News & Sicurezza

“JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit Countries targeted by TGR-STA-1030 reconnaissance between November and December 2025 | Image: Unit 42 A massive, state-aligned cyber espionage campaign has quietly infiltrated government networks acro ... Read more Published Date: Feb 09, 2026 (18 hours, 22 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-56615 CVE-2024-56614 CVE-2023-39191 CVE-2022-23222

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE BeyondTrust has issued a critical security alert for its popular remote access solutions, warning of a near-maximum severity vulnerability that could allow hackers to seize control of systems without ... Read more Published Date: Feb 09, 2026 (16 hours, 27 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-1731 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-0217 CVE-2025-0889 CVE-2024-12356

CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution A massive hole has been found in the walls of Jinjava, the popular Java-based template engine used to power thousands of websites on the HubSpot CMS. Tracked as CVE-2026-25526, this critical vulnerabi ... Read more Published Date: Feb 09, 2026 (16 hours, 33 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-25526 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2025-37729 CVE-2025-59340

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE ID : CVE-2026-2195 Published : Feb. 9, 2026, 12:15 a.m. | 3 hours, 3 minutes ago Description : A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /system/system/admins/assessments/pretest/questions-view.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2194 Published : Feb. 9, 2026, 12:15 a.m. | 3 hours, 3 minutes ago Description : A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function start_proxy_client_email. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner A maximum-severity vulnerability has been uncovered in a core Kubernetes storage component, leaving nodes wide open to unauthorized file manipulation. The SUSE Rancher Security team has issued an urge ... Read more Published Date: Feb 09, 2026 (16 hours, 44 minutes ago) Vulnerabilities has been mentioned in this article.

APT28 Weaponizes Office Flaw to Spy on NATO & Military The notorious Russian state-sponsored group APT28 (also known as Fancy Bear) has launched a sophisticated new espionage campaign, striking European military and government targets within just 24 hours ... Read more Published Date: Feb 09, 2026 (16 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article.

A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

CVE ID : CVE-2026-2192 Published : Feb. 8, 2026, 11:15 p.m. | 4 hours, 3 minutes ago Description : A security vulnerability has been detected in Tenda AC9 15.03.06.42_multi. Affected by this vulnerability is the function formGetRebootTimer. Such manipulation of the argument sys.schedulereboot.start_time/sys.schedulereboot.end_time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-2191 Published : Feb. 8, 2026, 11:15 p.m. | 4 hours, 3 minutes ago Description : A weakness has been identified in Tenda AC9 15.03.06.42_multi. Affected is the function formGetDdosDefenceList. This manipulation of the argument security.ddos.map causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...