News & Sicurezza

CVE ID :CVE-2026-89151 Published : Sept. 11, 2026, 3:16 a.m. | 25 minutes ago Description :Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature. Severity: 3.5 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-88260 Published : Sept. 11, 2026, 3:16 a.m. | 25 minutes ago Description :Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM (Build 109). Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78135 Published : Sept. 11, 2026, 3:16 a.m. | 25 minutes ago Description :libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass. Severity: 5.6 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-88914 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read of up to 244 bytes, which is then included in the downstream caption output. An attacker could exploit this by tricking a user into opening a malicious media file, potentially resulting in disclosure of adjacent heap memory or application crash. Severity: 4.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78134 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78127 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78129 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78130 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78131 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78132 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78133 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-78126 Published : Sept. 11, 2026, 2:18 a.m. | 1 hour, 23 minutes ago Description :strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...