AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.

CVE Database V5

CVE-2026-78846: n/a

An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_factory_switch.gch

CVE-2026-78801: n/a

A denial of service vulnerability exists in Systrome Validation & Certification 1.0 via the 't' URL parameter in the qrcode_auth.html component. This issue allows an attacker to cause service disruption by exploiting this parameter. No CVSS score or detailed impact information is available.

CVE-2026-107079 describes a denial of service vulnerability in Systrome Validation & Certification version 1.0. The vulnerability is triggered through the 't' URL parameter in the qrcode_auth.html component, enabling an attacker to disrupt service availability. No further technical details, exploit code, or attack vectors are provided in the source data.

CVE-2026-107079: n/a

This analysis covers rapid credential theft and data exfiltration attacks that occur within minutes of initial compromise, often outpacing traditional security detection and response. Attackers exploit stolen GitHub tokens, malicious AI tool installers, and MFA phishing to quickly access and exfiltrate sensitive data. Detection requires anomaly and behavior-based monitoring, while effective containment demands automated or autonomous response to minimize attacker dwell time. Manual response delays enable significant data loss. The threat highlights gaps in current identity provider detections and the need for integrated, fast-acting defense mechanisms.

Attackers are conducting 'machine speed' attacks that enable them to steal credentials and exfiltrate data within minutes, often before security teams can respond. Key attack patterns include misuse of stolen GitHub OAuth tokens that do not expire quickly and are not effectively monitored by GitHub; malicious npm packages and AI tool installers that deploy macOS stealers to harvest tokens and credentials; and sophisticated MFA phishing via vishing calls that trick users into approving legitimate MFA prompts. These attacks bypass traditional detection methods, as identity providers often treat attacker logins as legitimate once MFA is approved. Exaforce's analysis shows that anomaly detection based on user behavior and environment, combined with autonomous response actions such as session revocation and MFA method removal, are critical to mitigating these threats. Manual intervention is often too slow to prevent substantial data exfiltration.

Bleeping Computer

This analysis covers rapid credential theft and data exfiltration attacks that occur within minutes of initial compromise, often outpacing traditional security detection and response. Attackers exploit stolen GitHub tokens, malicious AI tool installers, and MFA phishing to quickly access and exfiltr

Original Source

Machine speed attacks require machine speed detection and response

EmberZNet

CVE-2026-94502 is a stack-based buffer overflow vulnerability in Silicon Labs EmberZNet versions 9.1.1 and earlier. It occurs when a malformed Publish Price Matrix command is processed, potentially causing an out-of-bounds write. This vulnerability affects only devices that support the Price Cluster and have already joined the network. The flaw could lead to remote code execution under these conditions. The CVSS 4.0 base score is 7.5, indicating high severity.

In EmberZNet versions up to and including 9.1.1, a stack-based buffer overflow (CWE-121) exists triggered by a malformed Publish Price Matrix command. This command, if crafted maliciously and sent from a device that has joined the network, can cause an out-of-bounds write in memory. This vulnerability specifically impacts devices supporting the Price Cluster functionality within EmberZNet. The flaw could allow an attacker with limited privileges (low privileges, partial attack complexity) to execute remote code, as indicated by the CVSS vector. No known exploits are reported in the wild, and this is not a cloud service vulnerability.

CVE-2026-94502 is a stack-based buffer overflow vulnerability in Silicon Labs EmberZNet versions 9.1.1 and earlier. It occurs when a malformed Publish Price Matrix command is processed, potentially causing an out-of-bounds write. This vulnerability affects only devices that support the Price Cluster

CVE-2026-94502: CWE-121 Stack-based Buffer Overflow in Silicon Labs EmberZNet

CVE-2026-49153 is a CVE identifier that has been rejected or withdrawn by its CVE Numbering Authority and does not represent a valid security vulnerability.

The CVE ID CVE-2026-49153 was initially assigned but subsequently rejected or withdrawn by the CVE Numbering Authority. As a result, it does not correspond to any confirmed or valid security vulnerability.

GCVE Database

Detailed information about Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. (CVE-2026-49153). Get real-time updates, 

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. (CVE-2026-49153) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-49153

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Community Reviews

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional