News & Sicurezza

CVE ID :CVE-2025-70032 Published : March 9, 2026, 7:16 p.m. | 1 hour, 59 minutes ago Description :An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3638 Published : March 9, 2026, 7:16 p.m. | 1 hour, 59 minutes ago Description :Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users and roles via crafted API requests. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instance using the victim’s configured upstream provider API credentials, resulting in unauthorized API usage and potential disclosure of proxied request and response data. This vulnerability's general exploitability has been mitigated with the introduction of commit 023cc95.

CVE ID :CVE-2026-29023 Published : March 9, 2026, 6:16 p.m. | 2 hours, 58 minutes ago Description :Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instance using the victim’s configured upstream provider API credentials, resulting in unauthorized API usage and potential disclosure of proxied request and response data. This vulnerability's general exploitability has been mitigated with the introduction of commit 023cc95. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-70039 Published : March 9, 2026, 6:16 p.m. | 2 hours, 59 minutes ago Description :An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-70038 Published : March 9, 2026, 6:16 p.m. | 2 hours, 59 minutes ago Description :An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attackers to execute arbitrary code. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-70034 Published : March 9, 2026, 6:16 p.m. | 2 hours, 59 minutes ago Description :An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-70033 Published : March 9, 2026, 6:16 p.m. | 2 hours, 59 minutes ago Description :An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2025-70037 Published : March 9, 2026, 5:16 p.m. | 3 hours, 59 minutes ago Description :An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute arbitrary code. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Termite Ransomware — Threat Intelligence and Technical Dissection 1. Executive SummaryTermite is a highly sophisticated ransomware operation first observed in November 2024. Built on the leaked Babuk ransomware source code, Termite has evolved rapidly from opportuni ... Read more Published Date: Mar 09, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2024-55956 CVE-2024-50623

CVE ID :CVE-2025-15568 Published : March 9, 2026, 5:16 p.m. | 3 hours, 59 minutes ago Description :A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution (RCE) when the router is configured with sysmode=ap. Successful exploitation results in root-level privileges and impacts confidentiality, integrity and availability of the device. This issue affects Archer AXE75 v1.6/v1.0: through 1.3.2 Build 20250107. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-3588 Published : March 9, 2026, 4:16 p.m. | 4 hours, 58 minutes ago Description :A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...