Vulnerabilities
How Cisco SQL Injection Flaw Exposes Unified CM and Emergency Responder
A high-severity SQL injection vulnerability affects multiple Cisco collaboration products, requiring immediate inventory checks by security teams.
Honeypot Daily Patch Watch Desk
The Honeypot Daily Patch Watch Desk is the part of the Honeypot Daily newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 70 articles so far. See the editorial policy or report an error.
Vulnerabilities
How Does Cisco Address Improper Input Validation in Communications Software?
Cisco issues hardening updates for Unified CM and related products to fix multiple internally discovered input validation flaws rated high severity.
Vulnerabilities
How does CVE-2026-85683 allow unauthenticated JavaScript injection in WordPress?
A high-severity flaw in the Jane Menu plugin lets attackers inject scripts into pages. Teams must check for unpatched installations and monitor for anomalous outbound requests.
Vulnerabilities
Which PHP Versions Get Emergency Patch for Unconfirmed 9.2 RCE Vulnerabilities?
PHP teams face an out-of-cycle release for two 9.2-rated vulnerabilities, though technical details and affected versions remain unconfirmed by the vendor.
Vulnerabilities
How does CVE-2026-71195 allow authenticated users to manipulate OpenStack Manila shares?
Authenticated users can manipulate public share metadata and access rules in Manila versions below 23.0.1, risking data exfiltration.
Vulnerabilities
Will Totolink X2000R's lack of signature checks enable authenticated firmware hijacking?
A critical unsigned firmware vulnerability in the Totolink X2000R router permits authenticated attackers to install arbitrary firmware via HTTP requests.
Vulnerabilities
How exposed is your network to the Totolink X2000R remote code execution flaw?
A critical buffer overflow in specific Totolink firmware allows authenticated attackers to execute arbitrary code via HTTP requests, posing a risk to exposed management interfaces.
Vulnerabilities
Will your PHP servers survive the leaked RCE flaws hitting Oct 21?
Emergency patches for two critical remote code execution flaws in PHP are due tomorrow after details leaked early.
Vulnerabilities
Does your Perl stack use vulnerable Imager::File::GIF libraries?
Out-of-bounds reads in older Imager::File::GIF versions expose Perl services to potential memory disclosure when processing GIF images.
Vulnerabilities
Does TOTOLINK X2000R firmware contain a critical stack overflow risk?
A critical authenticated remote code execution flaw exists in specific TOTOLINK X2000R firmware. Teams should verify versions and restrict administrative access immediately.
Vulnerabilities
How Does CVE-2026-101767 Expose Oracle E-Business Suite to Unauthenticated RCE?
Horizon3 researchers found a critical SQL injection flaw in Oracle EBS TCF servlets that allows unauthenticated remote code execution on affected servers.
Vulnerabilities
Does GPAC MP4Box AC-4 Parsing Flaw Expose Your Media Workflows?
A heap buffer overflow in GPAC MP4Box allows remote attackers to crash services via crafted AC-4 files, rated medium severity by BDU assessment.
Vulnerabilities
Does your Apache Tomcat instance risk unauthenticated access due to CVE-2026-101296 JNDI realm flaw?
A critical flaw in Apache Tomcat allows unauthenticated access when specific JNDI realm settings are used, affecting multiple major version branches.
Vulnerabilities
What allows unauthenticated remote code execution on FortiSIEM via port 27918?
Horizon3 details how CVE-2026-106173 allows attackers to write arbitrary files on FortiSIEM systems via a path traversal bug in an open gRPC service.
Vulnerabilities
Does CVE-2026-9589's 9.3 CVSS Score Indicate Severe Config Risks for Unblu Spark 7.0-8.36.1 Authenticated Users?
Critical flaw in Unblu Spark 7.0 to 8.36.1 lets authenticated users alter configuration data for entities outside their authorised scope.
Vulnerabilities
Can authenticated users run root commands on Advantech ADAM-3600?
A high-severity command injection flaw in older ADAM-3600 firmware allows attackers to execute code with root privileges on the system.
Vulnerabilities
Are your NGINX gateways exposed to F5’s latest critical memory flaws?
F5 has issued emergency patches for three severe vulnerabilities in NGINX components that could enable remote code execution or denial-of-service attacks.
Vulnerabilities
Is your Plex server being used for crypto mining via Plex2Shell exploits?
Active wild exploitation of chained Plex flaws installs miners and proxies, urging teams to verify patch status on exposed media servers.
Vulnerabilities
Does CVE-2026-109395 allow crafted LZF streams to crash Java Virtual Machines in Ning compress-lzf?
A high-severity out-of-bounds access in Ning compress-lzf before 1.2.0 allows crafted LZF streams to leak heap memory or crash Java Virtual Machines.
Vulnerabilities
Are unpatched Plex servers being hijacked for crypto and proxy abuse?
Attackers chain four flaws in Plex Media Server to install cryptominers and residential proxy software on exposed devices.
Vulnerabilities
How Does CVE-2026-109437 Enable Unauthenticated Code Execution in Cognition < 0.13.0?
A critical flaw in Cognition versions prior to 0.13.0 permits unauthenticated attackers to execute arbitrary code via exposed API endpoints without credentials.
Vulnerabilities
Can Apache Camel dynamic router flaws allow remote code execution?
A high-severity injection flaw in Apache Camel’s dynamic router lets attackers run arbitrary code via message headers or bodies.
Vulnerabilities
Does PhantomBuffer bypass EDR using WM_SETTEXT and stealth injection?
A new report details how PhantomBuffer evades endpoint detection by avoiding standard memory APIs in favour of stealth injection techniques.
Vulnerabilities
Can phpMyFAQ Users Bypass Permissions to Edit Restricted Articles?
A broken object-level authorisation flaw in phpMyFAQ allows authenticated users with edit rights to modify any FAQ entry, bypassing moderation checks.