VulnerabilitySANS NewsBites
Tabiq Hotel Check-in System Data Exposed Through Misconfigured Bucket
NEOSEC enrichment — no mirror of the original source
A misconfigured AWS bucket was exposing data from the Tabiq hotel check-in system for several years. Security researcher Anurag Sen discovered the vulnerability in the Tabiq system that was leaking customer information because the bucket wa
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-42897Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform …
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux Kernel: Sicherheitslücke
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-41615Microsoft Authenticator Information Disclosure Vulnerability
- CVE-2026-41615Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.
- CVE-2026-46333Debian linux: security update
- CVE-2026-46333Linux kernel (Azure FIPS) vulnerabilities
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic
- CVE-2026-46333Debian linux: security update
- CVE-2026-42897Microsoft Microsoft — Microsoft Exchange Server Cross-Site Scripting Vulnerability
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-42897Microsoft Exchange Server Spoofing Vulnerability
- CVE-2026-46333Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CVE-2026-46333In the Linux kernel, the following vulnerability has been resolved:
Affected vendors and products
- Debian Debian Linux
- Debian Linux
- Debian Linux-6.1
- IBM Datapower Gateway
- Linux Linux
- Linux Linux Kernel
- Microsoft Microsoft Authenticator
- Microsoft Microsoft Exchange Server
- Microsoft Microsoft Exchange Server Subscription Edition
- Microsoft Microsoft Authenticator For Android
- Microsoft Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Microsoft Exchange Server 2019 Cumulative Update 14
More on Misconfigured
Other advisories
- MediumCVE-2026-55990Packet of death for a DNSCrypt misconfigured Unbound
- HighCVE-2023-36809Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
- CriticalCVE-2026-53434Apache Tomcat util accepted misconfigured CRLs
- MediumCVE-2026-21785A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define directives without…
- HighCVE-2025-11393Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Access in github.com/RedHatInsights/runtimes-inventory-operator
- MediumCVE-2025-64715Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium
- HighCVE-2025-11393Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Access
- MediumCVE-2025-64715Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Other news entries
- Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesNewsCheck Point Research
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Over 16,000 Supabase databases expose PII, passwords, auth tokensNewsBleepingComputer
- Surfshark Systems Targeted by HackersNewsSecurityWeek
- Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and SecretsNewsGreyNoise
- Meta AI model hacked a company during misconfigured cyber testNewsBleepingComputer
- AI is making cybersecurity fundamentals more important than everNewsCSO Online
- US authorities warn of Russian attacks on critical infrastructureNewsCSO Online
Source: https://isc.sans.edu/podcastdetail/9936%E2%80%8B
ID