Search: “websocket”

2 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 163 Vulnerability 65 Threat actor 34 Exploit / PoC 33 Phishing & fraud 14 Data breach 13 Ransomware 12 AI tools & infra 6 Tools 5 AI safety & security 4 Advisory 2 AI industry 1 AI policy 1 Research 1

SeverityAll critical 103 high 117 medium 113 low 12 info 11

Broken Access control on Websocket streams

Fortinet FortiSOAR access control flaw (CVSS 4.9) lets zero-permission authenticated attackers subscribe to and inject broadcast messages into websocket streams.

Fortinet advisory FG-IR-26-164 discloses an improper access control vulnerability (CWE-284, CVSSv3 4.9) in FortiSOAR. An authenticated attacker with zero permissions can subscribe to websocket streams and topics and inject broadcast messages via crafted websocket requests. The advisory was revised on 2026-09-08.

Fortinet PSIRTSep 8, 07:00 UTC · 8d agoAdvisory

USN-8740-1: .NET vulnerabilities

Ubuntu issued USN-8740-1 fixing two .NET watch flaws, CVE-2026-58649 and CVE-2026-69806, enabling information exposure and privilege escalation.

Ubuntu Security Notice USN-8740-1 addresses two vulnerabilities in .NET watch components. CVE-2026-58649 involves missing cross-origin WebSocket validation in BrowserRefreshServer that could expose sensitive information. CVE-2026-69806 involves improper information exposure through AspireServerService arguments, potentially allowing privilege elevation and arbitrary code execution.

Ubuntu Security Noticesupdated Sep 11, 12:03 UTC · 4d agofirst Sep 10, 06:57 UTC · 6d agoAdvisory 13 sources CVE-2026-58649 CVE-2026-69806