⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-13476 | Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension… | 9.8 | <1% | ||
| CVE-2025-14500 | IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2025-34288 | Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file… | 8.6 | 2% | ||
| CVE-2025-67736 | The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk | 8.6 | 6% | ||
| CVE-2026-20079 | Authentication bypass to root access in Cisco Secure Firewall Management Center | 10.0 | 88% | KEVPoC ×2 | KEV |
| CVE-2026-21385 | Memory Corruption in Qualcomm Snapdragon Chipset Firmware Exploited in the Wild | 7.8 | 1% | KEV | KEV |
| CVE-2026-2256 | A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system… | 6.5 | 2% | ||
| CVE-2026-23600 | A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) | 10.0 | <1% | ||
| CVE-2026-24009 | Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling | 9.8 | 1% | ||
| CVE-2026-26198 | Ormar: In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM constructs SQL expressions by passing… | 7.5 | 1% | PoC | |
| CVE-2026-27636 | FreeScout: FreeScout's file upload restriction list in `app/Misc/Helper.php` does not include `.htaccess` or `.user.ini` files. On Apache… | 8.8 | 2% | PoC | |
| CVE-2026-2796 | JIT miscompilation in the JavaScript | 9.8 | <1% | ||
| CVE-2026-27966 | Prompt-Injection RCE in Langflow CSV Agent before 1.8.0 | 9.8 | 35% | PoC | |
| CVE-2026-28289 | Authenticated RCE via .htaccess Upload Bypass in FreeScout 1.8.206 and Earlier | 8.1 | 35% | PoC ×2 | |
| CVE-2026-3336 | Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7… | 8.7 | <1% | ||
| CVE-2026-3337 | Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing… | 8.2 | 1% |
From the original article
13 min read at thehackernews.com
Another week in cybersecurity. Another week of "you've got to be kidding me." Attackers were busy.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.