Rocket Software Rocket Remote Desktop version 18.0.8583.1 has a critical vulnerability classified as Insufficiently Protected Credentials. This weakness allows attackers to potentially access sensitive credential information without proper protection. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability if exploited.
OpENer version 2.3 contains an out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser. This flaw allows a remote attacker to cause a denial of service (DoS) condition. The vulnerability is identified as CVE-2026-75353 and has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided.
OpENer version 2.3 contains an integer underflow vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser. This flaw allows a remote attacker to cause a denial of service (DoS) condition. The vulnerability is identified as CVE-2026-75352 and has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided.
OpENer version 2.3 contains an out-of-bounds read vulnerability in the server-side EtherNet/IP ForwardOpen connection-path parser. This flaw allows a remote attacker to cause a denial of service (DoS) condition by triggering the out-of-bounds read. The vulnerability has a CVSS score of 7.5, indicating high severity. No patch or remediation information is currently provided.
EIPStackGroup OpENer version 2.3 and the master commit 76b95cf contain a buffer overflow vulnerability in the GetAttributeList() function used by the EtherNet/IP Get_Attribute_List service. This vulnerability allows a remote attacker to cause a denial of service. The vulnerability has a CVSS 3.1 score of 7.5, indicating high severity. No affected versions are explicitly stated beyond the mention of version 2.3 and the master commit. There is no information about available patches or vendor advisories. No known exploits in the wild have been reported.
EIPStackGroup OpENer versions v2.3 and the master branch up to commit 76b95cf have a vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This vulnerability involves dereferencing an expired pointer, which can be exploited remotely to cause a denial of service. The vulnerability has a high severity with a CVSS score of 7.5. No affected versions are explicitly stated beyond the commit reference, and no patch or remediation information is provided.
A race condition vulnerability in the SessionManager component of Argo CD version prior to 3.0.6 allows attackers to bypass rate limiting controls and perform brute force attacks by sending repeated crafted requests. This vulnerability is identified as CVE-2025-61560 and has a high severity rating with a CVSS score of 8.1.
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.
EIPStackGroup OpENer versions prior to 2.3.0 contain an out-of-bounds read vulnerability in the Connection Manager request parsing component. This flaw allows a remote attacker to cause a denial of service by triggering the vulnerability. The issue has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild, and no official patch information is provided.
OpENer version 2.3.0 contains an out-of-bounds read vulnerability in the unconnected explicit messaging path. This flaw allows a remote attacker to cause a denial of service (DoS) condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided.
CVE-2026-75346 is an out-of-bounds read vulnerability in EIPStackGroup OpENer version 2.3 and the master branch through commit 76b95cf. It affects the server-side CIP SetAttributeList service and allows a remote attacker to cause a denial of service. The vulnerability has a high severity with a CVSS score of 7.5. No patch or remediation information is currently provided.
A critical remote code execution vulnerability exists in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router version 1.3.241114.024540 and earlier. The flaw is triggered via the www\cgi-bin\upgrade file, allowing unauthenticated attackers to execute arbitrary code remotely.
An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information
Cloudron versions 9.1.7 and 9.2 have a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can inject malicious HTML with JavaScript event handlers into the Footer setting. This malicious code is rendered without proper sanitization on the public login/OpenID interaction page and in the System Event Log, allowing attacker-controlled JavaScript to execute within the Cloudron web origin when these pages are viewed.
IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 contain a cross-site scripting (XSS) vulnerability. This flaw allows an authenticated user to inject arbitrary JavaScript code into the web user interface, potentially altering its intended behavior and leading to credential disclosure within a trusted session. The vulnerability has a medium severity rating with a CVSS score of 5.4. No patch or remediation information is provided in the available data.
In July 2026, a sophisticated malware campaign attributed to the TraderTraitor group was uncovered, leveraging a trojanized Terraform provider to target cryptocurrency and Web3 developers. The attack uses a malicious Terraform provider that downloads a Bash loader from a HashiCorp-themed lookalike domain, which then deploys platform-specific payloads for macOS, Linux, and Windows. Encrypted executables are hidden in fake font files and decrypted with AES-256-CBC. The campaign delivers FLATROOF, a Rust-based backdoor with multiple command and control (C2) channels, and Python-based information stealers targeting browser credentials and cryptocurrency wallet data. The attack concludes with deployment of the ROOFDECK backdoor, which uses resilient C2 discovery methods including cryptographically signed Pastebin dead drops and Nostr metadata.
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a heap-based out-of-bounds read vulnerability in the TDS7 LOGIN7 protocol parser. This flaw allows a remote attacker to send a specially crafted TDS LOGIN7 packet with invalid offset or length values, which can lead to information disclosure or denial of service. The vulnerability is rated high severity with a CVSS score of 8.1.
A security update for PostgreSQL 12 addresses a vulnerability (CVE-2026-18408) that allows arbitrary code execution via untrusted data inclusion in the pg_dump utility. This vulnerability affects Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life versions. The issue is rated as important by Red Hat Product Security. A security fix is available and should be applied to affected systems to mitigate the risk.
Threat actors are targeting the accommodation industry with email campaigns containing fake guest complaints and inquiries. These emails deliver malicious LNK shortcut files disguised as images, which deploy blockchain-abusing malware families EtherRAT and TONResolver. These malware variants use public blockchain APIs for command and control infrastructure resolution, enabling dynamic infrastructure rotation and evasion of traditional takedown methods. The campaigns evolve from earlier Booking.com spoofing operations and likely use generative AI to create unique email variants, complicating detection.
The npm package @itsmee_aizat.id/baileys2 versions 2.0.0, 2.0.1, and 2.0.2 includes a runtime dependency on a GitHub repository (tenka-san/libsignal-node) controlled by an unrelated user. This dependency is fetched without integrity verification, allowing whoever controls that repository to execute arbitrary code on the installer's machine. The package loads this malicious code at runtime, leading to a full compromise of any computer where it is installed or running.