News & Sicurezza

CVE ID : CVE-2026-2825 Published : Feb. 20, 2026, 7:16 a.m. | 7 hours, 45 minutes ago Description : A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8. This impacts the function fix_html of the file tools/fix.py of the component Article Module. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws The Apache Software Foundation has rolled out a trio of security updates for its ubiquitous Apache Tomcat web server environment, addressing vulnerabilities that range from legacy protocol confusion t ... Read more Published Date: Feb 20, 2026 (2 days, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24734 CVE-2026-24733 CVE-2025-66614 CVE-2026-2441 CVE-2026-20700 CVE-2025-24813 CVE-2024-56337 CVE-2023-41081

CVE ID : CVE-2026-2739 Published : Feb. 20, 2026, 5:17 a.m. | 9 hours, 43 minutes ago Description : This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2823 Published : Feb. 20, 2026, 5:17 a.m. | 9 hours, 43 minutes ago Description : A vulnerability was detected in Comfast CF-E7 2.6.0.9. The impacted element is the function sub_41ACCC of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone of the component webmggnt. Performing a manipulation of the argument timestr results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws Ubiquitous extensions for Visual Studio Code, boasting a cumulative download count exceeding 128 million, have been unmasked as susceptible to exploits involving local file exfiltration and remote cod ... Read more Published Date: Feb 20, 2026 (2 days, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-65717 CVE-2025-65716 CVE-2025-65715 CVE-2026-2441 CVE-2026-20700 CVE-2025-11702

CVE ID : CVE-2026-2822 Published : Feb. 20, 2026, 5:17 a.m. | 9 hours, 43 minutes ago Description : A security vulnerability has been detected in JeecgBoot up to 3.9.1. The affected element is an unknown function of the file /jeecgboot/sys/dict/loadDict/airag_app,1,create_by of the component Backend Interface. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27320 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27321 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27319 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27322 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27325 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-27323 Published : Feb. 20, 2026, 4:15 a.m. | 10 hours, 45 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...