News & Sicurezza

CVE ID : CVE-2025-15573 Published : Feb. 12, 2026, 11:15 a.m. | 5 hours, 11 minutes ago Description : The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices. Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Apple fixes zero-day flaw exploited in targeted attacks (CVE-2026-20700) Apple has released fixes for a zero-day vulnerability (CVE-2026-20700) exploited in targeted attacks last year. CVE-2026-20700 is a memory corruption issue in dyld, the Dynamic Link Editor component o ... Read more Published Date: Feb 12, 2026 (1 day, 16 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2025-43529 CVE-2025-14174

CVE ID : CVE-2026-1356 Published : Feb. 12, 2026, 10:16 a.m. | 6 hours, 11 minutes ago Description : The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::load_image_source function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-21722 Published : Feb. 12, 2026, 9:16 a.m. | 7 hours, 10 minutes ago Description : Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-41117 Published : Feb. 12, 2026, 9:16 a.m. | 7 hours, 10 minutes ago Description : Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo do not appear affected whatsoever. Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

SMS and OTP Bombing Campaigns Found Abusing API, SSL and Cross-Platform Automation The modern authentication ecosystem runs on a fragile assumption: that requests for one-time passwords are genuine. That assumption is now under sustained pressure. What began in the early 2020s as lo ... Read more Published Date: Feb 12, 2026 (1 day, 7 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-55190

Apple dicht lek gebruikt bij 'zeer geraffineerde aanval' tegen iPhone-gebruikers Apple heeft beveiligingsupdates uitgebracht voor een kwetsbaarheid (CVE-2026-20700) die is ingezet bij een 'zeer geraffineerde aanval' tegen de iPhones van bepaalde specifieke personen. Wat de aanvall ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2025-43529 CVE-2025-14174

Microsoft's Notepad Got Pwned (CVE-2026-20841) Let us know your cookie preferences Reddit uses cookies and similar technologies to: Keep the website operational and running properly Prevent fraud and abuse Monitor site usage and performance metric ... Read more Published Date: Feb 12, 2026 (1 day, 5 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20841

83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure A significant chunk of the exploitation attempts targeting a newly disclosed security flaw in Ivanti Endpoint Manager Mobile (EPMM) can be traced back to a single IP address on bulletproof hosting inf ... Read more Published Date: Feb 12, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25049 CVE-2026-1340 CVE-2026-1281 CVE-2026-24061 CVE-2026-21962 CVE-2025-24799

Taiwan Government Agencies Faced 637 Cybersecurity Incidents in H2 2025 In the past six months, Taiwan’s government agencies have reported 637 cybersecurity incidents, according to the latest data released by the Cybersecurity Academy (CSAA). The findings, published in it ... Read more Published Date: Feb 12, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2024-29824

Palo Alto Networks Firewall Vulnerability Allows an Attacker to Force Firewalls into a Reboot Loop Palo Alto Networks Firewall Vulnerability A critical denial-of-service (DoS) flaw in Palo Alto Networks’ PAN-OS software could let unauthenticated attackers crash firewalls into endless reboot cycles, ... Read more Published Date: Feb 12, 2026 (1 day, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-0229

CVE ID : CVE-2025-15577 Published : Feb. 12, 2026, 7:15 a.m. | 9 hours, 11 minutes ago Description : An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...