News & Sicurezza

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423) For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to its Known Exploited Vulnerabilities catalog, and this ... Read more Published Date: Feb 06, 2026 (2 days, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2026-23760 CVE-2025-52691 CVE-2025-22225

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-level) attackers to set the internal `prod_key_random_id` option, which can then be used by an unauthenticated attacker to bypass authentication checks and write arbitrary files to the server via the `handle_upload_single_big_file()` function, ultimately leading to remote code execution.

CVE-2025-13375: Critical IBM Crypto Flaw (CVSS 9.8) Exposes HSMs IBM has issued a critical security bulletin for its Common Cryptographic Architecture (CCA), a core component used to interface with the company’s high-security hardware modules. The vulnerability, tr ... Read more Published Date: Feb 06, 2026 (2 days, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-13375 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-41787 CVE-2024-49803

Fortinet waarschuwt voor SQL Injection beveiligingslek in FortiClientEMS Fortinet waarschuwt klanten voor een kritiek beveiligingslek in FortiClientEMS waardoor SQL Injection mogelijk is. Twee jaar geleden werd een andere SQL Injection kwetsbaarheid actief misbruikt bij aa ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21643 CVE-2023-48788

SmarterMail-servers aangevallen via kritieke RCE-kwetsbaarheid Aanvallers maken actief misbruik van een kritieke kwetsbaarheid in SmarterMail waardoor kwetsbare servers op afstand zijn over te nemen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Drie weken ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2026-23760

February 2026 Patch Tuesday forecast: Lots of OOB love this month Valentine’s Day is just around the corner and Microsoft has been giving us a lot of love with a non-stop supply of patches starting with January 2026 Patch Tuesday. The January releases addressed 92 v ... Read more Published Date: Feb 06, 2026 (2 days, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21509 CVE-2025-12743 CVE-2025-8088 CVE-2025-22225

F5 Patches Critical Vulnerabilities in BIG-IP, NGINX, and Related Products F5 Patches Critical Vulnerabilities F5 released its February 2026 Quarterly Security Notification on February 4, announcing several medium and low-severity CVEs, plus a security exposure affecting BIG ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-22549 CVE-2026-22548 CVE-2026-20732 CVE-2026-20730 CVE-2026-1642

CISA Warns of React Native Community Command Injection Vulnerability Exploited in Attacks React Native Command Injection Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-11953 to its Known Exploited Vulnerabilities (KEV) catalog, flagging an OS comma ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-11953

New CentOS 9 Vulnerability Lets Attackers Escalate to Root Privileges – PoC Released CentOS 9 Vulnerability A critical use-after-free (UAF) vulnerability in the Linux kernel’s sch_cake queuing discipline (Qdisc) affects CentOS 9, allowing local users to gain root privileges. Security ... Read more Published Date: Feb 06, 2026 (2 days, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2022-50452

The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure Group-IB Graph analysis of the network infrastructure related to ALPHVBlackCat | Image: Group-IB The sprawling, murky network known as ShadowSyndicate has evolved. Previously identified by a singular, ... Read more Published Date: Feb 06, 2026 (3 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-23334

Popular n8n Platform Hit by Triple Threat of RCE Flaws The n8n workflow automation platform, a favorite among technical teams for its “fair-code” flexibility and AI capabilities, has been struck by a cluster of critical security vulnerabilities. Security ... Read more Published Date: Feb 06, 2026 (3 days ago) Vulnerabilities has been mentioned in this article. CVE-2026-25056 CVE-2026-25053 CVE-2026-25049 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2026-21877 CVE-2026-21858 CVE-2025-68668 CVE-2025-68613