PULSEUnderground Intel

EN VIVO30señales / 24h

FEED

ransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Other

← Todos los CVEs

CVE Watch4 nov 2026

CVE-2026-92188

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows r

CVSS

9.8

Crítico

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 4 nov 2026 · Última mod.: 4 nov 2026 · CWE-306

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ForgeMBeanServerSupport module. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29168.

Referencias oficiales

www.zerodayinitiative.comhttps://www.zerodayinitiative.com/advisories/ZDI-26-854/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1217365.3 MED

———NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with client_id, redirect_uri and approved=true to insert unbounded ownerless authorization code records, limited only by rate limiting.8h CVE-2022-299669.8 CRÍ

———Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.8h CVE-2026-634827.5 ALT

———Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Depends(auth.get_current_active_user), and core/web/apiv2/audit.py does not perform a route-level authentication check for /api/v2/audit/timeline/{id}. An unauthenticated network attacker can use an empty, partial, or specific wildcard path to query TimelineLog records containing the actor, target_id, action, and details fields, including analyst usernames, object identifiers and values, and before-and-after object data. This exposes the operational history of threat-intelligence objects while other application routers require authentication. This issue is fixed in version 2.5.1.8h CVE-2026-1215575.9 MED

———WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers to send WhatsApp messages by calling the Chatwoot webhook route without verifyToken middleware. Attackers who know or guess a connected session name can POST outgoing message bodies to send arbitrary texts or files from that account to any number.15h CVE-2026-1215557.5 ALT

———Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full file contents or thumbnails across all mounts, bypassing PathRule permission grants.12h CVE-2026-1214543.7 BAJ

———Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve provisioned usernames, emails, names, externalIds, and group memberships.15h