News & Sicurezza

CVE ID : CVE-2025-27555 Published : Feb. 24, 2026, 10:16 a.m. | 2 hours, 50 minutes ago Description : Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the CLI to set connections should manually delete entries with those connection sensitive values from the log table. This is similar but not the same issue as CVE-2024-50378 Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Multiple VMware Aria Vulnerabilities Allow Remote Code Execution Attacks VMware Aria Vulnerabilities RCE Attack Broadcom issued security advisory VMSA-2026-0001 on February 24, 2026, disclosing three vulnerabilities in VMware Aria Operations that pose risks, including remo ... Read more Published Date: Feb 24, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article.

UnsolicitedBooker Targets Central Asian Telecoms With LuciDoor and MarsSnake Backdoors The threat activity cluster known as UnsolicitedBooker has been observed targeting telecommunications companies in Kyrgyzstan and Tajikistan, marking a shift from prior attacks aimed at Saudi Arabian ... Read more Published Date: Feb 24, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2018-0802

Root Access Granted: Four Critical RCE Flaws Patched in SolarWinds Serv-U File transfer servers are meant to securely move sensitive data, but a new batch of critical vulnerabilities in SolarWinds Serv-U threatens to hand over complete system control to attackers instead. S ... Read more Published Date: Feb 24, 2026 (1 day, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-40541 CVE-2025-40540 CVE-2025-40539 CVE-2025-40538 CVE-2026-2441 CVE-2024-28075 CVE-2024-23473

CVE ID : CVE-2024-1524 Published : Feb. 24, 2026, 9:16 a.m. | 3 hours, 50 minutes ago Description : When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (IDP) there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will be no impact on your deployment if any of the preconditions mentioned below are not met. Only when all the preconditions mentioned below are fulfilled could a malicious actor associate a targeted local user account with a federated IDP user account that they control. The Deployment should have: -An IDP configured for federated authentication with Silent JIT provisioning enabled. The malicious actor should have: -A fresh valid user account in the federated IDP that has not been used earlier. -Knowledge of the username of a valid user in the local IDP. -An account at the federated IDP matching the targeted local username. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical VMware Aria Operations Flaw Allows RCE During System Upgrades For enterprise IT teams, VMware Aria Operations (formerly vRealize Operations) acts as the central nervous system for monitoring cloud and virtual environments. However, a new security advisory from B ... Read more Published Date: Feb 24, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2025-11165 Published : Feb. 24, 2026, 9:16 a.m. | 3 hours, 50 minutes ago Description : A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package restrictions enforced by SecureUberspectorImpl. By dynamically modifying the Velocity engine’s runtime configuration and reinitializing its Uberspect, a malicious actor can remove the introspector.restrict.classes and introspector.restrict.packages protections. Once these restrictions are cleared, the attacker can access arbitrary Java classes, including java.lang.Runtime, and execute arbitrary system commands under the privileges of the application process (e.g. dotCMS or Tomcat user). Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVE ID : CVE-2025-40540 Published : Feb. 24, 2026, 8:16 a.m. | 4 hours, 49 minutes ago Description : A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1229 Published : Feb. 24, 2026, 8:16 a.m. | 4 hours, 49 minutes ago Description : The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas. ECDH and ECDSA signing relying on this curve are not affected. The bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 . Severity: 2.9 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-40541 Published : Feb. 24, 2026, 8:16 a.m. | 4 hours, 49 minutes ago Description : An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...