News & Sicurezza

CVE ID : CVE-2026-2599 Published : March 5, 2026, 1:16 p.m. | 4 hours, 29 minutes ago Description : The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Threat Actors Intensify Targeting of IP Cameras Across Middle East Amid Ongoing Conflict Cyberattacks linked to Iranian threat actors are taking on a new and alarming form in the ongoing Middle East conflict. Since late February 2026, a coordinated campaign to compromise internet-connecte ... Read more Published Date: Mar 05, 2026 (1 day, 8 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-34067 CVE-2023-6895 CVE-2021-36260 CVE-2021-33044 CVE-2017-7921

Cisco meldt ook misbruik van andere Catalyst SD-WAN-kwetsbaarheden Twee kritieke kwetsbaarheden in Cisco Catalyst SD-WAN Manager worden actief misbruikt bij aanvallen, zo waarschuwt Cisco. Updates voor de problemen zijn sinds 25 februari beschikbaar. De Cisco Catalys ... Read more Published Date: Mar 05, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20128 CVE-2026-20127 CVE-2026-20122

FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289) A newly discovered vulnerability (CVE-2026-28289) in the open-source help desk platform FreeScout could allow attackers to take over vulnerable servers by sending a specially crafted email to a FreeSc ... Read more Published Date: Mar 05, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-28289 CVE-2026-27636 CVE-2025-14500

CVE ID : CVE-2026-3236 Published : March 5, 2026, 11:15 a.m. | 6 hours, 30 minutes ago Description : In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1605 Published : March 5, 2026, 10:15 a.m. | 5 hours, 30 minutes ago Description : In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This happens because the JDK Inflater is allocated for decompressing the request, but it is not released because the release mechanism is tied to the compressed response. In this case, since the response is not compressed, the release mechanism does not trigger, causing the leak. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

APT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine Cybersecurity researchers have disclosed details of a new Russian cyber campaign that has targeted Ukrainian entities with two previously undocumented malware families named BadPaw and MeowMeow. "The ... Read more Published Date: Mar 05, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127 CVE-2026-22769 CVE-2026-21513

Kritiek Cisco-lek geeft aanvaller root-toegang tot Firewall Management Center Cisco waarschuwt voor een kritieke kwetsbaarheid waardoor een ongeauthenticeerde aanvaller op afstand root-toegang tot het Cisco Secure Firewall Management Center (FMC) kan krijgen. Het Nationaal Cybe ... Read more Published Date: Mar 05, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20079

Weaponized in the Wild: Public PoC Exploit Disclosed for Critical 10.0 Cisco SD-WAN Flaw The cybersecurity landscape has shifted into high gear following the public disclosure of a critical authentication bypass in Cisco Catalyst SD-WAN. The vulnerability, tracked as CVE-2026-20127, carri ... Read more Published Date: Mar 05, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2256 CVE-2026-20127 CVE-2024-20481 CVE-2022-20775

CVE ID : CVE-2025-11143 Published : March 5, 2026, 10:15 a.m. | 5 hours, 30 minutes ago Description : The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-21628 Published : March 5, 2026, 10:15 a.m. | 7 hours, 30 minutes ago Description : A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution. Severity: 10.0 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28547 Published : March 5, 2026, 9:16 a.m. | 6 hours, 29 minutes ago Description : Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability. Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...