A security researcher found that Telegram Desktop's local inter-process communication, used to hand clicked links to an already-running instance, fails to escape its command separator character. This let a maliciously crafted tg:// link be split into multiple injected commands, one of which could trigger an internal scheme that reads a named file and sends it to a chat without asking the user for confirmation. The flaw, tracked as CVE-2026-107181 and rated 8.1/High, was confirmed on Windows up to version 6.9.3 and fixed in Telegram Desktop 7.2.9.
beaksec.github.io
· 2026-10-10
Security researcher Ryan Dewhurst told BleepingComputer that his Previdian honeypots detected exploitation attempts against CVE-2026-102255, a maximum-severity SonicWall SMA1000 vulnerability patched three days earlier. The flaw affects the Appliance WorkPlace interface on SMA1000 6210, 7210 and 8200v models, letting unauthenticated attackers reach internal functionality via a crafted request to the appliance's internal CouchDB service. Shadowserver counts over 400 SMA1000 appliances still exposed online, though it's unclear how many remain unpatched.
bleepingcomputer.com
· 2026-10-09
Citrix issued an advisory telling administrators to immediately patch a critical memory-overflow vulnerability in NetScaler ADC and NetScaler Gateway appliances, tracked as CVE-2026-107406. The bug can allow remote code execution or crash devices via denial-of-service, but only affects appliances configured as SAML Identity Provider or Service Provider. Citrix said it has not detected any active exploitation so far and listed specific firmware versions customers should upgrade to.
bleepingcomputer.com
· 2026-10-09
IEEE Computer Society published an analysis revisiting the December 2021 Log4Shell vulnerability (CVE-2021-44228) found in the widely used Apache Log4j logging library. The piece argues that the flaw, initially seen as a technical bug, escalated into a global security crisis that pushed organizations to reassess how they evaluate and manage security risk financially.
wpcms.computer.org
· 2026-10-08
Security firm Previdian detected exploitation attempts against CVE-2026-21589, an unauthenticated arbitrary file-access vulnerability affecting eight self-hosted Atlassian products including Jira, Confluence, and Bitbucket, shortly after watchTowr published a technical report explaining the bug. The flaw stems from a shared web-resource library that mishandles double-colon characters, letting attackers craft directory-traversal requests through plugin endpoints to read protected files without logging in. Atlassian had already issued an advisory urging administrators to patch self-hosted instances, saying it cannot confirm which customer deployments may already be compromised.
bleepingcomputer.com
· 2026-10-07
SonicWall issued hotfixes for CVE-2026-102255, a maximum-severity server-side request forgery flaw in the Appliance WorkPlace interface of its SMA1000 6210, 7210, and 8200v gateways. The company says an unauthenticated attacker could exploit the flaw via an unintended access path to make the appliance issue requests on their behalf and reach internal functionality, though it has found no evidence of active exploitation.
bleepingcomputer.com
· 2026-10-07
Atlassian disclosed CVE-2026-21589, a critical vulnerability letting unauthenticated attackers read specific files inside the web root of several self-hosted Data Center products, including Confluence, Jira, Bitbucket, Bamboo, Crowd, Crucible and Fisheye. Exploitation requires knowing the exact file name and path, and the flaw does not allow directory listing. Atlassian has released patched versions for each affected product and says Cloud customers are already protected.
bleepingcomputer.com
· 2026-10-06
Acronis has developed a security checklist for managed service providers (MSPs) to evaluate the security of remote monitoring and management (RMM) software. The list emphasizes testing capabilities such as endpoint discovery, patch automation, privileged access control, incident containment, and tenant separation. This guidance aims to address the vulnerabilities inherent in RMM tools, which are prime targets for cyberattacks due to their extensive access across customer networks.
bleepingcomputer.com
· 2026-10-06
Security researchers report that malicious actors are probing Rejetto HFS servers for a critical vulnerability, CVE-2026-61500, which affects versions 3.0.0 to 3.2.0. The flaw involves weak session cookie signing due to non-cryptographic random number generation, enabling attackers to forge administrator sessions and execute remote code. Observations indicate the scans originate from a China Telecom IP address targeting servers in Japan and the US.
bleepingcomputer.com
· 2026-10-05
Dell issued an advisory for CVE-2026-86360, a path traversal vulnerability in its Dell System Update command-line tool that could let an unauthenticated remote attacker execute code with root privileges on PowerEdge servers. The company also disclosed four additional high-severity DSU flaws and two maximum-severity Container Storage Modules vulnerabilities the same day, urging customers to upgrade DSU to version 2.3.0.0 or later.
bleepingcomputer.com
· 2026-10-05
Dutch cybersecurity officials warned that attackers are actively exploiting a high-severity macOS vulnerability in the screen sharing feature, gaining root access on exposed systems and installing Monero crypto miners. Apple issued a patch last week for Tahoe, Sequoia, and Sonoma after the flaw, rated 7.1 of 10, was disclosed at the Black Hat security conference; the company credited security firm Bynario with the finding.
stratechery.com
· 2026-10-05
Citrix has released emergency firmware updates for NetScaler ADC and Gateway appliances to fix CVE-2026-88779, a memory buffer vulnerability in SAML authentication with a CVSS score of 8.7. The company confirmed the bug has already been exploited in targeted attacks against unpatched devices, causing denial-of-service outages, and said it has found no evidence of customer data being compromised. Fixed versions include 14.1-73.41 and 13.1-64.28, with separate builds for FIPS and NDcPP customers.
bleepingcomputer.com
· 2026-10-04
GoKawiil