News & Sicurezza

CVE ID : CVE-2025-57709 Published : Feb. 11, 2026, 1:15 p.m. | 1 hour, 8 minutes ago Description : A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later Severity: 1.3 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Microsoft Office Word 0-day Vulnerability Actively Exploited in the Wild Microsoft Office Word 0-day Vulnerability A critical zero-day vulnerability in Microsoft Word, tracked as CVE-2026-21514, was disclosed on February 10, 2026, allowing attackers to bypass essential sec ... Read more Published Date: Feb 11, 2026 (18 hours, 2 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21514

Desktop Window Manager 0-Day Vulnerability Allows Attacker to Elevate Privileges Desktop Window Manager 0-Day Vulnerability Microsoft has released urgent security updates to address a critical zero-day vulnerability in the Windows Desktop Window Manager (DWM). Tracked as CVE-2026- ... Read more Published Date: Feb 11, 2026 (18 hours, 31 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21519

Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pro allows Flooding.This issue affects PanCafe Pro: from < 3.3.2 through 23092025.

Microsoft Patch Tuesday: 6 exploited zero-days fixed in February 2026 Microsoft has plugged 50+ security holes on February 2026 Patch Tuesday, including six zero-day vulnerabilities exploited by attackers in the wild. The “security feature bypass” zero-days Among the ze ... Read more Published Date: Feb 11, 2026 (18 hours, 53 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21533 CVE-2026-21525 CVE-2026-21519 CVE-2026-21514 CVE-2026-21513 CVE-2026-21510 CVE-2026-21509

Beveiligingslek in Windows Notepad maakt remote code execution mogelijk Een kwetsbaarheid in Windows Notepad maakt remote code execution (RCE) mogelijk, zo waarschuwt Microsoft. Het techbedrijf kwam gisterenavond met beveiligingsupdates. Het probleem doet zich volgens Mic ... Read more Published Date: Feb 11, 2026 (18 hours, 58 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-20841

CVE ID : CVE-2025-7659 Published : Feb. 11, 2026, 11:35 a.m. | 49 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to steal tokens and access private repositories by abusing incomplete validation in the Web IDE. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-8099 Published : Feb. 11, 2026, 11:35 a.m. | 49 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an unauthenticated user to cause denial of service by sending repeated GraphQL queries. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-12073 Published : Feb. 11, 2026, 11:34 a.m. | 49 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery against internal services by bypassing protections in the Git repository import functionality. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-12575 Published : Feb. 11, 2026, 11:34 a.m. | 49 minutes ago Description : GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user with certain permissions to make unauthorized requests to internal network services through the GitLab server. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-14560 Published : Feb. 11, 2026, 11:34 a.m. | 50 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by injecting malicious content into vulnerability code flow. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-14594 Published : Feb. 11, 2026, 11:34 a.m. | 50 minutes ago Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user to view certain pipeline values by querying the API. Severity: 3.5 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...