Live threat intelligence radar

Zohocorp ManageEngine DDI Central versions prior to 6301 contain an improper authorization vulnerability (CWE-862) that allows authenticated non-administrative users to delete DNS zones outside their assigned scope. This flaw could lead to significant disruption of DNS services by unauthorized deletion of zones.

Zohocorp ManageEngine DDI Central versions prior to 6301 contain an authentication bypass vulnerability in the Windows DNS and DHCP agent synchronization APIs. This flaw allows unauthenticated users to impersonate onboarded Windows servers and perform unauthorized DNS and DHCP modifications. The vulnerability is critical with a CVSS score of 9.1 and has been fixed in version 6301.

CVE-2026-126993 is a vulnerability in SiteServer SSCMS versions 7.2.0, 7.2.1, and 7.2.2 involving inadequate encryption strength in an unknown function related to the /api/v1/captcha endpoint. The flaw allows remote attackers to manipulate an argument named Value, weakening encryption. Public exploit code has been released, but no vendor response or patch is available.

CVE-2026-123139 is a medium severity vulnerability in Opera Neon 1.0.0 on macOS and Windows. It involves improper verification of the source of a communication channel, allowing a malicious browser extension to send commands through the MCP Hub to the built-in Browser Operator extension, potentially taking control of the browser.

Fortinet has addressed multiple vulnerabilities in its FortiOS product. Specific details about the vulnerabilities, affected versions, and impact are not provided in the available data.

Fortinet has addressed multiple vulnerabilities in FortiManager and FortiAnalyzer products, including their cloud versions and related products such as FortiManager Cloud, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiSASE-Sovereign, and FortiSASE-Sovereign GUI. The specific vulnerabilities span a range of common weakness enumerations (CWEs) but no detailed impact or exploitation information is provided.

Zohocorp ManageEngine DDI Central versions prior to 6301 contain a PowerShell injection vulnerability caused by insufficient validation of user-supplied TXT record values in Windows DNS operations. This vulnerability allows an attacker with low privileges to execute arbitrary OS commands. The issue is fixed in version 6301.

An information disclosure vulnerability in the MISP Modules website component (external_tools module) allows unauthenticated network clients to retrieve stored API keys via the /external_tools/list endpoint. These API keys are exposed in JSON responses and also pre-populated in browser forms, increasing exposure risk. The flaw affects versions up to 3.1.4 and impacts confidentiality of API keys used for authenticating external service submissions.

CVE-2026-124705 is an open redirect vulnerability in Progress Software's Telerik UI for .NET MAUI versions 5.2.0 up to but not including 16.0.0. The flaw exists in the RadRichTextEditor hyperlink handling and RadPdfViewer link annotation handling, allowing an unauthenticated attacker to craft documents or PDF links that launch arbitrary operating system protocol handlers with attacker-controlled arguments when opened by a user. This vulnerability is fixed in version 16.0.0.

Multiple vulnerabilities have been identified in Contao, an open source content management system used for creating websites and web applications. These issues affect versions prior to 5.3.54. A fixed version, 5.3.54, has been released to address these vulnerabilities.