News & Sicurezza

CISA Warns of Honeywell CCTV Products Vulnerability Leads to Account Takeovers A critical advisory warning regarding a severe vulnerability affecting Honeywell CCTV products, published on February 17, 2026, under advisory ICSA-26-048-04. The alert details a high-severity securit ... Read more Published Date: Feb 19, 2026 (22 hours, 21 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1670

CVE ID : CVE-2026-2744 Published : Feb. 19, 2026, 1:58 p.m. | 1 hour, 2 minutes ago Description : A blind time-based SQL injection exists in the Service Dependencies page. An authenticated user can inject arbitrary SQL via the keys of the select[] POST array parameter vulnerability in Centreon Centreon Infra Monitoring on Linux (Service Dependencies modules) allows allowing full database extraction.This issue affects Centreon Infra Monitoring: 25.10; 24.10;24.04. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws Google has initiated an urgent rollout for the Chrome Stable channel, delivering a crucial update to patch three newly disclosed security vulnerabilities. The update, which brings Chrome to version 14 ... Read more Published Date: Feb 19, 2026 (20 hours, 29 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2650 CVE-2026-2649 CVE-2026-2648 CVE-2026-2441 CVE-2026-20700 CVE-2026-1862 CVE-2026-0628 CVE-2025-11756 CVE-2025-11460 CVE-2025-10201 CVE-2025-10200 CVE-2025-9478

Bug in widely used VoIP phones allows stealthy network footholds, call interception (CVE-2026-2329) A critical security vulnerability (CVE-2026-2329) in Grandstream VoIP phones could let hackers remotely take full control of the devices and even intercept calls, Rapid7 researchers discovered. “The v ... Read more Published Date: Feb 19, 2026 (19 hours, 54 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2329 CVE-2026-22769

CVE ID : CVE-2019-25430 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 57 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the username parameter. Attackers can send POST requests to the vpn_users endpoint with script payloads in the username field to execute arbitrary JavaScript in victim browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25429 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 57 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpn_advanced endpoint. Attackers can inject JavaScript code through the GLOBAL_NETWORKS and GLOBAL_DNS parameters via POST requests to execute arbitrary scripts in users' browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25428 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 57 minutes ago Description : Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with script payloads in the username, remotenets, explicitroutes, static_ip, custom_dns, or custom_domain parameters to execute arbitrary JavaScript in users' browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25427 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 57 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the antispyware endpoint. Attackers can send POST requests with JavaScript payloads in the DNSMASQ_WHITELIST or DNSMASQ_BLACKLIST parameters to execute arbitrary code in users' browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25426 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 57 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint. Attackers can send POST requests with script payloads in the TRANSPARENT_SOURCE_BYPASS or TRANSPARENT_DESTINATION_BYPASS parameters to execute arbitrary JavaScript in users' browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25425 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 58 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the VIRUS_ADMIN parameter. Attackers can send POST requests to the smtpconfig endpoint with script payloads to execute arbitrary JavaScript in the context of an administrator's browser session. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25424 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 58 minutes ago Description : Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the EXCEPTIONSITELIST parameter. Attackers can craft POST requests to the https_exceptions endpoint with script payloads to execute arbitrary JavaScript in users' browsers and steal session data. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2019-25423 Published : Feb. 19, 2026, 12:02 p.m. | 2 hours, 58 minutes ago Description : Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, and DST_NOCACHE to execute arbitrary scripts in administrator browsers. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...