News & Sicurezza

CVE ID : CVE-2026-25916 Published : Feb. 9, 2026, 9:16 a.m. | 6 hours, 2 minutes ago Description : Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Critical FortiClientEMS Vulnerability Let Attackers Execute Malicious Code Remotely FortiClientEMS RCE Vulnerability Fortinet has issued a critical security advisory warning administrators to immediately patch instances of FortiClientEMS, its central management solution for endpoint ... Read more Published Date: Feb 09, 2026 (18 hours, 51 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21643

BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA BeyondTrust has released updates to address a critical security flaw impacting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could result in remote c ... Read more Published Date: Feb 09, 2026 (16 hours, 52 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2025-8088

Singapore Launches Largest-Ever Cyber Defense Operation After UNC3886 Targets All Major Telcos Singapore has launched its largest-ever coordinated cyber defense operation following a highly targeted cyberattack on telecommunications that affected all four of the country’s major telecommunicatio ... Read more Published Date: Feb 09, 2026 (15 hours, 5 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-54309

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges.

CVE ID : CVE-2026-2221 Published : Feb. 9, 2026, 7:16 a.m. | 4 hours, 3 minutes ago Description : A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-24466 Published : Feb. 9, 2026, 7:16 a.m. | 2 hours, 3 minutes ago Description : Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Black Basta Ransomware Actors Embeds BYOVD Defense Evasion Component with Ransomware Payload Itself Ransomware actors are constantly refining their arsenals to bypass modern defenses. A recent campaign by the Black Basta group has introduced a significant tactical shift by embedding a “Bring Your Ow ... Read more Published Date: Feb 09, 2026 (16 hours, 3 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-68947

CVE ID : CVE-2026-1868 Published : Feb. 9, 2026, 7:16 a.m. | 2 hours, 3 minutes ago Description : GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure template expansion of user supplied data via crafted Duo Agent Platform Flow definitions. This vulnerability could be used to cause Denial of Service or gain code execution on the Gateway. This has been fixed in versions 18.6.2, 18.7.1, and 18.8.1 of the GitLab AI Gateway. Severity: 9.9 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2220 Published : Feb. 9, 2026, 7:16 a.m. | 4 hours, 3 minutes ago Description : A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...