Tag: cve-2024-40766

7-Zip CVE-2026-14266 RCE Risk Explained CVE-2026-14266 is a heap-based buffer overflow in 7-Zip’s XZ decompression logic. If a user opens or extracts specially crafted compressed content with an affected 7-Zip version, t

SonicWall has patched two actively exploited zero-days affecting SMA 1000 Series secure remote access appliances. The issues are CVE-2026-15409, a critical unauthenticated SSRF flaw in the Workplace interface, and CVE-2026-15410, a post-authentication code injection flaw in the Appliance Management Console that can lead to arbitrary OS command execution as administrator under certain conditions. Public reporting […]

Ubiquiti Fixes CVE-2026-50746 in UniFi Connect Ubiquiti has released fixes for multiple vulnerabilities in the UniFi ecosystem under Security Advisory Bulletin 066 (SAB-066) . The highest-severity issue highlighted in pu

BeyondTrust Fixes RS/PRA CVE-2026-40138 and More BeyondTrust has published security advisory BT26-03 for four vulnerabilities in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) appliances. The flaws in

CISA Flags SharePoint RCE (CVE-2026-45659) for Active Exploitation CISA has added CVE-2026-45659 to its Known Exploited Vulnerabilities (KEV) catalog as of July 1, 2026, indicating active exploitation. The vulnerability

Oracle EBS Flaw CVE-2026-Adresse geschuetztOracle Payments to Takeover CVE-2026-46817 is a critical vulnerability in Oracle E-Business Suite (EBS) Oracle Payments, specifically in the File Transmission component. Oracle rat