Vulnerabilities

347 articles

More news

Page 16 / 39 · 347 articles

Critical mySCADA myPRO Manager Flaw Exposes Privileged Controls Without Authentication

CISA discloses critical unauthenticated flaw CVE-2026-73807 in mySCADA myPRO Manager 2.1 and earlier plus SMS gateway bug with no patch.

Sep 16, 202603:46 5 min readRead

Vulnerabilities

Acronis Warns of Exploited Privilege-Escalation Flaw in cPanel Backup Plugin

Acronis warns CVE-2026-87886 allows local privilege escalation in cPanel & Plesk backup plugins, with limited exploitation reported. Update now.

Sep 16, 202601:50 5 min readRead

Vulnerabilities

Schneider Electric SCADAPack Credential Flaw Exposes RTU Authentication Data

Schneider Electric CVE-2026-81861 flaw lets Secure Lock expose SCADAPack RTU credentials. See affected models, risks and RBAC mitigation.

Sep 15, 202619:43 5 min readRead

Vulnerabilities

Human Operator Exploits Marimo RCE and Reaches SSH Bastion in Eight Seconds

Human attacker exploited Marimo CVE-2026-39987 via unauthenticated WebSocket, stole AWS credentials, retrieved SSH key and reached bastion in 8 seconds.

Sep 15, 202615:46 5 min readRead

Vulnerabilities

Critical LiteSpeed Enterprise Flaw Could Turn One Hosting Account Into Root Access

Critical LiteSpeed Enterprise flaw before 6.3.7 lets shared-hosting users bypass isolation for root access. See affected versions and manual fix.

Sep 15, 202613:16 6 min readRead

Vulnerabilities

Hackers Scan Exposed Vite Servers for AWS, Azure, and Deployment Secrets

Hackers are scanning exposed Vite dev servers via CVE-2026-39364 to steal AWS keys, Azure tokens, .env files and Terraform state. Learn risks and fixes.

Sep 15, 202601:53 5 min readRead

Vulnerabilities

Tencent Sogou Input Flaw Exploited for One-Click System-Level Code Execution

China-linked UNC3569 exploited CVE-2026-51990 in Tencent Sogou Input via crafted sgbiz:// link to execute code as SYSTEM and deploy GrayRabbit backdoor.

Sep 14, 202613:31 6 min readRead