VulnHub

Recent vulnerabilities have been discovered in the Xiiaozet LK100W device, affecting versions below 2.1.240. These vulnerabilities could allow attackers to take control of the device through OS command injection, missing authentication for critical functions, and authentication bypass methods. The most severe of these issues has a CVSS score of 9.8, indicating a critical risk of unauthorized access. Users worldwide are urged to update their devices to version 2.1.240 as a primary remediation step. The vulnerabilities expose sensitive information and could potentially lead to complete device compromise, making it crucial for organizations to address these security gaps promptly.

Mitsubishi Electric has identified a vulnerability affecting several models in its CNC Series, specifically relating to improper validation of input indices. This flaw, designated as CVE-2025-2399, can be exploited remotely, leading to an out-of-bounds read that could disrupt service. Affected models include the M800VW, M800VS, M80V, and several others across different series. Users of these products are urged to update to specific fixed versions to prevent potential exploitation. Additionally, Mitsubishi Electric recommends using firewalls, VPNs, and IP filters as interim measures to secure their systems while waiting for updates.

Mitsubishi Electric has disclosed a significant vulnerability affecting multiple models of its CC-Link IE TSN Remote I/O products. This flaw, identified as CVE-2025-3511, allows remote attackers to trigger a denial-of-service (DoS) condition by sending specially crafted UDP packets. Affected devices include various models of CC-Link IE TSN Remote I/O modules, Analog-Digital and Digital-Analog Converter modules, FPGA modules, and MELSEC iQ series components. The potential for disruption is considerable, as it could lead to communication delays or complete service outages in critical manufacturing environments. Companies using these affected products should prioritize immediate action to mitigate risks associated with this vulnerability.

The Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. The vulnerabilities include CVE-2023-49105, an improper authentication issue in ownCloud; CVE-2026-53362, an unspecified vulnerability in the Linux Kernel; and CVE-2026-66384, an improper limitation of a pathname in JFrog Artifactory. These vulnerabilities pose significant risks, particularly to federal agencies, which are mandated to prioritize rapid remediation of high-risk flaws under a new directive. While the directive applies to federal entities, CISA encourages all organizations to adopt similar risk-based approaches to vulnerability management. Organizations aware of other exploited vulnerabilities can submit them for consideration to be added to the KEV Catalog.

Ebyte's NA111-M device firmware version 9013-2-17 has multiple serious vulnerabilities that can allow attackers to take full control of the device. These vulnerabilities include issues with authentication, improper request handling, and lack of encryption for sensitive information. Attackers could exploit these flaws to access sensitive configurations, impersonate users, and disrupt device operations. Ebyte has acknowledged the vulnerabilities and is reportedly working on a patch, but there has been no further communication regarding its status. Users of the affected devices are advised to reach out to Ebyte for updates and take precautionary measures until a fix is available.

PaperCut Software has reported that two vulnerabilities, identified as CVE-2026-82078 and CVE-2026-81578, are being actively exploited in zero-day attacks targeting their print management solutions, PaperCut NG and PaperCut MF. These products are widely used in various organizations, including offices and schools, to manage printing services. The company has confirmed that there have been incidents affecting customers and is prioritizing the response to these vulnerabilities. Given the nature of these exploits, organizations using PaperCut NG or MF should take immediate action to secure their systems, as attackers could potentially gain unauthorized access or disrupt services. The urgency of this situation underscores the importance of staying updated on software vulnerabilities and applying necessary security measures promptly.

The Cybersecurity and Infrastructure Security Agency (CISA) has added a previously patched vulnerability in Citrix NetScaler ADC and Gateway, known as CVE-2026-8452, to its Known Exploited Vulnerabilities catalog. This memory overflow flaw can lead to unpredictable behavior and potential denial of service. Citrix disclosed the issue on June 30, 2026, and CISA alerted federal agencies to address it by August 29, 2026. The fact that this vulnerability is being actively exploited poses a significant risk to organizations using affected Citrix products, emphasizing the urgency for timely remediation. As attackers are taking advantage of this vulnerability, companies must prioritize applying the necessary patches to safeguard their systems.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating that they are being actively exploited. Among these, a significant high-severity flaw affects Citrix NetScaler ADC and NetScaler Gateway, allowing for remote code execution. This vulnerability, identified as CVE-2019-1068, poses a serious risk to organizations using these products, as attackers can potentially gain full control of affected systems. Other vulnerabilities listed impact Linux and SQL Server products, underscoring a wide array of systems at risk. Organizations using these technologies should prioritize applying patches and implementing security measures to mitigate these threats.

The Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating they are currently being exploited in the wild. These vulnerabilities affect a variety of systems, including Red Hat Libuser, Microsoft SQL Server, and Citrix NetScaler, among others. The identified vulnerabilities range from privilege escalation to remote code execution, posing serious risks to federal agencies and potentially impacting other organizations as well. CISA urges all entities to prioritize fixing these vulnerabilities to protect their systems, especially those that expose critical assets to attackers. The agency encourages reporting any additional exploited vulnerabilities that are not yet in the KEV Catalog for potential inclusion.

A serious vulnerability, designated CVE-2026-60004, has been identified in the Gitea Git platform, and attackers are now exploiting it in the wild. This code injection flaw allows malicious users to compromise self-hosted Gitea instances, potentially leading to unauthorized access and control over the affected systems. The Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, indicating the urgency of the situation. A report from a developer on the Russian blog Habr described an incident where their organization's Gitea instance was compromised due to this vulnerability. Organizations using Gitea should take immediate action to protect their systems, as the risk of exploitation is high.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability affecting Gitea, an open-source platform, to its Known Exploited Vulnerabilities catalog. This flaw is linked to potential exploits that could compromise the security of Gitea installations. It is vital for organizations using Gitea to address this vulnerability promptly to prevent unauthorized access or data breaches. The inclusion in CISA's catalog indicates that this issue is being actively exploited or poses a significant threat to users. Organizations should prioritize applying security updates and monitoring their systems closely to mitigate risks.

CISA has added a new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, specifically CVE-2026-60004, which is a code injection vulnerability in Gitea. This vulnerability is being actively exploited and poses significant risks, particularly to federal agencies. In response, CISA has emphasized the urgency for federal agencies to prioritize the remediation of this high-risk vulnerability, as it can grant attackers total control over affected systems. While the directive primarily targets Federal Civilian Executive Branch agencies, CISA encourages all organizations to adopt similar risk-based vulnerability management practices. The agency will continue to update the KEV Catalog with vulnerabilities that meet its criteria, and organizations are encouraged to report any known exploits not currently listed.