Aggregator

A threat actor using the alias 84City has posted an SQL dump they attribute to PPA Business School, described as one of the largest private higher-education groups in France, offering preparatory programs and bachelor's degrees across art, design, digital, communication, and business.

A vulnerability marked as problematic has been reported in caronc Apprise up to 1.10.x. The impacted element is an unknown function of the file apprise/attachment/http.py of the component HTTP Attachment/Config Loader. The manipulation leads to open redirect. This vulnerability is traded as CVE-2026-59180. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as problematic has been found in decolua 9router up to 0.5.1. The affected element is an unknown function of the file src/dashboardGuard.js of the component Loopback Handler. Executing a manipulation can lead to infinite loop. This vulnerability appears as CVE-2026-56675. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in espressif esp-idf up to 6.0.1. Impacted is the function jpeg_parse_dqt_marker of the file components/esp_driver_jpeg/jpeg_parse_marker.c of the component JPEG Parser. Performing a manipulation of the argument Tq results in out-of-bounds write. This vulnerability is reported as CVE-2026-55687. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Wekan up to 9.63. This issue affects some unknown processing of the component Checklist. Such manipulation leads to authorization bypass. This vulnerability is documented as CVE-2026-59154. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in getgrav Grav up to 1.7.52. It has been rated as problematic. This vulnerability affects unknown code of the file user/accounts/admin.yaml of the component Backup Download Endpoint. This manipulation of the argument admin-nonce causes password hash with insufficient computational effort. This vulnerability is registered as CVE-2026-55885. Remote exploitation of the attack is possible. No exploit is available.

One man accused of deploying Ryuk ransomware pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud, while another man received a 70-month federal prison sentence in a Florida court for helping the Blackcat/AlphV gang extort multiple victims.

A vulnerability was found in qax-os excelize up to 2.10.x. It has been declared as problematic. This affects the function GetCellValue/GetRows of the component XLSX File Handler. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-59162. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in qax-os excelize up to 2.10.x. It has been classified as problematic. Affected by this issue is the function GetRows of the component Streaming Worksheet Reader. The manipulation of the argument row leads to uncontrolled memory allocation. This vulnerability is listed as CVE-2026-59161. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in decolua 9router up to 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /v1/search of the component Request Routing Handler. Executing a manipulation of the argument baseUrl can lead to server-side request forgery. This vulnerability is tracked as CVE-2026-55641. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in cthackers adm-zip up to 0.5.18 and classified as problematic. Affected is the function readFile/readAsText/extractEntryTo/extractAllTo/extractAllToAsync/test/entry.getData of the file zipEntry.js of the component ZIP file Handler. Performing a manipulation of the argument size results in allocation of resources. This vulnerability is identified as CVE-2026-39244. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in yhirose cpp-httplib up to 0.46.x. This impacts an unknown function of the component HTTPS mode. Such manipulation leads to improper certificate validation. This vulnerability is referenced as CVE-2026-54919. It is possible to launch the attack remotely. No exploit is available.

While cyberattacks against hospitals and clinics grew modestly in the first half of 2026, attacks on service providers and other healthcare businesses more than doubled.

A vulnerability, which was classified as problematic, has been found in getgrav Grav up to 1.7.52. This affects the function fallbackUrl of the component ImageMedium. This manipulation of the argument forceResize causes resource consumption. The identification of this vulnerability is CVE-2026-53653. It is possible to initiate the attack remotely. There is no exploit available.

If a warrant is ultimately needed for ALPR searches, experts say, it would radically limit how the networks of cameras can be used and would change modern policing.

A vulnerability classified as very critical was found in Lima up to 2.1.2. The impacted element is an unknown function of the file /run/lima-guestagent.sock of the component QEMU Driver. The manipulation results in improper authentication. This vulnerability was named CVE-2026-53657. The attack needs to be approached locally. There is no available exploit.

A vulnerability classified as problematic has been found in decolua 9router up to 0.5.1. The affected element is an unknown function of the file next.config.mjs of the component Codex Request Handler. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2026-55638. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability described as problematic has been identified in SimpleMachines SMF up to 2.1.7. Impacted is the function check of the file Sources/Actions/AttachmentApprove.php of the component Attachment Approval. Executing a manipulation can lead to authorization bypass. This vulnerability is handled as CVE-2026-39903. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as problematic has been reported in xuri excelize up to 2.10.x. This issue affects the function checkSheet of the component XLSX file Handler. Performing a manipulation of the argument length results in denial of service. This vulnerability is known as CVE-2026-54063. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability labeled as problematic has been found in Xen XAPI. This vulnerability affects unknown code of the component Configuration Handler. Such manipulation of the argument VM.platform:hvm_serial leads to improper access controls. This vulnerability is traded as CVE-2026-42486. The attack may be launched remotely. There is no exploit available.