Aggregator

Cisco fixed a critical ISE vulnerability that lets attackers to gain root access

Security Affairs
2 weeks 6 days ago
Cisco addressed CVE-2026-20181, a critical ISE vulnerability that lets authenticated admins execute commands and gain root access. Cisco addressed a critical command execution vulnerability, tracked as CVE-2026-20181 (CVSS score of 9.1), affecting Identity Services Engine (ISE) and ISE-PIC. The flaw stems from improper validation of user-supplied input, allowing an authenticated attacker with administrative credentials to […]
Pierluigi Paganini

Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens

Cyber Security News
2 weeks 6 days ago

Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a competitive-intelligence platform that synchronizes battlecard and win/loss data with Salesforce, to exfiltrate large volumes of […]

The post Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens appeared first on Cyber Security News.

Guru Baran

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

The Hackers News
2 weeks 6 days ago
If an autonomous AI agent interacts with your company's core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a simple no. The rush to adopt internal AI tools has left a massive trail of administrative debt: orphaned agents (AI tools left running after their creator leaves the company) and standing privileges (
The Hacker News

CVE-2026-12539 | Docker Sandboxes up to 0.32.x communication channel to intended endpoints (EUVD-2026-37893)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability was found in Docker Sandboxes up to 0.32.x and classified as problematic. This issue affects some unknown processing. The manipulation results in improper restriction of communication channel to intended endpoints. This vulnerability is reported as CVE-2026-12539. The attack requires a local approach. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-56012 | David Lingren Media LIbrary Assistant Plugin up to 3.35 on WordPress sql injection (EUVD-2026-37895)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability has been found in David Lingren Media LIbrary Assistant Plugin up to 3.35 on WordPress and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability is documented as CVE-2026-56012. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2026-42488 | Xen

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability, which was classified as problematic, was found in Xen. This affects an unknown part. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2026-42488. The attack requires access to the local network. No exploit is available.
vuldb.com

CVE-2026-12527 | Shenzhen Liandian Communication V380 IP Camera/AppFHE1 AppFHE1_V1.0.6.020230803 missing authentication (EUVD-2026-37894)

VulDB Recent Entries
2 weeks 6 days ago
A vulnerability, which was classified as critical, has been found in Shenzhen Liandian Communication V380 IP Camera and AppFHE1 AppFHE1_V1.0.6.020230803. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. This vulnerability is cataloged as CVE-2026-12527. The attack must originate from the local network. There is no exploit available.
vuldb.com

Managed ad