https://cyberdeltaforce.ai/news/69031310b6ff3893bfe5 CyberDeltaForce en 2026-09-04T04:18:06.197Z CVE-2026-85050: Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the san https://cyberdeltaforce.ai/news/87b316a5b7192a9964b9 CyberDeltaForce en 2026-09-04T04:18:04.610Z CVE-2026-85047: Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute https://cyberdeltaforce.ai/news/72799ad71ff7bb42d5f8 CyberDeltaForce en 2026-09-04T04:18:02.517Z CVE-2026-85042: Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a craft https://cyberdeltaforce.ai/news/0559a285837ef07f76c5 CyberDeltaForce en 2026-09-03T16:07:05.237Z CVE-2026-64303: In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When dmaengi https://cyberdeltaforce.ai/news/420e41dbedae1b0cd236 CyberDeltaForce en 2026-09-02T20:55:56.223Z CVE-2026-9586: An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning https://cyberdeltaforce.ai/news/f9c0ac858c57427ecc07 CyberDeltaForce en 2026-09-02T11:17:21.910Z CVE-2026-78657: The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the https://cyberdeltaforce.ai/news/843ba8df966d9e43e4fb CyberDeltaForce en 2026-09-04T03:17:41.507Z CVE-2026-53649: Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authent https://cyberdeltaforce.ai/news/5295f492151172ef48ac CyberDeltaForce en 2026-09-03T15:35:09.090Z CVE-2026-64066: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_t https://cyberdeltaforce.ai/news/7ea90882eedb89aa6cfe CyberDeltaForce en 2026-09-03T15:17:29.593Z CVE-2026-4408: A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check p https://cyberdeltaforce.ai/news/c379cb0710cec999b120 CyberDeltaForce en 2026-09-03T03:15:24.410Z CVE-2025-13872: Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attac https://cyberdeltaforce.ai/news/1fd79b68639faa82759e CyberDeltaForce en 2026-09-03T03:15:19.900Z CVE-2025-13828: SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update setting https://cyberdeltaforce.ai/news/6a4bc01bd51fffdc159a CyberDeltaForce en 2026-09-02T19:40:37.857Z CVE-2026-13737: CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance r https://cyberdeltaforce.ai/news/9c76acdf0df922544658 CyberDeltaForce en 2026-09-02T19:40:37.857Z CVE-2026-13738: CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to reso https://cyberdeltaforce.ai/news/e2e42be61f96c5916a2e CyberDeltaForce en 2026-09-02T10:17:11.460Z CVE-2026-84354: Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbit https://cyberdeltaforce.ai/news/08b272b06a5782049f5e CyberDeltaForce en 2026-09-02T10:17:11.080Z CVE-2026-84353: Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to e https://cyberdeltaforce.ai/news/0fb3c4a6e3fdc1d1c788 CyberDeltaForce en 2026-09-02T10:17:10.660Z CVE-2026-84352: Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox https://cyberdeltaforce.ai/news/5e85b66d8e0951431999 CyberDeltaForce en 2026-09-02T10:17:07.600Z CVE-2026-84333: Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox v https://cyberdeltaforce.ai/news/59f6497d6a45d043b67e CyberDeltaForce en 2026-09-02T10:17:06.373Z CVE-2026-84324: Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted ne https://cyberdeltaforce.ai/news/9801878fa114be96e10b CyberDeltaForce en 2026-09-03T19:17:26.960Z CVE-2026-15630: A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a https://cyberdeltaforce.ai/news/b882a8b214190cd12610 CyberDeltaForce en 2026-09-03T02:15:24.373Z CVE-2023-7309: A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Ma https://cyberdeltaforce.ai/news/9c9256db71af54df3321 CyberDeltaForce en 2026-09-03T02:15:23.707Z CVE-2023-7305: SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Under certain configurations or u https://cyberdeltaforce.ai/news/7522b7fa9dbb7f42f1fe CyberDeltaForce en 2026-09-03T02:15:17.453Z CVE-2023-7249: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Trave https://cyberdeltaforce.ai/news/62c164dca5f67cc50902 CyberDeltaForce en 2026-09-03T21:17:21.280Z CVE-2026-19318: A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary c https://cyberdeltaforce.ai/news/a6d4e48846649e034b66 CyberDeltaForce en 2026-09-03T21:17:20.907Z CVE-2026-19315: A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sen https://cyberdeltaforce.ai/news/07fefc4dc43d910272d1 CyberDeltaForce en 2026-09-03T21:17:20.650Z CVE-2026-19313: An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sendin https://cyberdeltaforce.ai/news/5f99d945964b66d8072b CyberDeltaForce en 2026-09-03T21:17:20.243Z CVE-2026-13086: A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware O https://cyberdeltaforce.ai/news/70db6e29a20f10f8737b CyberDeltaForce en 2026-09-03T18:22:14.940Z CVE-2024-42450: The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Ver https://cyberdeltaforce.ai/news/533cadab0b2ebc70e3ad CyberDeltaForce en 2026-09-03T13:08:19.890Z CVE-2026-64080: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification hand https://cyberdeltaforce.ai/news/986a4a68ffbfe8ccb605 CyberDeltaForce en 2026-09-03T13:06:25.563Z CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleErr https://cyberdeltaforce.ai/news/0b84050ba2262fcfa7f1 CyberDeltaForce en 2026-09-03T13:05:58.957Z CVE-2026-53006: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull( https://cyberdeltaforce.ai/news/712d3f4761b522e00e9f CyberDeltaForce en 2026-09-03T13:05:47.223Z CVE-2026-43114: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New te https://cyberdeltaforce.ai/news/ac1f62e3ccd7369695e0 CyberDeltaForce en 2026-09-02T17:35:28.727Z CVE-2026-61317: Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affect https://cyberdeltaforce.ai/news/e26c5250a4754390791b CyberDeltaForce en 2026-09-04T04:18:05.100Z CVE-2026-85048: Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute ar https://cyberdeltaforce.ai/news/3809e8c8da7cbb4de688 CyberDeltaForce en 2026-09-03T15:17:26.760Z CVE-2026-42010: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL cha https://cyberdeltaforce.ai/news/9ab5951d9430141e73c9 CyberDeltaForce en 2026-09-02T10:17:10.263Z CVE-2026-84351: Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to exe https://cyberdeltaforce.ai/news/1ceacbba220297e12905 CyberDeltaForce en 2026-09-02T10:17:09.480Z CVE-2026-84349: Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitr https://cyberdeltaforce.ai/news/8a7d991846bd889bb136 CyberDeltaForce en 2026-09-02T10:17:08.367Z CVE-2026-84335: Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and lev https://cyberdeltaforce.ai/news/350390eac2e9128920c5 CyberDeltaForce en 2026-09-04T02:17:19.897Z CVE-2026-84233: A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workf https://cyberdeltaforce.ai/news/8b98d353f6f37ac780d7 CyberDeltaForce en 2026-09-03T18:52:44.433Z CVE-2025-30706: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficu https://cyberdeltaforce.ai/news/dd5afd7d33bec413ec1c CyberDeltaForce en 2026-09-02T17:54:20.903Z CVE-2026-60592: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, https://cyberdeltaforce.ai/news/231cd7097273ff604db6 CyberDeltaForce en 2026-09-02T17:43:27.640Z CVE-2026-70692: Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Internal Operations). Supported versions tha https://cyberdeltaforce.ai/news/d95a69522e616db2dbf1 CyberDeltaForce en 2026-09-02T17:33:22.663Z CVE-2026-60753: Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.6 https://cyberdeltaforce.ai/news/d0808b8ef96f2db855be CyberDeltaForce en 2026-09-02T16:17:19.077Z CVE-2026-71474: A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.opensh https://cyberdeltaforce.ai/news/97ba9fadf9f76d7e3ea8 CyberDeltaForce en 2026-09-03T18:17:20.960Z CVE-2026-19611: A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to A https://cyberdeltaforce.ai/news/6d93472eb175737857d7 CyberDeltaForce en 2026-09-03T18:09:03.317Z CVE-2026-67560: Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be us https://cyberdeltaforce.ai/news/41646f1e5692c9642528 CyberDeltaForce en 2026-09-02T11:17:25.653Z CVE-2026-84358: Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process https://cyberdeltaforce.ai/news/5b18b077da79596c54fe CyberDeltaForce en 2026-09-02T11:17:25.513Z CVE-2026-84355: Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to by https://cyberdeltaforce.ai/news/dcb6fcdc1bdee95c609d CyberDeltaForce en 2026-09-02T11:17:25.360Z CVE-2026-84331: Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass https://cyberdeltaforce.ai/news/e2d13ba288ec5be5d581 CyberDeltaForce en 2026-09-02T11:17:25.063Z CVE-2026-84328: Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypa https://cyberdeltaforce.ai/news/90bf9baebb8b6ea9cc96 CyberDeltaForce en 2026-09-02T11:17:22.030Z CVE-2026-79621: The CatalogX WordPress plugin before 6.1.3 does not sanitise or escape content that an unauthenticated user can store before including it in the prod https://cyberdeltaforce.ai/news/960cc0905dd9d11c8e8e CyberDeltaForce en 2026-09-04T03:17:41.637Z CVE-2026-55421: Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied file https://cyberdeltaforce.ai/news/d1838dbbed48b5bb0c14 CyberDeltaForce en 2026-09-03T03:15:24.760Z CVE-2025-13873: Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject ar https://cyberdeltaforce.ai/news/18a337e1130d931b5055 CyberDeltaForce en 2026-09-02T10:17:11.880Z CVE-2026-84359: Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-orig https://cyberdeltaforce.ai/news/07271d41d256cb2a1f0a CyberDeltaForce en 2026-09-02T10:17:07.170Z CVE-2026-84329: Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer https://cyberdeltaforce.ai/news/dc9f13bb4b34ea2c1d30 CyberDeltaForce en 2026-09-02T14:17:11.940Z CVE-2026-29113: Craft is a content management system (CMS). Prior to 4.17.3 and 5.9.7, Craft CMS has a CSRF issue in the preview token endpoint at /actions/preview/cr https://cyberdeltaforce.ai/news/b2e0c6138de5322acc51 CyberDeltaForce en 2026-09-02T18:19:20.930Z CVE-2026-47285: Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose https://cyberdeltaforce.ai/news/72370ec2bf9ab7a35a0f CyberDeltaForce en 2026-09-02T17:33:12.360Z CVE-2025-30758: Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface). Supported versions that are affected are 25.0-25.5 https://cyberdeltaforce.ai/news/9ee374453d68a91a446d CyberDeltaForce en 2026-09-03T23:17:19.400Z CVE-2026-18330: A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may https://cyberdeltaforce.ai/news/1a895a42e49def3f064e CyberDeltaForce en 2026-09-02T16:17:19.287Z CVE-2026-71475: A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path https://cyberdeltaforce.ai/news/f0ae13bc536e8038a8e1 CyberDeltaForce en 2026-09-03T18:13:44.643Z CVE-2026-42393: The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with https://cyberdeltaforce.ai/news/264f62748e5d4a3990ed CyberDeltaForce en 2026-09-03T21:03:02.000Z Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models https://cyberdeltaforce.ai/news/346d8320344c97141ceb CyberDeltaForce en 2026-09-02T15:00:00.000Z Anatomy of a Silent Domain Takeover https://cyberdeltaforce.ai/news/2111fba36c09019b3ca8 CyberDeltaForce en 2026-09-02T10:16:16.000Z Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon https://cyberdeltaforce.ai/news/f3ff736792ff130d507c CyberDeltaForce en 2026-09-02T16:58:45.000Z Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild https://cyberdeltaforce.ai/news/40c1ee35258dd084a19c CyberDeltaForce en 2026-09-03T14:52:20.000Z Critical Elementor Pro flaw exploited to take over WordPress sites https://cyberdeltaforce.ai/news/0e0f8ebe80fe93dd2c0e CyberDeltaForce en 2026-09-02T09:18:02.000Z GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends https://cyberdeltaforce.ai/news/e0800ed105841e9e7112 CyberDeltaForce en 2026-09-02T09:10:23.000Z Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands https://cyberdeltaforce.ai/news/b14145db16ae6d3ddb58 CyberDeltaForce en 2026-09-03T13:50:59.000Z Your Employee’s Password Appeared in an Infostealer Log. Now What? https://cyberdeltaforce.ai/news/6971241e20045d799bd3 CyberDeltaForce en 2026-09-03T08:43:17.000Z Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone https://cyberdeltaforce.ai/news/456b8c66919bc95ae024 CyberDeltaForce en 2026-09-02T14:06:59.000Z Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code https://cyberdeltaforce.ai/news/8138d6dfb660f83eedc3 CyberDeltaForce en 2026-09-02T13:12:45.000Z BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access https://cyberdeltaforce.ai/news/17a06275a3a1e424b9a3 CyberDeltaForce en 2026-09-02T07:47:13.000Z Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another https://cyberdeltaforce.ai/news/cc4b8270372f4431461e CyberDeltaForce en 2026-09-03T15:52:07.000Z Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root https://cyberdeltaforce.ai/news/fe7cf3bb525ce2a461f4 CyberDeltaForce en 2026-09-03T11:58:00.000Z US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries https://cyberdeltaforce.ai/news/31cb16a04dd071c1fd0c CyberDeltaForce en 2026-09-02T11:31:36.000Z Malicious Virtualizor Update Served via BGP Hijacking https://cyberdeltaforce.ai/news/47f89403f09a35c78209 CyberDeltaForce en 2026-09-02T11:30:00.000Z How to Secure Enterprise AI: From Adoption to Incident Readiness https://cyberdeltaforce.ai/news/9aa401465e24c4020c8c CyberDeltaForce en 2026-09-02T06:56:30.000Z Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads https://cyberdeltaforce.ai/news/982c76330be4e473d634 CyberDeltaForce en 2026-09-03T15:13:29.000Z OpenAI confirms ChatGPT is down ahead of 'Astra' model launch https://cyberdeltaforce.ai/news/67eec038002f5505ad21 CyberDeltaForce en 2026-09-03T10:43:01.000Z Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks https://cyberdeltaforce.ai/news/5530ad29be0ff56f174b CyberDeltaForce en 2026-09-03T10:36:39.000Z Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means https://cyberdeltaforce.ai/news/ca0493eea0a1caa68edd CyberDeltaForce en 2026-09-03T14:39:05.000Z Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data https://cyberdeltaforce.ai/news/ca17d07c92aa0808116b CyberDeltaForce en 2026-09-03T15:22:33.000Z Microsoft: KB5120998 mouse reset bug affects only non-English PCs https://cyberdeltaforce.ai/news/821b08292c0f1c4e9aa6 CyberDeltaForce en 2026-09-03T18:02:47.000Z ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories