PULSEUnderground Intel

LIVE15signals / 24h

FEED

ransombooba project reclama a COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA · US · Healthcareransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransombooba project reclama a COASTAL CAROLINA NEUROPSYCHIATRIC CENTER, PA · US · Healthcareransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Education

CVE WatchOct 16, 2026

CVE-2026-96044

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS

8.8

High

EPSS

0.7%

p53

KEV

—

Exploit Today

16

0-100

Published: Oct 13, 2026 · Last modified: Oct 16, 2026 · CWE-1287 · CWE-269

EPSS · 30d

0.7%EPSS · 30 days0.7%

2026-10-142026-10-19

Technical description

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1053129.9 CRI

———A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on all Strimzi CRDs (including KafkaUsers), patch on Kafkas/KafkaRebalances, and cluster-monitoring-view. The attacker's code reads the projected SA token and gains cross-tenant Strimzi control-plane read+write access.3h CVE-2026-869333.3 LOW

——0A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.2h CVE-2026-869216.2 MED

——0A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.3h CVE-2026-288537.8 HIG

——0The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.3h CVE-2026-1054538.4 HIG

——0IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.3h CVE-2026-1100317.2 HIG

——5The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.20h