News & Sicurezza

CVE ID :CVE-2026-90690 Published : Sept. 14, 2026, 7:17 a.m. | 3 hours, 7 minutes ago Description :A weakness has been identified in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The affected element is the function subprocess.Popen of the file hexstrike_server.py of the component API Tools Endpoint. Executing a manipulation of the argument additional_args/target/username/password/scan_type/payload can lead to os command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. A fix appears to be in progress. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-85196 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-85192 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-85189 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-85190 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-85125 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82792 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Severity: 5.2 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82791 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82796 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82795 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82794 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82793 Published : Sept. 14, 2026, 7:17 a.m. | 1 hour, 7 minutes ago Description :Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...