Fallo en Red Hat OpenShift permite saltar chequeos PGP y publicar versiones maliciosas https:// blog.elhacker.net/2026/09/fall o-en-red-hat-openshift-permite.html
Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.
A bug in Microsoft's automated network maintenance system caused a widespread outage affecting Teams, SharePoint, Excel and other Microsoft 365 services. The bug mistakenly removed IP routes from more devices than intended.
The U.S. Cybersecurity and Infrastructure Security Agency added multiple vulnerabilities to its Known Exploited Vulnerabilities catalog on September 25, 2026, including flaws in Microsoft SharePoint, MikroTik RouterOS, WordPress, and WSO2 software. All are confirmed to be under active exploitation.
S.
CVE-2026-65660: dispute over SharePoint vulnerability classification 🔗 https:// cybersecurefox.com/en/cve-2026 -65660-sharepoint-spoofing-or-rce-classification # CVE -2026-65660 # SharePoint # Server # SharePoint # vulnerability # CWE -94 # Microsoft # SharePoint # patch
PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https:// github.com/DepthFirstDisclosur es/Nginx-Rift/
CISA has added four vulnerabilities to its KEV catalog with evidence of active exploitation. Affected systems include Microsoft IKE Service Extensions, SharePoint, VMware vCenter, and Apple macOS.
Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code on unpatched servers, according to threat intelligence company Defused.
exchange/@BleepingComp uter/117191175991675243 Not just Exchange Online.
Microsoft 365: Nuevo punto de entrada para crear páginas de SharePoint con Copilot (II)! com/2026/07/23/m...
This cluster contains unrelated fragments: Indigenous advocacy on Amazon conservation in Ecuador, a Spanish regional politician's controversy, a Galician poetry reference, European asylum policy disputes, and local Jacksonville road/school safety notices. No single coherent story emerges from these disparate items.
Six critical and high-severity vulnerabilities disclosed: DD-WRT stack buffer overflow (CVE-2021-27137), Langflow code execution flaws (CVE-2026-0770, CVE-2026-55255), WordPress Core interpretation conflict (CVE-2026-63030), Microsoft AD FS access control gap (CVE-2026-56155), and Oracle E-Business Suite privilege escalation (CVE-2026-46817). All pose remote compromise risks.
Metal Gear Online 3 RCE vulnerability CVE-2026-19874 fixed. Update the game to prevent attackers from executing remote code on your system.
CRITICAL THREAT: CVE-2026-50522 in Microsoft SharePoint enables unauthenticated remote code execution via untrusted data deserialization. Active exploitation is confirmed!
Eight unrelated items spanning April 2024 to November 2026: WHO partnership meetings with Netherlands and Spain, a research paper on LLM agent security, a weather alert, congressional bill tracking, FCC rulemaking, and an AI labor-market report. No coherent single story.
🤖 Exploit chain in the wild: CVE-2026-55040 (SharePoint JWT auth bypass) chained with CVE-2026-63520 (BCS RCE) probed against exposed SharePoint servers. Both PoCs public (Rapid7, VulnCheck); Shadowserver tracks 8,700+ exposed instances.
Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).
Between August 3 and August 20, 2026, CISA added multiple critical vulnerabilities to its active exploitation list, including authentication bypass flaws in N-able N-central, code injection in TrueConf Server, and server-side request forgery in MLflow. CVE-2026-18577 and CVE-2026-18556 affect remote access management software, while CVE-2026-72530 and CVE-2026-72529 target enterprise conferencing infrastructure.
CISA published six newly disclosed software vulnerabilities affecting LiteSpeed cPanel, Nx Console, TanStack, DD-WRT, Check Point SmartConsole, and Microsoft SharePoint, ranging from privilege escalation to remote code execution. These CVEs pose significant security risks to enterprise and open-source users.
Cluster mixes Fairphone Linux phone charging, Middle East defense pact, DOE nuclear projects, and RDP honeypot data with no single story. Reports span consumer hardware, international security, energy policy, and cybersecurity intelligence.