🤖 nginx 1.31.7 / 1.30.6 fix memory-safety flaws: buffer overflow via alias+rewrite (CVE-2026-15176), use-after-free in async file I/O (CVE-2026-97205), overflow in script evaluation (CVE-2026-93479), request body injection in HTTP/3 (CVE-2026-95101). nginx rates them medium; F5's OOB bulletin flags them critical.
🔗 https://nginx.org/en/security_advisories.html
#CVE #InfoSec #nginx
XFEDI
ActivityPub#CVE
Public posts with this hashtag.
🤖 Rank Math PRO (WordPress SEO) shipped a backdoor Oct 15 20:02 → Oct 16 07:12 UTC: copies from rankmath.com and auto-updates carried malware that re-creates itself on every visit. Wordfence: CVE-2026-111862, CVSS 9.8. Clean 3.0.124 doesn't clean the server. IOCs: rank1cdn[.]com, wp_options _uf6qdn2hmm, admins wpsupport_*.
🔗 https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html
#CVE #WordPress #SupplyChain #Malware
The Hacker NewsPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorRank Math PRO distributed malware for 11 hours, exposing WordPress sites that activated affected builds to persistent backdoors.
"Threat actor? In my Siemens? It's more likely than you think"
Siemens has reported that CVE-2026-110936 is being exploited in the wild.
https://www.cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063
Canadian Centre for Cyber SecuritySiemens security advisory (AV26-1063) - Canadian Centre for Cyber SecuritySiemens security advisory (AV26-1063)
Active Exploitation of CVE-2026-110936 in Siemens Software Center
Siemens has validated that there is an active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center.