News & Sicurezza

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its r ... Read more Published Date: Sep 07, 2026 (2 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-86218 CVE-2026-86206 CVE-2026-86207 CVE-2026-18577 CVE-2026-18556 CVE-2025-8876 CVE-2025-8875

CVE ID :CVE-2026-86288 Published : Sept. 7, 2026, 8:30 a.m. | 59 minutes ago Description :A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument g_idx leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.3.0 is able to resolve this issue. The name of the patch is 877c732f7d7dccd56a729844c6a5bd20f3aa8bb1. Upgrading the affected component is recommended. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Liquid Network Hackers Demand Bug Fix Before Returning $320M BTC The Liquid Network security incident has taken an unusual turn after the unidentified actors behind the theft of nearly 4,000 BTC offered to return “most” of the funds — but only after the vulnerabili ... Read more Published Date: Sep 07, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-83548 CVE-2026-84115 CVE-2026-77846

Kritiek beveiligingslek in Citrix NetScaler actief misbruikt bij aanvallen Aanvallers maken actief misbruik van een kritieke kwetsbaarheid in Citrix NetScaler, zo waarschuwen het Belgische Centrum voor Cybersecurity (CCB) en cybersecuritybedrijf Previdian. Citrix kwam op 19 ... Read more Published Date: Sep 07, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-19490

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument table/column/xColumn/yColumn can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. This patch is called d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86. A patch should be applied to remediate this issue.

CVE ID :CVE-2026-86284 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument tableName/columnName leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The identifier of the patch is d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86. To fix this issue, it is recommended to deploy a patch. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86281 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Severity: 5.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81830 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation Severity: 5.6 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-86280 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-81738 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-82312 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects Severity: 1.8 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84226 Published : Sept. 7, 2026, 8:17 a.m. | 1 hour, 12 minutes ago Description :OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...