Automated cyber signal feeds.
CVE ID :CVE-2026-87930 Published : Sept. 9, 2026, 5:17 p.m. | 2 hours, 17 minutes ago Description :MaxSite CMS through 109.6 passes the ci_session cookie to unserialize() without class restrictions, allowing unauthenticated attackers to inject PHP objects. Attackers can forge valid session…
CVE ID :CVE-2026-49883 Published : Sept. 8, 2026, 7:10 p.m. | 19 minutes ago Description :In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local…
CVE ID :CVE-2026-82004 Published : Sept. 8, 2026, 6:53 p.m. | 37 minutes ago Description :Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability that could result in…
CVE ID :CVE-2026-85384 Published : Sept. 8, 2026, 6:43 p.m. | 46 minutes ago Description :A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded…
CVE ID :CVE-2026-85877 Published : Sept. 8, 2026, 6:21 p.m. | 1 hour, 8 minutes ago Description :Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. Severity: 8.8 | HIGH Visit the link…
CVE ID :CVE-2026-83998 Published : Sept. 8, 2026, 6:21 p.m. | 1 hour, 8 minutes ago Description :Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Severity: 8.8 | HIGH Visit the link for…
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. “Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing…
CVE ID :CVE-2026-86502 Published : Sept. 7, 2026, 5:17 p.m. | 2 hours, 5 minutes ago Description :In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts Severity: 8.4…
CVE ID :CVE-2026-86492 Published : Sept. 7, 2026, 5:17 p.m. | 2 hours, 5 minutes ago Description :In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens Severity: 8.5 | HIGH Visit the link for…
CVE ID :CVE-2026-86480 Published : Sept. 7, 2026, 5:17 p.m. | 2 hours, 5 minutes ago Description :In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges Severity: 9.8 | CRITICAL Visit the link for…