Dell Display and Peripheral Manager (DDPM Windows) versions prior to 2.4.0.17 contain a Time-of-check Time-of-use (TOCTOU) condition vulnerability. This flaw allows a low privileged local attacker to potentially execute arbitrary code. The vulnerability has a high severity rating with a CVSS score of 7. No patch or remediation details are provided in the available data.
An incorrect authorization vulnerability exists in Fortinet FortiMail versions 7.2 (all versions), 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. This flaw may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted mail by sending crafted HTTP requests.
CVE-2026-126159 is an authorization bypass vulnerability in Fortinet FortiMail versions 7.2 (all versions), 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. It allows an unauthenticated attacker to release or delete quarantined email messages for arbitrary mailboxes by sending a crafted quarantine release request. The vulnerability has a high severity with a CVSS score of 7.5.
CVE-2026-126785 is a critical vulnerability in rmalright TR-VISION HOME version 2.0.5. It involves incorrect default permissions in the IOCTL Handler component, specifically in the sub_11504 function of the WFanManager.sys library. The vulnerability requires local access to exploit and can lead to significant security risks due to improper permission settings. The vendor has not responded to disclosure attempts, and no patch or remediation information is currently available.
CVE-2026-125785 is a stored cross-site scripting (XSS) vulnerability in Crocoblock JetEngine versions prior to 3.9.1.1. It involves improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. The vulnerability affects versions from initial releases up to 3.9.1. The issue has been fixed in version 3.9.1.1.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Code Injection.This issue affects Quiz And Survey Master: from n/a through 11.3.0.
Missing Authorization vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 11.3.0.
.NET 9.0 on Red Hat Enterprise Linux 10 has multiple security vulnerabilities including information disclosure, elevation of privilege, and denial of service affecting ASP.NET Core and .NET components. These issues are addressed in an update to SDK 9.0.124 and Runtime 9.0.23. The update is rated as important by Red Hat Product Security.
This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 10. The update includes fixes for several security issues such as use-after-free, out-of-bounds read/write, denial of service, and memory leaks across various kernel subsystems including SCTP, MPTCP, SMB client, iSCSI, and others. The advisory recommends applying the update and rebooting the system to mitigate these issues.
This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 10. The update includes fixes for several use-after-free issues, denial of service vulnerabilities, and validation errors across various kernel subsystems such as networking, cryptography, and device drivers. The advisory emphasizes the importance of applying the update and rebooting affected systems to mitigate these security risks.
A security vulnerability (CVE-2026-78030) was identified in the perl-DBI package used in Red Hat Enterprise Linux 8. The flaw involves loading arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in the DBD::DBM driver. This could allow an attacker to load unintended modules, potentially leading to security risks. Red Hat has issued a security update for perl-DBI version 1.641 to address this issue.
A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received.
Red Hat has released a critical security update for its OpenJDK 8 build (version 8u512) for portable Linux. This update replaces previous builds 8u502 and 8u504 and addresses multiple security vulnerabilities across various components of the Java runtime and development kit. The fixes enhance security in areas such as PKCS5 padding, TLS certificate handling, LDAP logins, SASL authentication, HTTP client and server handling, certificate checks, XML processing, image handling, and Kerberos validation among others. The update includes numerous CVEs indicating a broad scope of improvements to prevent potential exploitation.
ARTEX and similar AI-powered red teaming tools are being used by attackers to autonomously conduct adaptive penetration testing and intrusion attempts. These tools lower the skill barrier for attackers, enabling complex, multi-stage attacks without exploiting software vulnerabilities. Unit 42 observed ARTEX-driven campaigns targeting internet-exposed assets and cloud environments globally. The autonomous nature of these tools results in noisy, high-frequency attack traffic that defenders can detect and block. Defenders can leverage identical AI frameworks internally to proactively identify and remediate exposures. Behavioral hallmarks such as think-then-act cadence, rapid credential validation, and self-correction characterize ARTEX activity. Defensive deception and continuous asset discovery remain effective mitigations.
CVE-2026-126758 is a vulnerability in Moonshot AI Kimi Code versions 2.0.0, 2.0.1, and 2.0.2. It involves reliance on untrusted inputs in a security decision within the WorkspaceDirsService component, specifically related to manipulation of the additional_dir argument in the .kimi-code/local.toml file. The attack requires local access. A public exploit exists. Upgrading to version 2.1.0 resolves the issue.
Zipline versions before 4.8.0 have a race condition vulnerability in the file view counting mechanism. This flaw allows remote attackers to bypass file maxViews limits by sending parallel requests that exploit non-atomic increments of the view count. The issue is fixed in version 4.8.0.
Zipline versions 4.3.2 through before 4.8.0 have a rate limit bypass vulnerability. This flaw allows unauthenticated attackers to evade throttling by spoofing the X-Forwarded-For header when the core.trustProxy setting is enabled. By sending different X-Forwarded-For values per request, attackers can obtain fresh rate-limit buckets, enabling unlimited guessing of login passwords, TOTP codes, and file and URL passwords. The vulnerability is fixed in version 4.8.0.