NCSC Netherlands چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۱:۴۲

NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-central

N-able heeft meerdere kwetsbaarheden verholpen in N-able N-central. Deze kwetsbaarheden treffen versies ouder dan 2026.4.1.26. Er meerdere kwetsbaarheden met betrekking tot XML External Entity (XXE), waardoor de verwerking van XML-data mogelijk op ongewenste wijze kan worden beïnvloed. Daarnaast zijn er kwetsbaarheden in de vorm van OGNL Injection en Stored Cross-Site Scripting (XSS), waarbij kwaadaardige code kan wo…

App & Web Security

Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Tenable Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۲۵

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials.Key TakeawaysAble2Shell is a set of 33 alleged vulnerabilities in N-able N-central, published with proof-of-concept code. The researcher says one chain lets an unauthenticated attacker run commands on the serv…

Vulnerabilities & Zero-Day Threat Intelligence Programming & Languages

Source

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۶:۴۰

November 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials

A currently exploited zero-day vulnerability that can let attackers steal hashed Outlook NTLM credentials is among the 1,094 holes Microsoft fixed in its November Patch Tuesday releases. Although rated as only moderate in severity, with a CVSS score of 6.5, Windows administrators need to address CVE-2026-124194 immediately because threat actors are already attacking it. “Don’t let the low score fool you,” said Nick C…

Vulnerabilities & Zero-Day Programming & Languages Mobile Development

Source

Microsoft Security Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۲:۳۰

Detecting sleeper agents hiding in AI model neurons

Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent by editing fewer than ten neurons to inject a short payload; Microsoft Research has also found that this threat is detectable by frontier agents, which can identify anomalous weight edits. The post Detecting sleeper agents hiding in AI model neurons appeared first on Microsoft Security Blog.

Malware & Threats Cloud Security AI Security

Source

CSO Online چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۱:۳۵

N-able N-central gets emergency fix two days after 33 exploits published

N-able has taken its hosted N-central remote monitoring and management (RMM) platform offline worldwide and shipped an emergency hotfix after a security researcher released 33 zero-day exploits for the software, including attack chains that could let unauthenticated attackers take over servers. N-central is used by managed service providers (MSPs) and enterprise IT teams to remotely manage, patch, and support endpoin…

Malware & Threats Vulnerabilities & Zero-Day Ransomware

Source