News & Sicurezza

CVE ID :CVE-2026-3059 Published : March 12, 2026, 12:15 p.m. | 2 hours, 10 minutes ago Description :SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3234 Published : March 12, 2026, 11:15 a.m. | 3 hours, 10 minutes ago Description :A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in the decodeenc() function, allows a remote attacker to bypass input validation. By injecting CRLF sequences into the cluster configuration, an attacker can corrupt the response body of INFO endpoint responses. Exploitation requires network access to the MCMP protocol port, but no authentication is needed. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-2366 Published : March 12, 2026, 11:15 a.m. | 3 hours, 10 minutes ago Description :A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated user, even those without administrative privileges, to enumerate the organization memberships of other users. This information disclosure occurs if the attacker knows the victim's unique identifier (UUID) and the Organizations feature is enabled. Severity: 3.1 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Vulnerability in Streamsoft Prestiż software Vulnerability in Streamsoft Prestiż software CVE ID CVE-2026-0809 Publication date 12 March 2026 Vendor Streamsoft Product Streamsoft Prestiż Vulnerable versions From 12.2.363.17 to 20.0.380.91 Vulner ... Read more Published Date: Mar 12, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-0809

Cisco IOS XR Software Vulnerability Allow Attacker to Execute Commands as Root cisco-ios-xr-software-vulnerability Cisco has issued a high-severity security advisory warning organizations about two critical privilege-escalation vulnerabilities in its IOS XR Software. If exploite ... Read more Published Date: Mar 12, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-20046 CVE-2026-20040

Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS Sonoma to older versions after it was found to be used as part of the Coruna exploit kit. The vulnerability, tracked a ... Read more Published Date: Mar 12, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2023-43010 CVE-2026-21385 CVE-2026-21513 CVE-2023-43000 CVE-2024-23222 CVE-2023-41974 CVE-2023-38606 CVE-2023-32434

Kritiek n8n-beveiligingslek actief misbruikt bij aanvallen waarschuwt VS Aanvallers maken actief misbruik van een kritieke kwetsbaarheid in n8n, zo waarschuwt het cyberagentschap van de Amerikaanse overheid. Het beveiligingslek, waarvan de impact op een schaal van 1 tot en ... Read more Published Date: Mar 12, 2026 (23 hours, 39 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-68613

SolarWinds Web Help Desk Deserialization Vulnerability Enables Command Execution SolarWinds Web Help Desk Deserialization Vulnerability Cybersecurity authorities have flagged a severe security flaw in SolarWinds Web Help Desk that requires immediate attention from system administr ... Read more Published Date: Mar 12, 2026 (23 hours, 45 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-26399

CVE ID :CVE-2026-4016 Published : March 12, 2026, 9:15 a.m. | 5 hours, 10 minutes ago Description :A security vulnerability has been detected in GPAC 26.03-DEV. Affected by this vulnerability is the function svgin_process of the file src/filters/load_svg.c of the component SVG Parser. The manipulation leads to out-of-bounds write. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The identifier of the patch is 7618d7206cdeb3c28961dc97ab0ecabaff0c8af2. It is suggested to install a patch to address this issue. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4015 Published : March 12, 2026, 9:15 a.m. | 5 hours, 10 minutes ago Description :A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtin_process_texml of the file src/filters/load_text.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. This patch is called d29f6f1ada5cc284cdfa783b6f532c7d8bd049a5. Applying a patch is advised to resolve this issue. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Apple beschermt oude iPhones tegen actief aangevallen kwetsbaarheid Apple heeft beveiligingsupdates uitgebracht om oude iPhones en iPads tegen actief aangevallen kwetsbaarheden te beschermen. Onlangs werd bekend dat aanvallers de beveiligingslekken, waarvoor Apple al ... Read more Published Date: Mar 12, 2026 (22 hours, 43 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2023-43010 CVE-2023-43000 CVE-2024-23222 CVE-2023-41974

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.