News & Sicurezza

CVE ID : CVE-2026-28540 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Severity: 4.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28541 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. Severity: 4.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28538 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28539 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Severity: 6.2 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_registration_init()` function accepting any membership level ID via the `rcp_level` POST parameter without validating that the level is active or that payment is required. Combined with the `add_user_role()` method which assigns the WordPress role configured on the membership level without status checks, this makes it possible for unauthenticated attackers to register with any membership level, including inactive levels that grant privileged WordPress roles such as Administrator, or paid levels that charge a sign-up fee. The vulnerability was partially patched in version 3.2.18.

CVE ID : CVE-2025-66319 Published : March 5, 2026, 8:15 a.m. | 3 hours, 30 minutes ago Description : Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity. Severity: 3.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Cisco Catalyst SD-WAN Vulnerabilities Allow Attackers to Gain Root Access Cisco Catalyst SD-WAN Vulnerabilities An urgent security advisory from Cisco warns that multiple vulnerabilities in Cisco Catalyst SD-WAN Manager could allow attackers to bypass authentication, gain r ... Read more Published Date: Mar 05, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20129 CVE-2026-20128 CVE-2026-20126 CVE-2026-20122

CVE ID : CVE-2026-1321 Published : March 5, 2026, 8:15 a.m. | 5 hours, 30 minutes ago Description : The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20. This is due to the `rcp_setup_registration_init()` function accepting any membership level ID via the `rcp_level` POST parameter without validating that the level is active or that payment is required. Combined with the `add_user_role()` method which assigns the WordPress role configured on the membership level without status checks, this makes it possible for unauthenticated attackers to register with any membership level, including inactive levels that grant privileged WordPress roles such as Administrator, or paid levels that charge a sign-up fee. The vulnerability was partially patched in version 3.2.18. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2893 Published : March 5, 2026, 8:15 a.m. | 7 hours, 30 minutes ago Description : The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_clone() function in all versions up to, and including, 6.3. This is due to insufficient escaping on the user-supplied meta_key value and insufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The injection is second-order: the malicious payload is stored as a post meta key and executed when the post is cloned. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2743 Published : March 5, 2026, 7:16 a.m. | 4 hours, 29 minutes ago Description : Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before Severity: 10.0 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28536 Published : March 5, 2026, 7:16 a.m. | 2 hours, 29 minutes ago Description : Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Severity: 9.6 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-25702 Published : March 5, 2026, 7:16 a.m. | 2 hours, 29 minutes ago Description : A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...