CVE Vulnerabilities - 28 September 2026

Netcore NR289‑GE allows remote access without login

CVE-2026-101077

The Netcore NR289‑GE version 1.4.5102 lets anyone on the network send a request to the boa_temp component and skip the normal login check. This could let attackers view or change information the syste...

9.3

Netcore NR289‑GE allows remote command execution via NTP setting

CVE-2026-101076

The Netcore NR289‑GE device (firmware version 1.4.5102) lets an attacker send specially crafted data to the NTP configuration page, causing the system to run arbitrary commands. This can be done from ...

9.3

Netcore NR289-GE allows remote command injection

CVE-2026-101075

The NR289-GE video intercom running version 1.4.5102 can be tricked into executing operating system commands when an attacker supplies a crafted MAC address to its location_time.cgi feature. This mean...

9.3

Netcore NR289-GE allows remote command execution via ap_ip.cgi

CVE-2026-101072

The Netcore NR289-GE device (version 1.4.5102) runs a web script called ap_ip.cgi that accepts an IP address parameter. By sending a specially crafted value, an attacker can cause the device to run an...

9.3

FAST FAC1900R devdiscover Service can be remotely exploited

CVE-2026-101039

The devdiscover Service in FAST FAC1900R version 20190827_2.0.2 contains a flaw that lets an attacker send specially crafted data and overflow a memory area, potentially crashing the device or taking ...

9.3

Netcore NBR200V2 web interface allows remote command execution

CVE-2026-101001

The web management page on Netcore NBR200V2 can be tricked into running system commands by sending a crafted request. An attacker on the network could use this to take control of the device. Apply the...

9.3

Netcore NBR100V2 allows remote actions without permission

CVE-2026-101000

The Netcore NBR100V2 device can be triggered over the network to perform actions without checking whether the user is authorized. This occurs because a specific settings file does not correctly verify...

9.3

LXD can let an attacker write any file as root

CVE-2026-87799 DEBIAN-CVE-2026-87799 UBUNTU-CVE-2026-87799 GHSA-fmc3-3cpq-6whr

Versions of Canonical LXD for Linux can be tricked into placing a symbolic link during a migration, letting an authorized user or a malicious source server write files anywhere on the host. Because th...

9.9

LXD backup import lets privileged user alter host files

CVE-2026-85526 DEBIAN-CVE-2026-85526 UBUNTU-CVE-2026-85526 GHSA-h85r-gjgx-g2rv

When LXD (or its Debian variants) imports a Btrfs backup, a user who can create containers can craft a special file path that lets them delete or replace any file on the server as the root user. This ...

9.9

Apache Roller XML-RPC can let users edit other blogs

CVE-2026-82377

Apache Roller version 6.1.5 lets anyone who can log in use the old XML‑RPC interface to view, change or delete posts that belong to other blogs, because it does not check whether the user has rights t...

9.9

Authlib library can accept unsigned data as verified

CVE-2026-96760 UBUNTU-CVE-2026-96760 DEBIAN-CVE-2026-96760

The Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that the system will trust. Upd...

9.8

Joomla Book Library extension lets attackers change data order

CVE-2026-101110

The free Book Library add‑on for Joomla can be tricked into running a database command that changes how book listings are sorted. An attacker can send specially crafted requests without logging in to ...

9.3

CGA-m4qm-vrm4-7qq4

CGA-m4qm-vrm4-7qq4

9.8

CGA-wmgq-wv2r-mcjv

CGA-wmgq-wv2r-mcjv

9.8

Logsign SIEM can be accessed with default admin credentials

CVE-2026-90924

The Logsign SIEM version 6.4.101 through 6.4.116 accepts the factory‑set username and password, so anyone who knows these defaults can log in. This could let an attacker view or change security logs a...

9.8

CGA-fqw5-rw4p-m2r8

CGA-fqw5-rw4p-m2r8

9.8

libdbi-perl can let attackers gain higher privileges

CVE-2026-73193 GHSA-wj3v-c3hh-mhqr ROOT-OS-DEBIAN-12-CVE-2026-73193 DEBIAN-CVE-2026-73193

The libdbi-perl software used on Debian systems could be manipulated so an attacker can increase their access rights. This could let them control more of the system or data. Update the libdbi-perl pac...

9.8

Red Hat IPA may let attackers gain unauthorized access

RHSA-2026:72279

The IPA server and its client components for Red Hat can be tricked into granting access to users who should not have it. This could let an attacker view or change sensitive configuration data. Apply ...

9.8

Unbound on Red Hat could allow unauthorized data access

RHSA-2026:72264

The Unbound DNS resolver and its Python bindings provided by Red Hat may let attackers retrieve or modify DNS information they shouldn't see. This could expose internal network details or redirect use...

9.8

Apache Roller can run attacker code via XML-RPC

CVE-2026-82384

Apache Roller version 6.1.5 lets anyone send specially crafted XML-RPC messages that are processed before anyone logs in. This can let an attacker make the server execute their own code, potentially t...

9.8

CGA-m7hm-5f9r-4m78

CGA-m7hm-5f9r-4m78

9.6

SailPoint IdentityIQ enables remote code execution by anyone

CVE-2026-12342

All versions of SailPoint IdentityIQ can be fooled into executing code because it does not properly verify data sent to its web interface. This means someone could control the IdentityIQ server withou...

9.6

Rancher allows anyone to change UI settings and run code

CVE-2026-88804 GHSA-992f-xh8r-jg2f

In Rancher versions prior to the latest patches, anyone on the internet can modify public interface settings without logging in. This lets attackers insert hidden scripts that run whenever an administ...

9.6

LXD btrfs storage allows host file delete or write

CVE-2026-85185 DEBIAN-CVE-2026-85185 GHSA-27q7-qwhm-c34p UBUNTU-CVE-2026-85185

If you run LXD (or its Debian fork Incus) on a Linux system that uses the btrfs file system, a user who is allowed to create containers could delete any file on the host or place their own files anywh...

9.6

Google Cloud Application Integration can run attacker code

CVE-2026-81867

When using older versions of Google Cloud Application Integration, a regular user could create a specially crafted script that would make the shared production servers run whatever code they wanted. T...

9.4