Overzicht van binnengekomen advisories.
2186 resultaten gevonden
A critical vulnerability (CVE-2026-66788) was discovered in Lighthouse, a component used in multi-cluster Kubernetes/OpenShift environments. A remote attacker who has compromised a spoke cluster can exploit this flaw by manipulating attacker-controlled labels or annotations on broker objects to control the destination namespace for resource injection. This allows unauthorized injection of EndpointSlices and ServiceImports into any namespace on peer clusters, including sensitive system namespaces such as kube-system and openshift-*. The vulnerability can lead to privilege escalation and broader system compromise across connected clusters. The flaw is documented by Red Hat and tracked via Bugzilla issue 2507533. It represents a significant risk in federated or multi-cluster Kubernetes deployments. The attack vector is remote and requires an initial foothold on a spoke cluster. Organizations using Lighthouse in Submariner or similar multi-cluster service discovery setups are at risk.
Bekijk origineel advisory →CVE-2026-17142 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The vulnerability allows a remote attacker to execute arbitrary commands on affected systems due to improper authentication mechanisms. This represents a critical security risk as it enables unauthenticated remote code execution. IBM has published a support advisory addressing this issue. The flaw impacts enterprise-grade Unix operating systems and virtualization infrastructure commonly used in large-scale enterprise and critical environments. Organizations running the affected IBM AIX or PowerVM VIOS versions should apply patches or mitigations immediately given the high severity of remote command execution without authentication.
Bekijk origineel advisory →CVE-2026-69836 describes a critical deserialization of untrusted data vulnerability in Microsoft Entra ID. The flaw allows an unauthorized attacker to execute arbitrary code over a network without requiring authentication. Deserialization vulnerabilities are considered high severity as they can lead to full system compromise. The vulnerability was published via NVD and has an accompanying Microsoft Security Response Center advisory. Microsoft Entra ID is a widely used cloud-based identity and access management service, making this vulnerability particularly impactful across enterprise environments. Organizations relying on Entra ID for authentication and authorization should treat this with urgency and apply available patches promptly.
Bekijk origineel advisory →A vulnerability in the lxml Python library (CVE-2026-49825) was discovered where the `xlink:href` attribute was missing from `lxml.html.defs.link_attrs`. This omission allowed attackers to perform URL bypass attacks using embedded SVG, MathML, or other content types. The flaw could be exploited to circumvent URL sanitization mechanisms in applications relying on lxml for HTML processing. The vulnerability affects all versions of lxml prior to 6.1.1 and lxml_html_clean prior to 0.4.5. Fixes were released in lxml 6.1.1 and lxml_html_clean 0.4.5. Patches and release notes are available on GitHub for both the lxml and lxml_html_clean projects. Users are advised to upgrade to the patched versions immediately to mitigate the risk.
Bekijk origineel advisory →CVE-2026-17145 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The vulnerability stems from improper privilege management, allowing a remote attacker to execute arbitrary code on affected systems. This represents a critical security risk given the enterprise nature of AIX and PowerVM environments. IBM has published a support advisory with remediation guidance. No additional technical details or proof-of-concept exploit information are provided in the current disclosure. Organizations running affected IBM AIX or PowerVM VIOS versions should review the IBM advisory and apply patches promptly.
Bekijk origineel advisory →A critical vulnerability identified as CVE-2026-17040 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The flaw is a buffer overflow that could allow a remote attacker to execute arbitrary code on affected systems without authentication. This type of vulnerability poses a significant risk as it can lead to full system compromise. IBM has published a support advisory addressing the issue. Organizations running the affected IBM AIX and PowerVM VIOS versions should apply available patches or mitigations immediately. The vulnerability is classified as high severity given the potential for remote code execution.
Bekijk origineel advisory →CVE-2026-66309 describes an improper access control vulnerability in Microsoft Azure SQL Database. The flaw allows an authorized attacker to elevate their privileges over a network. The vulnerability was published by the National Vulnerability Database (NVD) and has a corresponding Microsoft Security Response Center (MSRC) advisory. The attack vector is network-based, meaning exploitation can occur remotely. The attacker must already be authorized, indicating this is a post-authentication privilege escalation issue. Microsoft has issued guidance through its update guide. The vulnerability is classified as high criticality. No additional technical details or proof-of-concept exploits are referenced in the article.
Bekijk origineel advisory →CVE-2026-17160 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The vulnerability is caused by an integer overflow during size computation, which could allow a remote attacker to execute arbitrary code on the affected systems. No authentication details are specified, suggesting potential unauthenticated remote exploitation. The flaw impacts enterprise-grade Unix-based operating systems and virtualization infrastructure commonly used in critical business environments. IBM has published an advisory on their support pages. The vulnerability is rated high severity given the potential for remote arbitrary code execution. Organizations running affected IBM AIX or PowerVM VIOS versions should apply available patches promptly.
Bekijk origineel advisory →CVE-2026-17136 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The vulnerability is a format string flaw that could allow a remote attacker to execute arbitrary code on affected systems. Format string vulnerabilities occur when user-supplied input is passed directly to formatting functions without proper sanitization. This class of vulnerability can lead to serious consequences including remote code execution, privilege escalation, and system compromise. IBM has published a support advisory with remediation guidance. The affected platforms are enterprise-grade Unix-based operating systems and virtualization infrastructure widely used in critical business environments. Given the remote code execution potential and the enterprise nature of the affected products, this vulnerability is considered high severity.
Bekijk origineel advisory →A SQL injection vulnerability was discovered in BigBlueButton, an open-source virtual classroom platform, affecting versions prior to 3.0.23. Authenticated moderators could exploit the flaw by injecting malicious SQL through the meetingId and userId parameters used in the refreshBreakoutRoomsVisibleForUsers method. The vulnerable code is located in akka-bbb-apps/src/main/scala/org/bigbluebutton/core/db/BreakoutRoomUserDAO.scala, where user-supplied values were directly interpolated into SQL queries without proper sanitization. This allowed attackers with moderator privileges to execute arbitrary SQL against the application database. The vulnerability poses a significant risk as it could lead to unauthorized data access, modification, or deletion. The issue has been patched in BigBlueButton version 3.0.23, with the fix available via an official GitHub commit and release.
Bekijk origineel advisory →A SQL injection vulnerability has been identified in CodeAstro Apartment Visitor Management System version 1.0. The vulnerability exists in the /apartment-visitor/forgotpw.php file, where manipulation of the 'secode' argument can lead to SQL injection. The attack can be launched remotely without requiring local access. A public exploit has already been disclosed and is available for use, increasing the risk of exploitation. The vulnerability affects an unknown function within the identified file. Given the public disclosure and remote exploitability, this poses a significant risk to systems running the affected software version. Users of CodeAstro Apartment Visitor Management System 1.0 are advised to apply patches or mitigations promptly.
Bekijk origineel advisory →CVE-2026-17152 affects IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. The vulnerability is a buffer overflow that could allow a remote attacker to execute arbitrary code on affected systems. This represents a critical security risk as it enables unauthenticated remote code execution. IBM has published a support advisory addressing the issue. Organizations running affected versions of AIX or PowerVM VIOS should apply patches promptly. The vulnerability highlights ongoing risks in enterprise Unix and virtualization platforms. No additional exploitation details or active threat actor association are noted in the current disclosure.
Bekijk origineel advisory →A critical flaw was discovered in Submariner, a tool used to connect Kubernetes clusters across different environments. The vulnerability allows a malicious cluster (spoke) to redirect network traffic from peer clusters by publishing a specially crafted network endpoint. The root cause is insufficient validation of network subnets provided by connecting clusters, allowing attackers to declare arbitrary network ranges. Once exploited, all traffic destined for those arbitrary ranges from peer clusters gets rerouted through the attacker's tunnel. This can lead to unauthorized information disclosure and network disruption across multi-cluster environments. The vulnerability is particularly dangerous in multi-cloud or hybrid cloud deployments that rely on Submariner for cross-cluster connectivity. Red Hat has acknowledged the issue and it is tracked under Bugzilla ID 2507530.
Bekijk origineel advisory →A server-side request forgery (SSRF) vulnerability exists in the @platejs/docx-io package of the Plate rich-text editor prior to version 53.3.2. The vulnerability arises when the htmlToDocxBlob function processes attacker-controlled HTML containing remote image URLs in a server-side or privileged environment. The converter fetches these remote URLs without adequate restrictions, enabling attackers to make requests to internal network resources. Fetched image bytes are embedded in the generated DOCX file, resulting in response disclosure of internal data. Additionally, attackers can cause resource exhaustion by directing the server to fetch large or slow remote responses. The issue has been patched in version 53.3.2 of the Plate library.
Bekijk origineel advisory →A path traversal and arbitrary file read vulnerability exists in Handlebars.java prior to version 4.5.3. The SpringTemplateLoader component resolves attacker-influenced Spring MVC view names via Spring ResourceLoader without proper path-containment validation. By crafting a view name using file: or classpath: URLs with a # fragment delimiter, an attacker can bypass the .hbs suffix appended by the loader, as FileUrlResource.exists() and URL.openStream() discard the fragment portion. HandlebarsViewResolver then passes the attacker-controlled name to handlebars.compile(), enabling unauthenticated remote attackers to read arbitrary files accessible to the JVM. Exploitation requires the application to expose a controller that accepts user-influenced view names. The vulnerability is fixed in Handlebars.java version 4.5.3.
Bekijk origineel advisory →EverShop's customer update API route is misconfigured with 'access': 'public', bypassing all authentication and session middleware. The updateCustomer.js handler accepts a customer UUID from the URL path and overwrites email and password fields without verifying the caller owns the account. An unauthenticated attacker with a known customer UUID can fully take over any customer account by changing credentials and locking out the legitimate owner. Customer UUIDs are exposed via order confirmation email links and administrative URLs, making them obtainable. The vulnerability affects EverShop versions prior to 2.2.1, which fixes the issue by changing the route access to 'private'. This is a critical missing authorization flaw enabling complete account takeover with no authentication required.
Bekijk origineel advisory →CVE-2026-69851 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Active Directory. The flaw allows an authorized attacker to elevate privileges over a network by exploiting the SSRF weakness. The vulnerability requires the attacker to already have some level of authorization, making it an elevation of privilege issue rather than an unauthenticated attack. Microsoft has published guidance through its Security Response Center (MSRC). The vulnerability is tracked by NVD at NIST and carries a high criticality rating. Organizations using Azure Active Directory should review the Microsoft advisory and apply any available mitigations or patches promptly.
Bekijk origineel advisory →CVE-2026-68782 describes an SQL injection vulnerability in Microsoft Azure SQL Database. The flaw involves improper neutralization of special elements used in SQL commands. An authorized attacker can exploit this vulnerability over a network to elevate their privileges. The vulnerability is classified as a privilege escalation issue enabled by classic SQL injection techniques. Microsoft has published guidance via the Microsoft Security Response Center (MSRC). The National Vulnerability Database (NVD) has received the CVE entry. The attack vector is network-based, requiring an authenticated attacker. This represents a significant risk for organizations relying on Azure SQL Database for cloud data storage and processing.
Bekijk origineel advisory →A missing authentication for critical function vulnerability has been identified in Baylan Measuring Instruments Industry and Trade Inc.'s Baylan Smart Meter Management Application (BMS). The vulnerability allows attackers to bypass authentication mechanisms entirely, potentially gaining unauthorized access to critical meter management functions. All versions of the BMS application prior to v1.1.10.142 are affected. The vulnerability is tracked as CVE-2026-15706 and has been assigned a high criticality rating. It was reported via the Turkish cybersecurity authority siberguvenlik.gov.tr. Users are advised to upgrade to version v1.1.10.142 or later to remediate this issue. The vulnerability is classified under CWE for missing authentication for critical functions, which is a fundamental security control failure.
Bekijk origineel advisory →A memory corruption vulnerability has been identified in liftoff-sr CIPster at commit 1802525be27d33e19a9a83c163e331a1d13b1892. The flaw resides in the functions CipAttribute::GetAttrData and CipAttribute::SetAttrData within the ciptypes.h file under the Generic Attribute Logic component. An attacker can remotely exploit this vulnerability by manipulating input to trigger memory corruption. A public exploit is available, raising the risk of active exploitation in the wild. CIPster is an open-source implementation of the Common Industrial Protocol (CIP), commonly used in industrial and OT environments, making this a potentially critical infrastructure risk. A patch has been provided via commit e745d9d4a8ca3a13689066983a1269fe1e567674 on GitHub. Users are strongly advised to apply the patch immediately to mitigate exposure.
Bekijk origineel advisory →