VulnHub

A serious vulnerability has been discovered in Check Point's Security Management and Log Servers, which could let attackers bypass authentication and execute code as root remotely. This flaw affects systems that manage firewall policies and administrator access, potentially putting sensitive data and network security at risk. Check Point has addressed the issue with a fix available through its LivePatch update channel. While the company states there is no evidence that this vulnerability has been exploited in the wild, it is crucial for users to apply the patch promptly to safeguard their systems. This incident serves as a reminder of the importance of maintaining up-to-date security measures in network management.

A serious vulnerability has been discovered in the Unbound DNS resolver, specifically in its DNSSEC validator. Versions prior to 1.26.1 contain a heap overflow flaw that could allow an attacker to execute remote code if they control a malicious DNS zone and target a vulnerable resolver. This issue, tracked as CVE-2026-81642, was disclosed by NLnet Labs, the maintainer of Unbound. The newly released version 1.26.1 resolves this critical flaw, making it essential for users and organizations running affected versions to update immediately. The potential for remote code execution poses significant risks, including unauthorized access to systems and data breaches, underlining the importance of keeping software up to date.

Schneider Electric has identified vulnerabilities in its PowerChute Serial Shutdown software, which is used for managing uninterruptible power supplies (UPS) and ensuring proper system shutdowns. The affected versions include PowerChute Serial Shutdown version 1.5 and earlier, as well as version 1.6, which is associated with CVE-2026-13348. This vulnerability allows unauthorized access through excessive authentication attempts, potentially disrupting operations and compromising system data. Users are urged to upgrade to version 1.6, which includes a fix for these issues. Failure to address this vulnerability could leave systems exposed, emphasizing the need for timely updates and adherence to cybersecurity best practices.

Bransys ELD is facing serious security vulnerabilities that could allow unauthorized access to sensitive telemetry data and firmware. The vulnerabilities, identified as CVE-2026-86520, CVE-2026-86689, and CVE-2026-77960, affect versions of the Bransys ELD app on Android devices older than 11.00.00 and iOS devices older than 1.1.54. The issues include hardcoded credentials for MQTT and FTP, which could enable attackers to read real-time data and access sensitive information transmitted in cleartext. Users are urged to update their apps to the latest versions to protect against these risks, as exploitation could have significant implications for data integrity and privacy, especially in the transportation sector where the system is deployed.

Schneider Electric has identified multiple security vulnerabilities in its NetBotz 5 750 and 755 products, which are designed to monitor environmental conditions and security. Specifically, these vulnerabilities could allow attackers to execute arbitrary code or perform SQL injection attacks, potentially leading to unauthorized access and manipulation of the devices. The affected versions are NetBotz 5 750 and 755, both running version 5.5.2 or earlier. Users are strongly encouraged to upgrade to version 5.6.0, which includes fixes for these issues. Failing to apply these updates could pose significant risks, especially for organizations relying on these devices for critical infrastructure monitoring.

Schneider Electric has identified a vulnerability affecting several of its Modicon M340 Controllers and communication modules, which could allow attackers to execute a Denial of Service (DoS) attack. The issue stems from improper input validation, specifically when a malicious FTP command is sent to the device. This flaw affects various models, including the Modicon M340 X80 Ethernet Communication modules and the M580 Global Data module. Users are urged to apply firmware updates to mitigate the risk, as failure to do so could lead to device unavailability. This vulnerability is significant for sectors such as energy, manufacturing, and water management, where these devices are commonly deployed.

A vulnerability has been discovered in Mitsubishi Electric's GX Works3 and Motion Control Settings software that could allow local attackers to bypass authentication even with an invalid password. This flaw, identified as CVE-2026-15688, affects all versions of these products. Attackers could exploit this weakness to access, modify, or delete control programs, posing a significant risk to critical manufacturing operations globally. Mitsubishi Electric recommends users update to specific software versions to mitigate the risk and implement several security measures, including restricting network access and using firewalls. This incident emphasizes the need for robust cybersecurity practices in industrial control systems.

Cisco has issued urgent security updates to fix a serious vulnerability in its Identity Services Engine (ISE), which attackers are currently exploiting. This zero-day flaw poses a significant risk as it allows unauthorized access to networks, making it crucial for organizations using ISE to act quickly. Users of Cisco ISE are particularly vulnerable, as the exploit can lead to data breaches or unauthorized activities within their systems. The company emphasizes the importance of applying the updates immediately to mitigate potential attacks. Security professionals and IT teams should prioritize this update to protect their infrastructures from ongoing threats.

Google has acknowledged a serious vulnerability in the Pixel Cellular Modem, identified as CVE-2026-58704, which has a CVSS score of 8.0. This flaw allows for privilege escalation due to a logic error, potentially enabling unauthorized access or control over affected devices. Although the company has indicated that there are signs of limited targeted exploitation, it is crucial for users of Pixel devices to be aware of the risks. The flaw could affect various models in the Pixel lineup, impacting their cellular modem functionality. Google has released patches to address this vulnerability, and users are encouraged to update their devices promptly to mitigate any potential threats.

In September 2026, Oracle released a significant security update addressing over 800 vulnerabilities across 17 of its product families. Among these, more than 100 flaws were classified as critical-severity, which means they pose a serious risk to users and organizations relying on these systems. The affected products include various Oracle software solutions, although specific names weren't detailed in the update. This large-scale patching effort is crucial as it helps protect against potential exploitation of these vulnerabilities, which could lead to data breaches or system compromises. Users and administrators are strongly advised to apply these updates promptly to safeguard their systems.

Google has rolled out its September 2026 security patches to fix 110 vulnerabilities across its Pixel devices, including a significant zero-day flaw that has been actively exploited in targeted attacks. This zero-day vulnerability poses a risk to users, as it can be exploited by attackers to gain unauthorized access to devices. The timely release of these patches is crucial, as it helps protect users from potential data breaches and other malicious activities. Pixel device owners are encouraged to update their devices promptly to mitigate the risk associated with this flaw and the other vulnerabilities addressed in the patch. Staying up to date with security updates is essential for maintaining device security.