https://skopnix.com/news/2e4be0073b4d-fragnesia-primitive-via-open-vswitch-deterministic-local-pri skopnix en 2026-09-17T07:06:38.000Z Fragnesia primitive via Open vSwitch. Deterministic local privilege escalation. https://skopnix.com/news/CVE-2026-636-ghsa-mxm6-v9r6-r94c-nuxtjsmdcs-url-sanitizer-misses-svg-xlin skopnix en 2026-09-16T22:14:01.000Z GHSA-mxm6-v9r6-r94c: @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at https://skopnix.com/news/CVE-2026-631-ghsa-9pj6-vhgr-3mwh-rmcp-unauthenticated-permanent-session-t skopnix en 2026-09-16T22:13:34.000Z GHSA-9pj6-vhgr-3mwh: RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote de https://skopnix.com/news/CVE-2026-631-ghsa-33f5-2c5q-wgwj-rmcp-missing-resource-field-validation-i skopnix en 2026-09-16T22:13:26.000Z GHSA-33f5-2c5q-wgwj: RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery https://skopnix.com/news/CVE-2026-615-ghsa-7prp-2623-8g45-djust-has-an-unauthenticated-arbitrary-m skopnix en 2026-09-16T22:09:38.000Z GHSA-7prp-2623-8g45: djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path https://skopnix.com/news/CVE-2026-615-ghsa-c7c5-5j6r-q957-djust-has-broken-object-level-access-con skopnix en 2026-09-16T22:06:02.000Z GHSA-c7c5-5j6r-q957: djust has broken object-level access control (IDOR) https://skopnix.com/news/CVE-2026-689-ghsa-r2pf-9cw4-5j65-node-opcua-tcp-socket-leak-fin-wait-2-vi skopnix en 2026-09-16T16:19:21.000Z GHSA-r2pf-9cw4-5j65: node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion https://skopnix.com/news/CVE-2026-201-cisco-advance-notification-for-publication-of-september-16-2 skopnix en 2026-09-16T16:07:26.000Z Cisco Advance Notification for Publication of September 16, 2026, Security Advisories https://skopnix.com/news/CVE-2026-615-ghsa-pg97-jvmf-qfvc-djust-has-cross-site-request-forgery-on skopnix en 2026-09-16T15:45:03.000Z GHSA-pg97-jvmf-qfvc: djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a vict https://skopnix.com/news/CVE-2025-599-ghsa-5h8j-6crg-7rmw-lmdeploy-has-remote-code-execution-by-pi skopnix en 2026-09-16T15:34:27.000Z GHSA-5h8j-6crg-7rmw: LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdepl https://skopnix.com/news/CVE-2026-615-ghsa-3492-cvg7-9mr2-djust-multi-tenant-isolation-fails-open skopnix en 2026-09-16T15:32:10.000Z GHSA-3492-cvg7-9mr2: djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data https://skopnix.com/news/CVE-2026-615-ghsa-cc7c-9jff-58wj-djust-client-mass-assignment-of-arbitrar skopnix en 2026-09-16T13:55:48.000Z GHSA-cc7c-9jff-58wj: djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler https://skopnix.com/news/CVE-2026-811-ghsa-v8pv-4842-x354-opentelemetryresourceshost-vulnerable-to skopnix en 2026-09-16T13:54:16.000Z GHSA-v8pv-4842-x354: OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS https://skopnix.com/news/CVE-2026-615-ghsa-8g2f-g3gq-5rjv-djusts-observability-endpoints-are-netwo skopnix en 2026-09-16T13:49:19.000Z GHSA-8g2f-g3gq-5rjv: djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, https://skopnix.com/news/CVE-2026-615-ghsa-cv3r-c5h8-f4g5-zereightmcp-gitlab-unauthenticated-arbit skopnix en 2026-09-16T13:48:28.000Z GHSA-cv3r-c5h8-f4g5: @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and f https://skopnix.com/news/15d0eead8856-revolut-data-leak-may-trace-back-to-compromised-italian-gove skopnix en 2026-09-16T13:09:22.000Z Revolut Data Leak May Trace Back to Compromised Italian Government Accounts https://skopnix.com/news/CVE-2026-908-parallels-desktop-flaw-hands-any-local-user-root-on-a-mac-cv skopnix en 2026-09-16T12:36:30.000Z Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894) https://skopnix.com/news/e20ea668ea42-us-uk-dutch-agencies-expose-iranian-chosen-brick-surveillanc skopnix en 2026-09-16T12:00:14.000Z US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware https://skopnix.com/news/CVE-2026-581-vulnerabilities-in-wnc-t-mobile-5g-box-idu-routers skopnix en 2026-09-16T11:55:00.000Z Vulnerabilities in WNC T-Mobile 5G Box IDU routers https://skopnix.com/news/95c0c12b4866-critical-screenconnect-flaw-now-actively-exploited-in-attack skopnix en 2026-09-16T11:14:28.000Z Critical ScreenConnect flaw now actively exploited in attacks https://skopnix.com/news/CVE-2026-878-acronis-cpanel-backup-plugin-vulnerability-exploited-in-targ skopnix en 2026-09-16T11:08:54.000Z Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks https://skopnix.com/news/d2f267064e99-google-pixel-owners-urged-to-patch-actively-exploited-modem skopnix en 2026-09-16T10:39:04.000Z Google Pixel owners urged to patch actively exploited modem flaw https://skopnix.com/news/9b75cf997b79-atomic-macos-amos-stealer-activity skopnix en 2026-09-16T10:00:06.000Z Atomic macOS (AMOS) Stealer Activity https://skopnix.com/news/98f91b85111c-attackers-exploit-woocommerce-wholesale-lead-capture-flaw-to skopnix en 2026-09-16T05:48:28.000Z Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells https://skopnix.com/news/CVE-2026-543-active-exploitation-attempts-target-wso2-api-manager-jwt-byp skopnix en 2026-09-16T05:18:06.000Z Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens https://skopnix.com/news/CVE-2026-615-ghsa-2h44-8472-frjj-zereightmcp-gitlab-vulnerable-to-server skopnix en 2026-09-15T20:57:28.000Z GHSA-2h44-8472-frjj: @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery https://skopnix.com/news/CVE-2026-615-ghsa-vmp7-252j-cwp7-zereightmcp-gitlab-dns-rebinding-reaches skopnix en 2026-09-15T20:54:55.000Z GHSA-vmp7-252j-cwp7: @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport https://skopnix.com/news/d00579f62b88-ghsa-5648-rgj9-v224-zereightmcp-gitlab-has-multiple-safety-c skopnix en 2026-09-15T20:48:22.000Z GHSA-5648-rgj9-v224: @zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unau https://skopnix.com/news/CVE-2026-615-ghsa-4595-rvpx-4q34-emp3r0r-has-an-unauthenticated-http-poll skopnix en 2026-09-15T20:47:17.000Z GHSA-4595-rvpx-4q34: emp3r0r has an unauthenticated HTTP Polling DoS https://skopnix.com/news/CVE-2026-889-ghsa-gq9p-f254-h286-http4s-ember-http2-buffers-a-frames-decl skopnix en 2026-09-15T20:01:22.000Z GHSA-gq9p-f254-h286: Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE https://skopnix.com/news/CVE-2026-615-ghsa-5hq8-qhww-jm7q-libp2p-quic-remote-panic-via-certificate skopnix en 2026-09-15T20:01:17.000Z GHSA-5hq8-qhww-jm7q: libp2p-quic: Remote panic via certificate expiry race during QUIC handshake https://skopnix.com/news/CVE-2026-692-ghsa-cp4q-fqw9-4hf6-http4s-ember-http2-unbounded-continuatio skopnix en 2026-09-15T20:01:08.000Z GHSA-cp4q-fqw9-4hf6: Http4s Ember HTTP/2: unbounded continuation frame accumulation https://skopnix.com/news/CVE-2026-692-ghsa-fm4g-76c9-7w69-http4s-digestauth-nonce-map-grows-unboun skopnix en 2026-09-15T19:54:37.000Z GHSA-fm4g-76c9-7w69: Http4s: DigestAuth nonce map grows unbounded https://skopnix.com/news/CVE-2026-692-ghsa-9998-894r-fwvr-http4s-ember-transfer-encoding-value-par skopnix en 2026-09-15T19:54:25.000Z GHSA-9998-894r-fwvr: Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling) https://skopnix.com/news/19fccc48359e-iranian-cyber-spies-used-fake-mri-scan-results-to-hack-enemy skopnix en 2026-09-15T16:28:00.000Z Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’ https://skopnix.com/news/1c819a001b23-cisco-email-security-boxes-can-be-rooted-by-an-email skopnix en 2026-09-15T16:01:00.000Z Cisco email security boxes can be rooted by... an email https://skopnix.com/news/945dfd469d4a-cisco-warns-customers-of-actively-exploited-zero-day-in-emai skopnix en 2026-09-15T15:44:41.000Z Cisco warns customers of actively exploited zero-day in email gateways https://skopnix.com/news/9ac44d4bac52-texas-utility-centerpoint-energy-confirms-breach-after-hacke skopnix en 2026-09-15T15:30:24.000Z Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data https://skopnix.com/news/7b73757944cf-hackers-target-wordpress-sites-via-third-party-woocommerce-p skopnix en 2026-09-15T14:45:10.000Z Hackers target WordPress sites via third-party WooCommerce plugin https://skopnix.com/news/de73330c7ad2-ransomware-qilin-adm skopnix en 2026-09-15T14:39:57.188Z Ransomware: qilin → ADM https://skopnix.com/news/69e2c62ace55-ncsc-2026-0369-100-mh-kwetsbaarheid-verholpen-in-palo-alto-n skopnix en 2026-09-15T13:39:51.000Z NCSC-2026-0369 [1.00] [M/H] Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS https://skopnix.com/news/de4a5189bc6a-iranian-cyber-targeting-of-dissidents-activists-and-journali skopnix en 2026-09-15T12:00:00.000Z Iranian cyber targeting of dissidents, activists and journalists