News & Sicurezza

CVE ID :CVE-2026-1919 Published : March 10, 2026, 2:21 a.m. | 4 hours, 53 minutes ago Description :The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query sensitive data. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-1920 Published : March 10, 2026, 2:21 a.m. | 4 hours, 53 minutes ago Description :The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to install addon plugins. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA KEV Catalog Update – March 9 2026 March 10, 2026CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog today, based on evidence of active exploitationCVE-2026-1603 — Ivanti Endpoint Manager (EPM) ... Read more Published Date: Mar 10, 2026 (17 hours, 1 minute ago) Vulnerabilities has been mentioned in this article. CVE-2026-1603 CVE-2026-1281 CVE-2025-26399 CVE-2024-28988 CVE-2024-28986 CVE-2021-22054

CVE-2026-0866: Malformed ZIP Headers Allow Malware to Slip Past EDR Scanners A newly detailed vulnerability, CVE-2026-0866, is highlighting a fundamental blind spot in how many Antivirus (AV) and Endpoint Detection and Response (EDR) tools handle compressed files. By strategic ... Read more Published Date: Mar 10, 2026 (17 hours, 2 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2025-36173 Published : March 10, 2026, 4:50 p.m. | 25 minutes ago Description :Affected Product(s)Version(s)InfoSphere Data Architect9.2.1 Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-36105 Published : March 10, 2026, 4:50 p.m. | 26 minutes ago Description :IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables. Severity: 4.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical 9.8 CVSS Flaws Expose SICK Lector Scanners to Hijacking In a significant update for the industrial automation sector, SICK PSIRT has issued a high-priority security advisory regarding two critical vulnerabilities affecting the Lector85x and Lector83x produ ... Read more Published Date: Mar 10, 2026 (18 hours, 36 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2331 CVE-2026-2330 CVE-2026-2256 CVE-2025-7972 CVE-2025-0867 CVE-2022-0778

Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors The Gogs project, a popular self-hosted Git service prized for its simplicity and painless setup, has been hit by a critical security flaw that could turn trusted repositories into delivery vectors fo ... Read more Published Date: Mar 10, 2026 (16 hours, 45 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-25921 CVE-2026-2256 CVE-2025-4275

CVE ID :CVE-2026-27689 Published : March 10, 2026, 12:19 a.m. | 6 hours, 56 minutes ago Description :Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-27688 Published : March 10, 2026, 12:18 a.m. | 6 hours, 56 minutes ago Description :Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected. Severity: 5.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora Security researchers have disclosed three significant vulnerabilities in Pingora, the high-performance Rust framework developed by Cloudflare to build programmable network services. While Rust is cele ... Read more Published Date: Mar 10, 2026 (16 hours, 59 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2836 CVE-2026-2835 CVE-2026-2833 CVE-2026-2256

CVE ID :CVE-2026-27687 Published : March 10, 2026, 12:18 a.m. | 6 hours, 57 minutes ago Description :Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company. This vulnerability has a high impact on confidentiality and does not affect integrity and availability. Severity: 5.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...