News & Sicurezza

CVE ID : CVE-2026-1874 Published : March 3, 2026, 7:16 a.m. | 8 hours, 28 minutes ago Description : Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106 and prior and Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agent_deploy_init of the file /agents/deploy/initiate.c of the component Agent Deployment. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. A patch should be applied to remediate this issue.

CVE ID : CVE-2025-15595 Published : March 3, 2026, 7:16 a.m. | 6 hours, 28 minutes ago Description : Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions. Severity: 5.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-12345 Published : March 3, 2026, 7:16 a.m. | 6 hours, 28 minutes ago Description : A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agent_deploy_init of the file /agents/deploy/initiate.c of the component Agent Deployment. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. A patch should be applied to remediate this issue. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited Google on Monday disclosed that a high-severity security flaw impacting an open-source Qualcomm component used in Android devices has been exploited in the wild. The vulnerability in question is CVE-2 ... Read more Published Date: Mar 03, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-0047 CVE-2026-0038 CVE-2026-0037 CVE-2026-0031 CVE-2026-0030 CVE-2026-0028 CVE-2026-0027 CVE-2026-0006 CVE-2026-21385 CVE-2026-20127 CVE-2026-22769 CVE-2025-48631 CVE-2024-43859

CVE ID : CVE-2026-1876 Published : March 3, 2026, 8:16 a.m. | 7 hours, 28 minutes ago Description : Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial-of-service (DoS) condition on the products by continuously sending UDP packets to the products. A system reset of the product is required for recovery. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Android Security Update – Patch for 129 Vulnerabilities and Actively Exploited Zero-Day Android Security Update Google has released its highly anticipated March 2026 Android Security Bulletin, delivering critical fixes for 129 security vulnerabilities across the Android ecosystem. This m ... Read more Published Date: Mar 03, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-0047 CVE-2026-0037 CVE-2026-0006 CVE-2026-21385 CVE-2025-48631 CVE-2024-43859

CVE ID : CVE-2026-3449 Published : March 3, 2026, 5:17 a.m. | 8 hours, 27 minutes ago Description : Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, causing any await or .then() usage to hang indefinitely. This can cause a control-flow leak that can lead to stalled requests, blocked workers, or degraded application availability. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-3455 Published : March 3, 2026, 5:17 a.m. | 8 hours, 27 minutes ago Description : Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in the email content. An attacker can execute arbitrary scripts in victim browsers by adding extra quote " to the URL with embedded malicious JavaScript code. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.

CVE ID : CVE-2026-1492 Published : March 3, 2026, 5:17 a.m. | 8 hours, 27 minutes ago Description : The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Security Alert: “Hackerbot-Claw” Autonomous Campaign Exploits GitHub Actions Christopher Robinson, Chief Technology Officer and Chief Security Architect at the Open Source Security Foundation (OpenSSF), has issued a warning regarding an active, automated attack campaign dubbed ... Read more Published Date: Mar 03, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2256 CVE-2026-2441 CVE-2026-20045 CVE-2025-54594 CVE-2025-54416