News & Sicurezza

CVE ID : CVE-2026-0997 Published : Feb. 16, 2026, 10:16 a.m. | 4 hours, 19 minutes ago Description : Mattermost versions 11.1.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-59904 Published : Feb. 16, 2026, 10:16 a.m. | 2 hours, 19 minutes ago Description : Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, which is triggered through multiple parameters in the '/kForms/app' endpoint. This issue allows malicious scripts to be injected and executed persistently in the context of users accessing the affected resource. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-59903 Published : Feb. 16, 2026, 10:16 a.m. | 2 hours, 19 minutes ago Description : Stored Cross-Site Scripting (XSS) vulnerability in Kubysoft, where uploaded SVG images are not properly sanitized. This allows attackers to embed malicious scripts within SVG files as visual content, which are then stored on the server and executed in the context of any user accessing the compromised resource. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CISA Warns of ZLAN ICS Devices Vulnerabilities Allows Complete Device Takeover ZLAN ICS Devices Vulnerabilities An alert regarding two critical vulnerabilities found in ZLAN Information Technology Co.’s ZLAN5143D industrial communication device. According to the advisory (ICSA-2 ... Read more Published Date: Feb 16, 2026 (1 day, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25084 CVE-2026-24789 CVE-2026-1731

Google patches Chrome vulnerability with in-the-wild exploit (CVE-2026-2441) Google released a security update for Chrome to address a high-severity zero‑day vulnerability (CVE-2026-2441) on Friday. “Google is aware that an exploit for CVE-2026-2441 exists in the wild,” the co ... Read more Published Date: Feb 16, 2026 (1 day, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-1731

CVE ID : CVE-2026-2547 Published : Feb. 16, 2026, 9:16 a.m. | 3 hours, 19 minutes ago Description : A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function AgentDashboard of the file /otrs/index.pl. Performing a manipulation of the argument Subaction results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2548 Published : Feb. 16, 2026, 9:16 a.m. | 3 hours, 19 minutes ago Description : A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file rc. Executing a manipulation of the argument upnp_waniface/upnp_ssdp_interval/upnp_max_age can lead to command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Google rolt update uit voor actief aangevallen kwetsbaarheid in Chrome Google heeft een beveiligingsupdate uitgerold voor een actief aangevallen kwetsbaarheid in Chrome. Gebruikers die meteen beschermd willen zijn kunnen het beste een handmatige update uitvoeren. Het bev ... Read more Published Date: Feb 16, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441

A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVE ID : CVE-2026-2545 Published : Feb. 16, 2026, 8:16 a.m. | 4 hours, 19 minutes ago Description : A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketSearch. This manipulation of the argument Profile causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2544 Published : Feb. 16, 2026, 8:16 a.m. | 2 hours, 19 minutes ago Description : A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Architectural Isolation Tradeoffs in the OpenClaw Ecosystem After CVE-2026-25253 Let us know your cookie preferences Reddit uses cookies and similar technologies to: Keep the website operational and running properly Prevent fraud and abuse Monitor site usage and performance metric ... Read more Published Date: Feb 16, 2026 (1 day, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25253