TheHackerWire
@thehackerwire.bsky.social
Knowledge is the ultimate weapon against cyber threats.
211 followers2 following11.3K posts
%20--%3E%3Cmetadata%20xmlns%3Ardf%3D%22http%3A%2F%2Fwww.w3.org%2F1999%2F02%2F22-rdf-syntax-ns%23%22%20xmlns%3Axsi%3D%22http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema-instance%22%20xmlns%3Adc%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Felements%2F1.1%2F%22%20xmlns%3Adcterms%3D%22http%3A%2F%2Fpurl.org%2Fdc%2Fterms%2F%22%3E%3Crdf%3ARDF%3E%3Crdf%3ADescription%3E%3Cdc%3Atitle%3EShadows%3C%2Fdc%3Atitle%3E%3Cdc%3Acreator%3EDiceBear%3C%2Fdc%3Acreator%3E%3Cdc%3Asource%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fwww.dicebear.com%3C%2Fdc%3Asource%3E%3Cdcterms%3Alicense%20xsi%3Atype%3D%22dcterms%3AURI%22%3Ehttps%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F%3C%2Fdcterms%3Alicense%3E%3Cdc%3Arights%3E%E2%80%9CShadows%E2%80%9D%20(https%3A%2F%2Fwww.dicebear.com)%20by%20%E2%80%9CDiceBear%E2%80%9D%2C%20licensed%20under%20%E2%80%9CCC0%201.0%E2%80%9D%20(https%3A%2F%2Fcreativecommons.org%2Fpublicdomain%2Fzero%2F1.0%2F)%3C%2Fdc%3Arights%3E%3C%2Frdf%3ADescription%3E%3C%2Frdf%3ARDF%3E%3C%2Fmetadata%3E%3Cdefs%3E%3Cg%20id%3D%22shoulders-round-36d735bc%22%3E%3Cellipse%20cx%3D%2239%22%20cy%3D%2241%22%20rx%3D%2232%22%20ry%3D%2241%22%20fill%3D%22%235b4e30%22%2F%3E%3C%2Fg%3E%3Cg%20id%3D%22heads-tall-36d735bc%22%3E%3Cellipse%20cx%3D%2231%22%20cy%3D%2237%22%20rx%3D%2217%22%20ry%3D%2223%22%20fill%3D%22%235b4e30%22%2F%3E%3C%2Fg%3E%3CclipPath%20id%3D%22clip-36d735bc%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20rx%3D%220%22%20ry%3D%220%22%2F%3E%3C%2FclipPath%3E%3C%2Fdefs%3E%3Cg%20clip-path%3D%22url(%23clip-36d735bc)%22%3E%3Crect%20width%3D%22100%22%20height%3D%22100%22%20fill%3D%22%23d0edec%22%2F%3E%3Cuse%20transform%3D%22translate(11%2051)%22%20href%3D%22%23shoulders-round-36d735bc%22%2F%3E%3Cuse%20transform%3D%22translate(19%201)%22%20href%3D%22%23heads-tall-36d735bc%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)
🔴 CVE-2026-110879 - Critical (9.8) jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected ... https://www.thehackerwire.com/vulnerability/CVE-2026-110879/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-110747 - High (7.5) ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into... https://www.thehackerwire.com/vulnerability/CVE-2026-110747/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🔴 CVE-2026-106013 - Critical (9.8) The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X ... https://www.thehackerwire.com/vulnerability/CVE-2026-106013/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116688 - High (8.1) CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47... https://www.thehackerwire.com/vulnerability/CVE-2026-116688/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🔴 CVE-2026-116692 - Critical (9.8) MLflow is an open source AI engineering platform for agents, large language models, and machine l... https://www.thehackerwire.com/vulnerability/CVE-2026-116692/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-57200 - High (7.5) Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20... https://www.thehackerwire.com/vulnerability/CVE-2026-57200/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-57195 - High (7.5) Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20... https://www.thehackerwire.com/vulnerability/CVE-2026-57195/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-83831 - High (8.8) Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov... https://www.thehackerwire.com/vulnerability/CVE-2026-83831/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-85898 - High (8.8) Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) ... https://www.thehackerwire.com/vulnerability/CVE-2026-85898/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116676 - High (8.8) Atlantis is a self-hosted golang application that listens for Terraform pull request events via w... https://www.thehackerwire.com/vulnerability/CVE-2026-116676/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116662 - High (7.5) Tanium addressed a compression bomb vulnerability in Enforce. https://www.thehackerwire.com/vulnerability/CVE-2026-116662/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116682 - High (8.6) FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0... https://www.thehackerwire.com/vulnerability/CVE-2026-116682/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-57202 - High (8.1) Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20... https://www.thehackerwire.com/vulnerability/CVE-2026-57202/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-88812 - High (7.8) A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 co... https://www.thehackerwire.com/vulnerability/CVE-2026-88812/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-87086 - High (7.5) Tanium addressed a denial of service vulnerability in Provision. https://www.thehackerwire.com/vulnerability/CVE-2026-87086/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-92372 - High (8.8) An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Li... https://www.thehackerwire.com/vulnerability/CVE-2026-92372/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-92377 - High (7.8) Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Ho... https://www.thehackerwire.com/vulnerability/CVE-2026-92377/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-92376 - High (7.8) Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote M... https://www.thehackerwire.com/vulnerability/CVE-2026-92376/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-117602 - High (8.4) Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which... https://www.thehackerwire.com/vulnerability/CVE-2026-117602/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-118008 - High (8.8) Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159. https://www.thehackerwire.com/vulnerability/CVE-2026-118008/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-117604 - High (7.5) Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerReques... https://www.thehackerwire.com/vulnerability/CVE-2026-117604/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🔴 CVE-2026-18450 - Critical (9.8) The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An at... https://www.thehackerwire.com/vulnerability/CVE-2026-18450/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-18449 - High (7.5) The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An at... https://www.thehackerwire.com/vulnerability/CVE-2026-18449/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-65220 - High (8.8) A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+... https://www.thehackerwire.com/vulnerability/CVE-2026-65220/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116837 - High (8.8) A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow ... https://www.thehackerwire.com/vulnerability/CVE-2026-116837/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116836 - High (8.8) A malicious actor with access to the adjacent network and under certain conditions could exploit ... https://www.thehackerwire.com/vulnerability/CVE-2026-116836/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116816 - High (7.8) llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_... https://www.thehackerwire.com/vulnerability/CVE-2026-116816/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116843 - High (8.8) Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to... https://www.thehackerwire.com/vulnerability/CVE-2026-116843/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-75891 - High (8.8) The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in ... https://www.thehackerwire.com/vulnerability/CVE-2026-75891/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-106174 - High (7.5) A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow... https://www.thehackerwire.com/vulnerability/CVE-2026-106174/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-99018 - High (7.8) In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow ca... https://www.thehackerwire.com/vulnerability/CVE-2026-99018/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-99016 - High (7.8) In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user... https://www.thehackerwire.com/vulnerability/CVE-2026-99016/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-99014 - High (7.8) In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix com... https://www.thehackerwire.com/vulnerability/CVE-2026-99014/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-99013 - High (7.8) In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concu... https://www.thehackerwire.com/vulnerability/CVE-2026-99013/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-99032 - High (7.8) In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lif... https://www.thehackerwire.com/vulnerability/CVE-2026-99032/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116149 - High (8.1) ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in th... https://www.thehackerwire.com/vulnerability/CVE-2026-116149/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116171 - High (7.5) SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath... https://www.thehackerwire.com/vulnerability/CVE-2026-116171/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116180 - High (7.7) vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v... https://www.thehackerwire.com/vulnerability/CVE-2026-116180/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116179 - High (7.5) vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clien... https://www.thehackerwire.com/vulnerability/CVE-2026-116179/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116177 - High (7.5) vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that a... https://www.thehackerwire.com/vulnerability/CVE-2026-116177/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116176 - High (8.2) vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows AP... https://www.thehackerwire.com/vulnerability/CVE-2026-116176/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116183 - High (7.5) phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows un... https://www.thehackerwire.com/vulnerability/CVE-2026-116183/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116191 - High (7.5) Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthen... https://www.thehackerwire.com/vulnerability/CVE-2026-116191/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116189 - High (7.5) rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate th... https://www.thehackerwire.com/vulnerability/CVE-2026-116189/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116201 - High (8.8) Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reu... https://www.thehackerwire.com/vulnerability/CVE-2026-116201/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116199 - High (8.1) Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCall... https://www.thehackerwire.com/vulnerability/CVE-2026-116199/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🔴 CVE-2026-116207 - Critical (9.1) YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL i... https://www.thehackerwire.com/vulnerability/CVE-2026-116207/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116204 - High (8.1) YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (to... https://www.thehackerwire.com/vulnerability/CVE-2026-116204/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116211 - High (8.2) YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where ... https://www.thehackerwire.com/vulnerability/CVE-2026-116211/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack
🟠 CVE-2026-116208 - High (8.1) YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubServ... https://www.thehackerwire.com/vulnerability/CVE-2026-116208/ #infosec #cybersecurity #CVE #vulnerability #security #patchstack