Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-14 23:57Z
2026-02-20
2026-02-20 12:16Z
CRIT

CVE-2025-10970 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-10970

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection. This issue affects Talentics: through 20022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-20
2026-02-20 02:16Z
CRIT

CVE-2026-26980 — Ghost Ghost: Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26980

Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed in version 6.19.1. CVSSv3.1 9.4 (CRITICAL) · EPSS 97th percentile

CWECWE 89VNDGhostTYPVulnerability
9.4
CVSS v3.1
100
Edit Score
2026-02-20
2026-02-20 00:00Z
CRIT

MIMICRAT: ClickFix Campaign Delivers Custom RAT via Compromised Legitimate Websites

Elastic Security Labs·elastic.coin the wild

Elastic Security Labs disclosed MIMICRAT, a sophisticated custom native C RAT deployed via a five-stage ClickFix campaign leveraging compromised legitimate websites (bincheck.io and investonline.in). The implant features malleable HTTPS C2 profiles, token impersonation, SOCKS5 tunneling, 22-command dispatch, and employs ETW/AMSI bypass via PowerShell reflection before Lua-based shellcode execution. The campaign remains active as of February 2026, targeting multiple geographies with 17-language localization.

SRFApplicationTACTA0004TACTA0005TACTA0001TACTA0002TACTA0007SRFWebTACTA0003
88
Edit Score
2026-02-20
2026-02-20 00:00Z
CRIT

The Immutable Illusion: Pwning Your Kernel with Cloud Files

Elastic Security Labs·elastic.co0day

Elastic Security Labs disclosed a novel advancement in False File Immutability (FFI) exploitation that leverages Windows Cloud Files (cldflt.sys) to bypass kernel file immutability assumptions without requiring network redirectors. The attack modifies files incorrectly assumed immutable by the kernel, enabling kernel-level code execution; Microsoft has only patched this in some Windows versions, leaving fully-patched systems in Mainstream Support vulnerable as of February 2026.

SRFOsTACTA0004OSWindowsVNDMicrosoftTYPResearchSTGPrivescSTGExecutionTECT1548
92
Edit Score
2026-02-19
2026-02-19 21:24Z
HIGH

CVE-2026-20841: Arbitrary Code Execution in the Windows Notepad

Zero Day Initiative·thezdi.comCVE-2026-20841

CVE-2026-20841 is a command injection vulnerability in Windows Notepad's Markdown renderer that allows arbitrary code execution through maliciously crafted links in .md files. The flaw stems from insufficient validation of protocol URIs (file://, ms-appinstaller://) passed to ShellExecuteExW(), enabling remote attackers to execute arbitrary commands in the victim's security context via social engineering. Microsoft patched the vulnerability in February 2026.

SRFApplicationSRFOsTACTA0001TACTA0002VNDMicrosoftTYPWriteupTYPVulnerabilitySTGExecution
72
Edit Score
2026-02-19
2026-02-19 20:25Z
HIGH

CVE-2026-26318 — Systeminformation Systeminformation: Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue. CVSSv3.1 8.8 (HIGH)

CWECWE 78VNDSysteminformationTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-19
2026-02-19 20:25Z
HIGH

CVE-2026-26280 — Systeminformation Systeminformation: In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()` function allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26280

systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()` function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In `lib/wifi.js`, the `wifiNetworks()` function sanitizes the `iface` parameter on the initial call (line 437). However, when the initial scan returns empty results, a `setTimeout` retry (lin CVSSv3.1 8.4 (HIGH)

CWECWE 78VNDSysteminformationTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-02-19
2026-02-19 18:25Z
CRIT

CVE-2026-26339 — Hyland Alfresco_transform_service: Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26339

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve remote code execution through the argument injection vulnerability, which exists in the document processing functionality. CVSSv3.1 9.8 (CRITICAL) · EPSS 42th percentile

CWECWE 918VNDHylandTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-19
2026-02-19 18:24Z
CRIT

CVE-2026-26338 — Hyland Alfresco_transform_service: Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26338

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve server-side request forgery (SSRF) through the document processing functionality. CVSSv3.1 9.8 (CRITICAL) · EPSS 28th percentile

CWECWE 918VNDHylandTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-19
2026-02-19 18:24Z
HIGH

CVE-2026-26337 — Hyland Alfresco_transform_service: Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-26337

Hyland Alfresco Transformation Service allows unauthenticated attackers to achieve both arbitrary file read and server-side request forgery through the absolute path traversal. CVSSv3.1 8.2 (HIGH) · EPSS 28th percentile

CWECWE 36VNDHylandTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-02-19
2026-02-19 17:24Z
CRIT

CVE-2026-24834 — Katacontainers Kata_containers: In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24834

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.27.0, an issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM ultimately achieving arbitrary code execution as root in said VM. The current understanding is this doesn’t impact the security of the Host or of other containers / VMs running on CVSSv3.1 9.3 (CRITICAL)

CWECWE 732CWECWE 281VNDKatacontainersVNDKataTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-02-19
2026-02-19 17:00Z
HIGH

Mapping Deception Solutions With BloodHound OpenGraph  – Configuration Manager

SpecterOps·specterops.io

SpecterOps published a comprehensive guide on implementing deception solutions within System Center Configuration Manager (SCCM) infrastructure using BloodHound OpenGraph. The research details three canary deception techniques: canary Network Access Accounts (NAA), fake PXE media, and poisoned SC_UserAccount database entries, designed to detect adversaries exploiting SCCM for lateral movement and credential theft. The methodology integrates ConfigManBearPig (SCCM collector) and deceptionClone (node modification) tools to map and visualize deception solutions within attack graphs.

SRFApplicationTACTA0006TACTA0007SRFIdentityVNDMicrosoftVNDSpecteropsTYPResearchTYPTechnique
78
Edit Score
2026-02-19
2026-02-19 16:27Z
HIGH

CVE-2026-25940 — Parall Jspdf: Prior to 4.2.0, user control of properties and methods of the Acroform module allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25940

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions. If given the possibility to pass unsanitized input to one of the following property, a user can inject arbitrary PDF objects, such as JavaScript actions, which are executed when the victim hovers over the radio option. The vulnerability has been fixed in jsPDF@4.2.0. As a work CVSSv3.1 8.1 (HIGH)

CWECWE 116VNDParallTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-19
2026-02-19 15:16Z
HIGH

CVE-2026-25755 — Parall Jspdf: Prior to 4.2.0, user control of the argument of the `addJS` method allows an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-25755

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method allows an attacker to inject arbitrary PDF objects into the generated document. By crafting a payload that escapes the JavaScript string delimiter, an attacker can execute malicious actions or alter the document structure, impacting any user who opens the generated PDF. The vulnerability has been fixed in jspdf@4.2.0. As a workaround, escape parentheses in use CVSSv3.1 8.1 (HIGH)

CWECWE 94CWECWE 116VNDParallTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-02-19
2026-02-19 13:37Z
HIGH

CVE-2026-20817 — Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local priv

GitHub · LPE exploits·github.comGITHUB POCCVE-2026-20817

Public PoC exploit for CVE-2026-20817, a Windows Error Reporting (WER) service ALPC privilege escalation affecting Windows 10, 11, Server 2019/2022 pre-January 2026. The vulnerability allows authenticated low-privilege users to execute arbitrary code as SYSTEM by sending malformed ALPC messages to the WER service with crafted shared memory payloads, exploiting insufficient validation in the SvcElevatedLaunch method.

SRFOsTACTA0004VNDMicrosoftTYPWriteupTYPExploitSTGPrivescTECT1548EXPPrivilege Escalation
78
Edit Score
2026-02-19
2026-02-19 12:16Z
CRIT

CVE-2025-9953 — Authorization: Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-9953

Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows SQL Injection. This issue affects Databank Accreditation Software: through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 4th percentile

CWECWE 566TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-19
2026-02-19 12:16Z
CRIT

CVE-2025-8350 — Execution: After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8350

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 306CWECWE 698VNDExecutionTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-19
2026-02-19 10:16Z
CRIT

CVE-2025-13590 — Wso2 Api_control_plane: A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-13590

A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API. Successful uploads may lead to remote code execution. By leveraging the vulnerability, a malicious actor may perform Remote Code Execution by uploading a specially crafted payload. CVSSv3.1 9.1 (CRITICAL) · EPSS 47th percentile

CWECWE 434VNDWso2TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-02-19
2026-02-19 10:16Z
HIGH

CVE-2025-12107 — Wso2 Identity_server: This allows an authenticated administrator to inject arbitrary template syntax.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12107

The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation enables an attacker with administrative privileges to execute arbitrary template code on the server. This can lead to significant security consequences, including remote code execution, manipulation of CVSSv3.1 8.4 (HIGH) · EPSS 47th percentile

CWECWE 94CWECWE 77VNDWso2VNDVelocityTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-02-19
2026-02-19 07:17Z
HIGH

CVE-2026-0974 — Orderable: The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0974

The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the 'install_plugin' function in all versions up to, and including, 1.20.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins, which can lead to Remote Code Execution. CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDOrderableTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-19
2026-02-19 07:17Z
CRIT

CVE-2026-0926 — Prodigy: The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0926

The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files or execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and othe CVSSv3.1 9.8 (CRITICAL)

CWECWE 98VNDProdigyTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-02-19
2026-02-19 07:17Z
HIGH

CVE-2026-0912 — Toret: The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0912

The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'trman_save_option' function and on the 'trman_save_option_items' in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for regi CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDToretTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-19
2026-02-19 07:17Z
HIGH

CVE-2025-12821 — NewsBlogger: The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-12821

The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5.6 to 0.2.5.9. This is due to missing or incorrect nonce validation on the newsblogger_install_and_activate_plugin() function. This makes it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This is due to a revert CVSSv3.1 8.8 (HIGH) · EPSS 21th percentile

CWECWE 352VNDNewsbloggerTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-02-18
2026-02-18 22:16Z
HIGH

CVE-2026-2670 — Advantech: Such manipulation of the argument delete_file leads to os command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-2670

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be ex CVSSv3.1 7.2 (HIGH) · EPSS 97th percentile

CWECWE 77CWECWE 78VNDAdvantechTYPVulnerability
7.2
CVSS v3.1
91
Edit Score
2026-02-18
2026-02-18 18:24Z
HIGH

CVE-2026-24708 — OpenStack: An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-24708

An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected CVSSv3.1 8.2 (HIGH)

CWECWE 73CWECWE 669VNDOpenstackTYPVulnerability
8.2
CVSS v3.1
91
Edit Score