Search: “targeted”

4 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 17 Threat actor 11 Malware 11 Data breach 9 AI research 8 AI industry 7 Advisory 6 Phishing & fraud 6 Industry 5 AI safety & security 5 Research 5 Vulnerability 4 Model release 3 AI policy 3

SeverityAll critical 5 high 32 medium 24 low 4 info 39

CVE-2026-86089: Apache NiFi: Missing Process Group Authorization for Connector Migration

Apache NiFi 2.11.0 Connector Migration REST APIs authorize only against the target Connector, skipping Process Group access checks (CVE-2026-86089, Low).

Apache NiFi 2.11.0 supports migrating version-controlled Process Group contents into a Connector via REST API methods that list eligible migration sources and submit migration requests. Both methods were authorized only against the target Connector, without evaluating user access to the involved Process Groups. The flaw, tracked as CVE-2026-86089, is rated Low severity and affects the nifi-web-api component.

oss-securitySep 16, 15:19 UTC · 18h agoVulnerability 4 sources CVE-2026-86089

The skb that wasn't freed - the Fragnesia primitive via Open vSwitch

Doyensec details CVE-2026-90049 in Open vSwitch, enabling deterministic Linux kernel local privilege escalation on default major distribution installs.

Doyensec reports that the Open vSwitch datapath strips the SKBFL_SHARED_FRAG flag from packets it is still forwarding, allowing an in-place decrypt to write attacker-chosen bytes into root-owned page cache — a Dirty COW-class primitive that re-opens the Fragnesia bug family. The issues are tracked as CVE-2026-90049, CVE-2026-89487, and CVE-2026-80977, and were reported to the kernel security team with fixes coordinated alongside OVS maintainers. A deterministic local privilege escalation works on default installs of Arch, Fedora, Debian, Amazon Linux, and RHEL where unprivileged user namespaces and openvswitch auto-loading are enabled; the fix landed in mainline and shipped in stable on 09/04/2026. The write technique builds on the earlier Fragnesia and Dirty Frag bugs, including CVE-2026-43284 and CVE-2026-43500.

Lobsters · security08:39 UTC · 55m agoVulnerability CVE-2026-90049 CVE-2026-89487 CVE-2026-80977+2 CVEs

Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files

Docker fixed two symlink-race flaws in Docker Sandboxes, CVE-2026-77179 and CVE-2026-79994, letting malicious guests escape the workspace and read host files; fixed in 0.42.0.

Docker patched CVE-2026-77179 (Critical) and CVE-2026-79994 (High) in Docker Sandboxes 0.42.0, released September 7. Both are time-of-check-to-time-of-use symlink races: CVE-2026-77179 in the macOS virtio-fs host server (versions 0.28.0 to before 0.42.0) can allow a malicious guest to read or modify arbitrary host files and potentially achieve code execution, while CVE-2026-79994 in the guest-to-host Unix socket relay (0.37.0 to before 0.42.0) can redirect host connections to arbitrary AF_UNIX sockets. Docker recommends upgrading and, as interim mitigation, using clone mode and avoiding read-write host mounts.

GBHackers07:17 UTC · 2h agoVulnerability CVE-2026-77179 CVE-2026-79994 CVE-2026-17106+5 CVEs

Critical Check Point Vulnerability Allows Remote Root Code Execution Without Authentication

Check Point patched CVE-2026-91843 (CVSS 9.8), an unauthenticated stack overflow enabling remote root code execution on Security Management and Log Servers.

Check Point issued a high-severity alert for CVE-2026-91843, a critical stack overflow (CVSS 9.8, solution sk1000155) in the unauthenticated login workflow of Security Management Server, Multi-Domain Security Management Server, Log Server, and Multi-Domain Log Server. Successful exploitation grants an unauthenticated remote attacker root-level code execution. Affected releases span R80 through R82.20 with Jumbo Hotfix takes at or below specified levels (e.g., R82.20 Take 44, R81.20 Take 166), with several older versions end of support. A LivePatch is available and offline urgent bundles (R81.20-R82.20 Takes 28-29) were released; Smart-1 Cloud is already protected.

GBHackers05:23 UTC · 4h agoVulnerability 9 sources CVE-2026-918431