نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
Wordfence Blog

Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core

On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing several security issues, most notably an Unauthenticated Remote Code Execution vulnerability in WordPress core, identified as CVE-2026-119977. The vulnerability affects WordPress core versions 4.7 through 7.1.3 and can be leveraged by unauthenticated attackers to execute…

آسیب‌پذیری و روز صفر
خواندن متن کامل در Wordfence Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SANS Internet Storm Center

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)

This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for CVE-2023-20198.

آسیب‌پذیری و روز صفر توسعه موبایل
منبع
Ubuntu Security Notices

USN-8955-2: nginx vulnerabilities

USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. In addition, this update fixes CVE-2026-42533 for these releases. It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variab…

آسیب‌پذیری و روز صفر بات‌نت و DDoS
منبع
NCSC Netherlands

NCSC-2026-0468 [1.00] [M/H] Kwetsbaarheid verholpen in Zyxel product

Zyxel heeft een kwetsbaarheid verholpen in de firmware van de Zyxel GS1900-24E netwerk switch, specifiek in versie 2.90(AAHK.2)C0 en eerder. De kwetsbaarheid betreft een out-of-bounds write in het CGI-programma van de management-interface van het apparaat. Een niet-geauthenticeerde aanvaller met toegang tot de management-interface kan via speciaal vervaardigde HTTP-verzoeken commando's uitvoeren op het systeem. De fo…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی
منبع