News & Sicurezza

BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of ... Read more Published Date: Feb 20, 2026 (3 days, 10 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-1731 CVE-2024-12356

CVE ID : CVE-2026-21627 Published : Feb. 20, 2026, 2:22 p.m. | 39 minutes ago Description : The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction. Severity: 9.5 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-14547 Published : Feb. 20, 2026, 2:11 p.m. | 50 minutes ago Description : An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs during ZKP parsing. Triggering the underflow can lead to a hard fault, causing a temporary denial of service. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Grandstream VoIP Phones Vulnerability Allows Attackers to Gain Root Privileges VoIP desk phones are trusted devices, but many are managed like office furniture. A newly disclosed flaw in Grandstream phones shows how a simple network-facing bug can turn a handset into an entry po ... Read more Published Date: Feb 20, 2026 (3 days, 10 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2329 CVE-2026-24733

Kritiek lek in BeyondTrust Remote Support gebruikt bij ransomware-aanvallen Een kritieke kwetsbaarheid in BeyondTrust Remote Support en BeyondTrust Privileged Remote Access wordt gebruikt bij ransomware-aanvallen, aldus het Amerikaanse cyberagentschap CISA. Via BeyondTrust Re ... Read more Published Date: Feb 20, 2026 (3 days, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731

Critical Jenkins Vulnerability Exposes Build Environments to XSS Attacks Jenkins Vulnerability Exposes XSS Attacks Security Advisory has revealed multiple vulnerabilities in Jenkins Core, including a stored Cross-Site Scripting (XSS) flaw that could expose build environmen ... Read more Published Date: Feb 20, 2026 (3 days, 11 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-27100 CVE-2026-27099 CVE-2026-24733

CVE ID : CVE-2026-2486 Published : Feb. 20, 2026, 12:16 p.m. | 2 hours, 45 minutes ago Description : The Master Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ma_el_bh_table_btn_text' parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Severity: 6.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.This issue affects Talentics: through 20022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVE ID : CVE-2025-10970 Published : Feb. 20, 2026, 12:16 p.m. | 2 hours, 45 minutes ago Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.This issue affects Talentics: through 20022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA gives federal agencies three days to patch actively exploited Dell bug Uncle Sam's cyber defenders have given federal agencies just three days to patch a maximum-severity Dell bug that's been under active exploitation since at least mid-2024. CISA this week added the fla ... Read more Published Date: Feb 20, 2026 (3 days, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-22769

Apache Tomcat Vulnerabilities Let Attackers Bypass Security Constraints via HTTP/0.9 Requests Apache Tomcat Vulnerabilities Apache Tomcat has disclosed CVE-2026-24733, a Low-severity security constraint bypass that can be triggered via HTTP/0.9 requests when certain access-control rules are co ... Read more Published Date: Feb 20, 2026 (3 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24733

Critical Vulnerabilities in VS Code Extensions Threaten 128 Million Developer Environments 128 Million Users at Risk VS Code Extensions Flaws Three critical vulnerabilities have been found in four popular Visual Studio Code extensions. These extensions have been downloaded over 128 million ... Read more Published Date: Feb 20, 2026 (3 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-24733 CVE-2025-65717 CVE-2025-65716 CVE-2025-65715