⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
- CVEs
- CVE-2026-43503CVE-2026-12569CVE-2026-47729CVE-2026-12957CVE-2026-46331CVE-2026-30040CVE-2026-30041CVE-2026-45585CVE-2026-8461CVE-2026-55200CVE-2026-10086CVE-2026-10712CVE-2026-12053CVE-2026-13028CVE-2026-13032CVE-2026-13033CVE-2026-13038CVE-2026-53605CVE-2026-13136CVE-2025-15660CVE-2026-13135CVE-2026-11374
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-12053+2 related CVEs | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access… | 7.5 group max | <1% | ||
| CVE-2026-11374 | In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be… | 9.0 | 3% | ||
| CVE-2026-12569 | Unauthenticated RCE in PTC Windchill and FlexPLM | 9.3 | 46% | KEVRansomware | KEV |
| CVE-2026-12957 | Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on all supported platforms may allow a for arbitrary code execution | 8.5 | <1% | ||
CVE-2026-13028+3 related CVEs | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted… | 9.6 group max | <1% | ||
| CVE-2026-30040 | A heap overflow in the FSViewer.exe process of FastStone Image Viewer v8.3 allows attackers to cause a execute arbitrary code in the context of the current… | 6.5 | <1% | ||
| CVE-2026-30041 | An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via… | 7.5 | <1% | ||
| CVE-2026-43503 | Linux kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers… | 8.8 | <1% | ||
| CVE-2026-45585 | Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey" | 6.8 | 2% | PoC ×4 | |
| CVE-2026-46331 | Linux kernel: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for… | 7.8 | <1% | PoC | |
| CVE-2026-47729 | Squid: Due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is… | 6.5 | 2% | ||
| CVE-2026-53605 | Local privilege escalation in Reachy Mini Wireless OS | 7.8 | — | ||
| CVE-2026-55200 | libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on… | 9.2 | 4% | PoC | |
| CVE-2026-8461 | An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be… | 8.8 | 2% |
From the original article
13 min read at thehackernews.com
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.