News & Sicurezza

MOVEit WAF Critical Alert: Multi-Level RCE and WAF Bypass Vulnerabilities Disclosed Progress Software has released a critical security bulletin for April 2026, revealing five high-impact vulnerabilities affecting MOVEit WAF and related Application Delivery Controller (ADC) products. ... Read more Published Date: Apr 21, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-4048 CVE-2026-3519 CVE-2026-3518 CVE-2026-3517 CVE-2026-39813 CVE-2026-39808 CVE-2026-35337 CVE-2026-22679 CVE-2026-20133 CVE-2026-20128 CVE-2026-20122 CVE-2026-21962 CVE-2026-21876 CVE-2025-32975 CVE-2025-48700 CVE-2025-2749 CVE-2024-4358 CVE-2024-27199 CVE-2023-27351

6000+ Apache ActiveMQ Instances Vulnerable to CVE-2026-34197 Exposed Online More than 6,000 internet-exposed Apache ActiveMQ instances are still vulnerable to CVE-2026-34197. This newly tracked security flaw has now been added to the U.S. Cybersecurity and Infrastructure Secu ... Read more Published Date: Apr 21, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-34197

Hackers Use Nightmare-Eclipse Tools After Compromising FortiGate SSL VPN Access A real-world intrusion campaign leveraging publicly available Nightmare-Eclipse privilege escalation tooling, BlueHammer, RedSun, and UnDefend, following what appears to be unauthorized access through ... Read more Published Date: Apr 21, 2026 (1 day, 8 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-33825 CVE-2026-34197

OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks The Open Virtual Network (OVN) team has issued a dual-threat security advisory concerning two critical heap over-read vulnerabilities. These flaws, identified as CVE-2026-5265 and CVE-2026-5367, could ... Read more Published Date: Apr 21, 2026 (1 day, 6 hours ago) Vulnerabilities has been mentioned in this article.

CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133) CISA added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a Cisco Catalyst SD-WAN Manager vulnerability (CVE-2026-20133) that Cisco has yet to flag as exploi ... Read more Published Date: Apr 21, 2026 (1 day, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20133 CVE-2026-20128 CVE-2026-20122 CVE-2025-32975 CVE-2025-48700 CVE-2025-2749 CVE-2024-27199 CVE-2024-27198 CVE-2023-27351

CVE ID :CVE-2026-41039 Published : April 21, 2026, 11:16 a.m. | 49 minutes ago Description :This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device. Successful exploitation of this vulnerability could allow the attacker to access sensitive information, including internal endpoints, scripts and directories on the targeted device. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41038 Published : April 21, 2026, 11:16 a.m. | 49 minutes ago Description :This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device. Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution Cybersecurity researchers have discovered a vulnerability in Google's agentic integrated development environment (IDE), Antigravity, that could be exploited to achieve code execution. The flaw, since ... Read more Published Date: Apr 21, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-34197 CVE-2026-33032 CVE-2026-21520

Hackers Could Weaponize GGUF Models to Achieve RCE on SGLang Inference Servers A critical vulnerability in the SGLang inference server that allows threat actors to execute arbitrary code. Tracked as CVE-2026-5760, this flaw allows hackers to weaponize standard GGUF machine learn ... Read more Published Date: Apr 21, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-5760

CVE ID :CVE-2026-6553 Published : April 21, 2026, 10:16 a.m. | 1 hour, 49 minutes ago Description :Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41036 Published : April 21, 2026, 10:16 a.m. | 1 hour, 49 minutes ago Description :This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-41037 Published : April 21, 2026, 10:16 a.m. | 1 hour, 49 minutes ago Description :This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...