News & Sicurezza

A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

CVE ID : CVE-2026-3612 Published : March 6, 2026, 1:15 a.m. | 2 hours, 31 minutes ago Description : A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3610 Published : March 6, 2026, 1:15 a.m. | 2 hours, 31 minutes ago Description : A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown functionality of the file /mailinspector/mliUserValidation.php of the component URL Handler. The manipulation of the argument error_description results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. Upgrading to version 5.4.0 can resolve this issue. You should upgrade the affected component. The vendor was contacted early and responded very professional: "We have already implemented the fix and made a hotfix available to affected customers, ensuring mitigation while the official release 5.4.0 has not yet been published. This allows customers to address the issue immediately, outside the regular release cycle." Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3613 Published : March 6, 2026, 1:02 a.m. | 44 minutes ago Description : A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Eyes on the Front: Iranian Threat Actors Weaponize IP Cameras in Middle East Conflict As modern warfare increasingly moves into the digital realm, a new report from Check Point Research (CPR) reveals how cyber operations are being used as a “force multiplier” for kinetic military actio ... Read more Published Date: Mar 06, 2026 (2 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2256 CVE-2025-34067 CVE-2025-33053 CVE-2021-36260 CVE-2021-33044 CVE-2018-0171 CVE-2017-7921

Stream Hijacked: Critical Zero-Click Command Injection Flaw Exposed in AVideo-Encoder Security researchers have uncovered a critical vulnerability in AVideo-Encoder, a key component of the open-source AVideo Platform (formerly YouPHPTube). The flaw, tracked as CVE-2026-29058, carries a ... Read more Published Date: Mar 06, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article.

Cracking the Cloud’s Crypto: Unauthenticated Bypass Flaws Found in Amazon’s AWS-LC Library Cybersecurity researchers have identified three significant vulnerabilities in AWS-LC, Amazon’s open-source cryptographic library used extensively across its cloud infrastructure and global services. ... Read more Published Date: Mar 06, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-3338 CVE-2026-3337 CVE-2026-3336 CVE-2026-2256

CVE ID : CVE-2026-28726 Published : March 6, 2026, 12:16 a.m. | 3 hours, 30 minutes ago Description : Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28725 Published : March 6, 2026, 12:16 a.m. | 3 hours, 30 minutes ago Description : Sensitive information disclosure due to improper configuration of a headless browser. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28723 Published : March 6, 2026, 12:16 a.m. | 3 hours, 30 minutes ago Description : Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28727 Published : March 6, 2026, 12:16 a.m. | 3 hours, 30 minutes ago Description : Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...