SecQube | Harvey | AI Platform for MS Graph

SecQube | Harvey | AI Platform for MS Graph

@secqube.com

We provide managed providers with cost-reducing solutions through a user-friendly, multi-tenant, AI-driven system that enables automated KQL triaging. Connecting to the Microsoft Graph, allowing smooth integration with the Unified Portal and Sentinel.

29 followers25 following393 posts

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

If Steve Ballmer said 'Harvey® AI', Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI, Harvey® AI

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Everyone is asking: "How do we use AI?" Few are asking: "How do we govern AI?" The organisations that win with AI won't be the fastest adopters. They'll be the ones that combine innovation with governance, security, and accountability. AI without governance is just another risk waiting to happen.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-4254 - Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow scq.ms/4rw97YT

cvefeed.ioCVE-2026-4254 - Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowCVE ID :CVE-2026-4254 Published : March 16, 2026, 6:16 p.m. | 38 minutes ago Description :A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Severity: 10.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-4252 - Tenda AC8 IPv6 check_is_ipv6 ip address for authentication scq.ms/4uwGayV

cvefeed.ioCVE-2026-4252 - Tenda AC8 IPv6 check_is_ipv6 ip address for authenticationCVE ID :CVE-2026-4252 Published : March 16, 2026, 5:16 p.m. | 49 minutes ago Description :A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Severity: 10.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2025-62319 - Boolean-Based SQL Injection in Multiple Unica Components scq.ms/3PdDw0P

cvefeed.ioCVE-2025-62319 - Boolean-Based SQL Injection in Multiple Unica ComponentsCVE ID :CVE-2025-62319 Published : March 16, 2026, 3:30 p.m. | 34 minutes ago Description :Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. This allows an attacker to inject arbitrary SQL into backend configuration queries executed within the application. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2025-15540 - Authenticated RCE in Raytha CMS scq.ms/417bgQ4

cvefeed.ioCVE-2025-15540 - Authenticated RCE in Raytha CMSCVE ID :CVE-2025-15540 Published : March 16, 2026, 11:52 a.m. | 13 minutes ago Description :"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary operations within the application’s hosting environment. This issue was fixed in version 1.4.6. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2025-11500 - Credentials exposure in tinycontrol devices scq.ms/4rB8Ynf

cvefeed.ioCVE-2025-11500 - Credentials exposure in tinycontrol devicesCVE ID :CVE-2025-11500 Published : March 16, 2026, 9:26 a.m. | 39 minutes ago Description :Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off (which is a default setting), an unauthenticated attacker on the local network can obtain usernames and encoded passwords for interface management portal by inspecting the HTTP response of the server when visiting the login page, which contains a JSON file with these details. Both normal and admin users credentials are exposed.  This issue has been fixed in firmware versions: 1.36 (for tcPDU), 1.67 (for LK3.5 - hardware versions: 3.5, 3.6, 3.7 and 3.8), 1.75 (for LK3.9 - hardware version 3.9) and 1.38 (for LK4 - hardware version 4.0). Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-4255 - DLL Injection Privilege Escalation scq.ms/4cJz7fP

cvefeed.ioCVE-2026-4255 - DLL Injection Privilege EscalationCVE ID :CVE-2026-4255 Published : March 16, 2026, 7:14 a.m. | 51 minutes ago Description :A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading. The application loads certain dynamic-link library (DLL) dependencies using the default Windows search order, which includes directories that may be writable by non-privileged users.\n\n\n\nBecause these directories can be modified by unprivileged users, an attacker can place a malicious DLL with the same name as a legitimate dependency in a directory that is searched before trusted system locations. When the application is executed, which is always with administrative privileges, the malicious DLL is loaded instead of the legitimate library.\n\n\n\nThe application does not enforce restrictions on DLL loading locations and does not verify the integrity or digital signature of loaded libraries. As a result, attacker-controlled code may be executed within the security context of the application, allowing arbitrary code execution with elevated privileges.\n\n\n\nSuccessful exploitation requires that an attacker place a crafted malicious DLL in a user-writable directory that is included in the application's DLL search path and then cause the affected application to be executed. Once loaded, the malicious DLL runs with the same privileges as the application.\n\n\n\nThis issue affects \nTR-VISION HOME  versions up to and including 2.0.5. Severity: 8.4 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-31386 - LiteSpeed Technologies OpenLiteSpeed and LSWS Enterprise OS Command Injection Vulnerability scq.ms/4s71ole

cvefeed.ioCVE-2026-31386 - LiteSpeed Technologies OpenLiteSpeed and LSWS Enterprise OS Command Injection VulnerabilityCVE ID :CVE-2026-31386 Published : March 16, 2026, 5:21 a.m. | 44 minutes ago Description :OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2017-20224 - Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload scq.ms/4bKJvCX

cvefeed.ioCVE-2017-20224 - Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File UploadCVE ID :CVE-2017-20224 Published : March 16, 2026, 1:28 a.m. | 36 minutes ago Description :Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by exploiting enabled WebDAV HTTP methods. Attackers can use PUT, DELETE, MKCOL, MOVE, COPY, and PROPPATCH methods to upload executable code, delete files, or manipulate server content for remote code execution or denial of service. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2015-20120 - RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection scq.ms/4s6DVAE

cvefeed.ioCVE-2015-20120 - RealtyScript 4.0.2 Multiple Time-based Blind SQL InjectionCVE ID :CVE-2015-20120 Published : March 15, 2026, 6:35 p.m. | 1 hour, 29 minutes ago Description :Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by injecting SQL code into application parameters. Attackers can craft requests with time-delay payloads to infer database contents character by character based on response timing differences. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-28519 - arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution scq.ms/4dmCSIc

cvefeed.ioCVE-2026-28519 - arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code ExecutionCVE ID :CVE-2026-28519 Published : March 15, 2026, 1:36 p.m. | 28 minutes ago Description :arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component. An attacker on the same local area network who controls the LAN DNS server can send malicious DNS responses to overflow the heap buffer, potentially allowing execution of arbitrary code on affected embedded devices. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Harvey just levelled up. Our AI assistant is now an agentic AI bot – bringing genuine reasoning, real intellect and deep understanding of Microsoft Sentinel incidents to your SOC. Instead of reacting to alerts, Harvey interprets context, correlates signals and recommends next steps.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Most SOC tools secure your data. SecQube’s AI SOC goes further by securing how you access and experience it. Built on the Microsoft Sentinel Data Lake, protected end-to-end with Entra authentication and Azure Front Door, it combines security and cybersecurity in one Azure-native layer.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Alert: 73 fake VS Code extensions on Open VSX are sleeper agents for GlassWorm v2 malware. These cloned tools mimic popular packs like Turkish Language, lying dormant before updating to steal data and deploy payloads. Developers, verify publishers and downloads before installing.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

The Linux vs Windows security debate rages on in 2026. Linux's open-source model, strict privileges, and vetted repositories offer inherent edges, with malware targeting it under 2% globally. Windows has bolstered Defender and patching, yet its vast market share draws 93% of attacks.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

https://scq.ms/redsun-1 The RedSun zero-day in Microsoft Defender grants attackers full SYSTEM access on Windows 10, 11, and Servers—even after April patches. Exploiting cloud-tagged file handling, it overwrites critical system files via Cloud Files API and NTFS junctions.

scq.msSecQube - Technical steps to mitigate RedSun zero-day in Windows Defender for enterprise SOC teamsTechnical steps to mitigate RedSun zero-day in Windows Defender for enterprise SOC teams
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Splunk has issued urgent patches for critical RCE vulnerabilities like CVE-2026-20163 and clear-text token leaks that expose systems to unauthorised access. Attackers with elevated privileges can execute arbitrary commands via insecure REST endpoints, while unencrypted tokens risk credential theft.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

SVG files look innocent as simple vector graphics, but they are XML documents that can hide malicious JavaScript, phishing links, and XXE exploits. Opening an untrusted SVG in your browser might trigger redirects to fake login pages or data leaks without warning.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-32729 - Runtipi has a TOTP two-factor authentication bypass via unrestricted brute-force on `/api/auth/verify-totp` scq.ms/47jXI7B

cvefeed.ioCVE-2026-32729 - Runtipi has a TOTP two-factor authentication bypass via unrestricted brute-force on `/api/auth/verify-totp`CVE ID :CVE-2026-32729 Published : March 13, 2026, 9:41 p.m. | 2 hours, 22 minutes ago Description :Runtipi is a personal homeserver orchestrator. Prior to 4.8.1, The Runtipi /api/auth/verify-totp endpoint does not enforce any rate limiting, attempt counting, or account lockout mechanism. An attacker who has obtained a user's valid credentials (via phishing, credential stuffing, or data breach) can brute-force the 6-digit TOTP code to completely bypass two-factor authentication. The TOTP verification session persists for 24 hours (default cache TTL), providing an excessive window during which the full 1,000,000-code keyspace (000000–999999) can be exhausted. At practical request rates (~500 req/s), the attack completes in approximately 33 minutes in the worst case. This vulnerability is fixed in 4.8.1. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-3227 - Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N scq.ms/4lMnbMZ

cvefeed.ioCVE-2026-3227 - Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840NCVE ID :CVE-2026-3227 Published : March 13, 2026, 9:38 p.m. | 25 minutes ago Description :A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root privileges during port-trigger processing. Successful exploitation allows an authenticated attacker to execute system commands with root privileges, leading to full device compromise. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-32746 - GNU inetutils telnetd LINEMODE SLC Buffer Overflow scq.ms/47zeUG3

cvefeed.ioCVE-2026-32746 - GNU inetutils telnetd LINEMODE SLC Buffer OverflowCVE ID :CVE-2026-32746 Published : March 13, 2026, 6:19 p.m. | 1 hour, 7 minutes ago Description :telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-26954 - SandboxJS Function Injection Vulnerability scq.ms/4bjjp8M

cvefeed.ioCVE-2026-26954 - SandboxJS Function Injection VulnerabilityCVE ID :CVE-2026-26954 Published : March 13, 2026, 4:20 p.m. | 1 hour, 25 minutes ago Description :SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox. Given an array containing Function, and Object.fromEntries, it is possible to construct {[p]: Function} where p is any constructible property. This vulnerability is fixed in 0.8.34. Severity: 10.0 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2025-13779 - ABB AWIN GW100/GW120 Authentication Bypass scq.ms/4lsmCr7

cvefeed.ioCVE-2025-13779 - ABB AWIN GW100/GW120 Authentication BypassCVE ID :CVE-2025-13779 Published : March 13, 2026, 2:20 p.m. | 1 hour, 6 minutes ago Description :Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-3891 - "Pix for WooCommerce Arbitrary File Upload Vulnerability" scq.ms/4sK2FyF

cvefeed.ioCVE-2026-3891 - "Pix for WooCommerce Arbitrary File Upload Vulnerability"CVE ID :CVE-2026-3891 Published : March 13, 2026, 8:21 a.m. | 3 hours, 4 minutes ago Description :The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-22193 - wpDiscuz SQL Injection Vulnerability scq.ms/3P2mEKt

cvefeed.ioCVE-2026-22193 - wpDiscuz SQL Injection VulnerabilityCVE ID :CVE-2026-22193 Published : March 13, 2026, 6:19 a.m. | 1 hour, 6 minutes ago Description :wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries. Attackers can inject malicious SQL code through email, activation_key, subscription_date, and imported_from parameters to manipulate database queries and extract sensitive information. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-32306 - OneUptime ClickHouse SQL Injection via Aggregate Query Parameters scq.ms/4sC5f9O

cvefeed.ioCVE-2026-32306 - OneUptime ClickHouse SQL Injection via Aggregate Query ParametersCVE ID :CVE-2026-32306 Published : March 12, 2026, 9:27 p.m. | 1 hour, 57 minutes ago Description :OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the telemetry aggregation API accepts user-controlled aggregationType, aggregateColumnName, and aggregationTimestampColumnName parameters and interpolates them directly into ClickHouse SQL queries via the .append() method (documented as "trusted SQL"). There is no allowlist, no parameterized query binding, and no input validation. An authenticated user can inject arbitrary SQL into ClickHouse, enabling full database read (including telemetry data from all tenants), data modification, and potential remote code execution via ClickHouse table functions. This vulnerability is fixed in 10.0.23. Severity: 9.9 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

Struggling with Microsoft Sentinel incident triage? Harvey AI changes that. Our conversational AI bot guides you through investigations effortlessly, generating KQL queries automatically so no expertise is needed. Enjoy faster resolutions, reduced MTTR, and proactive threat hunting.

SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-32274 - Black: Arbitrary file writes from unsanitized user input in cache file name scq.ms/4s9DzJH

cvefeed.ioCVE-2026-32274 - Black: Arbitrary file writes from unsanitized user input in cache file nameCVE ID :CVE-2026-32274 Published : March 12, 2026, 8:16 p.m. | 1 hour, 9 minutes ago Description :Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations. Fixed in Black 26.3.1. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 scq.ms/3P1y9Sp

cvefeed.ioCVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400CVE ID :CVE-2026-3841 Published : March 12, 2026, 6:16 p.m. | 1 hour, 8 minutes ago Description :A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-32274 - Black: Arbitrary file writes from unsanitized user input in cache file name scq.ms/4s9DzJH

cvefeed.ioCVE-2026-32274 - Black: Arbitrary file writes from unsanitized user input in cache file nameCVE ID :CVE-2026-32274 Published : March 12, 2026, 8:16 p.m. | 43 minutes ago Description :Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations. Fixed in Black 26.3.1. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 scq.ms/3P1y9Sp

cvefeed.ioCVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400CVE ID :CVE-2026-3841 Published : March 12, 2026, 6:16 p.m. | 1 hour, 8 minutes ago Description :A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-4043 - Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow scq.ms/4b81djL

cvefeed.ioCVE-2026-4043 - Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflowCVE ID :CVE-2026-4043 Published : March 12, 2026, 4:16 p.m. | 1 hour, 8 minutes ago Description :A security vulnerability has been detected in Tenda i12 1.0.0.6(2204). The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 scq.ms/3P1y9Sp

cvefeed.ioCVE-2026-3841 - Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400CVE ID :CVE-2026-3841 Published : March 12, 2026, 6:16 p.m. | 43 minutes ago Description :A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-4043 - Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflow scq.ms/4b81djL

cvefeed.ioCVE-2026-4043 - Tenda i12 wifiSSIDget formwrlSSIDget stack-based overflowCVE ID :CVE-2026-4043 Published : March 12, 2026, 4:16 p.m. | 1 hour, 8 minutes ago Description :A security vulnerability has been detected in Tenda i12 1.0.0.6(2204). The impacted element is the function formwrlSSIDget of the file /goform/wifiSSIDget. Such manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Severity: 9.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-28384 - Authenticated RCE via unsanitized compression_algorithm scq.ms/47wBAGX

cvefeed.ioCVE-2026-28384 - Authenticated RCE via unsanitized compression_algorithmCVE ID :CVE-2026-28384 Published : March 12, 2026, 2:51 p.m. | 33 minutes ago Description :An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the snap versions 5.0.6-e49d9f4 (channel 5.0/stable), 5.21.4-1374f39 (channel 5.21/stable), and 6.7-1f11451 (channel 6.0 stable). The channel 4.0/stable is not affected as it contains version 4.0.10. Severity: 9.4 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...
SecQube | Harvey | AI Platform for MS Graph
@secqube.com

CVE-2026-2514 - Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application scq.ms/4sGkWge

cvefeed.ioCVE-2026-2514 - Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web applicationCVE ID :CVE-2026-2514 Published : March 12, 2026, 1 p.m. | 24 minutes ago Description :In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...