News & Sicurezza

CVE ID :CVE-2026-65118 Published : Sept. 22, 2026, 2:10 p.m. | 20 minutes ago Description :NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-65117 Published : Sept. 22, 2026, 2:10 p.m. | 20 minutes ago Description :NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. Severity: 5.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-65115 Published : Sept. 22, 2026, 2:10 p.m. | 20 minutes ago Description :NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-65114 Published : Sept. 22, 2026, 2:10 p.m. | 20 minutes ago Description :NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-65113 Published : Sept. 22, 2026, 2:10 p.m. | 20 minutes ago Description :NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

MikroTrick: technical analysis, disclosure process, and the use of LLM agents Introduction On 3 September 2026, MikroTik released patches almost simultaneously for several maintained RouterOS branches: 7.25beta3, 7.24.2, 7.23.4, and 6.49.21, and recommended installing a patched ... Read more Published Date: Sep 22, 2026 (2 days, 2 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-86060 CVE-2026-67279 CVE-2026-67277 CVE-2026-67276

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` operator. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability.

A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the function check_authentication of the file changedetectionio/flask_app.py of the component Authentication Hook. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22. The flaw, tracked as CVE-2 ... Read more Published Date: Sep 22, 2026 (2 days, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-93952 CVE-2026-16812

CVE ID :CVE-2026-74849 Published : Sept. 22, 2026, 11:55 a.m. | 32 minutes ago Description :Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled. The ... Read more Published Date: Sep 22, 2026 (2 days, 3 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-89775

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical deta ... Read more Published Date: Sep 22, 2026 (1 day, 22 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-65660 CVE-2026-55040