News & Sicurezza

Under Active Attack: Critical 9.8 CVSS Tutor LMS Pro Flaw Exploited in the Wild for Full Site Takeover A high-severity vulnerability has been uncovered in Tutor LMS Pro, a popular WordPress plugin used by over 30,000 active sites to manage online courses. The flaw, tracked as CVE-2026-0953, carries a C ... Read more Published Date: Mar 10, 2026 (22 hours, 38 minutes ago) Vulnerabilities has been mentioned in this article.

Home Network Alert: TP-Link Patches RCE Vulnerability in Archer AXE75 Routers TP-Link has issued an urgent security advisory for users of its high-performance Archer AXE75 routers. A newly discovered command injection flaw, tracked as CVE-2025-15568, could allow attackers to se ... Read more Published Date: Mar 10, 2026 (22 hours, 44 minutes ago) Vulnerabilities has been mentioned in this article.

Kubernetes Security Alert: “Ingress-Nginx” Injection Flaw Risks Cluster-Wide Secret Exposure A critical security vulnerability has been identified in ingress-nginx, the widely used Ingress controller for Kubernetes. Tracked as CVE-2026-3288 with a high-severity CVSS score of 8.8, the flaw cen ... Read more Published Date: Mar 10, 2026 (20 hours, 54 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2026-1919 Published : March 10, 2026, 2:21 a.m. | 4 hours, 53 minutes ago Description :The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query sensitive data. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-1920 Published : March 10, 2026, 2:21 a.m. | 4 hours, 53 minutes ago Description :The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to install addon plugins. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA KEV Catalog Update – March 9 2026 March 10, 2026CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog today, based on evidence of active exploitationCVE-2026-1603 — Ivanti Endpoint Manager (EPM) ... Read more Published Date: Mar 10, 2026 (17 hours, 1 minute ago) Vulnerabilities has been mentioned in this article. CVE-2026-1603 CVE-2026-1281 CVE-2025-26399 CVE-2024-28988 CVE-2024-28986 CVE-2021-22054

CVE-2026-0866: Malformed ZIP Headers Allow Malware to Slip Past EDR Scanners A newly detailed vulnerability, CVE-2026-0866, is highlighting a fundamental blind spot in how many Antivirus (AV) and Endpoint Detection and Response (EDR) tools handle compressed files. By strategic ... Read more Published Date: Mar 10, 2026 (17 hours, 2 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID :CVE-2025-36173 Published : March 10, 2026, 4:50 p.m. | 25 minutes ago Description :Affected Product(s)Version(s)InfoSphere Data Architect9.2.1 Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-36105 Published : March 10, 2026, 4:50 p.m. | 26 minutes ago Description :IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables. Severity: 4.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical 9.8 CVSS Flaws Expose SICK Lector Scanners to Hijacking In a significant update for the industrial automation sector, SICK PSIRT has issued a high-priority security advisory regarding two critical vulnerabilities affecting the Lector85x and Lector83x produ ... Read more Published Date: Mar 10, 2026 (18 hours, 36 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2331 CVE-2026-2330 CVE-2026-2256 CVE-2025-7972 CVE-2025-0867 CVE-2022-0778

Critical 9.3 CVSS Flaw in Gogs Turns Repositories into Malware Delivery Vectors The Gogs project, a popular self-hosted Git service prized for its simplicity and painless setup, has been hit by a critical security flaw that could turn trusted repositories into delivery vectors fo ... Read more Published Date: Mar 10, 2026 (16 hours, 45 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-25921 CVE-2026-2256 CVE-2025-4275

CVE ID :CVE-2026-27689 Published : March 10, 2026, 12:19 a.m. | 6 hours, 56 minutes ago Description :Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...