News & Sicurezza

CVE ID : CVE-2026-2526 Published : Feb. 16, 2026, 2:16 a.m. | 6 hours, 18 minutes ago Description : A vulnerability was found in Wavlink WL-WN579A3 up to 20210219. This impacts the function multi_ssid of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument SSID2G2 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2524 Published : Feb. 16, 2026, 1:15 a.m. | 7 hours, 19 minutes ago Description : A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of the component MME. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2523 Published : Feb. 16, 2026, 1:15 a.m. | 7 hours, 19 minutes ago Description : A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

200k Sites Exposed: Critical CleanTalk Flaw (CVSS 9.8) Allows RCE A plugin designed to keep spam bots at bay has inadvertently left the back door open for hackers. CleanTalk, a top-rated anti-spam solution for WordPress with over 200,000 active installations, has pa ... Read more Published Date: Feb 16, 2026 (2 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-1490 CVE-2026-2441 CVE-2026-20700 CVE-2024-13365 CVE-2024-10781 CVE-2024-10542

Industrial Sabotage Risk: Critical Airleader Flaw (CVSS 9.8) Exposed The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding a critical security vulnerability in Airleader Master, a widely used compressor management system ... Read more Published Date: Feb 16, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article.

JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw A critical security vulnerability in FileZen, the popular file transfer appliance from Soliton Systems K.K., is currently under active attack. In a new security advisory, JPCERT/CC has sounded the ala ... Read more Published Date: Feb 16, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-25108 CVE-2026-20700 CVE-2026-24858 CVE-2025-21590

Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding high-severity vulnerabilities in industrial connectivity hardware manufactured by ZLAN Information Technology ... Read more Published Date: Feb 16, 2026 (1 day, 12 hours ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-2522 Published : Feb. 16, 2026, 12:16 a.m. | 8 hours, 18 minutes ago Description : A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091 A critical vulnerability has been discovered in Milvus, the high-performance vector database that powers many of the world’s modern AI and machine learning applications. The flaw, which carries a near ... Read more Published Date: Feb 16, 2026 (1 day, 13 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2025-64513

Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates A new report from Unit 42 has exposed a highly targeted supply chain attack that turned one of the IT world’s most trusted tools into a weapon. Between June and December 2025, a state-sponsored threat ... Read more Published Date: Feb 16, 2026 (1 day, 9 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2026-21509

CVE ID : CVE-2026-2521 Published : Feb. 15, 2026, 11:16 p.m. | 9 hours, 18 minutes ago Description : A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifying their own username to elevate their account to the UG_ADMIN group, bypassing intended access controls and gaining administrative capabilities such as modifying device configurations, network settings, and other smart home system functions.