https://cyberdeltaforce.ai/news/8a55173bf442ba8cc323 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-44945: A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user wi https://cyberdeltaforce.ai/news/f77f625dbebb36a4d722 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-18367: A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 an https://cyberdeltaforce.ai/news/62aeb01934122b00062f CyberDeltaForce en 2026-09-01T11:16:44.443Z CVE-2026-4813: A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotel https://cyberdeltaforce.ai/news/5100955b13d08b6afea0 CyberDeltaForce en 2026-08-31T05:17:06.393Z CVE-2026-82616: A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The m https://cyberdeltaforce.ai/news/d12d3bb6a0a76ae6cc13 CyberDeltaForce en 2026-09-01T20:19:04.077Z CVE-2026-72765: n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation. An authenticated user with permission to create o https://cyberdeltaforce.ai/news/f20f035f665dd3858f36 CyberDeltaForce en 2026-09-01T04:18:02.447Z CVE-2026-82266: Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with admin_api_require_auth defaulting to false, treating unauthenticated requests as supe https://cyberdeltaforce.ai/news/68c099dfa6167c794edf CyberDeltaForce en 2026-09-01T04:18:02.160Z CVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates https://cyberdeltaforce.ai/news/d238330b327b85f8916b CyberDeltaForce en 2026-09-01T04:18:01.990Z CVE-2026-81578: An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthentic https://cyberdeltaforce.ai/news/b9c20b331a8b80adc56c CyberDeltaForce en 2026-09-01T04:18:01.510Z CVE-2026-50152: Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor sub https://cyberdeltaforce.ai/news/252efaa7c1db10779811 CyberDeltaForce en 2026-09-01T04:18:01.370Z CVE-2026-3627: IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the a https://cyberdeltaforce.ai/news/d4c2c8dcb2245e0f4726 CyberDeltaForce en 2026-09-01T04:18:00.997Z CVE-2026-37004: BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS https://cyberdeltaforce.ai/news/4cae973843c423dc20e5 CyberDeltaForce en 2026-09-01T04:18:00.830Z CVE-2026-19295: IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving https://cyberdeltaforce.ai/news/67d4fca7ed7bd1abce9c CyberDeltaForce en 2026-09-01T04:18:00.670Z CVE-2026-19286: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on https://cyberdeltaforce.ai/news/bb279a0f47f649af8659 CyberDeltaForce en 2026-08-31T10:16:49.963Z CVE-2026-49003: Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyz https://cyberdeltaforce.ai/news/036552fa7feee6ca9ca2 CyberDeltaForce en 2026-08-31T10:16:46.663Z CVE-2026-12965: The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, al https://cyberdeltaforce.ai/news/afd60b4311ca7ec3a6ea CyberDeltaForce en 2026-08-31T00:16:41.630Z CVE-2026-82593: A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LT https://cyberdeltaforce.ai/news/9d54d5248fa0f9547aea CyberDeltaForce en 2026-09-01T03:16:52.100Z CVE-2026-82452: rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in the https://cyberdeltaforce.ai/news/4b7ebf519bcea553c869 CyberDeltaForce en 2026-09-01T03:16:51.370Z CVE-2026-75865: The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file https://cyberdeltaforce.ai/news/54e04ccf8876dcd3c839 CyberDeltaForce en 2026-09-01T03:16:50.937Z CVE-2026-67394: A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0. https://cyberdeltaforce.ai/news/7830ec678a60b6626608 CyberDeltaForce en 2026-08-31T18:08:14.137Z CVE-2019-25029: In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerab https://cyberdeltaforce.ai/news/a9f149c05702da655095 CyberDeltaForce en 2026-08-31T09:17:08.453Z CVE-2026-82874: ToolJet before v3.16.208 fails to validate that authenticated users belong to the organization specified in the organizationId path parameter of toolj https://cyberdeltaforce.ai/news/1e6f4f31263346a758d1 CyberDeltaForce en 2026-08-31T09:17:08.160Z CVE-2026-82872: ToolJet before v3.16.208 fails to validate that the path organizationId matches the authenticated user's workspace before performing ToolJet DB table https://cyberdeltaforce.ai/news/f8270a07ab1a92d09f99 CyberDeltaForce en 2026-08-31T09:17:07.863Z CVE-2026-82870: ToolJet before v3.16.208 fails to validate organizationId ownership in database write and destroy routes, allowing any builder-role user to create, al https://cyberdeltaforce.ai/news/55ef072f7b38e770e7ea CyberDeltaForce en 2026-08-31T09:17:06.353Z CVE-2026-82860: @hulumi/policies versions before 1.3.2 fail to fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail. Attackers https://cyberdeltaforce.ai/news/72dd3387316bb0623093 CyberDeltaForce en 2026-08-31T09:17:06.210Z CVE-2026-82859: hulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulumi:iac-role protections. Attackers can bypa https://cyberdeltaforce.ai/news/7111d61314609fb9b64b CyberDeltaForce en 2026-08-31T09:17:06.067Z CVE-2026-82858: @hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance validation, allowing untrusted reconciliati https://cyberdeltaforce.ai/news/6a8d74b49be80d84aee9 CyberDeltaForce en 2026-08-31T09:17:05.920Z CVE-2026-82857: hulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM policy that allows role lifecycle operations https://cyberdeltaforce.ai/news/0788aaa67d736f4e41b5 CyberDeltaForce en 2026-08-31T09:17:05.780Z CVE-2026-82856: @hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators in GitHub OIDC trust policies. Attackers ca https://cyberdeltaforce.ai/news/cba312d620b2a2301611 CyberDeltaForce en 2026-08-31T09:17:05.610Z CVE-2026-82855: @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that all https://cyberdeltaforce.ai/news/298a4834eb374d90f7db CyberDeltaForce en 2026-08-31T09:17:05.463Z CVE-2026-82854: Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom e https://cyberdeltaforce.ai/news/9a58fb054c6b6440cdc6 CyberDeltaForce en 2026-08-31T09:17:03.130Z CVE-2026-19410: An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a https://cyberdeltaforce.ai/news/abf6c7ccfec09e61b459 CyberDeltaForce en 2026-08-30T23:17:08.303Z CVE-2026-82592: A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk F https://cyberdeltaforce.ai/news/f72c586a844f4f08d6f0 CyberDeltaForce en 2026-09-01T18:07:18.263Z CVE-2019-3774: Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML https://cyberdeltaforce.ai/news/884cfe853c87bcaaf943 CyberDeltaForce en 2026-09-01T13:18:58.370Z CVE-2026-34714: Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection https://cyberdeltaforce.ai/news/a3875d761017a5ff32d5 CyberDeltaForce en 2026-09-01T13:18:41.597Z CVE-2026-33186: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of t https://cyberdeltaforce.ai/news/7fb4afdf94489a0e0fe4 CyberDeltaForce en 2026-09-01T02:16:58.397Z CVE-2026-55511: Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs allows a user with SystemPrivilege.ControlArchiving to create a double-quoted https://cyberdeltaforce.ai/news/3465512c6e16ad552aab CyberDeltaForce en 2026-09-01T02:16:58.267Z CVE-2026-55378: JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/pr_check https://cyberdeltaforce.ai/news/68c8bd138ea8e1df1e0f CyberDeltaForce en 2026-08-31T20:30:14.457Z CVE-2026-67341: ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with d https://cyberdeltaforce.ai/news/97f55ab62aac0aa9b5d5 CyberDeltaForce en 2026-08-31T20:30:14.457Z CVE-2026-67342: ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoin https://cyberdeltaforce.ai/news/f84e2f565607efe977d9 CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67289: FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAd https://cyberdeltaforce.ai/news/64c80ce3dac504628f64 CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-66418: OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML a https://cyberdeltaforce.ai/news/f23156afdbe4e843b93b CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-66421: OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript i https://cyberdeltaforce.ai/news/bb8074bccb889205057c CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-66402: FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_ https://cyberdeltaforce.ai/news/b0f9ffbf12acf48baa32 CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67305: FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTE https://cyberdeltaforce.ai/news/73ca791d3024d151c5fd CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67324: GitPython 3.1.50 fails to recognize joined short-option forms such as -u (the short form of --upload-pack= ) when enforcing its default u https://cyberdeltaforce.ai/news/9a9604c19088e658b51d CyberDeltaForce en 2026-08-31T17:17:33.853Z CVE-2025-49796: A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw al https://cyberdeltaforce.ai/news/c5ff9225f1750b6a5959 CyberDeltaForce en 2026-08-31T17:17:33.377Z CVE-2025-49794: A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron https://cyberdeltaforce.ai/news/1af3f6f847bc2e5c0215 CyberDeltaForce en 2026-09-01T07:16:36.523Z CVE-2026-78319: A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker https://cyberdeltaforce.ai/news/bac66d79aa681db7633b CyberDeltaForce en 2026-08-31T19:33:11.197Z CVE-2026-38709: TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were https://cyberdeltaforce.ai/news/3d9eefd09ce058fc2cab CyberDeltaForce en 2026-08-31T19:33:11.197Z CVE-2026-67822: Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function formwrlSSIDset uses spr https://cyberdeltaforce.ai/news/a6b85ed97161da1bc17c CyberDeltaForce en 2026-08-31T19:33:11.197Z CVE-2025-69946: SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_i https://cyberdeltaforce.ai/news/a5a51cc9ae3b0e7a8495 CyberDeltaForce en 2026-08-31T19:33:11.197Z CVE-2026-51785: An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request https://cyberdeltaforce.ai/news/ef14ff6ada8c727d1377 CyberDeltaForce en 2026-08-31T07:17:44.937Z CVE-2026-67271: Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exp https://cyberdeltaforce.ai/news/5fbf607b9260d778a7bc CyberDeltaForce en 2026-08-31T07:17:44.743Z CVE-2026-58574: Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restrict https://cyberdeltaforce.ai/news/84139ea913516dfbe986 CyberDeltaForce en 2026-08-31T01:16:49.563Z CVE-2026-77956: Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthenticated client to execute arbitra https://cyberdeltaforce.ai/news/8af26273eab83cddd9a3 CyberDeltaForce en 2026-09-01T15:36:55.703Z CVE-2026-39932: OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that all https://cyberdeltaforce.ai/news/25c5e629f6ed5904596c CyberDeltaForce en 2026-09-01T06:16:38.107Z CVE-2026-83772: A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode https://cyberdeltaforce.ai/news/b82e6d1eeb0c51eb21bc CyberDeltaForce en 2026-08-31T23:16:35.650Z CVE-2026-83524: A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the func https://cyberdeltaforce.ai/news/bc00f576724e159a8878 CyberDeltaForce en 2026-08-31T23:16:35.460Z CVE-2026-82971: A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi of the component https://cyberdeltaforce.ai/news/c7cc823cf759bb1b006b CyberDeltaForce en 2026-08-31T18:17:17.633Z CVE-2026-4480: A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print https://cyberdeltaforce.ai/news/2901d0f2098825b16a99 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-55997: Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in p https://cyberdeltaforce.ai/news/a73cec3a221663c82128 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-59675: When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Be https://cyberdeltaforce.ai/news/d08ee83b69df5961440e CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-25703: NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing s https://cyberdeltaforce.ai/news/4d33b8632e40cfc6a0e2 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-14644: Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileg https://cyberdeltaforce.ai/news/f60f1dde9558a2938df1 CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-17593: An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Reposit https://cyberdeltaforce.ai/news/3e362847e8c5f484358f CyberDeltaForce en 2026-09-01T20:54:51.287Z CVE-2026-17594: Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user int https://cyberdeltaforce.ai/news/642b1f1a33a04d4441b8 CyberDeltaForce en 2026-09-01T20:52:27.110Z CVE-2026-59239: Stored Cross-site Scripting (CWE-79) in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user t https://cyberdeltaforce.ai/news/b10c01b2a901161ad10e CyberDeltaForce en 2026-08-31T05:17:06.217Z CVE-2026-82615: A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file / https://cyberdeltaforce.ai/news/fc620445b35bc652fb37 CyberDeltaForce en 2026-08-31T05:17:04.020Z CVE-2026-82614: A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.p https://cyberdeltaforce.ai/news/8b6b8478c503f5fb3957 CyberDeltaForce en 2026-09-01T15:17:14.060Z CVE-2026-24369: Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects https://cyberdeltaforce.ai/news/3648099f3d22fd6f9534 CyberDeltaForce en 2026-09-01T10:17:12.993Z CVE-2026-25706: Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Direc https://cyberdeltaforce.ai/news/7e1a1de27146c45b77a1 CyberDeltaForce en 2026-09-01T10:17:12.843Z CVE-2026-19914: The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_order' parameter in all versions up to, and i https://cyberdeltaforce.ai/news/4eab2203313e6175bb54 CyberDeltaForce en 2026-09-01T04:18:02.317Z CVE-2026-82217: In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools (writeFileContent, suggestFileContent, and the https://cyberdeltaforce.ai/news/6737847ae5573ffe3abd CyberDeltaForce en 2026-09-01T04:18:00.047Z CVE-2026-16821: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability. https://cyberdeltaforce.ai/news/79261a85aedea20e9f47 CyberDeltaForce en 2026-08-31T10:16:48.890Z CVE-2026-15573: A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does no https://cyberdeltaforce.ai/news/3e8b3cf5160ca3ad3446 CyberDeltaForce en 2026-08-31T04:17:28.980Z CVE-2026-82724: Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped https://cyberdeltaforce.ai/news/d2bb3b4a3b71665a542d CyberDeltaForce en 2026-08-31T04:17:28.777Z CVE-2026-82613: A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=pr https://cyberdeltaforce.ai/news/2c2e2ce2b172129f5889 CyberDeltaForce en 2026-08-31T04:17:28.543Z CVE-2026-82612: A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList https://cyberdeltaforce.ai/news/96bbb372305f279647fc CyberDeltaForce en 2026-08-31T04:17:28.317Z CVE-2026-82611: A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthen https://cyberdeltaforce.ai/news/3c0c6a33d0c51d55f548 CyberDeltaForce en 2026-08-31T04:17:26.273Z CVE-2026-82610: A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of https://cyberdeltaforce.ai/news/361ce2c176f5ac68dc18 CyberDeltaForce en 2026-08-31T04:17:06.600Z CVE-2026-15816: A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory with https://cyberdeltaforce.ai/news/1345e657ee9ac2db5376 CyberDeltaForce en 2026-09-01T03:16:49.037Z CVE-2026-54100: A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows w https://cyberdeltaforce.ai/news/5eab2ecb116941f8dc83 CyberDeltaForce en 2026-08-31T03:16:42.307Z CVE-2026-77850: Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script in an administrator's browser. https://cyberdeltaforce.ai/news/e71bc2f0656fafcdb023 CyberDeltaForce en 2026-08-31T03:16:42.133Z CVE-2026-75757: Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain https://cyberdeltaforce.ai/news/0ae78f989eefd64bba13 CyberDeltaForce en 2026-08-31T03:16:41.837Z CVE-2026-5260: A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA k https://cyberdeltaforce.ai/news/7e95b9102c3ead6627af CyberDeltaForce en 2026-08-31T03:16:40.973Z CVE-2026-42013: A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectl https://cyberdeltaforce.ai/news/3809e8c8da7cbb4de688 CyberDeltaForce en 2026-08-31T03:16:40.080Z CVE-2026-42010: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL cha https://cyberdeltaforce.ai/news/ef647bbfb8949184bca3 CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67300: FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER and NOTIF https://cyberdeltaforce.ai/news/1014c927d7ca5f38a075 CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67322: GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git. https://cyberdeltaforce.ai/news/a1ebc0adc81d662cb5f3 CyberDeltaForce en 2026-08-31T17:17:28.267Z CVE-2024-10963: A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers https://cyberdeltaforce.ai/news/b39dd327916314bc930f CyberDeltaForce en 2026-08-31T20:17:06.923Z CVE-2026-5674: A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploit https://cyberdeltaforce.ai/news/918c5b6b9a1f9742b640 CyberDeltaForce en 2026-09-01T09:16:45.167Z CVE-2026-55655: A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible https://cyberdeltaforce.ai/news/563573c9d8aa09106d51 CyberDeltaForce en 2026-08-31T09:17:07.260Z CVE-2026-82866: @pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without val https://cyberdeltaforce.ai/news/c4d1c8e1b0dbe223654d CyberDeltaForce en 2026-08-31T09:17:04.093Z CVE-2026-82662: Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept https://cyberdeltaforce.ai/news/587bd11b1be23afa22ef CyberDeltaForce en 2026-09-01T13:19:18.530Z CVE-2026-3832: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (O https://cyberdeltaforce.ai/news/ebd8af7c27bac074cc3b CyberDeltaForce en 2026-08-31T20:25:28.573Z CVE-2026-67306: FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planar_decompress_plan https://cyberdeltaforce.ai/news/38c4c0a1fcb82a74931b CyberDeltaForce en 2026-09-01T12:17:24.453Z CVE-2025-54771: A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorr https://cyberdeltaforce.ai/news/7ee308925fc2c05a9741 CyberDeltaForce en 2026-09-01T12:17:15.317Z CVE-2025-11568: A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the nece https://cyberdeltaforce.ai/news/f1ae658b4848330dcd90 CyberDeltaForce en 2026-08-31T01:16:45.533Z CVE-2025-0604: A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate t https://cyberdeltaforce.ai/news/6c7418fd945161b9d18d CyberDeltaForce en 2026-09-01T14:00:00.000Z Financially Motivated Threat Actor BREEZE COMET Targets Brazil https://cyberdeltaforce.ai/news/3a6ab580ca7a940ac550 CyberDeltaForce en 2026-08-31T20:00:34.000Z The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st) https://cyberdeltaforce.ai/news/29a0ccea62b58a3c052d CyberDeltaForce en 2026-08-31T13:38:28.000Z Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode https://cyberdeltaforce.ai/news/a2443b02c1fdfa2dee1c CyberDeltaForce en 2026-08-31T12:58:42.000Z 31th August – Threat Intelligence Report https://cyberdeltaforce.ai/news/c8fa9978201c5cd4f7d3 CyberDeltaForce en 2026-08-31T14:14:06.000Z Hackers Hide ValleyRAT Backdoor Inside Adware Targeting Users in China and India - CyberSecurityNews https://cyberdeltaforce.ai/news/945120fa1841139e7906 CyberDeltaForce en 2026-09-01T20:48:52.000Z Critical Langflow Flaw Exploited as Attacks on AI Platform Rise https://cyberdeltaforce.ai/news/fd95b0c1e6f4479f7b19 CyberDeltaForce en 2026-09-01T11:24:25.000Z Five Venezuelans Plead Guilty in US Court to ATM Jackpotting https://cyberdeltaforce.ai/news/928ee9d2ed34daf55d9a CyberDeltaForce en 2026-08-31T18:51:04.000Z Microsoft warns of TerminalFix attacks deploying reverse tunnels https://cyberdeltaforce.ai/news/83bad5fc6db3201f0b01 CyberDeltaForce en 2026-09-01T19:28:17.000Z Aesto Health says data breach affects over 9.5 million patients https://cyberdeltaforce.ai/news/4b6920da8bbf1cd2b1ad CyberDeltaForce en 2026-08-31T12:11:58.000Z Anthropic Warns Claude Users of Infostealer Malware Infections https://cyberdeltaforce.ai/news/6d02440bc7e41a0d6f73 CyberDeltaForce en 2026-09-01T17:53:11.000Z Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure https://cyberdeltaforce.ai/news/fff1e5f5694a5e951bdc CyberDeltaForce en 2026-08-31T21:39:01.000Z McKesson copes with fallout from data theft extortion attack https://cyberdeltaforce.ai/news/ec29f508a16f6de0458b CyberDeltaForce en 2026-08-31T11:31:47.000Z Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance https://cyberdeltaforce.ai/news/4fb28834c77047c0b102 CyberDeltaForce en 2026-08-31T07:56:53.000Z DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims https://cyberdeltaforce.ai/news/d91b37f5133c18c32642 CyberDeltaForce en 2026-08-31T14:00:10.000Z File servers are here to stay. Here’s how to manage them securely https://cyberdeltaforce.ai/news/5f7449cd45cc008c2c7b CyberDeltaForce en 2026-09-01T11:30:00.000Z Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones