News & Sicurezza

CISA Warns of ConnectWise ScreenConnect Vulnerability Exploited in Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a severe vulnerability in ConnectWise ScreenConnect. On April 28, 2026, CISA officially added th ... Read more Published Date: Apr 30, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2024-1708

ProFTPD’s SQL Injection Vulnerability Enables Remote Code Execution Attacks A critical SQL injection vulnerability in ProFTPD, one of the Internet’s most widely deployed FTP servers. Tracked as CVE-2026-42167, this flaw carries a CVSS severity score of 8.1 and affects the mod ... Read more Published Date: Apr 30, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-42167

CVE ID :CVE-2026-7164 Published : April 30, 2026, 8:16 a.m. | 6 hours, 2 minutes ago Description :Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6537 Published : April 30, 2026, 7:16 a.m. | 5 hours, 1 minute ago Description :ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6867 Published : April 30, 2026, 7:16 a.m. | 5 hours, 1 minute ago Description :SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6538 Published : April 30, 2026, 7:16 a.m. | 5 hours, 1 minute ago Description :BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6870 Published : April 30, 2026, 7:16 a.m. | 5 hours, 1 minute ago Description :GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6869 Published : April 30, 2026, 7:16 a.m. | 5 hours, 1 minute ago Description :WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-7270 Published : April 30, 2026, 7:16 a.m. | 7 hours, 1 minute ago Description :An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6531 Published : April 30, 2026, 7:16 a.m. | 3 hours, 1 minute ago Description :SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6529 Published : April 30, 2026, 7:16 a.m. | 3 hours, 1 minute ago Description :iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-6533 Published : April 30, 2026, 7:16 a.m. | 3 hours, 1 minute ago Description :Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...