News & Sicurezza

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The hig ... Read more Published Date: Aug 12, 2026 (1 day, 13 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20349

August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs Microsoft has addressed 415 vulnerabilities in its August 2026 security update release. This month's patches include fixes for one exploited zero-day vulnerability, three disclosed zero-day vulnerabil ... Read more Published Date: Aug 12, 2026 (1 day, 14 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-72971 CVE-2026-71331 CVE-2026-70130 CVE-2026-68820 CVE-2026-68816 CVE-2026-68804 CVE-2026-68794 CVE-2026-66807 CVE-2026-66802 CVE-2026-66799 CVE-2026-65791 CVE-2026-65789 CVE-2026-65665 CVE-2026-65664 CVE-2026-65657 CVE-2026-64921 CVE-2026-64911 CVE-2026-64910 CVE-2026-64909 CVE-2026-64907 CVE-2026-64903 CVE-2026-64898 CVE-2026-63532 CVE-2026-63526 CVE-2026-63525 CVE-2026-63522 CVE-2026-63519 CVE-2026-63518 CVE-2026-63515 CVE-2026-63513 CVE-2026-62911 CVE-2026-62893 CVE-2026-62890 CVE-2026-62889 CVE-2026-62878 CVE-2026-62869 CVE-2026-62832 CVE-2026-62827 CVE-2026-62824 CVE-2026-62823 CVE-2026-62822 CVE-2026-62820 CVE-2026-62819 CVE-2026-62818 CVE-2026-62817 CVE-2026-62816 CVE-2026-62815 CVE-2026-62737 CVE-2026-50516 CVE-2026-70332 CVE-2026-68823 CVE-2026-65668 CVE-2026-65667 CVE-2026-63508 CVE-2026-62918 CVE-2026-62896 CVE-2026-62873 CVE-2026-62836 CVE-2026-62830 CVE-2026-59118 CVE-2026-59115 CVE-2026-56162 CVE-2026-56161 CVE-2026-50515 CVE-2026-50481 CVE-2026-49163

CVE ID :CVE-2025-15687 Published : 2026年8月12日 04:17 | 14 分钟 ago Description :A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf_gx_cca_cb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.7.7 is recommended to address this issue. The patch is identified as f23d7a5e959acd8f37b925dc29b85f26b7d391cb. Upgrading the affected component is advised. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-12233 Published : 2026年8月12日 03:54 | 37 分钟 ago Description :The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its credential-store mutex as a plain zero-filled static struct k_mutex credential_lock; and never called k_mutex_init() on it. A statically zero-filled k_mutex has an uninitialized wait queue (its dlist head/tail are NULL instead of the self-referential sentinels that k_mutex_init/K_MUTEX_DEFINE install). The uncontended lock path does not touch the wait queue, so the defect is latent and serialized use behaves correctly. When two execution contexts contend on the lock, k_mutex_lock() pends the blocking thread on the wait queue via z_pend_curr(), which calls sys_dlist_append() on the zeroed list and dereferences a NULL tail pointer (tail->next = node), faulting the kernel. The lock is held during TLS handshake credential loading and by all credential add/get/delete operations, so a deployment performing concurrent TLS handshakes (for example a server handling multiple simultaneous connections from a remote peer) or a credential-management operation concurrent with a handshake can trigger the dereference. The impact is a denial of service: a deterministic kernel panic / device reset on the first contention. There is no memory corruption beyond the NULL dereference and no confidentiality or integrity impact; mutual exclusion on the fast path remains correct. Exposure is limited to builds with CONFIG_TLS_CREDENTIALS_BACKEND_PROTECTED_STORAGE enabled (PSA Protected Storage / TF-M platforms); the default volatile RAM backend initializes its lock correctly and is unaffected. The fix initializes the mutex statically with K_MUTEX_DEFINE(credential_lock), providing a valid wait queue so the contended path no longer touches a NULL list. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-12232 Published : 2026年8月12日 03:34 | 58 分钟 ago Description :The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a caller-supplied int stream_id with no range validation. The value indexes the fixed-size static const uint8_t alh_handshake_map[64] array and scales a FIFO register address, so an out-of-range stream_id produces an out-of-bounds read of one byte at an attacker-chosen signed offset from the array. That byte is written into prop->dma_hs_id and the resulting struct dai_properties is copied back to the caller, leaking it. dai_get_properties_copy() is a Zephyr __syscall, and its verifier z_vrfy_dai_get_properties_copy() (drivers/dai/dai_handlers.c) validates only the device-object permission and the destination buffer, not stream_id. A user-mode thread that has been granted access to the ALH DAI device object can therefore call the syscall with an arbitrary stream_id, crossing the userspace/kernel sandbox boundary. The impact is a one-byte-per-call arbitrary-offset kernel information disclosure (and leakage of a computed kernel address via fifo_address); a stream_id that resolves to an unmapped page faults in kernel context, giving a local denial of service. Exploitation requires CONFIG_USERSPACE and device access, making this a local, moderate-severity issue. The fix rejects negative and too-large stream_id values up front and returns NULL, which the copy wrapper maps to -ENOENT. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-19588 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-9318 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export_book method in the _html.py format handler. Attackers can rename worksheet sheets in imported files such as XLSX, ODS, XLS, or YAML with script payloads that are assigned to the Dataset title attribute and rendered unescaped inside an HTML h3 tag, leading to session hijacking, unauthorized administrative actions, and sensitive data exposure when the output is rendered in a browser. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email in all versions up to, and including, 1.4.3. This is due to the plugin trusting the unverified email field returned by Spotify's /v1/me endpoint as proof of mailbox ownership — Generic::normalize_common() copies this value into the normalized profile without requiring an email_verified assertion, and User_Links::link_or_login_user() subsequently passes it directly to get_user_by('email', $email) and issues a persistent authentication cookie via wp_set_auth_cookie() without a provider-specific verified-email gate, a local mailbox challenge, or a logged-in approval step. This makes it possible for unauthenticated attackers to log in as any existing WordPress user, including Administrators, by supplying a known target email address through a controlled Spotify OAuth flow, gaining full administrative access to the site.

CVE ID :CVE-2025-15685 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-15686 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-19587 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-15684 Published : 2026年8月12日 03:16 | 1 小时，15 分钟 ago Description :A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 2.7.7 is able to address this issue. The patch is identified as c1a803516a3c0485696cb9bcca7a80ad857c7383. It is advisable to upgrade the affected component. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...