PULSEUnderground Intel

EN VIVO29señales / 24h

FEED

ransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturingransomsilentransomgroup reclama a G... R...ransombooba project reclama a Boardman Park · GB · Otherransombooba project reclama a Vetstoria · SE · Healthcareransombooba project reclama a City of Edgewater · US · Government & Defenseransombooba project reclama a DROUIN SAS · FR · Manufacturingransomn0n reclama a Company #127 · SAransomn0n reclama a Company #126ransomn0n reclama a Company #125 · USransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturingransomsilentransomgroup reclama a G... R...ransombooba project reclama a Boardman Park · GB · Otherransombooba project reclama a Vetstoria · SE · Healthcareransombooba project reclama a City of Edgewater · US · Government & Defenseransombooba project reclama a DROUIN SAS · FR · Manufacturingransomn0n reclama a Company #127 · SAransomn0n reclama a Company #126ransomn0n reclama a Company #125 · US

← Todos los CVEs

CVE Watch3 nov 2026

CVE-2026-116663

Tanium addressed an improper access controls vulnerability in Enforce.

CVSS

6.5

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 3 nov 2026 · Última mod.: 3 nov 2026 · CWE-862

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Tanium addressed an improper access controls vulnerability in Enforce.

Referencias oficiales

security.tanium.comhttps://security.tanium.com/TAN-2026-099

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1217306.5 MED

———emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Cloudflare send call, to impersonate other users or the organization to external recipients.2h CVE-2026-1217298.3 ALT

———emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations.2h CVE-2026-1217285.3 MED

———SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. Attackers can obtain a CSRF token from /login and POST credentials to /register/step2, which invokes the unchecked GraphQL RegisterAccount mutation to create accounts.2h CVE-2026-121253—

———Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Low)4h CVE-2026-121251—

———Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)4h CVE-2026-121199—

———Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: Medium)4h