CVE ID :CVE-2026-112352 Published : Oct. 27, 2026, 8:17 p.m. | 13 minutes ago Description :Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging…
CVE ID :CVE-2026-112350 Published : Oct. 27, 2026, 8:17 p.m. | 13 minutes ago Description :Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due…
CVE ID :CVE-2026-112351 Published : Oct. 27, 2026, 8:17 p.m. | 13 minutes ago Description :Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute…
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments…
CVE ID :CVE-2026-116682 Published : Oct. 27, 2026, 5:48 p.m. | 42 minutes ago Description :FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend resolves symbolic links through GetRealPath without confirming…
CVE ID :CVE-2026-102814 Published : Oct. 27, 2026, 5:40 p.m. | 49 minutes ago Description :An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow…
CVE ID :CVE-2026-108303 Published : Oct. 27, 2026, 5:35 p.m. | 54 minutes ago Description :Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products,…
CVE ID :CVE-2026-108329 Published : Oct. 27, 2026, 5:35 p.m. | 54 minutes ago Description :Tanium addressed an unauthorized code execution vulnerability in Threat Response. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products,…
CVE ID :CVE-2026-115924 Published : Oct. 26, 2026, 7:22 p.m. | 48 minutes ago Description :Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg to rembg, where it is interpolated…
CVE ID :CVE-2026-110720 Published : Oct. 26, 2026, 7:16 p.m. | 55 minutes ago Description :Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul…