PULSEUnderground Intel

LIVE39signals / 24h

FEED

ransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Servicesransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomgenesis reclama a Acclaim Companies / JCJ Investment · US · Financial Servicesransomgenesis reclama a Gilliam & Associates, P.C · US · Professional Servicesransomgenesis reclama a Facts N Figures · US · Professional Servicesransomgenesis reclama a Illinois Work Injury Resource Center (IWIRC) · US · Healthcareransomgenesis reclama a Psychometrics Canada · CA · Professional Servicesransomgenesis reclama a Louisiana Crane & Construction · US · Manufacturingransomgenesis reclama a Aliqout Association · USransomgenesis reclama a EAS Engineering · US · Manufacturingransomgenesis reclama a Fred H Beck & Associates · US · Professional Services

CVE WatchJul 9, 2026

CVE-2022-43309

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

CVSS

5.5

Medium

EPSS

0.2%

p4

KEV

—

Exploit Today

1

0-100

Published: Apr 7, 2023 · Last modified: Jul 9, 2026 · CWE-732

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-10-022026-10-29

Technical description

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1114995.5 MED

———Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.18h CVE-2026-118574—

——0Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.15h CVE-2026-1070609.1 CRI

——0Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.15h CVE-2026-1070557.5 HIG

——0Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.15h CVE-2026-1070477.5 HIG

——0Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.15h CVE-2026-1070447.5 HIG

——0Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.15h