Vulnerabilities

Vulnerabilities

Sangoma Switchvox Under Attack: Critical SQL Injection Enables Remote Code Execution

CVE-2026-9586 in Sangoma Switchvox exploited via unauthenticated SQL injection at /pa enabling RCE. Update to 8.4.0.2 and hunt for compromise.

Sep 4, 202615:10 5 min readRead →

Vulnerabilities

WordPress Under Attack: More Than 440,000 Attempts Target Super Forms and Elementor Pro

Over 440,000 attacks exploit critical unauthenticated file upload flaws in Super Forms and Elementor Pro, enabling remote code execution. Update now.

Sep 4, 202613:09 5 min readRead →

Vulnerabilities

Chrome Fixes Sixth Zero-Day of 2026: Active Attacks Target V8 Engine

Google patched CVE-2026-85046, a V8 type confusion zero-day exploited in the wild. Update Chrome to 152.0.7977.82+ immediately to stay protected.

Sep 4, 202611:08 5 min readRead →

Vulnerabilities

Ignition: Incorrect Default Permissions Allow Unauthorized Project Creation

CVE-2026-77393 lets authenticated Ignition users create projects due to empty default role; affects 8.1.53 and earlier, fixed in 8.1.54.

Sep 4, 202601:08 5 min readRead →

Vulnerabilities

Cisco Nexus 9000: Critical Flaw Enables Remote Root Code Execution

Cisco fixed CVE-2026-20212 (CVSS 9.8) in 10 Nexus 9000 models allowing unauthenticated remote root code execution via TCP ports 43210, 43211.

Sep 3, 202623:09 5 min readRead →

Vulnerabilities

ArubaOS-CX Critical Vulnerability Exposes HPE Switches to Remote Code Execution

HPE fixed CVE-2026-73749, a critical 9.8 unauthenticated RCE flaw in ArubaOS-CX switches, plus 23 other vulnerabilities. Update affected versions now.

Sep 3, 202621:09 5 min readRead →

Vulnerabilities

Tycon TPDIN-Monitor-WEB2: Two Flaws Expose Relays and Configurations to Remote Control

CISA flags two Tycon TPDIN-Monitor-WEB2 flaws pre-2.4.5, including critical auth bypass CVE-2026-61884 allowing relay control. Fix: update to 2.4.5.

Sep 3, 202619:10 5 min readRead →

Vulnerabilities

Cisco Discloses New Vulnerabilities in Secure Email, IOS XR, Nexus 9000 Switches, and IP Phones

Cisco disclosed Sept 2026 flaws in Secure Email, IOS XR, Nexus 9000 and IP Phones, including S/MIME decryption issues, RCE and root compromise risks.

Sep 3, 202615:09 5 min readRead →

Vulnerabilities

WordPress: RCE Vulnerability in All-in-One WP Migration Exposes Approximately 3.2 Million Sites

CVE-2026-19949 in All-in-One WP Migration up to 7.109 enables RCE via second-order SQL injection, exposing 3.2M sites. Update to 7.110 immediately.

Sep 3, 202613:08 5 min readRead →