US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running distributed denial-of-service (DDoS) platforms. [...]
US
The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running distributed denial-of-service (DDoS) platforms. [...]
US
ISC ha rilasciato aggiornamenti di sicurezza per BIND 9 e BIND Supported Preview Edition, software per la gestione e la risoluzione delle richieste DNS, che sanano alcune vulnerabilità, di cui 7 con gravità "alta". Tali vulnerabilità possono causare la terminazione anomala di alcuni processi o un consumo eccessivo delle risorse, fino a compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.07 CVE-2026-19666 CVE-2026-19667 CVE-2026-76163 CVE-2026-77692 CVE-2026-80274 CVE-2026-81563 CVE-2026-81736 ISC IT
De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
EPSS 0.07 CVE-2026-75029 CVE-2026-76163 CVE-2026-77119 CVE-2026-77692 CVE-2026-78301 CVE-2026-80274 CVE-2026-81563 CVE-2026-81736 ISC FR
Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software platforms. A vulnerability in the VPN and management web servers of the Cisco Secure Firewall ASA Software…
EPSS 0.01 CVE-2024-20260 Cisco US
A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper rate limiting for syslog message 419002. An attacker could exploit this vulnerability by sending a flood of…
EPSS 0.01 CVE-2026-20154 Cisco US
A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate…
EPSS 0.00 CVE-2026-20222 Cisco US
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the device to reload. This vulnerability is due to a logic error when parsing a DNS query and tracking the size of the incoming buffers. An attacker could exploit this vulnerability by formatting a crafted…
EPSS 0.00 CVE-2026-20248 Cisco US
Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated attacker to perform an sftunnel authentication bypass or sftunnel denial of service (DoS) attack. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This…
EPSS 0.01 CVE-2026-20295 CVE-2026-20323 Cisco US
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a crafted RADIUS request directly to an affected device. A successful exploit could allow the attacker to cause the ISE node to become unavailable. For single node…
EPSS 0.01 CVE-2026-20352 Cisco US
Aggiornamenti di sicurezza Squid risolvono tre vulnerabilità, di cui una con gravità “alta”, in Squid, software open source utilizzato come caching proxy. Tale vulnerabilità potrebbe consentire ad un utente malintenzionato di eludere le funzionalità di sicurezza e di alterare il contenuto memorizzato nella cache mediante richieste HTTP opportunamente predisposte.
EPSS 0.02 CVE-2026-61642 Squid IT FR
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.94 a dalších 1 CVE-2023-6918 CVE-2026-25639 CVE-2026-73954 CVE-2026-73955 CVE-2026-73960 CVE-2026-7598 CVE-2026-82993 CVE-2026-83014 CVE-2026-83015 CVE-2026-83016 CVE-2026-83017 CVE-2026-83018 CVE-2026-83019 CVE-2026-83070 CVE-2026-83147 CVE-2026-83420 CVE-2026-87264 Oracle FR
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
EPSS 0.00 CVE-2026-83088 CVE-2026-83156 CVE-2026-83160 CVE-2026-83271 CVE-2026-83272 CVE-2026-83333 CVE-2026-83347 CVE-2026-83348 CVE-2026-83349 CVE-2026-83350 CVE-2026-83351 Oracle FR
Une vulnérabilité a été découverte dans StrongSwan. Elle permet à un attaquant de provoquer un déni de service à distance.
EPSS 0.00 CVE-2026-78123 strongSwan FR
Palo Alto Networks heeft een kwetsbaarheid verholpen in PAN-OS software, specifiek voor VM-Series en PA-Series firewalls, evenals Panorama management software. De kwetsbaarheid betreft een buffer overflow in de XML-verwerkingsfunctionaliteit van PAN-OS. Ongeauthenticeerde aanvallers met netwerktoegang kunnen hierdoor een denial-of-service veroorzaken op VM-Series firewalls of willekeurige code uitvoeren met rootrechten op PA-Series firewalls. Ook Panorama management software is getroffen. De…
De multiples vulnérabilités ont été découvertes dans MISP. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.01 a dalších 2 CVE-2026-85226 CVE-2026-85227 CVE-2026-85230 CVE-2026-85236 CVE-2026-85237 CVE-2026-85238 CVE-2026-85239 CVE-2026-86342 CVE-2026-86347 CVE-2026-86351 CVE-2026-86408 CVE-2026-86417 CVE-2026-86418 CVE-2026-86419 CVE-2026-86440 CVE-2026-86441 CVE-2026-86452 MISP FR
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-85706, CVE-2026-87719, CVE-2026-88765, CVE-2026-79708, CVE-2026-78252, CVE-2026-13210, CVE-2025-14871, CVE-2026-1168, CVE-2024-11222, CVE-2026-12910, CVE-2026-82837, CVE-2026-19619, CVE-2026-86341, CVE-2026-86340, CVE-2026-7514, CVE-2026-8030, CVE-2026-16794, CVE-2026-3855, Summary: On September 10, 2026, we released versions 19.3.2, 19.2.6, 19.1.8 for GitLab Community Edition (CE)…
KEV ✓ EPSS 0.97 CVSS 10.0 a dalších 1 CVE-2025-14871 CVE-2026-1168 CVE-2026-12910 CVE-2026-13210 CVE-2026-16794 CVE-2026-19619 CVE-2026-3855 CVE-2026-7514 CVE-2026-78252 CVE-2026-79708 CVE-2026-8030 CVE-2026-82837 CVE-2026-85706 CVE-2026-86340 CVE-2026-86341 CVE-2026-87719 CVE-2026-88765 GitLab FI FR
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
EPSS 0.02 CVE-2026-22575 CVE-2026-26084 CVE-2026-84385 CVE-2026-84386 CVE-2026-84387 CVE-2026-84388 CVE-2026-84389 CVE-2026-84390 CVE-2026-84391 CVE-2026-84392 CVE-2026-84393 Fortinet FR
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à l'intégrité des données.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Serial number: AV26-909Date: September 10, 2026 As of September 9, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: ClearPass Policy Manager (CPPM) Prior to or equal to 6.11.14 Prior to or equal to 6.12.8 HPE IceWall products Multiple versions and models The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBNW05130 rev.1 - Multiple Vulnerabilities in HPE…
HPE CA
Wildberries told several Russian media outlets earlier this week that payments to some sellers were delayed by security measures introduced after a distributed denial-of-service (DDoS) attack targeted systems used to track and withdraw their earnings.
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.0: 10.0, CVEs: CVE-2026-44756, CVE-2026-58240, CVE-2026-76969, CVE-2026-66768, CVE-2026-58243, CVE-2026-76958, CVE-2026-76967, CVE-2026-66767, CVE-2026-2332, CVE-2026-76968, CVE-2026-44766, CVE-2026-76971, CVE-2026-34477, CVE-2026-76977, CVE-2026-76960, CVE-2026-76961, CVE-2026-76959, CVE-2026-76962, CVE-2026-76963, CVE-2026-58234, Summary: On 8th of September 2026, SAP security patch day saw the release of…
EPSS 0.01 CVSS 10.0 a dalších 3 CVE-2026-44766 CVE-2026-58234 CVE-2026-58240 CVE-2026-58243 CVE-2026-66767 CVE-2026-66768 CVE-2026-76958 CVE-2026-76959 CVE-2026-76960 CVE-2026-76961 CVE-2026-76962 CVE-2026-76963 CVE-2026-76967 CVE-2026-76968 CVE-2026-76969 CVE-2026-76971 CVE-2026-76977 SAP FI FR
Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer un déni de service à distance.
EPSS 0.00 CVE-2026-86853 Mozilla FR
De multiples vulnérabilités ont été découvertes dans Postfix. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.
Postfix FR
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Adobe FR
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-66307 US
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-66303 US
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-57099 US
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
EPSS 0.00 CVE-2026-78446 US
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69304 US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69679 US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69637 US
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVSS 7.5 CVE-2026-69881 US
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69497 US
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69428 US
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69374 US
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69372 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69342 US
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69329 US
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-68898 US
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67641 Microsoft US
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-62762 US
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70065 US
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-78523 US
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67376 Microsoft US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77895 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77893 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77889 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77890 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77886 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77888 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77502 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77501 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77499 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77498 US
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-72978 US
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69378 Microsoft US
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-68887 US
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-72939 US