Digital Watchdog has reported several vulnerabilities affecting its VMAX DVR and NVR product lineups, which could allow attackers to gain full administrative control over these devices. This includes the ability to view live and recorded footage, modify configurations, and use the devices to access other parts of a network. All versions of the VMAX A1 G4 DVRs, VMAX IP G4 NVRs, VMAX A1 PLUS, VA1G4 Recorder, and VG4 Recorder are impacted by these issues. Users are urged to update their firmware to mitigate risks, as these vulnerabilities could lead to severe breaches of security, especially in sectors like healthcare and government. The vulnerabilities range from authentication bypass to hard-coded credentials, highlighting significant security flaws that need immediate attention.
Articles tagged "CVE"
Found 760 articles
mySCADA Technologies has reported two serious vulnerabilities in their myPRO Manager software, affecting versions up to 2.1. The first vulnerability allows attackers to access privileged management functions without proper authentication, while the second lets unauthorized users send arbitrary SMS messages through a connected GSM modem. These security flaws could have severe implications for critical infrastructure sectors, including energy and transportation, as they expose systems to potential exploitation. Users are urged to upgrade to version 2.2, which addresses these issues. The vulnerabilities were disclosed to CISA, but there are currently no reports of active exploitation.
Schneider Electric has identified a vulnerability affecting its SCADAPack x70 series products, which include various Remote Terminal Units (RTUs) such as the SCADAPack 47x, 47xi, 47xd, 470R, and 57x. This vulnerability, classified under CVE-2026-81861, relates to insufficiently protected credentials that could allow unauthorized access to RTU configurations, potentially compromising sensitive information. Users of these devices are strongly urged to implement role-based access control as a primary mitigation strategy, replacing the legacy Secure Lock feature. Additionally, network segmentation and enabling the RTU firewall service are recommended to further protect against unauthorized access. This situation is particularly critical as these products are deployed globally across critical infrastructure sectors like manufacturing and energy.
A reflected cross-site scripting (XSS) vulnerability has been identified in the authentication redirect flow of Siemens Teamcenter, allowing attackers to inject malicious JavaScript into the sessions of authenticated users. This exploitation could enable unauthorized actions or data access within the affected user's Teamcenter session. The vulnerability, tracked as CVE-2026-58113, affects several versions of Teamcenter, including V2412, V2506, V2512, and V2606, prior to specific patch levels. Siemens recommends users update to the latest versions to mitigate this risk. It's crucial for organizations using Teamcenter to act quickly to protect their systems from potential exploitation.
Siemens has identified a vulnerability in its Mendix SAML module that could potentially allow attackers to hijack user accounts in certain single sign-on (SSO) configurations. This flaw, classified as CVE-2026-80465, affects multiple versions of the Mendix SAML module: those compatible with Mendix 10 and 11 versions prior to 4.2.3, and Mendix 9.24 versions before 3.6.27. The vulnerability arises from improper validation of SAML response signatures, which could be exploited by unauthenticated remote attackers. Siemens has released updates to address the issue and strongly recommends that users upgrade to the latest versions to mitigate risks. Given the high severity rating of 8.7 (CVSS), organizations using these affected versions should act promptly to secure their systems.
Siemens has identified multiple vulnerabilities affecting the Reyrolle 7SR5 device, specifically versions prior to 2.70. These vulnerabilities include issues like integer overflow, improper input validation, and insufficient authentication mechanisms, which could allow attackers to exploit the system in various ways, including unauthorized access and denial of service. Siemens urges users to upgrade to version 2.70 or later to mitigate these risks. The vulnerabilities have a high severity rating, with some classified as critical, emphasizing the potential impact on critical infrastructure sectors, particularly in energy. Users worldwide who rely on this device should take immediate action to secure their systems.
The CareCam CM2507 IP cameras have several serious vulnerabilities that could allow attackers to gain unauthorized access to live video feeds and sensitive device information. Specifically, these vulnerabilities include missing authentication for critical functions, acceptance of empty passwords, and insufficient security for stored credentials. The affected firmware version is HMT.CM2507 v251211.1507. CareCam has not responded to the Cybersecurity and Infrastructure Security Agency's (CISA) coordination attempts, leaving users without guidance on how to protect their devices. If exploited, these vulnerabilities could have far-reaching implications for users' privacy and security, particularly in commercial facilities where these cameras are deployed worldwide.
Wärtsilä FOS-Onboard, specifically version 5.07.0923.01, has been found to have critical vulnerabilities that could allow attackers to deliver unauthorized updates, execute code, or extract credentials. These vulnerabilities stem from hardcoded cryptographic keys in two components: the deployer-ng Update Controller and the robot testing framework. If exploited, these weaknesses could enable an attacker to impersonate a privileged client. Wärtsilä has stated that while these vulnerabilities are serious, they are not exploitable if the product is installed correctly. A security patch is available for users, who are advised to contact Wärtsilä for its installation. This situation raises concerns for critical infrastructure sectors, particularly in transportation systems worldwide, and emphasizes the need for organizations to implement strong cybersecurity measures.
The Hacker News
Cisco has issued a warning about a serious vulnerability in its AsyncOS software for the Cisco Secure Email Gateway, identified as CVE-2026-76461. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute root commands due to insufficient validation in the email parsing logic. The vulnerability is currently being exploited in the wild, putting users at significant risk. Organizations using affected versions of the Cisco Secure Email Gateway should take immediate action to protect their systems. This incident underscores the importance of timely updates and vigilance in cybersecurity practices.
A severe vulnerability identified as CVE-2026-85706 has been discovered in both the GitLab Community Edition and Enterprise Edition. This flaw is categorized as a path traversal vulnerability and carries a maximum CVSS score of 10 out of 10, indicating its potential for serious exploitation. Organizations using affected versions of GitLab could see significant risks to their software supply chains, as attackers could exploit this vulnerability to access sensitive files and data. Companies using these GitLab instances are urged to take immediate action to protect their systems and data. The urgency of addressing this issue is underscored by the potential for attackers to exploit it in real-world scenarios, putting countless users and organizations at risk.
The article discusses how the rapid discovery of vulnerabilities, particularly in the context of artificial intelligence, has outpaced the ability of cybersecurity defenders to assess which ones require urgent attention. In the first half of 2026 alone, over 35,000 Common Vulnerabilities and Exposures (CVEs) were published, marking a significant increase from previous years. This surge creates a dilemma for security teams who must prioritize their responses amid an overwhelming volume of findings. The focus is on the need for improved validation processes to help defenders identify which vulnerabilities pose the greatest risk. As the landscape evolves, organizations need to adapt their strategies to effectively manage these vulnerabilities and protect their systems.
A group of hackers associated with a China-aligned espionage unit is taking advantage of a serious vulnerability in Tencent's Sogou Input Method for Windows, identified as CVE-2026-51990. This flaw allows attackers to install the GrayRabbit backdoor, which can give them unauthorized access to infected systems. The Sogou Input Method is widely used for typing Chinese characters, meaning a large number of users could be at risk. It's crucial for Tencent to address this vulnerability quickly to protect users from potential data breaches and espionage activities. Organizations using this software should prioritize patching and monitoring their systems for any unusual activity.
Security Affairs
GitLab disclosed a severe vulnerability, CVE-2026-85706, on September 10, 2026, which has a maximum severity score of 10.0. This path traversal flaw affects the repository commits API, allowing attackers to read files that should remain inaccessible without authentication. Within just 24 hours of the public announcement, malicious actors began exploiting this vulnerability, raising concerns about the security of GitLab instances. Organizations using GitLab should prioritize patching this vulnerability to protect sensitive information from unauthorized access, as attackers can exploit the flaw with a single crafted HTTP request. The rapid exploitation of this vulnerability underscores the need for timely updates and proactive security measures in software development environments.
The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged five security vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS in its Known Exploited Vulnerabilities (KEV) catalog. These flaws have been reported as actively exploited, meaning attackers are taking advantage of them in the wild. One notable vulnerability, CVE-2026-42016, has a CVSS score of 8.1, indicating a significant risk due to incorrect authorization. Organizations using these products should take immediate action to address these vulnerabilities to prevent potential breaches or data loss. It’s crucial for users to stay updated on patches and implement necessary security measures to mitigate these risks.
The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, indicating they are being actively exploited. The vulnerabilities include CVE-2026-42016 and CVE-2026-42018, both affecting JFrog Artifactory, and CVE-2026-84869, which impacts ConnectWise ScreenConnect. These vulnerabilities can lead to unauthorized access and privilege escalation, posing significant risks to federal agencies and other organizations that use these products. CISA urges federal agencies to prioritize addressing these vulnerabilities rapidly as part of their security update strategies, while also encouraging all organizations to adopt similar practices to manage their exposure to cyber threats effectively.