UniFi Connect Application Vulnerability
UniFi Connect is a product by Ubiquiti affected by CVE-2026-50746, a critical command injection vulnerability. Users are advised to update to version…
Tag: command injection
UniFi Access Application Vulnerabilities
UniFi Access is a product by Ubiquiti affected by CVE-2026-50748 and CVE-2026-54400, which allow command injection and privilege escalation. Users are advised…
UniFi OS Vulnerabilities
UniFi OS is the operating system for Ubiquiti's UniFi devices, affected by CVE-2026-54402, CVE-2026-55116, and previously weaponized CVEs. Users are advised to…
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has released security updates to address multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, UniFi Talk, UniFi Access,…
Progress Kemp LoadMaster Pre-Auth Root Command Injection Flaw (CVE-2026-8037) Patched
A critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
Ivanti Sentry Mobile Device Management
Ivanti Sentry is a mobile device management product, associated with CVE-2026-10520 used as a lure in the ChocoPoC campaign.
CVE-2026-42824: Microsoft 365 Copilot Enterprise Search Vulnerability
A critical command injection vulnerability in Microsoft 365 Copilot Enterprise Search, discovered by Varonis Threat Labs, allows one-click data exfiltration. Microsoft assigned…
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
Threat actors are actively exploiting three security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. The flaws include CVE-2026-39813…
CVE-2026-26030: Microsoft Semantic Kernel Additional Command Injection Vulnerability
Another command injection vulnerability in Microsoft Semantic Kernel related to insecure shell command handling.