News & Sicurezza

CVE ID :CVE-2026-22202 Published : March 13, 2026, 6:19 a.m. | 6 hours, 9 minutes ago Description :wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The vulner ... Read more Published Date: Mar 13, 2026 (3 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21708 CVE-2026-21672 CVE-2026-21671 CVE-2026-21669 CVE-2026-21668 CVE-2026-21667 CVE-2026-21666 CVE-2026-21385 CVE-2026-21513

Network Hijack: Critical 9.8 CVSS Flaw in AdGuard Home Grants Hackers Full DNS Control AdGuard Home, the popular network-wide software used to silence ads and block trackers across entire households, is facing a serious security challenge. A critical vulnerability, tracked as CVE-2026-3 ... Read more Published Date: Mar 13, 2026 (3 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2026-32136

Winter CMS Urgently Patches Critical 10.0 CVSS Privilege Escalation Flaw Winter CMS, the popular open-source content management system favored by developers for its Laravel-based simplicity and rapid prototyping, has issued an urgent security update. The vulnerability, tra ... Read more Published Date: Mar 13, 2026 (3 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2026-27591

OpenSSH GSSAPI Vulnerability Allow an Attacker to Crash SSH Child Processes A significant vulnerability in the GSSAPI Key Exchange patch was applied by numerous Linux distributions on top of their OpenSSH packages. The flaw, tracked as CVE-2026-3497, was uncovered by security ... Read more Published Date: Mar 13, 2026 (3 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3497

Total Takeover: Veeam Patches Critical 9.9 CVSS RCE Flaws in Backup & Replication 12.3.2 Veeam has released a major update to address a cluster of high-stakes vulnerabilities in Veeam Backup & Replication 12.3.2, including several Critical Remote Code Execution (RCE) flaws with near-perfe ... Read more Published Date: Mar 13, 2026 (3 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2026-21708 CVE-2026-21672 CVE-2026-21668 CVE-2026-21667 CVE-2026-21666 CVE-2024-40711

Legacy Under Siege: Apple Pushes Emergency iOS 15.8.7 Update to Thwart ‘Coruna’ Exploit Kit In a major move to protect users of older hardware, Apple has released critical security updates for iOS 15.8.7 and iPadOS 15.8.7. This emergency response follows a stark warning from Google regarding ... Read more Published Date: Mar 13, 2026 (3 days, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2023-43010 CVE-2026-20700 CVE-2023-43000 CVE-2025-24085 CVE-2024-44258 CVE-2024-23222 CVE-2023-41974

Breaking the Shield: ‘CrackArmor’ Flaws Expose 12.6 Million Linux Servers to Full Root Takeover The foundational security of millions of Linux servers has been called into question following the discovery of “CrackArmor,” a cluster of nine vulnerabilities in AppArmor. Discovered by the Qualys Th ... Read more Published Date: Mar 13, 2026 (2 days, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2025-6019 CVE-2025-47827 CVE-2025-29824 CVE-2024-27397

Apache Livy Patches Path Traversal and File Access Flaws Exposing Spark Clusters Apache Livy, the essential bridge that allows web and mobile applications to interact seamlessly with Apache Spark clusters via REST interfaces, has recently addressed two significant security vulnera ... Read more Published Date: Mar 13, 2026 (2 days, 4 hours ago) Vulnerabilities has been mentioned in this article.

Veeam Urgently Patches Critical 9.9 CVSS RCE Flaws in Backup Servers Veeam has released a major security update for Veeam Backup & Replication to address a cluster of high-stakes vulnerabilities, including multiple Critical Remote Code Execution (RCE) flaws. These vuln ... Read more Published Date: Mar 13, 2026 (2 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2026-21708 CVE-2026-21672 CVE-2026-21671 CVE-2026-21670 CVE-2026-21669 CVE-2025-48984 CVE-2025-48983

Apple Patches Coruna Exploit Kit — Older iOS/iPadOS Devices March 13, 2026What is Coruna?Researchers from Google and iVerify disclosed in early March 2026 a sophisticated exploit kit dubbed Coruna, described as “nation-state grade,” enabling mass exploitation ... Read more Published Date: Mar 13, 2026 (1 day, 8 hours ago) Vulnerabilities has been mentioned in this article. CVE-2023-43010 CVE-2023-43000 CVE-2024-23222 CVE-2023-41974

TaxiSpy RAT: New Android Banking Trojan Targets Russian Financial Sector A highly sophisticated Android Banking Trojan has emerged, combining traditional financial theft with advanced Remote Access Trojan (RAT) capabilities. A detailed analysis from Cyfirma reveals a threa ... Read more Published Date: Mar 13, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3910 CVE-2026-3909 CVE-2025-54957