NCSC Netherlands پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۰۲

NCSC-2026-0493 [1.00] [M/H] Kwetsbaarheden verholpen in Ivanti Endpoint Manager

Ivanti heeft twee kwetsbaarheden in Ivanti Endpoint Manager verholpen, die betrekking hebben op de Core- en Agent-componenten. De eerste kwetsbaarheid (CVE-2026-121653) betreft een SQL-injectie in de Core van Ivanti Endpoint Manager-versies vóór 2024 SU8. Hierdoor kan een externe, niet-geauthenticeerde aanvaller kwaadaardige SQL-commando's injecteren, wat kan leiden tot het uitvoeren van willekeurige code op afstand…

Vulnerabilities & Zero-Day Databases

Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Canadian Centre for Cyber Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۲۶

N-able security advisory (AV26-1143)

Vulnerabilities & Zero-Day Open Source

Source

SOCRadar پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۲۵

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

ARTEX is an open-source, LLM-driven autonomous penetration-testing framework, and its web console is now deployed at scale on U.S. commercial hosting. Starting from internet-wide scanner telemetry, SOCRadar researchers merged and de-duplicated 1,295 U.S.-hosted candidate instances, re-validated each one, and confirmed 916 live ARTEX-family consoles in a snapshot taken on November 11, 2026. The software was […]

Malware & Threats Vulnerabilities & Zero-Day AI Security

Source

The Register - Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۲۵

Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era

Upgrade, migrate, but don't prevaricate – time has run out

Vulnerabilities & Zero-Day Operating Systems

Source

CERT/CC Vulnerability Notes پنجشنبه ۲۱ آبان ۱۴۰۵ · ۱۸:۱۸

VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability

Overview ComfyUI-Easy-Use version 1.3.6 contains a vulnerability in its save_preview() handler that allows an unauthenticated attacker to overwrite an installed custom node’s Python file. An attacker who can reach the affected ComfyUI instance over the network can use the overwrite to execute arbitrary code when ComfyUI restarts. Description ComfyUI is a node-based interface for building generative AI workflows. Comf…

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source