News & Sicurezza

CVE ID :CVE-2026-18672 Published : Sept. 2, 2026, 10:31 a.m. | 44 minutes ago Description :In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may allow an attacker to influence which file is returned by the control's image cache, potentially exposing file contents outside the intended image directories. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-84175 Published : Sept. 2, 2026, 10:17 a.m. | 58 minutes ago Description :In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and without a hop limit. An authenticated user who is permitted to create a Thing, or who holds WRITE permission on an existing Thing, can thereby cause the Things service to issue arbitrary HTTP GET requests from inside the deployment's network — including to cloud instance-metadata endpoints and other internal services — and can use the differing error responses returned to the caller to enumerate internal services. Versions 2.4.0 to 2.5.x contain the same code, but are only affected where the operator explicitly enabled the WoT integration feature toggle, which is disabled by default in those versions. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Tweehonderd PaperCut NG/MF-servers missen update voor aangevallen lek Meer dan tweehonderd PaperCut NG/MF-servers, waaronder zeven in Nederland, missen een belangrijke beveiligingsupdate voor twee kwetsbaarheden waar aanvallers actief misbruik van maken. Via de beveilig ... Read more Published Date: Sep 02, 2026 (3 days, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-82078 CVE-2026-81578

CVE ID :CVE-2026-82958 Published : Sept. 2, 2026, 10:12 a.m. | 1 hour, 2 minutes ago Description :In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. {{ header:device_id }}) resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped strings, and then parses the resulting string as JSON. Because the placeholder engine performs no JSON escaping and is unaware of the surrounding JSON string context, a resolved value containing a double-quote character can break out of its string and inject additional JSON structure. When a connection is configured to use this mapper with a template that reflects a header whose value a publishing device can control (for example an MQTT 5 user property, an AMQP 1.0 application property, or a Kafka record header), an attacker able to publish on that connection can inject an inline _policy object. The inline policy overrides the administrator-configured policyId, letting the attacker assign an arbitrary access-control policy to the newly created digital twin — gaining full read/write access to it and potentially revoking the legitimate owner's access, with no administrator interaction. Exploitation requires all of the following: the connection uses the (non-default) ImplicitThingCreation mapper; its template reflects an attacker-controllable header; and, for the policy-override impact, the connection's authorization subjects are permitted to create policies (the default). Deployments that restrict the connection's subjects to thing creation only via the entity-creation configuration are not affected by the policy-override impact. Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geo ... Read more Published Date: Sep 02, 2026 (3 days, 4 hours ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2026-53683 Published : Sept. 2, 2026, 9:16 a.m. | 1 hour, 59 minutes ago Description :reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary external site after completion of the password-reset workflow. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Google dicht Chrome-lekken die remote code execution mogelijk maken Google heeft beveiligingsupdates uitgebracht voor kritieke kwetsbaarheden in Chrome die remote code execution mogelijk maken. Een aanvaller kan zo code op de systemen van gebruikers uitvoeren, waarbij ... Read more Published Date: Sep 02, 2026 (3 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-84353 CVE-2026-84352

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires an administrator to perform the plugin's standard dismiss-and-recheck workflow on a link submitted by the attacker via the WordPress comment author URL field, after which the attacker's HTTP server issues a redirect to a URL containing an HTML/JavaScript payload that is stored verbatim in the link log.

CVE ID :CVE-2026-75528 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 58 minutes ago Description :The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires an administrator to perform the plugin's standard dismiss-and-recheck workflow on a link submitted by the attacker via the WordPress comment author URL field, after which the attacker's HTTP server issues a redirect to a URL containing an HTML/JavaScript payload that is stored verbatim in the link log. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23590 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23591 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-23589 Published : Sept. 2, 2026, 8:16 a.m. | 2 hours, 59 minutes ago Description :Rejected reason: Withdrawn by requester. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...