Aggregator

Submit #856013 / VDB-378244

In this Help Net Security video, Chris Boehm, Field CTO, Zero Networks, breaks down how a vendor breach can become your breach. He explains that attackers now target the subcontractors behind your trusted vendors. A compromised credential at a company you have never heard of can open access into your systems, because your vendor’s vendor holds keys you never vetted. Boehm compares a stolen access token to a badge: whoever holds it gets waved through, … More →

The post Your vendor’s vendor might be the real breach risk appeared first on Help Net Security.

A vulnerability described as problematic has been identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the component Shared Client Library. Such manipulation of the argument Server_NamespaceArray leads to null pointer dereference. This vulnerability is documented as CVE-2026-15690. The attack can be executed remotely. Additionally, an exploit exists. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'YJK(@YJK0805) of ZUSO ART' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'Brandon Evans of TrendAI Zero Day Initiative' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Aled Mehta (@x_delfino) of Dolphin Labs' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'elden, Bryan Mbeumo' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.5 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H severity vulnerability discovered by 'GangMin Kim' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N severity vulnerability discovered by 'Aaron Luo of VicOne LAB R7' was reported to the affected vendor on: 2026-07-14, 2 days ago. The vendor is given until 2026-11-11 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

Submit #856019 / VDB-378243

Submit #856017 / VDB-378242

Submit #856015 / VDB-378241

Submit #856011 / VDB-378240

Submit #856010 / VDB-378239

Submit #855999 / VDB-378238

Submit #855996 / VDB-378237

A vulnerability described as critical has been identified in Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5. Affected by this issue is the function ext4_percpu_param_init of the component ext4. Such manipulation leads to memory corruption. This vulnerability is documented as CVE-2026-43288. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.