News & Sicurezza

CVE ID :CVE-2026-62648 Published : Sept. 8, 2026, 9:18 a.m. | 2 hours, 12 minutes ago Description :A vulnerability has been identified in Reyrolle 7SR5 (All versions Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-62647 Published : Sept. 8, 2026, 9:18 a.m. | 2 hours, 12 minutes ago Description :A vulnerability has been identified in Reyrolle 7SR5 (All versions Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-58113 Published : Sept. 8, 2026, 9:18 a.m. | 12 minutes ago Description :A vulnerability has been identified in Teamcenter V2412 (All versions Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this vulnerability could allow an attacker to gain root access on the host system, potentially leading to a full compromise of the affected OIS environment.

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo CC Flex Client V7 (All versions), Desigo CC Installed Client V6 (All versions), Desigo CC Installed Client V7 (All versions). The affected application is vulnerable to Client Code Execution (CCE) due to insufficient input validation when handling scripts embedded within user-defined graphics documents. Specifically, when the script within a graphics document is designed or modified by an attacker to include malicious commands. When a user opens a compromised graphics document, the embedded script is executed on the client application instance, allowing an attacker to write arbitrary files to the client's operating system. Successful exploitation requires an attacker to craft a malicious graphics document and entice a user with sufficient privileges to display it. This could lead to compromise of the client operating system and potential lateral movement within the organization.

CVE ID :CVE-2026-86590 Published : Sept. 8, 2026, 10:17 a.m. | 1 hour, 13 minutes ago Description :In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery (SSRF) to read responses from internal network addresses, including the cloud instance metadata service (169.254.169.254), loopback interfaces, RFC-1918 private ranges, and in-cluster Kubernetes services. The operator-configured allowlist (spec.devEnvironments.allowedSources.urls) is not consulted. The vulnerability is fixed in version 7.122.0, which adds private-address blocking, IPv4-mapped IPv6 bypass prevention, operator allowlist enforcement, and disables HTTP redirects on the outbound request. Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, no ... Read more Published Date: Sep 08, 2026 (2 days, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-75650

CVE ID :CVE-2026-81806 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery. This issue affects Hide My WP Ghost: from n/a through 7.0.09. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Adobe publiceert noodpatch wegens aanvallen op webwinkels Adobe heeft noodpatches uitgebracht voor een actief aangevallen kwetsbaarheid in webwinkelsoftware Magento en Adobe Commerce. Via het beveiligingslek kan een aanvaller code op de server van de webshop ... Read more Published Date: Sep 08, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-75650

CVE ID :CVE-2026-81790 Published : Sept. 8, 2026, 7:20 a.m. | 10 minutes ago Description :Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Csomagpontok és szállítási címkék WooCommerce-hez: from n/a before 4.2.8. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81798 Published : Sept. 8, 2026, 7:18 a.m. | 12 minutes ago Description :Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84818 Published : Sept. 8, 2026, 8:17 a.m. | 1 hour, 13 minutes ago Description :Unauthenticated Cross Site Scripting (XSS) in Open User Map Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...