NCSC Netherlands دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۲:۴۷

NCSC-2026-0464 [1.00] [M/H] Kwetsbaarheid verholpen in LXD van Canonical

Canonical heeft een kwetsbaarheid verholpen in LXD. De kwetsbaarheid (CVE-2026-112816) wordt veroorzaakt door onjuiste validatie van certificaatketens binnen de HTTPS API van Canonical LXD. De kwetsbaarheid treft LXD-versies vóór 4.0.15, 5.0.11, 5.21.9 en 6.10.1 binnen de betreffende releasebranches. Hierdoor kunnen niet-geauthenticeerde aanvallers die netwerktoegang hebben tot de HTTPS API en beschikken over het pub…

Vulnerabilities & Zero-Day

Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۶:۰۲

Network appliances go more than a year without patches as exploits speed up

The median vulnerability on enterprise network appliances stays unpatched for more than a year, Microsoft’s own telemetry shows, even as the most damaging software flaws are being weaponized within days of disclosure. Microsoft Security Research reported the findings Monday in an analysis of roughly 383,000 CVEs disclosed from 1999 through September 2026. It shows that the median time to patch a vulnerability exceeds…

Vulnerabilities & Zero-Day IoT & OT Security Threat Intelligence

Source

SecurityWeek سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۵:۵۱

Android’s November 2026 Updates Patch Over 200 Vulnerabilities

The most severe is a critical flaw in Framework leading to remote code execution without user interaction. The post Android’s November 2026 Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.

Vulnerabilities & Zero-Day Mobile Development

Source

SecurityWeek سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۵:۴۰

Critical Node-RED Flaw Exploited in Attacks

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells. The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek.

Vulnerabilities & Zero-Day IoT & OT Security Operating Systems

Source

BleepingComputer سه‌شنبه ۱۲ آبان ۱۴۰۵ · ۱۵:۳۵

Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs

Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws. [...]

Vulnerabilities & Zero-Day

Source