News & Sicurezza

CVE ID : CVE-2026-2327 Published : Feb. 12, 2026, 6:16 a.m. | 8 hours, 10 minutes ago Description : Versions of the package markdown-it from 13.0.0 and before 14.1.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the use of the regex /\*+$/ in the linkify function. An attacker can supply a long sequence of * characters followed by a non-matching character, which triggers excessive backtracking and may lead to a denial-of-service condition. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-1603: Remote Unauthenticated Attacker Can Steal Ivanti EPM Secrets Ivanti has rolled out important security updates for its Endpoint Manager (EPM), addressing a pair of vulnerabilities that could expose sensitive credentials to hackers. The release fixes one high-sev ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-1603 CVE-2026-1602 CVE-2026-24858 CVE-2026-21509 CVE-2024-29847 CVE-2024-8190

JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication.

JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache poisoning, potential phishing, and redirecting users to malicious domains.

CVE ID : CVE-2026-26235 Published : Feb. 12, 2026, 4:15 a.m. | 8 hours, 10 minutes ago Description : JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-26234 Published : Feb. 12, 2026, 4:15 a.m. | 8 hours, 10 minutes ago Description : JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache poisoning, potential phishing, and redirecting users to malicious domains. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-23857 Published : Feb. 12, 2026, 3:15 a.m. | 9 hours, 10 minutes ago Description : Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Severity: 8.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-0969 Published : 12. Februar 2026 03:15 | 7 Stunden, 10 Minuten ago Description : The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-23856 Published : Feb. 12, 2026, 3:15 a.m. | 9 hours, 10 minutes ago Description : Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Crash Loop: Palo Alto Networks Flaw (CVE-2026-0229) Forces Maintenance Mode Palo Alto Networks has issued a security advisory for a denial-of-service (DoS) vulnerability affecting its PAN-OS software, specifically within the Advanced DNS Security (ADNS) feature. The flaw, tra ... Read more Published Date: Feb 12, 2026 (1 day, 6 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-0229 CVE-2026-24858 CVE-2026-21509 CVE-2026-0227 CVE-2025-0110 CVE-2025-0108 CVE-2024-5914

Apple 0-Day Vulnerability Actively Exploited in Sophisticated Attack to Target Individuals Apple 0-Day Vulnerability Exploited Apple released iOS 26.3 and iPadOS 26.3 on February 11, 2026, patching over 40 vulnerabilities, including a critical zero-day in the dyld component actively exploit ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-20642 CVE-2026-20640 CVE-2026-20617 CVE-2025-43529 CVE-2025-14174

Apple Patch Tuesday – February 2026 February 12, 2026Critical Security Updates Across iOS, macOS, and Apple EcosystemApple released a coordinated set of security updates on February 11, 2026, aligning with the global Patch Tuesday cycle ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-20681 CVE-2026-20676 CVE-2026-20674 CVE-2026-20654 CVE-2026-20652 CVE-2026-20650 CVE-2026-20649 CVE-2026-20645 CVE-2026-20644 CVE-2026-20636 CVE-2026-20635 CVE-2026-20630 CVE-2026-20627 CVE-2026-20626 CVE-2026-20617 CVE-2026-20615 CVE-2026-20611 CVE-2026-20609 CVE-2026-20608 CVE-2026-21643