Automated cyber signal feeds.
CVE ID :CVE-2026-82473 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark…
CVE ID :CVE-2026-82460 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use…
CVE ID :CVE-2026-82461 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attackers can forge access tokens…
CVE ID :CVE-2026-82463 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and…
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs…
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. “This vulnerability gives an unauthenticated attacker remote control…
Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users’ home networks. Topping the list is support for Encrypted Client Hello (ECH), a privacy standard that…
CVE ID :CVE-2026-82227 Published : Aug. 28, 2026, 4:18 p.m. | 3 hours, 7 minutes ago Description :Contributor SQL Injection in WPBulky <= 1.2.2 versions. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-82078 Published : Aug. 28, 2026, 4:18 p.m. | 3 hours, 7 minutes ago Description :An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based…
CVE ID :CVE-2026-81578 Published : Aug. 28, 2026, 4:18 p.m. | 3 hours, 7 minutes ago Description :An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions…