PULSEUnderground Intel

EN VIVO23señales / 24h

FEED

ransomqilin reclama a Aryza · AR · Technologyransomqilin reclama a Aerotop · CL · Transportationransomqilin reclama a CDG Chartered Accounting · AU · Professional Servicesransomqilin reclama a Revi Group · MX · Otherransomakira reclama a Bankruptcy Software Specialists · Professional Servicesransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturingransomqilin reclama a Aryza · AR · Technologyransomqilin reclama a Aerotop · CL · Transportationransomqilin reclama a CDG Chartered Accounting · AU · Professional Servicesransomqilin reclama a Revi Group · MX · Otherransomakira reclama a Bankruptcy Software Specialists · Professional Servicesransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturing

← Todos los CVEs

CVE Watch23 oct 2026

CVE-2026-79850

No description provided

CVSS

10.0

Crítico

EPSS

0.4%

p33

KEV

—

Exploit Today

10

0-100

Publicado: 22 oct 2026 · Última mod.: 23 oct 2026 · CWE-288

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

No description provided

Referencias oficiales

support.hpe.comhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-7984410.0 CRÍ

——10No description provided16h CVE-2026-1147326.8 MED

——9Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in with an alias address, rcube_user::query() matched the address against identity records without qualifying the lookup by IMAP host, so a login could be resolved to a user account belonging to a different IMAP host. Upstream fixed this in the commit “Fix bug where an alias login wasn’t qualified by IMAP host”.2d CVE-2026-963873.8 BAJ

——3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login versions: from 1.0 to 1.6.1d CVE-2026-963856.5 MED

——3Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0.1d CVE-2026-84923—

——5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue affects Email Verification / SMS Verification / OTP Verification versions: from 0.0.0 to 2.4.0.2d CVE-2026-1146358.7 ALT

——3Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client certificates without presenting one.1d