https://skopnix.com/news/CVE-2025-399-cisa-adds-cve-2025-39964-linux-kernel-to-the-known-exploited skopnix en 2026-09-18T17:51:17.459Z CISA adds CVE-2025-39964 (Linux Kernel) to the Known Exploited Vulnerabilities catalog https://skopnix.com/news/CVE-2026-911-ghsa-3753-m2x2-q623-file-viewer-dom-xss-via-unsafe-hyperlink skopnix en 2026-09-18T17:19:42.000Z GHSA-3753-m2x2-q623: File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer https://skopnix.com/news/CVE-2026-773-ghsa-7q85-xj36-vmfc-adm-zip-uncontrolled-memory-allocation-v skopnix en 2026-09-18T17:18:01.000Z GHSA-7q85-xj36-vmfc: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) https://skopnix.com/news/CVE-2026-815-ghsa-p5vg-v7mj-f6q4-convoy-cross-tenant-source-idor-leaks-pl skopnix en 2026-09-18T17:17:45.000Z GHSA-p5vg-v7mj-f6q4: Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials https://skopnix.com/news/CVE-2026-633-ghsa-82r6-8w77-94w6-anyio-tlsstream-idna-2003-host-name-enco skopnix en 2026-09-18T17:17:18.000Z GHSA-82r6-8w77-94w6: AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing https://skopnix.com/news/CVE-2026-616-ghsa-c8w2-fgvx-vhv4-kcp-front-proxy-does-not-strip-inbound-x skopnix en 2026-09-18T17:15:49.000Z GHSA-c8w2-fgvx-vhv4: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to injec https://skopnix.com/news/CVE-2026-618-ghsa-qg67-7m6v-qg25-zot-bearer-authentication-maps-delete-to skopnix en 2026-09-18T17:15:19.000Z GHSA-qg67-7m6v-qg25: zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion https://skopnix.com/news/CVE-2026-336-ghsa-3hmm-rh5q-gwwr-lmdeploy-vulnerable-to-arbitrary-code-ex skopnix en 2026-09-18T17:04:01.000Z GHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading https://skopnix.com/news/166156784f3b-ransomware-n0n-astrazeneca-turkiye skopnix en 2026-09-18T16:04:30.007Z Ransomware: n0n → AstraZeneca Türkiye https://skopnix.com/news/0c5081a0f2d7-ransomware-n0n-paypal-support-operations-transcom-worldwide skopnix en 2026-09-18T16:01:08.759Z Ransomware: n0n → PayPal support operations (Transcom WorldWide) https://skopnix.com/news/CVE-2025-538-ghsa-26vp-8gxg-v4pg-orgxwikirenderingxwiki-rendering-xml-has skopnix en 2026-09-18T15:05:13.000Z GHSA-26vp-8gxg-v4pg: org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue https://skopnix.com/news/010c0e6e5698-ransomware-endzone-att skopnix en 2026-09-18T14:33:06.912Z Ransomware: endzone → AT&T https://skopnix.com/news/a4aa43a6286b-weaselbiscuit-stealer-spreads-via-13-npm-packages-to-harvest skopnix en 2026-09-18T10:40:06.000Z WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage https://skopnix.com/news/e153090477ba-a-vault-with-a-heap-view-the-uncomfortable-space-between-age skopnix en 2026-09-18T10:00:36.000Z A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity https://skopnix.com/news/408ef5d66470-brevo-supply-chain-attack-injects-malware-into-100000-websit skopnix en 2026-09-18T09:46:57.000Z Brevo Supply Chain Attack Injects Malware Into 100,000 Websites https://skopnix.com/news/46d085b9d44f-new-check-point-flaw-lets-hackers-execute-code-with-root-pri skopnix en 2026-09-18T09:34:33.000Z New Check Point flaw lets hackers execute code with root privileges https://skopnix.com/news/96f5f817f677-zero-click-rce-vulnerability-hit-four-major-ai-coding-agents skopnix en 2026-09-18T08:49:00.000Z Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched https://skopnix.com/news/CVE-2026-581-critical-orkes-conductor-vulnerability-exploited-in-attacks skopnix en 2026-09-18T08:42:18.000Z Critical Orkes Conductor Vulnerability Exploited in Attacks https://skopnix.com/news/09d722e77700-rathat-android-malware-abuses-adb-to-retain-shell-access-aft skopnix en 2026-09-18T06:17:25.000Z RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall https://skopnix.com/news/CVE-2026-726-ghsa-jq29-c7v8-rg55-grav-path-traversal-in-mediauploadtraitd skopnix en 2026-09-17T20:34:05.000Z GHSA-jq29-c7v8-rg55: Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion https://skopnix.com/news/CVE-2026-860-ghsa-9gm5-9rfh-m6vx-coredns-dohdoqgrpc-bypass-update-rejecti skopnix en 2026-09-17T20:33:05.000Z GHSA-9gm5-9rfh-m6vx: CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP https://skopnix.com/news/CVE-2026-849-ghsa-x424-64qh-5j54-reacthttp-a-malformed-http-chunked-body skopnix en 2026-09-17T20:32:39.000Z GHSA-x424-64qh-5j54: react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU https://skopnix.com/news/CVE-2026-823-ghsa-mrg3-qvqr-jw29-coredns-unauthenticated-memory-exhaustio skopnix en 2026-09-17T20:32:27.000Z GHSA-mrg3-qvqr-jw29: CoreDNS: Unauthenticated memory exhaustion in custom transports https://skopnix.com/news/CVE-2026-818-ghsa-gq9c-wmrm-5hvr-hapi-fhir-shcparser-deflate-infinite-loo skopnix en 2026-09-17T20:32:21.000Z GHSA-gq9c-wmrm-5hvr: HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service https://skopnix.com/news/2eda29781a34-ghsa-xjw9-38cr-6372-djust-a-template-binding-inherits-a-cont skopnix en 2026-09-17T20:31:48.000Z GHSA-xjw9-38cr-6372: djust: A template binding inherits a context safety grant it never earned (XSS) https://skopnix.com/news/351960610260-ghsa-9395-2g46-rj3f-djust-six-template-layer-defects-emit-at skopnix en 2026-09-17T20:31:43.000Z GHSA-9395-2g46-rj3f: djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS) https://skopnix.com/news/CVE-2026-815-ghsa-67c9-f6v2-qv86-steeltoediscoveryconsul-malformed-secure skopnix en 2026-09-17T20:30:54.000Z GHSA-67c9-f6v2-qv86: Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS) https://skopnix.com/news/CVE-2026-815-ghsa-hr73-3gpv-hh6q-steeltoediscoveryeureka-malformed-enumbo skopnix en 2026-09-17T20:30:45.000Z GHSA-hr73-3gpv-hh6q: Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS) https://skopnix.com/news/CVE-2026-860-ghsa-c3mw-737p-c7g2-jupyter-server-5xx-request-logging-leaks skopnix en 2026-09-17T20:28:55.000Z GHSA-c3mw-737p-c7g2: Jupyter Server: 5xx request logging leaks token-bearing Referer header values https://skopnix.com/news/CVE-2026-797-ghsa-vjqc-q4mp-2rvf-cakephp-multiple-methods-in-functionsbui skopnix en 2026-09-17T20:28:14.000Z GHSA-vjqc-q4mp-2rvf: CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection https://skopnix.com/news/CVE-2026-768-ghsa-3jhr-mxmx-38cx-grav-userinterface-offsetgetoffsetexists skopnix en 2026-09-17T20:27:30.000Z GHSA-3jhr-mxmx-38cx: Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashe https://skopnix.com/news/CVE-2026-768-ghsa-xjw5-q542-3vmr-grav-configdeniedpaths-default-list-omit skopnix en 2026-09-17T20:27:05.000Z GHSA-xjw5-q542-3vmr: Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password https://skopnix.com/news/CVE-2026-726-ghsa-p597-crqc-m349-grav-the-system-site-and-theme-twig-vari skopnix en 2026-09-17T20:25:42.000Z GHSA-p597-crqc-m349: Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by https://skopnix.com/news/CVE-2026-451-ghsa-g4c3-4g96-6g4m-chamilo-lms-cstudio-upload-flow-allows-u skopnix en 2026-09-17T20:23:39.000Z GHSA-g4c3-4g96-6g4m: Chamilo LMS CStudio upload flow allows unauthenticated remote code execution https://skopnix.com/news/4827eb308ee7-ransomware-ransomhouse-pertamina skopnix en 2026-09-17T19:40:27.039Z Ransomware: ransomhouse → Pertamina https://skopnix.com/news/8b15373ec47a-ransomware-brain-cipher-aecomcom skopnix en 2026-09-17T18:36:59.093Z Ransomware: brain cipher → aecom.com https://skopnix.com/news/CVE-2026-201-al26-021---vulnerabilities-impacting-cisco-identity-services skopnix en 2026-09-17T17:32:01.000Z AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460 https://skopnix.com/news/CVE-2026-857-ghsa-mggc-4xg6-vcxf-sshnet-scpclient-allows-server-side-rce skopnix en 2026-09-17T17:18:01.000Z GHSA-mggc-4xg6-vcxf: SSH.NET: ScpClient allows server-side RCE via default SCP path handling https://skopnix.com/news/CVE-2026-656-ghsa-c4wf-2xxc-68qm-grav-flexdirectorydynamicdatafield-execu skopnix en 2026-09-17T17:15:33.000Z GHSA-c4wf-2xxc-68qm: Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation https://skopnix.com/news/CVE-2026-860-ghsa-5gpm-rgj3-9q76-skipper-has-opa-body-authz-bypass-trunca skopnix en 2026-09-17T17:05:57.000Z GHSA-5gpm-rgj3-9q76: Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA https://skopnix.com/news/CVE-2026-774-ghsa-c5pq-fr2g-9jpf-rabbitmq-amqp091-go-protocol-desynchroni skopnix en 2026-09-17T17:04:25.000Z GHSA-c5pq-fr2g-9jpf: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr https://skopnix.com/news/CVE-2026-774-ghsa-r9c8-gcjp-xfwh-rabbitmq-amqp091-go-resource-exhaustion skopnix en 2026-09-17T17:04:20.000Z GHSA-r9c8-gcjp-xfwh: RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation https://skopnix.com/news/CVE-2026-774-ghsa-j497-x9hr-x34x-rabbitmq-amqp091-go-silent-data-truncati skopnix en 2026-09-17T17:04:15.000Z GHSA-j497-x9hr-x34x: RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow https://skopnix.com/news/CVE-2026-774-ghsa-33mj-cw25-m34h-rabbitmq-amqp091-go-missing-explicit-tls skopnix en 2026-09-17T17:04:01.000Z GHSA-33mj-cw25-m34h: RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser https://skopnix.com/news/CVE-2026-774-ghsa-465g-fh3v-9jw4-rabbitmq-amqp091-go-connection-configura skopnix en 2026-09-17T17:03:55.000Z GHSA-465g-fh3v-9jw4: RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection https://skopnix.com/news/CVE-2026-774-ghsa-xwwf-m8fg-p9q2-rabbitmq-amqp091-go-denial-of-service-vi skopnix en 2026-09-17T17:03:50.000Z GHSA-xwwf-m8fg-p9q2: RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation https://skopnix.com/news/CVE-2026-691-ghsa-wr57-hqmp-fgvh-umbraco-delivery-api-leaks-protected-pub skopnix en 2026-09-17T16:29:46.000Z GHSA-wr57-hqmp-fgvh: Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker https://skopnix.com/news/43429be03088-iranian-strikes-on-aws-facilities-left-customer-data-beyond skopnix en 2026-09-17T13:12:47.000Z Iranian strikes on AWS facilities left customer data beyond recovery in Bahrain, UAE https://skopnix.com/news/CVE-2026-816-critical-unbound-dnssec-validator-flaw-could-allow-rce-via-a skopnix en 2026-09-17T12:30:00.000Z Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone https://skopnix.com/news/73645a02bd83-ransomware-incidents-in-japan-in-the-first-half-of-2026-inve skopnix en 2026-09-17T10:00:43.000Z Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use https://skopnix.com/news/0c9ce14ba6c6-chinese-hackers-use-sparrowocky-malware-in-govt-espionage-at skopnix en 2026-09-17T09:00:00.000Z Chinese hackers use SparroWocky malware in govt espionage attacks https://skopnix.com/news/2e4be0073b4d-fragnesia-primitive-via-open-vswitch-deterministic-local-pri skopnix en 2026-09-17T07:06:38.000Z Fragnesia primitive via Open vSwitch. Deterministic local privilege escalation. https://skopnix.com/news/CVE-2026-636-ghsa-mxm6-v9r6-r94c-nuxtjsmdcs-url-sanitizer-misses-svg-xlin skopnix en 2026-09-16T22:14:01.000Z GHSA-mxm6-v9r6-r94c: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at https://skopnix.com/news/CVE-2026-631-ghsa-9pj6-vhgr-3mwh-rmcp-unauthenticated-permanent-session-t skopnix en 2026-09-16T22:13:34.000Z GHSA-9pj6-vhgr-3mwh: RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote de https://skopnix.com/news/CVE-2026-631-ghsa-33f5-2c5q-wgwj-rmcp-missing-resource-field-validation-i skopnix en 2026-09-16T22:13:26.000Z GHSA-33f5-2c5q-wgwj: RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery https://skopnix.com/news/CVE-2026-615-ghsa-7prp-2623-8g45-djust-has-an-unauthenticated-arbitrary-m skopnix en 2026-09-16T22:09:38.000Z GHSA-7prp-2623-8g45: djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path https://skopnix.com/news/CVE-2026-615-ghsa-c7c5-5j6r-q957-djust-has-broken-object-level-access-con skopnix en 2026-09-16T22:06:02.000Z GHSA-c7c5-5j6r-q957: djust has broken object-level access control (IDOR)