Posts of last 24 hours

CVE-2026-28947 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26.4 Web use after free (Nessus ID 318335 / WID-SEC-2026-1543)
A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26.4. It has been rated as critical. This issue affects some unknown processing of the component Web Handler. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-28947. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.
https://vuldb.com/vuln/362818
CVE-2026-28953 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 18.7.8/26.4 Web denial of service (Nessus ID 318334 / WID-SEC-2026-1543)
A vulnerability categorized as problematic has been discovered in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 18.7.8/26.4. Impacted is an unknown function of the component Web Handler. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2026-28953. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/362819
CVE-2026-28955 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 18.7.8/26.4 Web denial of service (Nessus ID 318341 / WID-SEC-2026-1543)
A vulnerability labeled as problematic has been found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 18.7.8/26.4. The impacted element is an unknown function of the component Web Handler. The manipulation results in denial of service. This vulnerability is known as CVE-2026-28955. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.
https://vuldb.com/vuln/362821
CVE-2026-43658 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26.4 Web denial of service (Nessus ID 318337 / WID-SEC-2026-1543)
A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26.4. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Web Handler. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2026-43658. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/362859
CVE-2026-8390 | Mozilla Firefox up to 150.0.2 WebAssembly use after free (EUVD-2026-29465 / WID-SEC-2026-1503)
A vulnerability classified as critical was found in Mozilla Firefox up to 150.0.2. This impacts an unknown function of the component WebAssembly. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-8390. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
https://vuldb.com/vuln/363021
CVE-2022-37325 | Sangoma Asterisk Setup Message ooq931.c denial of service (AST-2022-007 / EUVD-2022-39960)
A vulnerability marked as problematic has been reported in Sangoma Asterisk. This vulnerability affects unknown code of the file addons/ooh323c/src/ooq931.c of the component Setup Message Handler. This manipulation causes denial of service. This vulnerability is registered as CVE-2022-37325. The attack requires access to the local network. No exploit is available.
https://vuldb.com/vuln/214856
CVE-2026-58579 | infiniflow ragflow up to 0.26.2 Agent Update Endpoint cross site scripting (ID 16507)
A vulnerability was found in infiniflow ragflow up to 0.26.2. It has been declared as problematic. Affected is an unknown function of the component Agent Update Endpoint. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-58579. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/375991
CVE-2026-58466 | EstrellaXD Auto_Bangumi up to 3.2.7 Database User add_default_user default credentials (ID 1041)
A vulnerability was found in EstrellaXD Auto_Bangumi up to 3.2.7. It has been classified as critical. This impacts the function add_default_user of the component Database User Module. The manipulation leads to use of default credentials. This vulnerability is traded as CVE-2026-58466. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
https://vuldb.com/vuln/375990
CVE-2026-58381 | Red Hat Enterprise Linux 6/7/8/9 PSP File read_layer_block double free (ID 16207)
A vulnerability was found in Red Hat Enterprise Linux 6/7/8/9 and classified as problematic. This affects the function read_layer_block of the component PSP File Handler. Executing a manipulation can lead to double free. This vulnerability appears as CVE-2026-58381. The attack requires local access. There is no available exploit. It is advisable to implement a patch to correct this issue.
https://vuldb.com/vuln/375989
CVE-2026-59096 | Dapr 1.17.0/1.18.0 origin validation
A vulnerability has been found in Dapr 1.17.0/1.18.0 and classified as problematic. The impacted element is an unknown function. Performing a manipulation results in origin validation error. This vulnerability is reported as CVE-2026-59096. The attack is possible to be carried out remotely. No exploit exists. To fix this issue, it is recommended to deploy a patch.
https://vuldb.com/vuln/375988

Managed ad