Vulnerability Report Archives • Page 23 of 119 • Daily CyberSecurity

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext

Do Son August 14, 2026

TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets...

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts Mira Hormone Monitor vulnerability CVE-2026-68067 letting attackers control user accounts via a cloud login bypass

Mira Hormone Monitor vulnerability CVE-2026-68067 letting attackers control user accounts via a cloud login bypass

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts

Do Son August 14, 2026

TL;DR CISA disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app. The worst, CVE-2026-68067,...

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices TP-Link router vulnerabilities in ISP-managed mesh and modem devices with authentication bypass and command injection flaws

TP-Link router vulnerabilities in ISP-managed mesh and modem devices with authentication bypass and command injection flaws

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices

Do Son August 14, 2026

TL;DR TP-Link disclosed five vulnerabilities across its ISP-managed networking gear. The flaws hit mesh systems, routers, PON...

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is...

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8 EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8

EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8

Do Son August 13, 2026

TL;DR HPE Aruba Networking patched two critical flaws in its SD-WAN EdgeConnect Orchestrator. Both carry a CVSS...

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

TL;DR Apple patched a flaw that let a local app gain root privileges through the mediaremoted service....

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public Xiaomi ShareMe MiDrop zero-click vulnerability silent file drop over BLE with public proof-of-concept exploit code

Xiaomi ShareMe MiDrop zero-click vulnerability silent file drop over BLE with public proof-of-concept exploit code

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public

Do Son August 13, 2026

TL;DR A researcher at ByteriaLab found a zero-click flaw in Xiaomi ShareMe, also shipped as MiDrop. An...

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.

WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution

Do Son August 13, 2026

TL;DR WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an...

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the...

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs GitLab patch release fixing 13 security flaws including high-severity XSS and CVE-2026-15217 on a dashboard

GitLab patch release fixing 13 security flaws including high-severity XSS and CVE-2026-15217 on a dashboard

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs

Do Son August 12, 2026

TL;DR GitLab shipped a new patch release on August 12, 2026. Versions 19.2.2, 19.1.4, and 19.0.6 fix...

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8 Dell Virtual Storage Integrator unauthenticated remote code execution CVE-2026-67261 CVSS 9.8 critical vulnerability

Dell Virtual Storage Integrator unauthenticated remote code execution CVE-2026-67261 CVSS 9.8 critical vulnerability

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8

Do Son August 12, 2026

TL;DR Dell patched two critical flaws in Virtual Storage Integrator (VSI) for VMware vSphere Client. The worst,...

CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6 Nuxt DevTools vulnerability CVE-2026-71319 enabling arbitrary command execution, rated CVSS 9.6

Nuxt DevTools vulnerability CVE-2026-71319 enabling arbitrary command execution, rated CVSS 9.6

CVE-2026-71319: Nuxt DevTools Flaw With 7.3 Million Monthly Downloads Allows Arbitrary Command Execution, CVSS 9.6

Do Son August 12, 2026

TL;DR A critical Nuxt DevTools vulnerability lets an attacker run arbitrary commands on a developer’s machine. Tracked...

CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed Puwell IP Camera vulnerabilities CVE-2026-61514 and CVE-2026-61515 with public proof-of-concept exploit code

Puwell IP Camera vulnerabilities CVE-2026-61514 and CVE-2026-61515 with public proof-of-concept exploit code

CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026

TL;DR Two critical Puwell IP Camera vulnerabilities now have public details and proof-of-concept exploit code. Both score...

CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050 CVE-2026-58115 SIMATIC IoT2050 Node-RED remote code execution flaw with a CVSS 10 severity score

CVE-2026-58115 SIMATIC IoT2050 Node-RED remote code execution flaw with a CVSS 10 severity score

CVE-2026-58115: CVSS 10 Node-RED RCE Hits SIMATIC IoT2050

Do Son August 12, 2026

TL;DR Siemens has disclosed CVE-2026-58115, a maximum-severity flaw in SIMATIC IoT2050 Advanced devices. The bug scores a...

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 SharePoint authentication bypass PoC forging a JWT token shown in a Rapid7 exploit terminal

CVE-2026-55040 PoC Released for SharePoint Authentication Bypass

Do Son August 12, 2026

TL;DR Rapid7 has published a technical analysis and a working proof-of-concept for CVE-2026-55040. The flaw is a...

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...

Chrome Update Fixes 5 Use-After-Free Security Bugs Chrome security update patching use-after-free flaws CVE-2026-19556 and CVE-2026-19560 on a browser screen

Chrome security update patching use-after-free flaws CVE-2026-19556 and CVE-2026-19560 on a browser screen

Chrome Update Fixes 5 Use-After-Free Security Bugs

Do Son August 12, 2026

TL;DR Google shipped a new Chrome security update on the Stable channel. It fixes five high-severity use-after-free...

Microsoft August 2026 Patch Tuesday zero-day CVE-2026-68820 WinSock afd.sys exploited in the wild security update

Microsoft August 2026 Patch Tuesday Fixes WinSock Zero-Day Exploited in the Wild

Do Son August 12, 2026

TL;DR Microsoft August 2026 Patch Tuesday fixes 421 vulnerabilities, with 62 rated critical. One flaw, CVE-2026-68820, is...

Zoom Patches Four Security Flaws, Including Two Remote Code Execution Bugs Zoom security vulnerability advisory showing four CVEs and two remote code execution flaws in the annotator function

Zoom security vulnerability advisory showing four CVEs and two remote code execution flaws in the annotator function

Zoom Patches Four Security Flaws, Including Two Remote Code Execution Bugs

Do Son August 12, 2026

TL;DR Zoom released four security bulletins on August 11, 2026. Two of the flaws allow remote code...

Linux kernel CPU timer flaw CVE-2026-64560 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 12, 2026

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it...

CVE-2026-66147: Unauthenticated Remote Code Execution Flaws Hit SonicWall GMS SonicWall GMS vulnerability CVE-2026-66147 unauthenticated remote code execution advisory dashboard warning

SonicWall GMS vulnerability CVE-2026-66147 unauthenticated remote code execution advisory dashboard warning

CVE-2026-66147: Unauthenticated Remote Code Execution Flaws Hit SonicWall GMS

Do Son August 12, 2026

TL;DR SonicWall disclosed critical flaws in its GMS and Email Security products on August 11, 2026. The...

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN vulnerability CVE-2026-20349 exploited in the wild causing a firewall denial of service reload

Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild

Do Son August 12, 2026

TL;DR Cisco disclosed a Cisco ASA and FTD VPN vulnerability on August 11, 2026. Tracked as CVE-2026-20349...