News & Sicurezza

CVE ID : CVE-2026-2523 Published : Feb. 16, 2026, 1:15 a.m. | 7 hours, 19 minutes ago Description : A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_context_request of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

200k Sites Exposed: Critical CleanTalk Flaw (CVSS 9.8) Allows RCE A plugin designed to keep spam bots at bay has inadvertently left the back door open for hackers. CleanTalk, a top-rated anti-spam solution for WordPress with over 200,000 active installations, has pa ... Read more Published Date: Feb 16, 2026 (2 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-1490 CVE-2026-2441 CVE-2026-20700 CVE-2024-13365 CVE-2024-10781 CVE-2024-10542

Industrial Sabotage Risk: Critical Airleader Flaw (CVSS 9.8) Exposed The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding a critical security vulnerability in Airleader Master, a widely used compressor management system ... Read more Published Date: Feb 16, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article.

JPCERT/CC Warns of Active Exploits Targeting Critical FileZen Command Injection Flaw A critical security vulnerability in FileZen, the popular file transfer appliance from Soliton Systems K.K., is currently under active attack. In a new security advisory, JPCERT/CC has sounded the ala ... Read more Published Date: Feb 16, 2026 (1 day, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-25108 CVE-2026-20700 CVE-2026-24858 CVE-2025-21590

Critical ZLAN5143D Flaws (CVSS 9.8) Allow Total Takeover, No Patch Available The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding high-severity vulnerabilities in industrial connectivity hardware manufactured by ZLAN Information Technology ... Read more Published Date: Feb 16, 2026 (1 day, 12 hours ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-2522 Published : Feb. 16, 2026, 12:16 a.m. | 8 hours, 18 minutes ago Description : A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/esm-build.c of the component MME. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

AI Data at Risk: Critical Milvus Flaw (CVSS 9.8) Exposes Database via Port 9091 A critical vulnerability has been discovered in Milvus, the high-performance vector database that powers many of the world’s modern AI and machine learning applications. The flaw, which carries a near ... Read more Published Date: Feb 16, 2026 (1 day, 13 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2025-64513

Trusted Tool Weaponized: Lotus Blossom Hijacks Notepad++ Updates A new report from Unit 42 has exposed a highly targeted supply chain attack that turned one of the IT world’s most trusted tools into a weapon. Between June and December 2025, a state-sponsored threat ... Read more Published Date: Feb 16, 2026 (1 day, 9 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2026-21509

CVE ID : CVE-2026-2521 Published : Feb. 15, 2026, 11:16 p.m. | 9 hours, 18 minutes ago Description : A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_response of the component SGW-C. Executing a manipulation can lead to memory corruption. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifying their own username to elevate their account to the UG_ADMIN group, bypassing intended access controls and gaining administrative capabilities such as modifying device configurations, network settings, and other smart home system functions.

eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrary accounts, including those in the UG_ADMIN and UG_SUPER_ADMIN groups, without supplying the current password or having sufficient privileges. By sending a crafted JSON-RPC request to /jsonrpc/management, an attacker can overwrite existing credentials, resulting in direct account takeover with full administrative access and persistent privilege escalation.

CVE ID : CVE-2026-26369 Published : Feb. 15, 2026, 4:15 p.m. | 16 hours, 19 minutes ago Description : eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifying their own username to elevate their account to the UG_ADMIN group, bypassing intended access controls and gaining administrative capabilities such as modifying device configurations, network settings, and other smart home system functions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...