News & Sicurezza

Microsoft CVE-2026-26119 Deep Dive February 20, 2026Microsoft recently disclosed CVE-2026-26119, a high-severity privilege escalation vulnerability affecting Windows Admin Center.This flaw allows low-privileged attackers to gain elevat ... Read more Published Date: Feb 20, 2026 (3 days ago) Vulnerabilities has been mentioned in this article.

PoC Released for Critical Chrome 0-day Vulnerability Exploited in the Wild Chrome 0-day Vulnerability PoC A public proof-of-concept exploit has been released for CVE-2026-2441, a critical use-after-free zero-day vulnerability in Google Chrome’s Blink CSS engine that Google c ... Read more Published Date: Feb 20, 2026 (3 days, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441

CVE ID : CVE-2026-21620 Published : Feb. 20, 2026, 11:15 a.m. | 3 hours, 45 minutes ago Description : Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl. This issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0. Severity: 2.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Microsoft dicht kritiek beveiligingslek in Teams waardoor informatie kon lekken Microsoft heeft een kritiek beveiligingslek in Teams gedicht waardoor een ongeautoriseerde aanvaller informatie zou kunnen stelen. Volgens de zeer beknopte beschrijving van de kwetsbaarheid, aangeduid ... Read more Published Date: Feb 20, 2026 (3 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21535

PoC Released for Windows Notepad Vulnerability that Enables Malicious Command Execution Microsoft has patched a high-severity remote code execution (RCE) vulnerability in the modern Windows Notepad application, tracked as CVE-2026-20841, as part of its February 2026 Patch Tuesday release ... Read more Published Date: Feb 20, 2026 (3 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20841

CVE ID : CVE-2026-26370 Published : Feb. 20, 2026, 8:17 a.m. | 6 hours, 44 minutes ago Description : WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-59819 Published : Feb. 20, 2026, 8:17 a.m. | 6 hours, 44 minutes ago Description : This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26050 Published : Feb. 20, 2026, 9:15 a.m. | 5 hours, 45 minutes ago Description : The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Hackers Actively Exploiting Critical BeyondTrust Vulnerability to Deploy VShell and SparkRAT A critical vulnerability in BeyondTrust’s remote support software is being actively exploited by hackers to deliver dangerous backdoors on compromised systems. The flaw, tracked as CVE-2026-1731, carr ... Read more Published Date: Feb 20, 2026 (3 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2024-12356

Exploited in the Wild & PoC Disclosed: Emergency Chrome Zero-Day (CVE-2026-2441) Patched Google has been forced to push emergency updates to billions of users following the discovery of a high-severity, actively exploited vulnerability in its Chrome browser. Marking the first zero-day fla ... Read more Published Date: Feb 20, 2026 (3 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2025-10585 CVE-2025-6558

Google Issues Emergency Chrome Security Update to Address High-Severity PDFium and V8 Flaws Google Issues Emergency Chrome Security Update A significant security update for the Chrome Stable Channel to address multiple vulnerabilities, including high-severity flaws affecting the browser’s co ... Read more Published Date: Feb 20, 2026 (2 days, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2650 CVE-2026-2649 CVE-2026-2648

CVE ID : CVE-2026-2824 Published : Feb. 20, 2026, 6:17 a.m. | 8 hours, 44 minutes ago Description : A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub_441CF4 of the file /cgi-bin/mbox-config?method=SET&section=ping_config of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...