Tessera
Folgen

CyberHub

@cyberhub.blog

→ News, podcast, subreddit and yt video summaries → CVE alerts → CTF challenges https://www.cyberhub.blog #cybersecurity #hacking #cve #tech #news #ai

27658 Posts448 Follower376 Folgt
CyberHub@cyberhub.blog · 26m ago

📌 CVE-2026-48396 - Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An at... https://www.cyberhub.blog/cves/CVE-2026-48396

CVE-2026-48396

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a m

cyberhub.blog

CyberHub@cyberhub.blog · 56m ago

📌 CVE-2026-48395 - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An atta... https://www.cyberhub.blog/cves/CVE-2026-48395

CVE-2026-48395

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a mal

cyberhub.blog

CyberHub@cyberhub.blog · 2h ago

📌 CVE-2026-67244 - A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification confi... https://www.cyberhub.blog/cves/CVE-2026-67244

CVE-2026-67244

A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory in

cyberhub.blog

CyberHub@cyberhub.blog · 2h ago

📌 CVE-2026-55685 - React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests th... https://www.cyberhub.blog/cves/CVE-2026-55685

CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React Ro

cyberhub.blog

CyberHub@cyberhub.blog · 3h ago

📌 CVE-2026-58151 - Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This issue affects Apache Traffic S... https://www.cyberhub.blog/cves/CVE-2026-58151

CVE-2026-58151

Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and flow-control. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4,

cyberhub.blog

CyberHub@cyberhub.blog · 3h ago

📌 CVE-2026-67215 - cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUti... https://www.cyberhub.blog/cves/CVE-2026-67215

CVE-2026-67215

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document

cyberhub.blog

CyberHub@cyberhub.blog · 4h ago

📌 CVE-2026-67248 - A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not p... https://www.cyberhub.blog/cves/CVE-2026-67248

CVE-2026-67248

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial of

cyberhub.blog

CyberHub@cyberhub.blog · 5h ago

📌 CVE-2026-17678 - Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially ... https://www.cyberhub.blog/cves/CVE-2026-17678

CVE-2026-17678

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

cyberhub.blog

CyberHub@cyberhub.blog · 10h ago

📌 CVE-2026-17786 - Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a m... https://www.cyberhub.blog/cves/CVE-2026-17786

CVE-2026-17786

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)

cyberhub.blog

CyberHub@cyberhub.blog · 14h ago

📌 CVE-2026-17899 - Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious ex... https://www.cyberhub.blog/cves/CVE-2026-17899

CVE-2026-17899

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Low)

cyberhub.blog