News & Sicurezza

Critical Claude Code Vulnerabilities Enables Remote Code Execution Attacks Claude Code Vulnerabilities A critical security flaw in Anthropic’s Claude Code demonstrates how threat actors can exploit repository configuration files to execute malicious code and steal sensitive ... Read more Published Date: Feb 26, 2026 (1 day, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2026-21852 CVE-2025-59536

27 Years old Telnet Vulnerability Enables Attackers to Gain Root Access 27 Years old Telnet Enables Attackers Gain Root Access A newly confirmed vulnerability in the telnet daemon (telnetd) in GNU Inetutils has revived a 27-year-old security flaw, allowing attackers to ga ... Read more Published Date: Feb 26, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2026-24061 CVE-1999-0073

NCSC verwacht grootschalig misbruik van kritiek Cisco-lek: 'patch zo snel mogelijk' Het Nationaal Cyber Security Centrum (NCSC) verwacht grootschalig misbruik van een kritieke kwetsbaarheid in Cisco Catalyst SD-WAN Controller en Cisco Catalyst SD-WAN Manager en roept organisaties op ... Read more Published Date: Feb 26, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127

PoC Released for Windows Vulnerability That Allows Attackers to Cause Unrecoverable BSOD Crashes A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2636, a newly documented vulnerability in Windows’ Common Log File System (CLFS) driver that allows any low-privileged, unprivi ... Read more Published Date: Feb 26, 2026 (1 day, 16 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2636 CVE-2025-29824 CVE-2024-6768 CVE-2023-28252 CVE-2022-37969

Major Security Overhaul for Apache Superset: Five Vulnerabilities Patched Apache Superset is a modern data exploration and data visualization platform. Superset can replace or augment proprietary business intelligence tools for many teams. Furthermore, Superset integrates w ... Read more Published Date: Feb 26, 2026 (1 day, 9 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-23984 CVE-2026-23983 CVE-2026-23982 CVE-2026-23980 CVE-2026-23969 CVE-2026-2441 CVE-2026-1603 CVE-2025-1735 CVE-2025-6491 CVE-2025-48912 CVE-2024-55633

CVE ID : CVE-2026-28138 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28131 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28083 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28136 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS wp-sms allows SQL Injection.This issue affects WP SMS: from n/a through Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-28132 Published : Feb. 26, 2026, 9:16 a.m. | 7 hours, 54 minutes ago Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection.This issue affects WooCommerce Photo Reviews: from n/a through Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1698 Published : Feb. 26, 2026, 8:16 a.m. | 8 hours, 54 minutes ago Description : A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior. This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout of the WebClient and WebScheduler web apps. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1697 Published : Feb. 26, 2026, 8:16 a.m. | 8 hours, 54 minutes ago Description : The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...