VulnHub

A command injection vulnerability has been discovered in the firmware of various VIVOTEK camera models, allowing attackers to execute commands remotely, potentially gaining root access. This affects multiple models across the V, C, and S Series, as well as some dome and bullet cameras. The vulnerability, identified as CVE-2026-22755, has a critical severity rating of 10 on the CVSS scale, indicating a serious risk to users. VIVOTEK has released updated firmware to address this issue, and users are strongly urged to download and install the latest version to protect their devices. Without prompt action, these cameras could be fully compromised, posing risks to security systems in various sectors including government, transportation, and commercial facilities.

A vulnerability has been identified in the Baicells Nova 430H eNodeB (model pBS3101SH) that could allow attackers to disrupt service by sending malformed messages to the device. This issue affects all versions up to BaiBLQ_3.0.12 and could lead to a denial-of-service condition, temporarily shutting down network connectivity. The vulnerability, designated as CVE-2026-96274, is particularly concerning as it can be exploited by any unauthenticated device within radio range. Baicells Technologies has not planned a fix for this vulnerability and has not collaborated with CISA on mitigation efforts. Users are advised to contact Baicells customer support for more information on how to protect their systems from potential exploitation.

Apple has issued security updates to fix a vulnerability in older versions of its operating systems, including iOS, iPadOS, and macOS. This vulnerability, identified as CVE-2026-86950, allows for out-of-bounds writes in the CoreGraphics component, which could enable attackers to execute arbitrary code by processing specially crafted files. Apple has indicated that this flaw may have been exploited in targeted attacks, emphasizing the importance of applying these updates promptly. Users of affected devices should ensure their systems are updated to protect against potential exploits. This situation serves as a reminder for all users to regularly check for and install software updates to safeguard their devices.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged two serious vulnerabilities in Citrix NetScaler ADC and Gateway systems that are currently being exploited by attackers. The first vulnerability, identified as CVE-2026-88771, has a CVSS score of 9.5, indicating its severity. This flaw allows unauthenticated attackers to potentially gain unauthorized access. Organizations using these Citrix products should be particularly vigilant, as the vulnerabilities can lead to significant security breaches. CISA's inclusion of these flaws in its Known Exploited Vulnerabilities catalog emphasizes the urgency for affected users to take immediate action to protect their systems.

A serious vulnerability in Roundcube Webmail, identified as CVE-2026-48842, is currently being exploited by attackers. This SQL injection flaw, which has a CVSS score of 8.1, allows unauthorized access to databases on unpatched webmail servers. The Canadian Centre for Cyber Security has issued a warning about this active exploitation, emphasizing the urgency for users to secure their systems. Organizations running Roundcube Webmail should take immediate action to protect their data and prevent potential breaches, especially since the patch for this vulnerability was released four months ago. Failure to apply this update could lead to significant data compromise.

Citrix has confirmed that two serious vulnerabilities in its NetScaler product, identified as CVE-2026-88771 and CVE-2026-88772, are currently being exploited in attacks. These vulnerabilities allow remote code execution, which means that attackers could potentially take control of affected systems. Organizations using NetScaler should prioritize applying the security updates released by Citrix to mitigate these risks. The situation is urgent, as the vulnerabilities are actively being exploited, putting many businesses at risk of unauthorized access and data breaches. Users are advised to stay vigilant and ensure their systems are up to date with the latest patches.

The Cybersecurity and Infrastructure Security Agency (CISA) has reported eight critical vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway products, specifically CVE-2026-88771 through CVE-2026-88778. Among these, CVE-2026-88771 and CVE-2026-88772 are particularly concerning as they are zero-day vulnerabilities, meaning they are actively being exploited by attackers. CISA has confirmed that these vulnerabilities allow for remote code execution, which poses a significant risk to organizations using these systems. Citrix has published advisories and indicators of compromise to help users assess their exposure and take necessary actions. Organizations are urged to check for signs of compromise before applying patches, as doing so may erase critical forensic evidence.

The Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Microsoft SharePoint, identified as CVE-2026-65660, to its Known Exploited Vulnerabilities (KEV) catalog. This flaw is currently being exploited in the wild, prompting CISA to issue a patching deadline for federal agencies by September 28. Organizations using SharePoint should prioritize applying the necessary updates to mitigate potential risks. The urgency of this situation lies in the fact that attackers can leverage this vulnerability for unauthorized access, which could lead to data breaches and other security incidents. It's crucial for users to stay informed and act quickly to secure their systems.

Google has issued a warning about a surge in attacks exploiting a serious vulnerability in Oracle PeopleSoft, identified as CVE-2026-35273. This flaw has a CVSS score of 9.8, indicating a high risk of unauthorized remote code execution. The attacks are linked to the ShinyHunters group and are targeting various sectors worldwide. Organizations using Oracle PeopleSoft should take immediate action to secure their systems, as the vulnerability is currently being exploited in the wild. This situation underscores the need for companies to stay vigilant and apply necessary patches to mitigate the risk of exploitation.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged two vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS, noting that they are currently being exploited in the wild. The first vulnerability, CVE-2026-65660, has a CVSS score of 8.8 and allows for code injection in Microsoft Office SharePoint. This vulnerability poses a significant risk as it can enable attackers to execute arbitrary code on affected systems. The second vulnerability relates to MikroTik RouterOS, although specific details about it were not disclosed in the article. Organizations using these platforms should prioritize patching and securing their systems to mitigate potential attacks. The active exploitation of these vulnerabilities underscores the importance of timely updates and vigilance in cybersecurity practices.

CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting the urgent need for federal agencies to address them due to active exploitation. The first vulnerability, CVE-2026-65660, affects Microsoft SharePoint and allows for code injection, potentially giving attackers control over affected systems. The second, CVE-2026-67279, pertains to Mikrotik RouterOS and involves improper enforcement of behavioral workflows. These vulnerabilities pose significant risks, especially to federal agencies, which are now required to prioritize patching them. While the directive primarily targets federal agencies, CISA encourages all organizations to adopt similar practices to manage vulnerabilities effectively.

A newly discovered vulnerability in Roundcube Webmail, tracked as CVE-2026-48842, has caught the attention of attackers. This SQL injection flaw can be exploited without any authentication, meaning that unauthorized users could potentially access sensitive data. The vulnerability poses a significant risk to organizations using Roundcube for email management, as it allows attackers to manipulate the database and extract information. Users of the platform should be vigilant and take immediate action to protect their systems. It's crucial for administrators to monitor their installations and apply any necessary updates as they become available to mitigate the risk of exploitation.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to evidence that they are being actively exploited. One of the vulnerabilities, identified as CVE-2026-5430, is a path traversal flaw in WSO2 API Control Plane, which has a severity score of 9.8, indicating it's highly critical. The other vulnerability affects Adobe Commerce and Magento, although specific details about it were not provided in the article. Organizations using these platforms should be aware of the risks, as attackers may exploit these vulnerabilities to gain unauthorized access or control over systems. Immediate action is advised to mitigate potential threats from these vulnerabilities.

Eufy has identified multiple vulnerabilities in its Omni C20 and Omni X10 Pro devices that could be exploited by attackers. These flaws, which include command injection and improper certificate validation, allow unauthenticated users to execute system commands and potentially run arbitrary code. The affected versions are those prior to 1.6.4. Users are strongly advised to upgrade to this version or later to mitigate the risks. Although these vulnerabilities have been disclosed, there are currently no reports of them being actively exploited in the wild. This situation underscores the need for users to keep their devices updated to ensure security.