NewsThe Hacker News
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
More on Mailing
Other advisories
- Not ratedosv:CLEANSTART-2024-ZQ38077When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered t...
- HighCVE-2026-102562Das AcyMailing-Plugin für WordPress ist anfällig für Cross-Site Scripting (XSS) in der Zwischenspeicherung über den Parameter customField[] ...
- HighCVE-2026-105318Datasolution AcyMailing SMTP Newsletter: Cross-Site-Scripting (XSS)
- HighCVE-2026-95588AcyMailing SMTP Newsletter: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-95588In AcyMailing SMTP Newsletter-Versionen bis 11.
- CriticalCVE-2026-94389Unauthentifizierte Remote-Code-Ausführung (RCE) in AcyMailing SMTP Newsletter in Versionen bis 11.
- CriticalCVE-2026-94389AcyMailing SMTP Newsletter: Code-Injection
- CriticalCVE-2026-94132Acymailing.com AcyMailing Enterprise extension for Joomla: uneingeschränkter Dateiupload
Other news entries
- ENGIE discloses breach of French customer data via a partner marketing toolBreachpwn.watch
- Nightwing CEO has a Labor Day message for staff – and apparently The RegisterNewsThe Register — Security
- Frontline Education breach exposed K-12 student and staff data, including SSNs and Medicaid IDsBreachpwn.watch
- Progress urges ShareFile admins to shut down servers over “credible” threatNewsBleepingComputer
- CSX vishing attack exposed SSNs and bank details of about 40,000 current and former employeesBreachpwn.watch
- National Public Data breach: 2.7 billion records with SSNs leakedBreachpwn.watch
- AI Agents Are Now Emailing Me with Their Security ConcernsNewsSchneier on Security
Source: https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html
ID