PULSEUnderground Intel

EN VIVO22señales / 24h

FEED

ransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomincransom reclama a FINANCIAMENTO LTDA · BR · Financial Servicesransomqilin reclama a MOA Architecture · SG · Professional Servicesransomqilin reclama a Joliet Public Schools District 86 · US · Educationransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomincransom reclama a FINANCIAMENTO LTDA · BR · Financial Servicesransomqilin reclama a MOA Architecture · SG · Professional Servicesransomqilin reclama a Joliet Public Schools District 86 · US · Education

← Todos los CVEs

CVE Watch14 oct 2026

CVE-2026-83787

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVSS

5.5

Medio

EPSS

0.3%

p20

KEV

—

Exploit Today

6

0-100

Publicado: 13 oct 2026 · Última mod.: 14 oct 2026 · CWE-288

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83787

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-110852—

——0n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.8h CVE-2026-890678.8 ALT

——0Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.15h CVE-2026-858655.5 MED

——6Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.1d CVE-2026-11013010.0 CRÍ

——14Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers can send a PUT request to /api/users/<id>.js to reset the admin's or any user's password and take over the account.14h CVE-2026-117318.8 ALT

——5An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.1d CVE-2026-196228.8 ALT

——8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.1d