News & Sicurezza

CVE ID : CVE-2026-28711 Published : March 6, 2026, 12:16 a.m. | 1 hour, 30 minutes ago Description : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28712 Published : March 6, 2026, 12:16 a.m. | 1 hour, 30 minutes ago Description : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. Severity: 6.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28713 Published : March 6, 2026, 12:16 a.m. | 1 hour, 30 minutes ago Description : Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyber Protect Cloud Agent (VMware) before build 36943, Acronis Cyber Protect 17 (VMware) before build 41186. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27770 Published : March 6, 2026, 12:16 a.m. | 1 hour, 30 minutes ago Description : Charging station authentication identifiers are publicly accessible via web-based mapping platforms. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27778 Published : March 6, 2026, 12:16 a.m. | 1 hour, 30 minutes ago Description : The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2589 Published : March 6, 2026, 12:16 a.m. | 3 hours, 30 minutes ago Description : The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automated Settings Backup stored in a publicly accessible file. This makes it possible for unauthenticated attackers to extract sensitive data including the configured OpenAI, Claude, Google Maps, Gemini, DeepSeek, and Cloudflare Turnstile API keys. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-22552 Published : March 5, 2026, 11:18 p.m. | 28 minutes ago Description : WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then issue or receive OCPP commands as a legitimate charger. Given that no authentication is required, this can lead to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend. Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Payment Orchestrator Service Elevation of Privilege Vulnerability

CVE ID : CVE-2026-26122 Published : March 5, 2026, 11:16 p.m. | 30 minutes ago Description : Microsoft ACI Confidential Containers Information Disclosure Vulnerability Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-23651 Published : March 5, 2026, 11:16 p.m. | 30 minutes ago Description : Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. Severity: 6.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26124 Published : March 5, 2026, 11:16 p.m. | 30 minutes ago Description : Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability Severity: 6.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Microsoft Devices Pricing Program Remote Code Execution Vulnerability