SonicWall GMS Flaws Unpatched After End of Life

SonicWall has disclosed two vulnerabilities in its Global Management System (GMS) and says it will not fix either of them. The more severe flaw, CVE-2026-109593, lets an unauthenticated attacker with network access read internal GMS files. The second, CVE-2026-109594, is a SQL injection that an authenticated attacker can use to access or modify data in […]

آسیب‌پذیری و روز صفر پایگاه داده امنیت وب و نرم‌افزار
خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Industrial Cyber

VAPOR PANDA hackers use multi-agent AI to target government, pharmaceutical, semiconductor, defense organizations

New research from CrowdStrike has identified a global cyberespionage campaign by China-nexus threat actor VAPOR PANDA that uses... The post VAPOR PANDA hackers use multi-agent AI to target government, pharmaceutical, semiconductor, defense organizations appeared first on Industrial Cyber.

Help Net Security

Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441)

Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, Binarly found. That’s because the patch fixed a different bug (CVE-2026-7273) from the one (CVE-2026-107441) the exploit actually relies on. The exploit for an unpatched bug In June 2026, Zyxel published an advisory on CVE-2026-7273, a stack-based…

Industrial Cyber

OT-ISAC details aviation cybersecurity risks involving passenger reservation systems, airport OT, communications protocols

The OT-ISAC (Operational Technology Information Sharing and Analysis Center) published two reports Wednesday warning that cybersecurity risks facing... The post OT-ISAC details aviation cybersecurity risks involving passenger reservation systems, airport OT, communications protocols appeared first on Industrial Cyber.

Industrial Cyber

OTCC cites AI-driven vulnerability exploitation in push for 10-year CISA 2015 reauthorization

The Operational Technology Cyber Coalition (OTCC) has joined 34 critical infrastructure organizations in urging U.S. congressional leaders to... The post OTCC cites AI-driven vulnerability exploitation in push for 10-year CISA 2015 reauthorization appeared first on Industrial Cyber.