News & Sicurezza

Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware This week’s recap shows how small gaps are turning into big entry points. Not always through new exploits, often through tools, add-ons, cloud setups, or workflows that people already trust and rarely ... Read more Published Date: Feb 16, 2026 (1 day, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-0969 CVE-2026-20700 CVE-2026-1357 CVE-2026-25506 CVE-2026-25646 CVE-2026-21533 CVE-2026-21525 CVE-2026-21519 CVE-2026-21514 CVE-2026-21513 CVE-2026-21510 CVE-2026-1774 CVE-2026-25881 CVE-2026-25639 CVE-2025-66630 CVE-2026-1731 CVE-2026-25049

Google patches Chrome zero-day as in-the-wild exploits surface Google has quietly pushed out an emergency Chrome fix after attackers were caught exploiting the browser's first reported zero-day of 2026. The flaw, tracked as CVE-2026-2441 and assigned a "high" CVS ... Read more Published Date: Feb 16, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441

CVE ID : CVE-2025-14573 Published : Feb. 16, 2026, 1:16 p.m. | 3 hours, 19 minutes ago Description : Mattermost versions 10.11.x Severity: 3.8 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2553 Published : Feb. 16, 2026, 12:16 p.m. | 4 hours, 19 minutes ago Description : A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-2418 Published : Feb. 16, 2026, 12:16 p.m. | 4 hours, 19 minutes ago Description : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows Phishing.This issue affects Web Application Firewall: from 4.30 through 16022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2552 Published : Feb. 16, 2026, 12:16 p.m. | 4 hours, 19 minutes ago Description : A vulnerability was identified in ZenTao up to 21.7.8. Affected by this issue is the function delete of the file editor/control.php of the component Committer. Such manipulation of the argument filePath leads to path traversal. Upgrading to version 21.7.9 can resolve this issue. The affected component should be upgraded. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2555 Published : Feb. 16, 2026, 12:16 p.m. | 4 hours, 19 minutes ago Description : A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/llm/controller/AiragKnowledgeController.java of the component Retrieval-Augmented Generation. Executing a manipulation can lead to deserialization. The attack can be launched remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-13821 Published : Feb. 16, 2026, 12:16 p.m. | 4 hours, 19 minutes ago Description : Mattermost versions 11.1.x Severity: 5.7 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical Airleader Vulnerability Exposes Systems to Remote Code Execution Attacks Airleader Vulnerability A newly disclosed vulnerability in an industrial control system (ICS) monitoring solution has raised concerns across multiple critical infrastructure sectors. Published by CISA ... Read more Published Date: Feb 16, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-1358

CVE ID : CVE-2026-1046 Published : Feb. 16, 2026, 1:16 p.m. | 3 hours, 19 minutes ago Description : Mattermost Desktop App versions Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-14350 Published : Feb. 16, 2026, 1:15 p.m. | 3 hours, 19 minutes ago Description : Mattermost versions 11.1.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

FileZen File Transfer App Vulnerability Enables Arbitrary Command Execution FileZen File Transfer App Vulnerability A critical vulnerability has been discovered in the file transfer solution from Soliton Systems K.K., potentially allowing attackers to execute arbitrary system ... Read more Published Date: Feb 16, 2026 (1 day, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25108 CVE-2026-1731