyberDeltaForce en 2026-09-04T02:17:19.897Z CVE-2026-84233: A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workf https://cyberdeltaforce.ai/news/8b98d353f6f37ac780d7 CyberDeltaForce en 2026-09-03T18:52:44.433Z CVE-2025-30706: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficu https://cyberdeltaforce.ai/news/dd5afd7d33bec413ec1c CyberDeltaForce en 2026-09-02T17:54:20.903Z CVE-2026-60592: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, https://cyberdeltaforce.ai/news/231cd7097273ff604db6 CyberDeltaForce en 2026-09-02T17:43:27.640Z CVE-2026-70692: Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha https://cyberdeltaforce.ai/news/d95a69522e616db2dbf1 CyberDeltaForce en 2026-09-02T17:33:22.663Z CVE-2026-60753: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.6 https://cyberdeltaforce.ai/news/97ba9fadf9f76d7e3ea8 CyberDeltaForce en 2026-09-03T18:17:20.960Z CVE-2026-19611: A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to A https://cyberdeltaforce.ai/news/6d93472eb175737857d7 CyberDeltaForce en 2026-09-03T18:09:03.317Z CVE-2026-67560: Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be us https://cyberdeltaforce.ai/news/960cc0905dd9d11c8e8e CyberDeltaForce en 2026-09-04T03:17:41.637Z CVE-2026-55421: Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied file https://cyberdeltaforce.ai/news/d1838dbbed48b5bb0c14 CyberDeltaForce en 2026-09-03T03:15:24.760Z CVE-2025-13873: Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject ar https://cyberdeltaforce.ai/news/b2e0c6138de5322acc51 CyberDeltaForce en 2026-09-02T18:19:20.930Z CVE-2026-47285: Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose https://cyberdeltaforce.ai/news/72370ec2bf9ab7a35a0f CyberDeltaForce en 2026-09-02T17:33:12.360Z CVE-2025-30758: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5 https://cyberdeltaforce.ai/news/9ee374453d68a91a446d CyberDeltaForce en 2026-09-03T23:17:19.400Z CVE-2026-18330: A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may https://cyberdeltaforce.ai/news/f0ae13bc536e8038a8e1 CyberDeltaForce en 2026-09-03T18:13:44.643Z CVE-2026-42393: The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with https://cyberdeltaforce.ai/news/264f62748e5d4a3990ed CyberDeltaForce en 2026-09-03T21:03:02.000Z Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models https://cyberdeltaforce.ai/news/04f332d10faf424aed2e CyberDeltaForce en 2026-09-04T12:00:00.000Z DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors https://cyberdeltaforce.ai/news/f3ff736792ff130d507c CyberDeltaForce en 2026-09-02T16:58:45.000Z Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild https://cyberdeltaforce.ai/news/48c5d9fb4751086e1315 CyberDeltaForce en 2026-09-04T08:29:18.000Z OpenAI’s new Astra model can code better. But here’s why its cybersecurity skills matter as much - The Indian Express https://cyberdeltaforce.ai/news/95df76ef3a0bdb988013 CyberDeltaForce en 2026-09-04T15:20:19.000Z PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution https://cyberdeltaforce.ai/news/585d9fe2a7e2f9ef824b CyberDeltaForce en 2026-09-04T14:51:13.000Z New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic https://cyberdeltaforce.ai/news/0295a24d122b23f23022 CyberDeltaForce en 2026-09-04T10:00:00.000Z Why judgment is emerging as cybersecurity’s defining skill https://cyberdeltaforce.ai/news/40c1ee35258dd084a19c CyberDeltaForce en 2026-09-03T14:52:20.000Z Critical Elementor Pro flaw exploited to take over WordPress sites https://cyberdeltaforce.ai/news/f712d299703d3d2133e9 CyberDeltaForce en 2026-09-04T08:48:45.000Z Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws https://cyberdeltaforce.ai/news/b14145db16ae6d3ddb58 CyberDeltaForce en 2026-09-03T13:50:59.000Z Your Employee’s Password Appeared in an Infostealer Log. Now What? https://cyberdeltaforce.ai/news/6971241e20045d799bd3 CyberDeltaForce en 2026-09-03T08:43:17.000Z Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone https://cyberdeltaforce.ai/news/913086de2e850433223c CyberDeltaForce en 2026-09-04T07:35:14.000Z Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws https://cyberdeltaforce.ai/news/076dc4957568f4f929fd CyberDeltaForce en 2026-09-04T07:18:47.000Z Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day https://cyberdeltaforce.ai/news/cc4b8270372f4431461e CyberDeltaForce en 2026-09-03T15:52:07.000Z Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root https://cyberdeltaforce.ai/news/fe7cf3bb525ce2a461f4 CyberDeltaForce en 2026-09-03T11:58:00.000Z US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries https://cyberdeltaforce.ai/news/67eec038002f5505ad21 CyberDeltaForce en 2026-09-03T10:43:01.000Z Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks https://cyberdeltaforce.ai/news/5530ad29be0ff56f174b CyberDeltaForce en 2026-09-03T10:36:39.000Z Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means https://cyberdeltaforce.ai/news/ca0493eea0a1caa68edd CyberDeltaForce en 2026-09-03T14:39:05.000Z Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data https://cyberdeltaforce.ai/news/ca17d07c92aa0808116b CyberDeltaForce en 2026-09-03T15:22:33.000Z Microsoft: KB5120998 mouse reset bug affects only non-English PCs