PULSEUnderground Intel

EN VIVO21señales / 24h

FEED

ransomemperador reclama a Spelman Logistics · Transportationransomn0n reclama a Company #24 · Not Foundransombraincipher reclama a huntcompanies.com · US · Not Foundransomn0n reclama a Company #23 · Not Foundransomn0n reclama a Company #22 · Not Foundransomn0n reclama a Company #21 · Not Foundransomn0n reclama a Company #20 · Not Foundransomn0n reclama a Company #19 · Not Foundransomn0n reclama a Company #14 · CA · Not Foundransomrhysida reclama a Reed & Giordano PA · US · Professional Servicesransomn0n reclama a Company #29 · US · Technologyransomn0n reclama a Company #28 · US · Professional Servicesransomn0n reclama a Company #27 · AU · Healthcareransomn0n reclama a Company #26 · US · Healthcareransomemperador reclama a Spelman Logistics · Transportationransomn0n reclama a Company #24 · Not Foundransombraincipher reclama a huntcompanies.com · US · Not Foundransomn0n reclama a Company #23 · Not Foundransomn0n reclama a Company #22 · Not Foundransomn0n reclama a Company #21 · Not Foundransomn0n reclama a Company #20 · Not Foundransomn0n reclama a Company #19 · Not Foundransomn0n reclama a Company #14 · CA · Not Foundransomrhysida reclama a Reed & Giordano PA · US · Professional Servicesransomn0n reclama a Company #29 · US · Technologyransomn0n reclama a Company #28 · US · Professional Servicesransomn0n reclama a Company #27 · AU · Healthcareransomn0n reclama a Company #26 · US · Healthcare

← Todos los CVEs

CVE Watch11 oct 2026

CVE-2026-42696

Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.

CVSS

10.0

Crítico

EPSS

0.6%

p47

KEV

—

Exploit Today

14

0-100

Publicado: 10 oct 2026 · Última mod.: 11 oct 2026 · CWE-94

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/sitevault-backup-restore-migration/vulnerability/wordpress-sitevault-backup-restore-migration-cloning-plugin-1-5-18-remote-code-execution-rce-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1085663.5 BAJ

——8A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the component Private Message Handler. Such manipulation of the argument nickname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3a1ec8fcb073a46d06a2ab83bc2bf68225834281. It is best practice to apply a patch to resolve this issue.18h CVE-2026-620986.5 MED

——3Unauthenticated Content Injection in Boutique <= 2.3.3 versions.15h CVE-2026-398028.1 ALT

——11Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.15h CVE-2026-1085989.8 CRÍ

——16Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.1d CVE-2026-1085936.4 MED

——59router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.1d CVE-2026-1030717.5 ALT

——5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.15h