Automated cyber signal feeds.
CVE ID :CVE-2026-92717 Published : Sept. 16, 2026, 5:31 p.m. | 43 minutes ago Description :Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can…
CVE ID :CVE-2026-73458 Published : Sept. 15, 2026, 7:30 p.m. | 37 minutes ago Description :On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down.…
CVE ID :CVE-2026-76685 Published : Sept. 15, 2026, 7:23 p.m. | 43 minutes ago Description :A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could…
CVE ID :CVE-2026-76683 Published : Sept. 15, 2026, 7:23 p.m. | 43 minutes ago Description :Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on…
CVE ID :CVE-2026-76684 Published : Sept. 15, 2026, 7:23 p.m. | 43 minutes ago Description :Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.…
CVE ID :CVE-2026-76682 Published : Sept. 15, 2026, 7:23 p.m. | 43 minutes ago Description :A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation…
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has…
CVE ID :CVE-2026-40058 Published : Sept. 15, 2026, 5:47 p.m. | 19 minutes ago Description :CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro…
CVE ID :CVE-2026-81235 Published : Sept. 15, 2026, 5:43 p.m. | 24 minutes ago Description :Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,…
CVE ID :CVE-2026-11728 Published : Sept. 15, 2026, 5:42 p.m. | 24 minutes ago Description :IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD,…