News & Sicurezza

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security c ... Read more Published Date: Sep 11, 2026 (4 days, 2 hours ago) Vulnerabilities has been mentioned in this article.

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exp ... Read more Published Date: Sep 11, 2026 (4 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-82078 CVE-2026-81578

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilitie ... Read more Published Date: Sep 11, 2026 (4 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20316 CVE-2026-20079

A flaw was found in multicluster-observability-addon. This vulnerability allows a managed-cluster identity to reference configuration resources outside its designated namespace. This can lead to the disclosure of sensitive hub Secrets to an attacker-controlled managed cluster.

CVE ID :CVE-2026-89169 Published : Sept. 11, 2026, 5:16 a.m. | 59 minutes ago Description :live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing. Severity: 4.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-89060 Published : Sept. 11, 2026, 5:16 a.m. | 59 minutes ago Description :A flaw was found in multicluster-observability-addon. This vulnerability allows a managed-cluster identity to reference configuration resources outside its designated namespace. This can lead to the disclosure of sensitive hub Secrets to an attacker-controlled managed cluster. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-89162 Published : Sept. 11, 2026, 5:16 a.m. | 59 minutes ago Description :In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe. Severity: 2.9 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `mipl_wc_upload_file` function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVE ID :CVE-2026-89161 Published : Sept. 11, 2026, 4:18 a.m. | 1 hour, 57 minutes ago Description :In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. Severity: 7.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-8778 Published : Sept. 11, 2026, 4:18 a.m. | 1 hour, 57 minutes ago Description :The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `mipl_wc_upload_file` function in all versions up to, and including, 1.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-89160 Published : Sept. 11, 2026, 4:18 a.m. | 1 hour, 57 minutes ago Description :PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-89156 Published : Sept. 11, 2026, 4:18 a.m. | 1 hour, 57 minutes ago Description :PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data. Severity: 2.9 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...