Details and PoC code are public for the Drupal RCE vulnerability CVE-2026-108097 in Field UI. Update to 11.4.10, 11.3.19 or 10.6.19 now.
#Drupal #CVE2026108097 #RCE #FieldUI #PoC #WebSecurity #PatchNow #CyberSecurity
XFEDI
ActivityPubRemote profile
Daily CyberSecurity
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
Open remote profile ↗Posts
Calif released details and PoC code for an OpenBSD kernel vulnerability enabling local privilege escalation to root. Apply errata 018 and 026.
#OpenBSD #BigFish #LocalPrivilegeEscalation #KernelSecurity #PoC #Calif #PatchNow #CyberSecurity
The Redis RESTORE vulnerability CVE-2026-25243 is exploited in the wild, Defused honeypots show. Upgrade to Redis 8.6.3 or block RESTORE.
#Redis #CVE202625243 #ExploitedInTheWild #RemoteCodeExecution #Database #Honeypot #PatchNow #CyberSecurity
UpdraftPlus data breach exposed customer data and keys now used in an UpdraftCentral backdoor campaign. Update to 1.26.12 and check your sites.
#UpdraftPlus #UpdraftCentral #DataBreach #WordPress #Backdoor #WordPressSecurity #TeamUpdraft
https://securityonline.info/updraftplus-data-breach/?utm_source=mastodon&utm_medium=jetpack_social
Siemens Software Center vulnerability CVE-2026-110936 is exploited in the wild by ClickFix attackers via DLL sideloading. Update to 4.0.9.8.
#Siemens #SiemensSoftwareCenter #CVE2026110936 #ExploitedInTheWild #ClickFix #DLLSideloading #Malware #CyberSecurity
A critical Laravel authentication bypass (CVSS 9.2) in TokenGuard enables account takeover without a token. Upgrade to 13.29.0 or 12.68.0.
#Laravel #PHP #AuthenticationBypass #AccountTakeover #WebSecurity #OpenSource #PatchNow #CyberSecurity