● On the wire
Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//Debian cifs-utils Regression Fixed in DSA-6567-2 Advisory//Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities//Debian DSA-6566-1 Expat Critical DoS Risks CVE-2026-66046 CVE-2026-76956//Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1//Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Debian SPIP Important Remote Code Execution Risk DSA-6565-1//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)//Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues//Ubuntu cifs-utils Fixes Privileged Mount Option Injection//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Debian haproxy Critical Denial of Service Vulnern DSA-6570-1//
Sfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)
Top story — Actualités

Exploitation active de vulnérabilités critiques dans les routeurs MikroTik (CVE-2026-67276, CVE-2026-86060)

Des attaquants exploitent activement une chaîne de vulnérabilités connue sous le nom de 'MikroTrick' dans les routeurs MikroTik RouterOS dont le service SSH est exposé sur Internet. CERT Polska et l'expert Costin Raiu ont révélé que les attaques combinent le contournement de l'authentification SSH (CVE-2026-67276, CVSS 9.2) et l'élévation de privilèges (CVE-2026-86060) afin d'obtenir un contrôle administratif complet sans identifiants.…

Read the article →
From the newsroom