NewsThe Hacker News
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
More on Mailing
Other advisories
- HighCVE-2026-102562Das AcyMailing-Plugin für WordPress ist anfällig für Cross-Site Scripting (XSS) in der Zwischenspeicherung über den Parameter customField[] ...
- HighCVE-2026-105318Datasolution AcyMailing SMTP Newsletter: Cross-Site-Scripting (XSS)
- HighCVE-2026-95588AcyMailing SMTP Newsletter: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-95588In AcyMailing SMTP Newsletter-Versionen bis 11.
- CriticalCVE-2026-94389AcyMailing SMTP Newsletter: Code-Injection
- CriticalCVE-2026-94389Unauthentifizierte Remote-Code-Ausführung (RCE) in AcyMailing SMTP Newsletter in Versionen bis 11.
- CriticalCVE-2026-94132Acymailing.com AcyMailing Enterprise extension for Joomla: uneingeschränkter Dateiupload
- HighCVE-2026-94131Acymailing.com AcyMailing extension for Joomla: SQL-Injection
Other news entries
- ENGIE discloses breach of French customer data via a partner marketing toolBreachpwn.watch
- Nightwing CEO has a Labor Day message for staff – and apparently The RegisterNewsThe Register — Security
- Progress urges ShareFile admins to shut down servers over “credible” threatNewsBleepingComputer
- National Public Data breach: 2.7 billion records with SSNs leakedBreachpwn.watch
- AI Agents Are Now Emailing Me with Their Security ConcernsNewsSchneier on Security
Source: https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html
ID