News & Sicurezza

CVE ID : CVE-2026-1696 Published : Feb. 26, 2026, 8:16 a.m. | 6 hours, 53 minutes ago Description : Some HTTP security headers are not properly set by the web server when sending responses to the client application. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1695 Published : Feb. 26, 2026, 8:16 a.m. | 6 hours, 53 minutes ago Description : An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to trick a legitimate user into loading content from another site upon unsuccessful user authentication on an unknown application (unknown client_id). This vulnerability only affects the error page of the OAuth server. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1693 Published : Feb. 26, 2026, 8:16 a.m. | 6 hours, 53 minutes ago Description : The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1694 Published : Feb. 26, 2026, 8:16 a.m. | 6 hours, 53 minutes ago Description : HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1692 Published : Feb. 26, 2026, 8:16 a.m. | 6 hours, 53 minutes ago Description : A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to lure a successfully authenticated user to a malicious website. This vulnerability only affects the following two endpoints: GraphicalData/js/signalR/connect and GraphicalData/js/signalR/reconnect. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

New FreeBSD Vulnerabilities Allow Jail Escapes and Kernel Panics The FreeBSD project has released details on two significant security flaws that could allow attackers to break out of restricted jail environments or crash the system entirely. Here is everything you ... Read more Published Date: Feb 26, 2026 (1 day, 10 hours ago) Vulnerabilities has been mentioned in this article.

Automation at Risk: Triple 9.4 Severity RCE Flaws Threaten n8n Workflow Servers n8n is a popular workflow automation platform that gives technical teams the flexibility of code with the speed of no-code. With 400+ integrations, native AI capabilities, and a fair-code license, n8n ... Read more Published Date: Feb 26, 2026 (1 day, 8 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-27577 CVE-2026-27497 CVE-2026-27495 CVE-2026-27212 CVE-2026-2441 CVE-2026-25053 CVE-2026-21877 CVE-2025-68613

Hackers Exploited Cisco SD-WAN Zero-Day for Three Years Before Detection Cisco Talos disclosed that a highly sophisticated threat actor exploited a critical authentication bypass vulnerability in Cisco SD-WAN infrastructure for at least three years before security research ... Read more Published Date: Feb 26, 2026 (1 day, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20127 CVE-2025-20352 CVE-2022-20775 CVE-2021-21311

Algorithm Confusion: Critical 9.1 Flaw in Parse Server Allows Instant Google Account Takeover Parse Server, a widely used open-source backend designed to be deployed on any infrastructure running Node.js and working alongside the Express web application framework, is currently affected by a hi ... Read more Published Date: Feb 26, 2026 (1 day, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-27804 CVE-2026-2441 CVE-2026-23478 CVE-2023-36475

Sandbox Escape: Critical 9.2 Severity RCE Flaw Unmasked in ServiceNow AI Platform ServiceNow administrators and security teams need to ensure their environments are up to date following the disclosure of a highly critical vulnerability affecting the ServiceNow AI Platform. The flaw ... Read more Published Date: Feb 26, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-0542 CVE-2026-2441 CVE-2025-12420 CVE-2025-0337

Trend Micro Issues Critical Patch for Apex One: Severe RCE Flaws Addressed Network defenders using Trend Micro Apex One need to prioritize their patching schedules this week. TrendAl has officially released a Critical Patch (CP) for Trend Micro Apex One, alongside informatio ... Read more Published Date: Feb 26, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article.

NVIDIA Issues Patches for High-Severity Flaws in Cumulus Linux and NVOS NVIDIA has issued an important security bulletin for February 2026, warning network administrators of three high-severity vulnerabilities impacting its Cumulus Linux and NVOS platforms. If left unpatc ... Read more Published Date: Feb 26, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-33181 CVE-2025-33180 CVE-2025-33179 CVE-2026-2441 CVE-2025-33206 CVE-2025-33187 CVE-2024-0138 CVE-2024-43451