Aggregator

CVE-2026-82775 | Contec M2M Gateway/M2M Controller up to 4.0.x exposure of information through directory listing

VulDB Recent Entries
13 hours 22 minutes ago
A vulnerability was found in Contec M2M Gateway and M2M Controller up to 4.0.x. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to exposure of information through directory listing. This vulnerability is referenced as CVE-2026-82775. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-85152 | OpenJS Foundation Undici up to 8.10.1 Cache cross-domain policy

Vuldb Updates
13 hours 23 minutes ago
A vulnerability was found in OpenJS Foundation Undici up to 8.10.1. It has been rated as problematic. This affects an unknown function of the component Cache. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is uniquely identified as CVE-2026-85152. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-82774 | Contec M2M Controller Series/M2M Gateway Series up to 4.0.x os command injection

VulDB Recent Entries
13 hours 23 minutes ago
A vulnerability was found in Contec M2M Controller Series and M2M Gateway Series up to 4.0.x. It has been classified as very critical. This issue affects some unknown processing. This manipulation causes os command injection. The identification of this vulnerability is CVE-2026-82774. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

What we know about the Revolut data breach so far

Help Net Security
13 hours 25 minutes ago

Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank confirmed the incident on Saturday, September 12. The London-based fintech told TechCrunch that a limited number of customers were affected and that it had contacted them directly. The notification Revolut emailed affected customers listed birth dates, postal and email addresses, phone numbers, and copies of identity documents such as passports and driving licences. Verification … More →

The post What we know about the Revolut data breach so far appeared first on Help Net Security.

Mirko Zorz

Anthropic CEO Calls for an AI Slowdown. Is It Possible?

Security Affairs
13 hours 47 minutes ago
Anthropic CEO calls for AI slowdown, proposes embedded evaluators and global coordination. Geopolitical competition with China makes a voluntary pause structurally fragile. Dario Amodei published “We Must Pace the Frontier“, calling on the AI industry, governments, and international bodies to slow the pace of AI capability development before safety research can catch up. It’s the […]
Pierluigi Paganini

CVE-2026-89715 | Linux Kernel up to 6.18.49/7.2.3 localio nfs_open_local_fh nf_net allocation of resources (Nessus ID 345357)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.49/7.2.3. The impacted element is the function nfs_open_local_fh of the component localio. The manipulation of the argument nf_net results in allocation of resources. This vulnerability is reported as CVE-2026-89715. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2026-89468 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 lp8788-charger lp8788-charger.c lp8788_charger_remove use after free (Nessus ID 345358)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability classified as very critical was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This affects the function lp8788_charger_remove of the file lp8788-charger.c of the component lp8788-charger. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-89468. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-89707 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd_cross_mnt denial of service (Nessus ID 345361)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The affected element is the function nfsd_cross_mnt of the component nfsd. The manipulation leads to denial of service. This vulnerability is documented as CVE-2026-89707. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-89729 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Sensor Hub sensor_hub_get_feature out-of-bounds write (Nessus ID 345359)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Affected by this issue is the function sensor_hub_get_feature of the component Sensor Hub. Executing a manipulation can lead to out-of-bounds write. This vulnerability appears as CVE-2026-89729. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-80993 | Linux Kernel up to 6.18.49/7.2.3 phylink phylink_inband_caps null pointer dereference (Nessus ID 345360)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability was found in Linux Kernel up to 6.18.49/7.2.3. It has been classified as critical. The affected element is the function phylink_inband_caps of the component phylink. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-80993. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-89747 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 tracing ring_buffer.c ring_buffer_peek use after free (EUVD-2026-76659 / Nessus ID 345362)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. It has been classified as very critical. Affected by this vulnerability is the function ring_buffer_peek of the file kernel/trace/ring_buffer.c of the component tracing. This manipulation causes use after free. The identification of this vulnerability is CVE-2026-89747. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-89557 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Badblocks block/badblocks.c super_1_load bblog_shift buffer overflow (Nessus ID 345363)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Affected by this issue is the function super_1_load of the file block/badblocks.c of the component Badblocks. This manipulation of the argument bblog_shift causes buffer overflow. This vulnerability is registered as CVE-2026-89557. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-89645 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 btrfs btrfs_recover_relocation denial of service (Nessus ID 345364)

Vuldb Updates
13 hours 48 minutes ago
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Affected by this issue is the function btrfs_recover_relocation of the component btrfs. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-89645. The attack requires a local approach. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-47878 | Spring Batch up to 5.2.6/6.0.4 DefaultExecutionContextSerializer ObjectInputStream.readObject deserialization

Vuldb Updates
14 hours 3 minutes ago
A vulnerability, which was classified as critical, was found in Spring Batch up to 5.2.6/6.0.4. This affects the function ObjectInputStream.readObject of the component DefaultExecutionContextSerializer. The manipulation results in deserialization. This vulnerability is known as CVE-2026-47878. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2026-47883 | VMware Spring Framework up to 7.0.8/6.2.19 UrlHandlerFilter redirect (Nessus ID 341190 / WID-SEC-2026-2955)

Vuldb Updates
14 hours 3 minutes ago
A vulnerability was found in VMware Spring Framework up to 7.0.8/6.2.19 and classified as problematic. This issue affects some unknown processing of the component UrlHandlerFilter. Such manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2026-47883. The attack can be launched remotely. No exploit exists.
vuldb.com

Managed ad