Aggregator

Руководству сборной предстоит найти тех, кто перехватил доступ ради громкого скандала.

A vulnerability was found in Tenda BE12 Pro 16.03.66.23 and classified as critical. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-15696. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability has been found in Tenda BE12 Pro 16.03.66.23 and classified as critical. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. This vulnerability is handled as CVE-2026-15695. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, was found in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. This vulnerability is known as CVE-2026-15694. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, has been found in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-15693. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. This vulnerability appears as CVE-2026-15692. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability classified as critical has been found in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. This vulnerability is reported as CVE-2026-15691. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #856013 / VDB-378244

In this Help Net Security video, Chris Boehm, Field CTO, Zero Networks, breaks down how a vendor breach can become your breach. He explains that attackers now target the subcontractors behind your trusted vendors. A compromised credential at a company you have never heard of can open access into your systems, because your vendor’s vendor holds keys you never vetted. Boehm compares a stolen access token to a badge: whoever holds it gets waved through, … More →

The post Your vendor’s vendor might be the real breach risk appeared first on Help Net Security.

A vulnerability described as problematic has been identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the component Shared Client Library. Such manipulation of the argument Server_NamespaceArray leads to null pointer dereference. This vulnerability is documented as CVE-2026-15690. The attack can be executed remotely. Additionally, an exploit exists. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Brandon Evans of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Aled Mehta (@x_delfino) of Dolphin Labs' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'elden, Bryan Mbeumo' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'GangMin Kim' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 11 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Submit #856019 / VDB-378243