Aggregator

CVE-2026-20262 | Cisco Catalyst SD-WAN Manager up to 26.1.1_LI_Images API Endpoint path traversal (cisco-sa-sdwan-arbfw-c2rZvQ)

VulDB Recent Entries
1 week 3 days ago
A vulnerability has been found in Cisco Catalyst SD-WAN Manager and classified as critical. This affects an unknown part of the component API Endpoint. This manipulation causes path traversal. This vulnerability appears as CVE-2026-20262. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.
vuldb.com

Australian Sugar Producer Mackay Sugar Reports Cyber Incident

Security Affairs
1 week 3 days ago
Mackay Sugar, Australia’s second-largest sugar producer, disclosed a cyberattack on June 10, potentially affecting key processing operations. Mackay Sugar is one of Australia’s largest sugar producers and the country’s second-largest sugar manufacturer. The company is based in the Mackay region of tropical North Queensland and has more than 140 years of history in sugar cane […]
Pierluigi Paganini

Chinese hackers breached North American research institutions via REDCap servers

Help Net Security
1 week 3 days ago

A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerable REDCap servers GTIG attributed the campaign to UNC6508, a threat actor linked to the People’s Republic of China that remained undetected in victim environments for more than a year. According to the researchers, the activity began in September 2023 … More →

The post Chinese hackers breached North American research institutions via REDCap servers appeared first on Help Net Security.

Sinisa Markovic

CVE-2024-39011 | chargeover redoc 2.0.9-rc.69 mergeObjects prototype pollution

Vuldb Updates
1 week 3 days ago
A vulnerability, which was classified as problematic, has been found in chargeover redoc 2.0.9-rc.69. This issue affects the function mergeObjects. This manipulation causes improperly controlled modification of object prototype attributes. This vulnerability is handled as CVE-2024-39011. The attack can only be done within the local network. There is not any exploit available.
vuldb.com

Managed ad