⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
- CVEs
- CVE-2026-11645CVE-2026-2441CVE-2026-3909CVE-2026-3910CVE-2026-5281CVE-2026-35273CVE-2026-50751CVE-2026-5027CVE-2026-44963CVE-2026-23111CVE-2026-45447CVE-2026-44748CVE-2026-27671CVE-2026-22732CVE-2026-40128CVE-2026-10520CVE-2026-28252CVE-2026-28253CVE-2026-28254CVE-2026-28255CVE-2026-28256CVE-2025-46412CVE-2025-41426CVE-2026-0274CVE-2026-20253CVE-2026-9648
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-41426 | Affected Vertiv products contain a stack based buffer overflow vulnerability | 9.3 | <1% | ||
| CVE-2025-46412 | Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication | 9.3 | <1% | ||
| CVE-2026-0274 | An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker… | 8.1 | <1% | ||
| CVE-2026-10520 | Unauthenticated OS Command Injection in Ivanti Sentry | 10.0 | 100% | KEVPoC | KEV |
| CVE-2026-11645 | Out-of-Bounds Read/Write in Google Chrome V8 Enables In-Sandbox Code Execution | 8.8 | 2% | KEVPoC | KEV |
| CVE-2026-20253 | Unauthenticated RCE in Splunk Enterprise via PostgreSQL sidecar endpoint | 9.8 | 97% | KEVPoC | KEV |
| CVE-2026-22732 | When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be… | 9.1 | <1% | PoC | |
| CVE-2026-23111 | Linux kernel: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() nft_map_catchall_activate()… | 7.8 | <1% | PoC | |
| CVE-2026-2441 | Use-After-Free in Google Chromium CSS Rendering Exposes Chrome, Edge, Opera Users | 8.8 | 55% | KEVPoC | KEV |
| CVE-2026-27671 | Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker… | 9.8 | <1% | ||
CVE-2026-28252+3 related CVEs | A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass… | 9.2 group max | <1% | ||
| CVE-2026-28256 | A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose… | 6.9 | <1% | ||
| CVE-2026-35273 | Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools | 9.8 | 97% | KEVRansomwarePoC | KEV |
| CVE-2026-3909 | Out-of-Bounds Write in Google Chrome's Skia Rendering Engine | 8.8 | 2% | KEV | KEV |
| CVE-2026-3910 | Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution | 8.8 | 3% | KEV | KEV |
| CVE-2026-40128 | SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file… | 9.0 | <1% | ||
| CVE-2026-44748 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send… | 9.9 | <1% | ||
| CVE-2026-44963 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | 9.4 | 2% | PoC | |
| CVE-2026-45447 | Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification | 8.8 | 4% | ||
| CVE-2026-5027 | Authenticated Path Traversal Arbitrary File Write in Langflow Files API | 8.8 | 36% | ||
| CVE-2026-50751 | Unauthenticated IKEv1 VPN Auth Bypass in Check Point Security Gateways | 9.3 | 85% | KEVRansomwarePoC | KEV |
| CVE-2026-5281 | Use-After-Free in Google Chrome's Dawn (WebGPU) Component Enables Arbitrary Code Execution | 8.8 | 14% | KEV | KEV |
| CVE-2026-9648 | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names… | 9.1 | <1% |
From the original article
13 min read at thehackernews.com
Stuff broke again. Not in a movie way. An old tool was left exposed.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.