News & Sicurezza

Selective Thread Emulation and Fuzzing Expose DoS Flaws in Socomec DIRIS M-70 IIoT Device Security researchers have uncovered six critical denial-of-service vulnerabilities in the Socomec DIRIS M-70 industrial gateway used for power monitoring and energy management in critical infrastructu ... Read more Published Date: Feb 19, 2026 (1 day, 23 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-55222 CVE-2025-55221 CVE-2025-54851 CVE-2025-54850 CVE-2025-54849 CVE-2025-54848

China-Linked Hackers Use Dell RecoverPoint Flaw to Drop GrimBolt Malware A major security vulnerability has been identified in a Dell product used by many companies to protect their virtual data. According to reports from Google’s Threat Intelligence Group (GTIG) and the c ... Read more Published Date: Feb 19, 2026 (1 day, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-22769

Splunk Windows Flaws Expose Servers to System Takeover Splunk administrators operating in Windows environments face a double threat this week. A new security advisory reveals two high-severity vulnerabilities in Splunk Enterprise for Windows that could al ... Read more Published Date: Feb 19, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-25755 Published : Feb. 19, 2026, 2:41 p.m. | 18 minutes ago Description : jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject arbitrary PDF objects into the generated document. By crafting a payload that escapes the JavaScript string delimiter, an attacker can execute malicious actions or alter the document structure, impacting any user who opens the generated PDF. The vulnerability has been fixed in [email protected]. As a workaround, escape parentheses in user-provided JavaScript code before passing them to the `addJS` method. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Hackers Weaponize DocuSign and SimpleHelp in Stealthy New Campaign Malware delivery using email using Zoom Meeting branding | Image: PDC In a sophisticated blend of social engineering and technical evasion, cybercriminals are increasingly hiding behind trusted corpor ... Read more Published Date: Feb 19, 2026 (23 hours, 45 minutes ago) Vulnerabilities has been mentioned in this article.

ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories The cyber threat space doesn’t pause, and this week makes that clear. New risks, new tactics, and new security gaps are showing up across platforms, tools, and industries — often all at the same time. ... Read more Published Date: Feb 19, 2026 (21 hours, 47 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-25535 Published : Feb. 19, 2026, 2:34 p.m. | 26 minutes ago Description : jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` method results in denial of service. If given the possibility to pass unsanitized image data or URLs to the `addImage` method, a user can provide a harmful GIF file that results in out of memory errors and denial of service. Harmful GIF files have large width and/or height entries in their headers, which lead to excessive memory allocation. Other affected methods are: `html`. The vulnerability has been fixed in jsPDF 4.2.0. As a workaround, sanitize image data or URLs before passing it to the addImage method or one of the other affected methods. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-26016: Critical Pterodactyl API Flaw (CVSS 9.2) Exposes Entire Server Networks Pterodactyl is a highly popular free and open-source game server management panel. Designed with security in mind and built using PHP, React, and Go, Pterodactyl is trusted by administrators worldwide ... Read more Published Date: Feb 19, 2026 (21 hours, 54 minutes ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-25527 Published : Feb. 19, 2026, 2:18 p.m. | 42 minutes ago Description : changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static//` route accepts `group=".."`, which causes `send_from_directory("static/..", filename)` to execute. This moves the base directory up to `/app/changedetectionio`, enabling unauthenticated local file read of application source files (e.g., `flask_app.py`). Version 0.53.2 fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

High-Severity DoS Flaw Hits 46 Million ‘fast-xml-parser’ Downloads If your Node.js application parses XML, you might want to check your dependencies immediately. A critical Denial of Service (DoS) vulnerability has been discovered in fast-xml-parser, a wildly popular ... Read more Published Date: Feb 19, 2026 (22 hours, 4 minutes ago) Vulnerabilities has been mentioned in this article.

Apache Camel Patches Critical Keycloak & LevelDB Flaws Maintainers of Apache Camel, the widely adopted open-source framework that empowers you to quickly and easily integrate various systems consuming or producing data, have issued security updates to fix ... Read more Published Date: Feb 19, 2026 (22 hours, 13 minutes ago) Vulnerabilities has been mentioned in this article.

CI/CD at Risk: High-Severity Jenkins XSS Flaw Exposes Build Environments Maintainers of Jenkins, the world’s leading open-source automation server, have issued critical security updates to address two vulnerabilities within its core architecture. The advisory highlights a ... Read more Published Date: Feb 19, 2026 (22 hours, 20 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-27100 CVE-2026-27099 CVE-2026-2441 CVE-2026-20700 CVE-2025-47884 CVE-2024-23897 CVE-2023-35141