Vulnerabilities

Vulnerabilities

Four Monta Platform Flaws Put Charging-Station Access and Availability at Risk

CISA warns four Monta monta.app flaws (CVSS 9.4) allow station impersonation, credential exposure, DoS and unauthorized charging control.

Oct 2, 202611:32 4 min readRead →

Vulnerabilities

Meari OpenAPI Authorization Gaps Expose Device Controls and Sensitive Data

CISA disclosed two Meari OpenAPI authorization flaws enabling authenticated users to alter device configs and access shadows, with no fix planned.

Oct 2, 202609:24 5 min readRead →

Vulnerabilities

Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk

CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.

Oct 2, 202607:15 6 min readRead →

Vulnerabilities

FortiMail Zero-Day Gives Unauthenticated Attackers a Route to System File Writes

FortiMail zero-day CVE-2026-104286 (CVSS 9.8) enables unauthenticated file writes. Affected versions, fixes, workarounds and IOCs.

Oct 2, 202605:34 5 min readRead →

Vulnerabilities

Three Execution Paths Expose Trust Failures in Zammad, MagicINFO, and Unsloth Studio

Zammad session hijack led to root at DIVD, MagicINFO flaw enabled AnyDesk and cryptomining, and Unsloth executed code on model selection.

Oct 2, 202603:37 6 min readRead →

Vulnerabilities

Two ABB PCM600 Weaknesses Put Windows Privileges and Project Files at Risk

CISA disclosed two ABB PCM600 flaws enabling Windows privilege escalation and path traversal in project imports. Learn affected versions and mitigations.

Oct 1, 202621:50 5 min readRead →

Vulnerabilities

Public CoreGraphics PoC Raises Pressure to Patch Apple Devices Under Targeted Attack

Public PoC for CVE-2026-86950 confirms CoreGraphics font crash, raising pressure to patch iOS 26.7.1 and macOS amid targeted attacks.

Oct 1, 202611:23 6 min readRead →

Vulnerabilities

NetScaler Attack Payloads Aim for Superuser Persistence and CSS-Masked Web Shells

Attackers exploit CVE-2026-88771 on NetScaler to deploy reverse shells, create sec_monitor superuser, steal configs and hide PHP web shells as CSS.

Oct 1, 202607:47 5 min readRead →

Vulnerabilities

BeyondTrust Flaw Shows How Fast Public Vulnerabilities Can Become Active Threats

Critical BeyondTrust flaw CVE-2026-1731, found by Hacktron AI, was exploited within 4 days. Google reports surge in fast n-day attacks in 2026.

Oct 1, 202605:32 6 min readRead →