News & Sicurezza

Vulnerabilities in CGM CLININET and CGM NETRAAD software Vulnerabilities in CGM CLININET and CGM NETRAAD software CVE ID CVE-2025-10350 Publication date 02 March 2026 Vendor CGM Product CGM NETRAAD Vulnerable versions All before 7.9.0 Vulnerability type (CW ... Read more Published Date: Mar 02, 2026 (22 hours, 50 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-58406 CVE-2025-58405 CVE-2025-58402 CVE-2025-30062 CVE-2025-30044 CVE-2025-30042 CVE-2025-30035 CVE-2025-10350

CISA Warns of RESURGE Malware Exploiting 0-Days to Breach Ivanti Connect Secure Devices A newly discovered malware variant named RESURGE is actively targeting Ivanti Connect Secure devices by exploiting a critical zero-day vulnerability, prompting the U.S. Cybersecurity and Infrastructur ... Read more Published Date: Mar 02, 2026 (23 hours, 8 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-0282

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia-linked state-sponsored threat actor known as APT28, according to new findings from Akamai. The vulnerabili ... Read more Published Date: Mar 02, 2026 (23 hours, 9 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127 CVE-2026-22769 CVE-2026-21513 CVE-2026-21509

CISA Warns RESURGE Malware Can Remain Dormant on Ivanti Connect Secure Devices The latest update on RESURGE malware from Cybersecurity and Infrastructure Security Agency (CISA) signals a concerning reality for network defenders: stealth-focused malware is becoming harder to dete ... Read more Published Date: Mar 02, 2026 (23 hours, 31 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-0282

CVE ID : CVE-2026-20445 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2584 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker (AV:N/PR:N) can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity (AC:L) and the absence of specific requirements (AT:N), the vulnerability allows for a total compromise of the system's configuration data (VC:H/VI:H). While the availability of the service remains unaffected (VA:N), the breach may lead to a limited exposure of sensitive information regarding subsequent or interconnected systems (SC:L). Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20444 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20439 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20440 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20441 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20438 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-20442 Published : March 2, 2026, 9:16 a.m. | 4 hours, 28 minutes ago Description : In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...