Aggregator

A vulnerability was found in Netskope Endpoint DLP up to R140. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file epdlpdrv.sys. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-15710. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in ZJU-FAST-Lab EGO-Planner-v2 and classified as problematic. Affected is an unknown function of the component EGOReplanFSM. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2026-71641. The attack may be launched remotely. There is no exploit available. A patch should be applied to remediate this issue.

A vulnerability has been found in Robotics-STAR-Lab RACER and classified as problematic. This impacts an unknown function of the component FSM. This manipulation causes missing default case in switch statement. This vulnerability appears as CVE-2026-71644. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as very critical, was found in NetBSD up to 8.3/9.4/10.1. This affects the function msg_recv_copyin of the component Compatibility Layer. The manipulation results in use after free. This vulnerability is reported as CVE-2026-57842. The attack requires a local approach. No exploit exists. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in NetBSD up to 9.4/10.1. The impacted element is the function mm_open of the file sys/dev/mm.c of the component Device Driver. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-57843. The attack needs to be performed locally. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in headroomlabs-ai Headroom up to 0.34.x. The affected element is an unknown function of the component WebSocket Server. Executing a manipulation of the argument Origin can lead to improper authentication. This vulnerability is registered as CVE-2026-71416. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing malware. Huntress examines campaigns targeting AI users through weaponized Claude Artifacts, shared AI conversations, sponsored search results, and ClickFix-style lures. [...]

A vulnerability classified as critical has been found in Perforce Akana up to 2024.1.5/2025.1.1/2026.1. Impacted is an unknown function of the component JSON Handler. Performing a manipulation results in xml external entity reference. This vulnerability is cataloged as CVE-2026-89212. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen up to 4.2.0. This issue affects some unknown processing. Such manipulation leads to argument injection. This vulnerability is listed as CVE-2026-11765. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Red Hat Keycloak and Single Sign-On. This vulnerability affects unknown code of the component Dynamic Client Registration Service. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2026-89298. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as critical has been found in Progress Chef Automate up to 4.13.515/4.13.519. This affects an unknown part of the component API Gateway. The manipulation results in improper privilege management. This vulnerability is identified as CVE-2026-80462. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Anthropic detected and disrupted a Russia-linked cyber-espionage group that used its AI tool Claude in a hacking campaign targeting more than 20 government, intelligence, diplomatic and defense organizations.

A vulnerability identified as very critical has been detected in Fortinet FortiMonitorOnSight up to 7.2.2/7.2.7. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is referenced as CVE-2026-84390. Remote exploitation of the attack is possible. No exploit is available.

A long-running pay-per-install (PPI) operation that used YouTube gaming channels and SEO-poisoned software downloads to distribute malware at scale. The cluster, tracked as CL-CRI-1171, is linked to more than 10,000 distinct samples of a custom loader called OfferLoader, indicating a distribution pipeline far larger than the individual intrusions initially observed. Rather than relying on a […]

The post Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Two security vulnerabilities in VLC media player versions 3.0.0 through 3.0.23 could allow attackers to exploit heap memory issues. These vulnerabilities can be triggered by processing a malicious PNG file or connecting to attacker-controlled RealRTSP servers. The more severe vulnerability, tracked as CVE-2026-56711, is a heap out-of-bounds write flaw with a CVSS v4 score of […]

The post VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability categorized as problematic has been discovered in WWBN AVideo. Affected by this vulnerability is an unknown functionality of the component Bookmark plugin. Executing a manipulation of the argument bookmark name can lead to cross site scripting. The identification of this vulnerability is CVE-2026-89256. The attack may be launched remotely. There is no exploit available. Applying a patch is advised to resolve this issue.

A vulnerability was found in Gohugoio Hugo up to 0.164.x. It has been rated as problematic. Affected is the function os.ReadFile of the component Symlink. Performing a manipulation results in path traversal. This vulnerability was named CVE-2026-89258. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A Ukrainian national was sentenced to four years in a U.S. prison for his role in the notorious Conti ransomware operation, which targeted more than 1,000 victims worldwide before shutting down in 2022.

A vulnerability was found in gohugoio Hugo up to 0.164.x. It has been declared as critical. This impacts an unknown function of the file hugo.toml of the component Build Process. Such manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2026-89259. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, warning that these flaws are actively being exploited in the wild. On September 10, CISA listed CVE-2026-67277 and CVE-2026-86060, giving affected organizations until September 13 to implement vendor-recommended mitigations. MikroTik RouterOS Flaws CVE-2026-67277 […]

The post CISA Adds Exploited MikroTik RouterOS Flaws to Security Alert appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.