Team IT Security - 📰 Alle Kategorien

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Sun, 26 Jul 2026 16:17:01 +0200

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter UAC-0145 Primary Compromise Vectors as of July 2026 SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor AgentBaiting: How 800+ Fake AI Skills and MCP Servers Delivered Malware Chaos ransomware’s msaRAT: Living […]

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Sun, 26 Jul 2026 16:05:03 +0200

The reason why the MacBook Air doesn't need a fan

Sun, 26 Jul 2026 15:45:32 +0200

Apple Silicon delivers enough performance without overheating.

Why does everything feel so joyless? Welcome to the age of decadence without pleasure | Michèle Mendelssohn and Charlie Tyson

Sun, 26 Jul 2026 15:28:47 +0200

Decadence in our era comes in technologically mediated forms, emptied of desire and obsessed with self-optimisation

Do you want to have a good time? You know, really enjoy yourself? Click here, and tell us your desires. Maybe it’s a new outfit, or some exotic cuisine delivered anonymously and steaming hot to your door. Maybe it’s porn or gambling. Perhaps you prefer the infinite scroll, the endlessly unfurling ribbon of glossy images and videos starring people you’ll never meet doing things you’ll never do. Or maybe you favor talking to a chatbot who will assure you that you are the most special of all its users.

For anyone with an Internet connection and a little discretionary income, the contemporary moment offers a superabundance of seductive distractions. Why then the pervasive mood of emptiness? Why are so many at once overstimulated and bored?

CVE-2026-64390 | Linux Kernel up to 7.1.3 Ksmbd SMB2_LOCK conn race condition (Nessus ID 329970)

Sun, 26 Jul 2026 15:20:42 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.1.3. This impacts the function SMB2_LOCK of the component Ksmbd. Performing a manipulation of the argument conn results in race condition. This vulnerability is known as CVE-2026-64390. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

CVE-2026-64439 | Linux Kernel up to 6.18.38/7.1.3 Crypto rfc3961_simplified.c use after free (Nessus ID 329965)

Sun, 26 Jul 2026 15:20:41 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. This issue affects the function krb5_aead_encrypt/krb5_aead_decrypt/rfc8009_encrypt/rfc8009_decrypt of the file rfc3961_simplified.c of the component Crypto. This manipulation causes use after free. This vulnerability appears as CVE-2026-64439. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

CVE-2026-64263 | Linux Kernel up to 6.18.38/7.1.3 fuse-uring fuse_uring_cancel null pointer dereference (Nessus ID 329967)

Sun, 26 Jul 2026 15:20:41 +0200

A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been classified as critical. This vulnerability affects the function fuse_uring_cancel of the component fuse-uring. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2026-64263. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

CVE-2026-64369 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 s390 load_unaligned_zeropad infinite loop (Nessus ID 329966)

Sun, 26 Jul 2026 15:20:40 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.96/6.18.38/7.1.3. Affected is the function load_unaligned_zeropad of the component s390. Such manipulation leads to infinite loop. This vulnerability is uniquely identified as CVE-2026-64369. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

IT Security News Hourly Summary 2026-07-26 15h : 1 posts

Sun, 26 Jul 2026 15:18:46 +0200

1 posts were published in the last hour 12:31 : Security Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITION

The post IT Security News Hourly Summary 2026-07-26 15h : 1 posts appeared first on IT Security News.

Why does everything feel so joyless? Welcome to the age of decadence without pleasure | Michèle Mendelssohn and Charlie Tyson

Sun, 26 Jul 2026 15:15:59 +0200

Decadence in our era comes in technologically mediated forms, emptied of desire and obsessed with self-optimisation

Googles goldener Weg: KI-Boom sorgt für gewaltiges Wachstum – Rekordumsätze und Gewinne (Q2 2026)

Sun, 26 Jul 2026 15:15:22 +0200

Alphabet hat sich am Donnerstag wieder in die Karten schauen lassen und die Google Quartalszahlen Q2 2026 veröffentlicht, bei denen man sich erneut alles andere als verstecken muss. Wie seit vielen Jahren, gab es auch im 2. Quartal dieses Jahres ein gewaltiges Wachstum beim Umsatz und Gewinn in praktisch allen relevanten Bereichen. Jetzt wollen wir uns die Zahlen und ihre Bedeutung einmal etwas genauer ansehen.

Mehr lesen: Googles goldener Weg: KI-Boom sorgt für gewaltiges Wachstum – Rekordumsätze und Gewinne (Q2 2026)

Keine Google-News mehr verpassen: GoogleWatchBlog bei Google News abonnieren

Der Beitrag Googles goldener Weg: KI-Boom sorgt für gewaltiges Wachstum – Rekordumsätze und Gewinne (Q2 2026) erschien zuerst auf GoogleWatchBlog.

Neuer TV-Standard startet im Herbst in Deutschland: Braucht ihr jetzt einen neuen Fernseher?

Sun, 26 Jul 2026 15:15:19 +0200

Ab September 2026 startet mit DVB-I ein neuer TV-Standard. Er soll Fernsehen und Internet enger verzahnen, doch viele benötigen dafür ein kompatibles Gerät. Dieser Artikel wurde einsortiert unter Internet & Netzwelt, Internet-Fernsehen, Entertainment.

Für kleine Wohnzimmer: Ikea setzt eine einfache Idee genial um und die Nachfrage ist heftig

Sun, 26 Jul 2026 15:00:35 +0200

Manchmal braucht es keine teure Designerleuchte, sondern einfach eine Lampe, die sich dem Alltag anpasst. Ikea hat mit dem IKEA PS 2026 Deckenfluter eine neue Stehleuchte im Programm, die deutlich vielseitiger ist, als sie auf den ersten Blick wirkt. Für 39,99 Euro bekommt ihr eine 182 cm hohe Lampe in Blau, deren Leuchtenkopf sich neigen und drehen lässt. Dadurch funktioniert sie nicht nur als klassischer Deckenfluter, sondern auch als Stimmungsleuchte, Leselicht oder sogar als Wandleuchte.

CVE-2022-40765 | Mitel MiVoice Connect up to 19.3 Edge Gateway command injection (EUVD-2022-44031)

Sun, 26 Jul 2026 14:29:48 +0200

A vulnerability was found in Mitel MiVoice Connect up to 19.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Edge Gateway Component. Such manipulation leads to command injection. This vulnerability is listed as CVE-2022-40765. The attack must be carried out from within the local network. In addition, an exploit is available.

CVE-2026-17459 | perwendel spark up to 2.9.4 SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink (Issue 1296 / EUVD-2026-49054)

Sun, 26 Jul 2026 14:29:46 +0200

A vulnerability classified as critical was found in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. This vulnerability is registered as CVE-2026-17459. It is possible to launch the attack remotely. Furthermore, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-17458 | mf-yang openclaw-cn up to 0.2.1 Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery (Issue 562 / EUVD-2026-49053)

Sun, 26 Jul 2026 14:29:45 +0200

A vulnerability classified as critical has been found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. This vulnerability is cataloged as CVE-2026-17458. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The project was informed of the problem early through an issue report but has not responded yet.

Corporate America may be using AI to cut jobs, but small businesses are using it to keep them

Sun, 26 Jul 2026 14:16:51 +0200

Reports of wide-scale replacement of workers by AI are overblown. Small businesses use it to help workers

I recently met the owner of a company that sells windows and doors. He told me he invested about $10,000 in an AI application that is used by his salespeople in his showroom. The application listens to the conversations between the salesperson and the prospective customer and then automatically creates a quote for the salesperson to review and send.

“It allows my salespeople to talk to more customers and spend less time doing paperwork,” he said. “And it cuts down on errors.”

Corporate America may be using AI to cut jobs, but small businesses are using it to keep them

Sun, 26 Jul 2026 14:15:45 +0200

Reports of wide-scale replacement of workers by AI are overblown. Small businesses use it to help workers

“It allows my salespeople to talk to more customers and spend less time doing paperwork,” he said. “And it cuts down on errors.”

CVE-2026-64805 | JetBrains WebStorm up to 2026.1 code injection (WID-SEC-2026-2507)

Sun, 26 Jul 2026 14:04:33 +0200

A vulnerability was found in JetBrains WebStorm up to 2026.1. It has been rated as critical. Affected is an unknown function. Performing a manipulation results in code injection. This vulnerability is reported as CVE-2026-64805. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

CVE-2026-64807 | JetBrains WebStorm up to 2026.1 Linter Configuration code injection (WID-SEC-2026-2507)

Sun, 26 Jul 2026 14:04:32 +0200

A vulnerability was found in JetBrains WebStorm up to 2026.1 and classified as problematic. The impacted element is an unknown function of the component Linter Configuration. The manipulation results in code injection. This vulnerability is cataloged as CVE-2026-64807. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

CVE-2026-64804 | JetBrains WebStorm 2021.1/2024.3 code injection (WID-SEC-2026-2507)

Sun, 26 Jul 2026 14:04:32 +0200

A vulnerability was found in JetBrains WebStorm 2021.1/2024.3. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to code injection. This vulnerability is documented as CVE-2026-64804. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

CVE-2026-64806 | JetBrains WebStorm 2021.1/2024.3 Interpreter code injection (WID-SEC-2026-2507)

Sun, 26 Jul 2026 14:04:31 +0200

A vulnerability has been found in JetBrains WebStorm 2021.1/2024.3 and classified as problematic. The affected element is an unknown function of the component Interpreter. The manipulation leads to code injection. This vulnerability is listed as CVE-2026-64806. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

CVE-2026-64810 | JetBrains IntelliJ IDEA up to 2026.1 Notification cross site scripting (WID-SEC-2026-2505)

Sun, 26 Jul 2026 14:04:30 +0200

A vulnerability, which was classified as problematic, was found in JetBrains IntelliJ IDEA up to 2026.1. This affects an unknown function of the component Notification. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-64810. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

CVE-2026-64814 | JetBrains IntelliJ IDEA up to 2026.1 improper authorization (WID-SEC-2026-2505)

Sun, 26 Jul 2026 14:04:29 +0200

A vulnerability classified as critical was found in JetBrains IntelliJ IDEA up to 2026.1. The affected element is an unknown function. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-64814. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

CVE-2026-64811 | JetBrains IntelliJ IDEA up to 2026.1.4 Development Container Configuration code injection (WID-SEC-2026-2505)

Sun, 26 Jul 2026 14:04:29 +0200

A vulnerability marked as problematic has been reported in JetBrains IntelliJ IDEA. This vulnerability affects unknown code of the component Development Container Configuration. This manipulation causes code injection. This vulnerability is handled as CVE-2026-64811. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

CVE-2026-64812 | JetBrains IntelliJ IDEA up to 2026.1 injection (WID-SEC-2026-2505)

Sun, 26 Jul 2026 14:04:28 +0200

A vulnerability described as critical has been identified in JetBrains IntelliJ IDEA up to 2026.1. This issue affects some unknown processing. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-64812. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

CVE-2026-64813 | JetBrains IntelliJ IDEA up to 2026.1 improper authorization (WID-SEC-2026-2505)

Sun, 26 Jul 2026 14:04:28 +0200

A vulnerability classified as problematic has been found in JetBrains IntelliJ IDEA up to 2026.1. Impacted is an unknown function. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-64813. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

E-Auto für unter 40.000 Euro: Audi A2 e-tron jetzt in freier Wildbahn

Sun, 26 Jul 2026 13:46:33 +0200

Zweigeteilte Scheibe, spezielle Türöffner und hohe Effizienz: Der neue Audi A2 e-tron weckt Erinnerungen an seinen Vorgänger. Das elektrische Einstiegsmodell startet 2026 ab 38.200 Euro. Der Stromer liefert Reichweiten von bis zu 649 Kilometern. (Weiter lesen)

CVE-2026-64530 | Linux Kernel up to 7.1.4 cls_api net/sched/cls_api.c tcf_qevent_handle use after free (EUVD-2026-49051)

Sun, 26 Jul 2026 13:38:49 +0200

A vulnerability has been found in Linux Kernel up to 7.1.4 and classified as very critical. The affected element is the function tcf_qevent_handle of the file net/sched/cls_api.c of the component cls_api. This manipulation causes use after free. This vulnerability appears as CVE-2026-64530. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

CVE-2026-64478 | Linux Kernel up to 7.1.3 ALSA USB Audio snd_dualsense_ih_match null pointer dereference (EUVD-2026-48822)

Sun, 26 Jul 2026 13:38:43 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 7.1.3. Impacted is the function snd_dualsense_ih_match of the component ALSA USB Audio. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-64478. The attack requires local access. There is no available exploit. Upgrading the affected component is advised.

CVE-2026-64477 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1 resctrl cpu_to_node out-of-bounds (EUVD-2026-48821)

Sun, 26 Jul 2026 13:38:32 +0200

A vulnerability classified as critical has been found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1. This issue affects the function cpu_to_node of the component resctrl. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-64477. The attack requires a local approach. No exploit exists. It is recommended to upgrade the affected component.

CVE-2026-64475 | Linux Kernel up to 7.2-rc1 Vfio Pci vfio_pci_core_register_device use after free (EUVD-2026-48819)

Sun, 26 Jul 2026 13:38:24 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 7.2-rc1. Affected by this vulnerability is the function vfio_pci_core_register_device of the component Vfio Pci. The manipulation results in use after free. This vulnerability is reported as CVE-2026-64475. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

CVE-2026-64476 | Linux Kernel up to 7.2-rc1 vfio-pci driver vfio_pci.c vfio_pci_dev_set_pm_runtime_get disable_idle_d3 race condition (EUVD-2026-48820)

Sun, 26 Jul 2026 13:38:20 +0200

A vulnerability has been found in Linux Kernel up to 7.2-rc1 and classified as critical. This affects the function vfio_pci_dev_set_pm_runtime_get of the file vfio_pci.c of the component vfio-pci driver. Performing a manipulation of the argument disable_idle_d3 results in race condition. This vulnerability was named CVE-2026-64476. The attack needs to be approached locally. There is no available exploit. The affected component should be upgraded.

CVE-2026-64472 | Linux Kernel up to 7.2-rc1 Vfio Mlx5 race condition (EUVD-2026-48816)

Sun, 26 Jul 2026 13:38:19 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2-rc1. This impacts an unknown function of the component Vfio Mlx5. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2026-64472. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

CVE-2026-64474 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 Vfio vfio_mig_get_next_state infinite loop (EUVD-2026-48818)

Sun, 26 Jul 2026 13:38:19 +0200

A vulnerability was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. It has been rated as problematic. This impacts the function vfio_mig_get_next_state of the component Vfio. Performing a manipulation results in infinite loop. This vulnerability is identified as CVE-2026-64474. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.

CVE-2026-17457 | mf-yang openclaw-cn up to 0.2.1 Scheme navigation-guard.ts assertBrowserNavigationAllowed url information disclosure (Issue 561 / EUVD-2026-49052)

Sun, 26 Jul 2026 13:38:14 +0200

A vulnerability described as problematic has been identified in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to information disclosure. This vulnerability is listed as CVE-2026-17457. The attack may be performed from remote. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-64473 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1 VFIO vfio_unregister_group_dev race condition (EUVD-2026-48817)

Sun, 26 Jul 2026 13:38:14 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1. Affected is the function vfio_unregister_group_dev of the component VFIO. The manipulation leads to race condition. This vulnerability is documented as CVE-2026-64473. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Space-X: Neue „Starlink“-Satelliten getestet und verglüht

Sun, 26 Jul 2026 13:16:05 +0200

Die Generation 3 soll leistungsfähiger werden, nun hat sie Space-X bei einem Testflug der Riesenrakete „Starship“ erstmals ins All gebracht – zumindest für kurze Zeit.

How to watch Stage 21 of Tour de France 2026: FREE live streams, TV channels & start time

Sun, 26 Jul 2026 13:15:36 +0200

All the ways to watch Tour de France 2026 Stage 21 live streams – including for FREE – as Tadej Pogacar closes in on history on the final day of the race.

The Best Backpacking Sleeping Pads, Tested on the Trail (2026)

Sun, 26 Jul 2026 13:15:29 +0200

Our top-pick sleeping pads from Nemo, Therm-a-Rest, and Gossamer Gear use high-tech materials to engineer the best sleep you can get outdoors.

Microsoft in 2026: Was für den Privatnutzer bleibt – eine Einschätzung

Sun, 26 Jul 2026 13:15:13 +0200

Microsoft macht schon seit einigen Monaten einen weitreichenden Kulturwandel durch, der auch das ohnehin fragliche Verhältnis zum Privatnutzer neu ausrichtet. Selbstredend waren die Redmonder nie wirklich eine auf Consumer fokussierte Technikschmiede, so wie das etwa bei Apple der Fall ist, aber die zunehmende Transformation vom Cloudriesen zur AI First-Company bringt auch für uns große Veränderungen […]

Der Beitrag Microsoft in 2026: Was für den Privatnutzer bleibt – eine Einschätzung erschien zuerst auf Dr. Windows.

Pixel 6: Das Ende einer ganz besonderen Smartphone-Ära – Googles erfolgreicher Neustart geht bald in Rente

Sun, 26 Jul 2026 13:15:11 +0200

Google hat ein großes Portfolio an Pixel-Smartphones, das von Jahr zu Jahr immer größer wird und mit Updates versorgt werden will - doch schon sehr bald wird eines der wichtigsten Geräte diesen Kreis verlassen. In dieser Woche wurde uns in Erinnerung gerufen, dass die Pixel 6-Smartphones vor dem End-of-Life stehen. Der richtige Zeitpunkt, um einmal zurückzublicken.

Mehr lesen: Pixel 6: Das Ende einer ganz besonderen Smartphone-Ära – Googles erfolgreicher Neustart geht bald in Rente

Keine Google-News mehr verpassen: GoogleWatchBlog bei Google News abonnieren

Der Beitrag Pixel 6: Das Ende einer ganz besonderen Smartphone-Ära – Googles erfolgreicher Neustart geht bald in Rente erschien zuerst auf GoogleWatchBlog.

KwaiKAT Team Releases KAT-Coder-V2.5: An Agentic Coding Model Trained on 100,000+ Verifiable Repository Environments

Sun, 26 Jul 2026 12:55:17 +0200

The KwaiKAT Team at Kuaishou has published the KAT-Coder-V2.5 technical report, arguing that agentic coding capability is bottlenecked by training infrastructure rather than model scale. AutoBuilder raised environment construction success from 16.5% to 57.2%, producing over 100,000 verifiable environments across 12 languages, while a sandbox audit cut RL feedback errors from roughly 16% to below 2%.

The post KwaiKAT Team Releases KAT-Coder-V2.5: An Agentic Coding Model Trained on 100,000+ Verifiable Repository Environments appeared first on MarkTechPost.

CVE-2026-64406 | Linux Kernel up to 7.2-rc2 Bluetooth bt_accept_dequeue use after free (Nessus ID 329977)

Sun, 26 Jul 2026 12:50:51 +0200

A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been classified as very critical. The affected element is the function bt_accept_dequeue of the component Bluetooth. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-64406. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

CVE-2026-64375 | Linux Kernel up to 7.1.3 proc filesystem call_proc_get_link race condition (Nessus ID 329978)

Sun, 26 Jul 2026 12:50:51 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. This impacts the function call_proc_get_link of the component proc filesystem. The manipulation results in race condition. This vulnerability is reported as CVE-2026-64375. The attack requires a local approach. No exploit exists. It is recommended to upgrade the affected component.

CVE-2026-64372 | Linux Kernel up to 7.1.3 pcc pcc_cpufreq_do_osc use after free (Nessus ID 329975)

Sun, 26 Jul 2026 12:50:50 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.3. Impacted is the function pcc_cpufreq_do_osc of the component pcc. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-64372. The attack must be carried out locally. There is no available exploit. You should upgrade the affected component.

CVE-2026-64384 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 SMB Client SMB2_notify_init double free (Nessus ID 329976)

Sun, 26 Jul 2026 12:50:50 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. Impacted is the function SMB2_notify_init of the component SMB Client. This manipulation causes double free. The identification of this vulnerability is CVE-2026-64384. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

CVE-2026-64431 | Linux Kernel NTFS post_write_mst_fixup memory corruption (Nessus ID 329973)

Sun, 26 Jul 2026 12:50:49 +0200

A vulnerability was found in Linux Kernel. It has been rated as critical. Affected by this vulnerability is the function post_write_mst_fixup of the component NTFS. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-64431. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.

CVE-2026-64463 | Linux Kernel up to 7.2-rc2 Typec Tcpci Driver rt1711h_probe denial of service (Nessus ID 329974)

Sun, 26 Jul 2026 12:50:49 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3/7.2-rc2. This issue affects the function rt1711h_probe of the component Typec Tcpci Driver. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2026-64463. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.

CVE-2026-64306 | Linux Kernel up to 7.1.3 DRBG drbg_ctr_generate uninitialized variable (Nessus ID 329971)

Sun, 26 Jul 2026 12:50:48 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as very critical. The affected element is the function drbg_ctr_generate of the component DRBG. Performing a manipulation results in use of uninitialized variable. This vulnerability was named CVE-2026-64306. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

CVE-2026-64309 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 ccp initialization (Nessus ID 329972)

Sun, 26 Jul 2026 12:50:48 +0200

A vulnerability was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3 and classified as critical. This vulnerability affects unknown code of the component ccp. The manipulation results in improper initialization. This vulnerability is known as CVE-2026-64309. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

Linux-Sicherheit: CVE-2026-53274 trifft Ubuntu bis 26.04 - BornCity

Sun, 26 Jul 2026 12:46:13 +0200

IT-Sicherheit wird zum Top-Thema – spezielle Trainings sollen Linux-Administratoren fit für die Bedrohungslage machen.

The Best Motorola Phones, From Razr to Moto G (2026)

Sun, 26 Jul 2026 12:45:49 +0200

Motorola phones may seem old-school, but their reasonable prices, colorful designs, and simple software make them good, wallet-friendly Android smartphones.

Best Home Security Cameras Without Subscriptions in 2026: Free of Fees

Sun, 26 Jul 2026 12:30:32 +0200

Smart security cameras don’t have to come with fees: These models give a lot while saving your budget.

IT Security News Hourly Summary 2026-07-26 12h : 1 posts

Sun, 26 Jul 2026 12:19:08 +0200

1 posts were published in the last hour 9:31 : Top 10 Best Active Directory Management Tools 2026

The post IT Security News Hourly Summary 2026-07-26 12h : 1 posts appeared first on IT Security News.

WordPress-Hacks über wp2shell – erste Opfer

Sun, 26 Jul 2026 12:15:17 +0200

Vor einer Woche hatte ich über eine kritische Schwachstelle in WordPress berichtet, die die Entdecker als wp2shell bezeichnen. Die Schwachstelle erlaubt eine CMS-Übernahme. Es war auffällig ruhig, aber mir liegen nun die ersten Fälle vor, wo es WordPress-Instanzen getroffen hat. … Weiterlesen →

Quelle

John Robertson's The Dark Room (emf2026)

Sun, 26 Jul 2026 12:05:29 +0200

Welcome to John Robertson’s THE DARK ROOM – the legendary interactive comedy show that fuses improv, crowdwork and gaming to create an insane live-action videogame! “An hilarious, participatory cult classic” Neil Patrick Harris “hilarious game show” Independent ★★★★ “A Rocky Horror for nerds… reader, I howled” Telegraph, London Come watch, and if you want – play – the choose-your-own-adventure madness! The crowd is trapped inside an inescapable dungeon with a sadistic videogame boss! Pick increasingly surreal options off the screen and try to escape! If you win – you get money! If you fail – YA DIE! YA DIE! YA DIE! Now, will you: Find the Light Switch Go North? Abandon Hope? Be sworn at by a man wearing spiked armour and a lot of leather? (This option is permanently set to “On”) Now in its 14th year, this high-octane interactive show is the brainchild of comedian & cult leader John Robertson. Filled with stand-up, appalling prizes and more audience chanting than you’d get at a protest – The Dark Room is a gut-busting comedy experience for everyone. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://www.emfcamp.org/schedule/2026/174-john-robertsons-the-dark-room

Pixel 11 Pro Fold: Das ist Googles neues Foldable – alles was bereits bekannt ist (Specs, Preise, Galerie & Video)

Sun, 26 Jul 2026 12:00:18 +0200

In weniger als drei Wochen wird Google die Pixel 11-Smartphones vorstellen, zu denen nicht nur die Standardgeräte gehören, sondern auch in diesem Jahr wieder ein faltbares Gerät - das Google Pixel 11 Pro Fold. Das mittlerweile vierte Google-Foldable wird auch in diesem Jahr einige Änderungen mitbringen, die uns von den Leakern bereits ausführlich präsentiert worden sind. Daher zeigen wir euch in diesem Artikel noch einmal alle Informationen in der Übersicht.

Mehr lesen: Pixel 11 Pro Fold: Das ist Googles neues Foldable – alles was bereits bekannt ist (Specs, Preise, Galerie & Video)

Keine Google-News mehr verpassen: GoogleWatchBlog bei Google News abonnieren

Der Beitrag Pixel 11 Pro Fold: Das ist Googles neues Foldable – alles was bereits bekannt ist (Specs, Preise, Galerie & Video) erschien zuerst auf GoogleWatchBlog.

Anthropic's Opus 5 blows past Fable 5 and GPT-5.6 Sol on the benchmark designed to measure real intelligence

Sun, 26 Jul 2026 11:55:43 +0200

Anthropic's Claude Opus 5 scored 30.2 percent on ARC-AGI-3, nearly quadrupling GPT-5.6 Sol's previous record of 7.8 percent. The benchmark's developers say the model independently formulated reflection equations, a behavior they had never seen from another model, and attribute to stronger logical reasoning.

The article Anthropic's Opus 5 blows past Fable 5 and GPT-5.6 Sol on the benchmark designed to measure real intelligence appeared first on The Decoder.

CVE-2026-30603 | Qianniao QN-L23PA0904 20250721.1640 Firmware Update iu.sh backdoor

Sun, 26 Jul 2026 11:51:00 +0200

A vulnerability was found in Qianniao QN-L23PA0904 20250721.1640. It has been declared as critical. This affects an unknown function of the file iu.sh of the component Firmware Update Handler. Executing a manipulation can lead to backdoor. The identification of this vulnerability is CVE-2026-30603. The physical device can be targeted for the attack. There is no exploit available.

CVE-2026-5349 | Trendnet TEW-657BRM 1.00.1 /setup.cgi add_apcdb mac_pc_dba stack-based overflow

Sun, 26 Jul 2026 11:51:00 +0200

A vulnerability marked as critical has been reported in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is documented as CVE-2026-5349. The attack can be initiated remotely. Additionally, an exploit exists. The vendor confirms, that "[t]he product in question (...) has been discontinued and end of life since June 23, 2011, that is more than 14 years ago. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on our website's product support page and notify customers who registered their products with us."

CVE-2026-26895 | osTicket 1.18.2 /pwreset.php information disclosure

Sun, 26 Jul 2026 11:50:59 +0200

A vulnerability has been found in osTicket 1.18.2 and classified as problematic. Impacted is an unknown function of the file /pwreset.php. This manipulation causes information disclosure. This vulnerability is handled as CVE-2026-26895. The attack can be initiated remotely. There is not any exploit available.

CVE-2026-5350 | Trendnet TEW-657BRM 1.00.1 /setup.cgi update_pcdb mac_pc_dba stack-based overflow

Sun, 26 Jul 2026 11:50:58 +0200

A vulnerability described as critical has been identified in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba results in stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is reported as CVE-2026-5350. The attack can be launched remotely. Moreover, an exploit is present. The vendor confirms, that "[t]he product in question (...) has been discontinued and end of life since June 23, 2011, that is more than 14 years ago. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on our website's product support page and notify customers who registered their products with us."

CVE-2026-25212 | Percona up to 3.6 Add data source os command injection

Sun, 26 Jul 2026 11:50:58 +0200

A vulnerability, which was classified as critical, was found in Percona up to 3.6. This issue affects some unknown processing of the component Add data source. The manipulation results in os command injection. This vulnerability is known as CVE-2026-25212. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

Wie Cyberkriminelle sich mit erbeutetem Geld aus dem Staub machen

Sun, 26 Jul 2026 11:46:08 +0200

... Juli 2026. Main Navigation Cybersecurity. News · Wissen · Security-Blog · Specials · IT-Markt. Schlüsselwörter. Webcode. News. Kryptowährungen, ...

Top 10 Best Active Directory Management Tools 2026

Sun, 26 Jul 2026 11:32:45 +0200

Managing Active Directory with native tools alone can become time-consuming as an organization grows. Routine tasks such as provisioning users, resetting passwords, managing group memberships, auditing permissions, and maintaining compliance can place a heavy burden on IT teams. Manual processes…

The post Top 10 Best Active Directory Management Tools 2026 appeared first on IT Security News.

Induction Labs Photon-1 Simulates Desktops, Plays Checkers, and Models Billiard Physics From One Pretraining Run

Sun, 26 Jul 2026 11:24:52 +0200

Most agents that learn from video need to know what action produced each frame. Induction Labs is arguing that this requirement is the bottleneck. Last week, they released imagination models, a foundation model architecture that pretrains on raw video with no action labels at all. Their test system is Photon-1, a sparse 106B-A5B mixture-of-experts (MoE) […]

The post Induction Labs Photon-1 Simulates Desktops, Plays Checkers, and Models Billiard Physics From One Pretraining Run appeared first on MarkTechPost.

CVE-2026-64469 | Linux Kernel up to 7.2-rc2 binder binder_thread_release to_proc use after free (Nessus ID 329983)

Sun, 26 Jul 2026 11:20:32 +0200

A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been declared as very critical. This affects the function binder_thread_release of the component binder. Such manipulation of the argument to_proc leads to use after free. This vulnerability is referenced as CVE-2026-64469. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

CVE-2026-64371 | Linux Kernel up to 7.1.3 procfs ptrace_may_access race condition (Nessus ID 329982)

Sun, 26 Jul 2026 11:20:31 +0200

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.3. This issue affects the function ptrace_may_access of the component procfs. This manipulation causes race condition. This vulnerability is tracked as CVE-2026-64371. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

CVE-2026-64395 | Linux Kernel up to 7.1.3 ksmbd vfs_clone_file_range/vfs_copy_file_range information disclosure (Nessus ID 329980)

Sun, 26 Jul 2026 11:20:30 +0200

A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. It has been declared as problematic. Affected by this issue is the function vfs_clone_file_range/vfs_copy_file_range of the component ksmbd. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-64395. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

CVE-2026-64318 | Linux Kernel up to 7.1.3 partitions aix_partition pp_count out-of-bounds (Nessus ID 329981)

Sun, 26 Jul 2026 11:20:30 +0200

A vulnerability classified as problematic was found in Linux Kernel up to 7.1.3. This affects the function aix_partition of the component partitions. Executing a manipulation of the argument pp_count can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-64318. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

Pixel 11 Pro XL: Das ist Googles größtes Smartphone – alles was bis jetzt bekannt ist (Specs, Preise, Galerie)

Sun, 26 Jul 2026 11:00:16 +0200

Praktisch im Hochsommer wird Google die Pixel 11-Smartphones vorstellen, die sich dank fleißiger Leaker in den letzten Wochen immer wieder ausführlich gezeigt haben - das gilt unter anderem auch für das Google Pixel 11 Pro XL. Das größte der Flaggschiffe hat sich mittlerweile so häufig gezeigt, dass so gut wie alle Informationen bereits bekannt geworden sind - in diesem Artikel fassen wir sie euch zusammen.

Mehr lesen: Pixel 11 Pro XL: Das ist Googles größtes Smartphone – alles was bis jetzt bekannt ist (Specs, Preise, Galerie)

Keine Google-News mehr verpassen: GoogleWatchBlog bei Google News abonnieren

Der Beitrag Pixel 11 Pro XL: Das ist Googles größtes Smartphone – alles was bis jetzt bekannt ist (Specs, Preise, Galerie) erschien zuerst auf GoogleWatchBlog.

Hundreds asked ChatGPT for poison and bioweapon recipes and some got step-by-step high school level guides

Sun, 26 Jul 2026 10:54:13 +0200

In summer 2025, OpenAI internally flagged GPT-5 as high-risk because it helped users create biological hazards, but downgraded the model's risk rating that fall. According to the Wall Street Journal, some users got step-by-step instructions for making poisons and biological weapons. Hundreds asked for that kind of information.

The article Hundreds asked ChatGPT for poison and bioweapon recipes and some got step-by-step high school level guides appeared first on The Decoder.

FAIRChem v2 UMA for Multidomain Atomistic Simulation across Molecules, Catalysts, Materials, Vibrations, and Molecular Dynamics

Sun, 26 Jul 2026 10:53:59 +0200

In this tutorial, we explore FAIRChem v2 and the UMA universal machine-learning interatomic potential as a unified framework for atomistic simulation across molecular chemistry, catalysis, and inorganic materials. We configure an environment, authenticate with Hugging Face to access the gated UMA model weights, and initialize task-specific calculators for the omol, oc20, and omat domains. We […]

The post FAIRChem v2 UMA for Multidomain Atomistic Simulation across Molecules, Catalysts, Materials, Vibrations, and Molecular Dynamics appeared first on MarkTechPost.

Check Point SmartConsole: Kritische Lücke CVE-2026-16232 nach Fristablauf

Sun, 26 Jul 2026 10:36:44 +0200

TPM-Pflicht für Windows Server ab August. Microsoft verschärft die Hardware-Anforderungen für Verwaltungsumgebungen. Ab August 2026 erhalten ...

Mega datacentre planned for outer Melbourne will be six times bigger than a large shopping centre

Sun, 26 Jul 2026 10:30:42 +0200

More than 3,600 people sign petition for careful assessment of proposed AI hub, now a flashpoint for national debate on datacentre boom

For some residents it started with a letter in the mailbox. It was a “friendly introduction from the team behind the Victorian AI hub”.

“I am knocking on doors to explain what we have in mind and, most importantly, to listen,” the letter from Syncline Energy stated.

Gaming-Monster mit 4K-Mini-LED, RTX 5090 und 128 GB RAM – Asus ROG Strix SCAR 18 G835LXG im Test

Sun, 26 Jul 2026 10:30:15 +0200

Premium-Gaming mit kompromissloser Performance. | Asus aktualisiert sein ROG Strix SCAR 18 G835LXG mit dem Intel Core Ultra 9 290HX, einer Nvidia GeForce RTX 5090 Laptop und einem 18 Zoll großen 4K-Mini-LED-Display mit 240 Hz sowie 2.000 Dimming-Zonen. Hinzu kommen sehr gute Wartungsmöglichkeiten durch den vereinfachten Zugang zu den Komponenten und umfangreiche Individualisierungsoptionen mit AniME Vision und der vielseitigen RGB-Beleuchtung.

CVE-2026-33746 | ConvoyPanel panel up to 4.5.0 JWTService::decode improper authentication (GHSA-92pg-3w49-4w5x)

Sun, 26 Jul 2026 10:22:34 +0200

A vulnerability was found in ConvoyPanel panel up to 4.5.0. It has been rated as critical. This impacts the function JWTService::decode. The manipulation leads to improper authentication. This vulnerability is referenced as CVE-2026-33746. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

CVE-2026-34974 | thorsten phpMyFAQ up to 4.1.0 SVG SvgSanitizer.php edit_faq cross site scripting (GHSA-5crx-pfhq-4hgg)

Sun, 26 Jul 2026 10:22:33 +0200

A vulnerability categorized as problematic has been discovered in thorsten phpMyFAQ up to 4.1.0. Affected by this issue is the function edit_faq of the file SvgSanitizer.php of the component SVG Handler. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-34974. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

10 Best Active Directory Management Tools 2026

Sun, 26 Jul 2026 10:21:00 +0200

The post 10 Best Active Directory Management Tools 2026 appeared first on Cyber Security News.

How to watch Shark Week 2026 online from anywhere

Sun, 26 Jul 2026 10:16:50 +0200

With specials dedicated to the great white, mako, bull and everything in between, here's how to watch Shark Week 2026 online from anywhere.

US reportedly favors selective bans over blanket restrictions on Chinese open weight models citing security concerns

Sun, 26 Jul 2026 10:13:08 +0200

The Trump administration is planning targeted bans on Chinese AI models rather than a blanket ban. After public pressure, OpenAI and Google DeepMind signed an open letter opposing regulation of open-weight models, yet OpenAI and Anthropic continue to lobby privately for those same restrictions amid security concerns and powerful business interests.

The article US reportedly favors selective bans over blanket restrictions on Chinese open weight models citing security concerns appeared first on The Decoder.

Selfie statt Passwort: Google baut die Kontowiederherstellung um

Sun, 26 Jul 2026 10:09:33 +0200

Neues Smartphone, altes Gerät verloren, Passwort längst vergessen: Dann steht ihr vor eurem eigenen Google-Konto wie vor einer verschlossenen Tür. Genau für diesen Moment führt…

Dieser Artikel Selfie statt Passwort: Google baut die Kontowiederherstellung um erschien zuerst auf SmartDroid.de.

Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached

Sun, 26 Jul 2026 10:02:10 +0200

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI agents are still logging in as humans Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing tools, and analysts query enterprise search across separate vendors. Single-provider setups keep giving way to mixed stacks as companies keep their options open. PR3TACK preemptive framework maps threats before … More →

The post Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached appeared first on Help Net Security.

Comic-Con 2026 Debuts Trailers for 'Coyote vs Acme' Movie, Plus 'Neuromancer' and 'Blade Runner 2099' Series

Sun, 26 Jul 2026 10:01:17 +0200

Big news from Comic-Con 2026: "Coyote vs. ACME" debuted its long-awaited final trailer. CNET calls it "an animation-meets-live-action story," with the Coyote catapulting into theaters this August 28. (The film began development back in 2018, but was shelved for a tax write-off in 2023 by Warner Bros. until a backlash led to its sale to Ketchup Entertainment.) "Fed up with Acme's unreliable products, Wile E. Coyote decides to hire a lawyer and sue the company..." writes CNET. "The movie also features Lana Condor along with a host of Looney Tunes characters like Porky Pig, Tweety, Foghorn Leghorn and Granny (who gets dinged by an anvil)." In other movie news, CNET says Johnny Depp also "made a surprise appearance at Comic-Con, donning a costume as Ebenezer Scrooge" to promote his November 13 movie about the miser from Charles Dickens' famous Christmas novella. (Ian McKellen and Daisy Ridley are also in the movie.) But several geek favorites are being filmed as TV series... There's big news for William Gibson fans, reports Entertainment Weekly. "Two years after Apple TV announced production on the first-ever series adaptation of William Gibson's seminal 1984 novel Neuromancer, the lucky few hundred who attended the studio's Hall H panel at Comic-Con 2026 got to watch the first teaser. For Amazon's Prime Video, the Tolkien-derived "Rings of Power" series released a season 3 trailer that CNET said "successfully hides the best parts with fire... The trailer suggests that Sauron is building an army, and all of Middle-earth is trying to find ways to stop him... Rings of Power season 3 will start dropping weekly episodes on Nov. 11, meaning this show will be airing at the same time the Peter Jackson films will be celebrating their 25th anniversary." Later in November Amazon's Prime Video will also debut Blade Runner 2099, an eight-episode series that's a sequel to 2017's film Blade Runner 2049, reports CNET. "Set in an alternate version of LA where replicants run things and the humans play second fiddle, the series sees Yeoh's replicant Olwen chasing down outlaw replicants who've gone missing. With her own shelf life on a ticking clock, the stakes are high for her and for her human fugitive partner, Cora..." Paramount Plus will debut Avatar: Seven Havens in October, a new animated series from the creators of Avatar: The Last Airbender which CNET says "follows a pair of twin avatars, one of whom is Korra's successor." Disney+ has season 3 of Percy Jackson and the Olympians. Kevin Feige said Marvel's television slate will include more seasons of "X-Men '97" and the upcoming "VisionQuest" TV series. HBO Max will launch a new Green Lantern series called Lanterns on August 16.

Joyn und Joyn+ offline schauen: So funktioniert die neue Download-Funktion

Sun, 26 Jul 2026 10:00:17 +0200

Der TV-Streamingdienst Joyn hat endlich eine Download-Funktion bekommen. Damit könnt ihr Serien und Shows jetzt offline schauen. Dabei müsst ihr 3 Dinge beachten. Dieser Artikel wurde einsortiert unter Live-TV, Internet-Fernsehen, Fernsehen über das Internet: Live-TV online schauen mit TV-Streaming-Apps, Entertainment, Joyn, Joyn, Neu bei Joyn: Diese Serien-, Show- und Filmhighlights starten im Juli und August 2026.

Ab Donnerstag (30.7) für 149 Euro bei Aldi: Eines der meistverkauften Samsung-Handys 2026 - doch hier ist es noch günstiger

Sun, 26 Jul 2026 10:00:14 +0200

Eines der meistverkauften Samsung-Handys 2026 landet mit 149 Euro bei Aldi Nord. Doch der bessere Preis wartet woanders. Wir zeigen euch, ob sich der Kauf lohnt. Dieser Artikel wurde einsortiert unter Schnäppchen, Smartphones unter 250 Euro im Test 2026: 8 günstige Smartphones von Samsung, Xiaomi und Co. im Vergleich, Samsung Galaxy A17 5G.

Wochenrück- und Ausblick: Samsungs Falter, AI-Probleme und AMDs großes Event

Sun, 26 Jul 2026 10:00:08 +0200

Im wöchentlichen Rückblick auf die vergangenen sieben Tage steht heute die 30. Woche 2026 im Fokus. Es sind 85 News/Notizen und 8 Tests/Berichte erschienen. Welche davon haben die ComputerBase-Leser besonders interessiert? Was empfiehlt sich als Wochenendlektüre?

Breakpoint: Roboter-Republik

Sun, 26 Jul 2026 09:30:12 +0200

Wer spricht? – Bundestag: Tim Hüfner, Spielzeugroboter: Emilipothèse, Mikrofon: Jon Tyson, Bearbeitung: netzpolitik.org

Wenn Politiker:innen nicht mehr selbst reden, sondern Maschinen für sich sprechen lassen, mangelt es ihrem Auftritt an Authentizität. Doch gerade die macht einen Teil ihrer Legitimität aus. Denn in einer Demokratie sollten wir von Menschen repräsentiert werden, nicht von Robotern.

Avengers: Endgame Re-Release Includes Exclusive Avengers: Doomsday Preview

Sun, 26 Jul 2026 09:21:44 +0200

Marvel Studios is bringing Avengers: Endgame back to theaters on September 25, 2026, with an exclusive look at the upcoming Avengers: Doomsday. The re-release gives Marvel fans another opportunity to watch the 2019 blockbuster in theaters. The film follows the surviving Avengers as they attempt to reverse Thanos’ devastating snap and restore half of all life across the universe. The new theatrical run also serves as part of Marvel’s preparation for its next major crossover event. Viewers who attend the re-release will receive an early look at Avengers: Doomsday, although the exact length and format of the preview have not been announced. Exclusive Avengers: Doomsday Footage Expected Avengers: Doomsday will bring several major Marvel heroes together and introduce Robert Downey Jr. as Victor von Doom. The movie will also feature characters connected to the Avengers, Fantastic Four, X-Men and other parts of the Marvel Cinematic Universe. Recent footage has highlighted Doctor Doom’s role in the story and his connections with the Fantastic Four. However, Marvel has kept several important plot details private ahead of the theatrical release. The Russo brothers, who directed Avengers: Endgame, are also directing the new movie. Their return has raised expectations for another large-scale Marvel story involving several teams and universes. Avengers: Doomsday is scheduled to arrive in theaters on December 18, 2026. The Endgame re-release gives audiences nearly three months to revisit the earlier Avengers finale before Marvel begins its next major chapter.

CVE-2026-17434 | nanocoai NanoClaw up to 2.0.64 add_mcp_server request.ts handleAddMcpServer improper authorization (Issue 2762 / EUVD-2026-49049)

Sun, 26 Jul 2026 09:19:22 +0200

A vulnerability was found in nanocoai NanoClaw up to 2.0.64. It has been declared as critical. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-17434. The attack may be launched remotely. Furthermore, there is an exploit available. A patch should be applied to remediate this issue.

CVE-2026-63720 | koxudaxi datamodel-code-generator up to 0.69.x customBasePath code injection (545a96c5 / EUVD-2026-49050)

Sun, 26 Jul 2026 09:19:21 +0200

A vulnerability, which was classified as critical, was found in koxudaxi datamodel-code-generator up to 0.69.x. Impacted is an unknown function. The manipulation of the argument customBasePath results in code injection. This vulnerability is reported as CVE-2026-63720. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

CVE-2026-17433 | nanocoai NanoClaw up to 2.0.64 MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization (Issue 2761 / EUVD-2026-49048)

Sun, 26 Jul 2026 09:19:21 +0200

A vulnerability was found in nanocoai NanoClaw up to 2.0.64. It has been classified as critical. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-17433. The attack needs to be approached locally. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-64484 | Linux Kernel up to 7.1.3 ALSA snd_ctl_new1 null pointer dereference (EUVD-2026-48828)

Sun, 26 Jul 2026 09:19:20 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.3. This vulnerability affects the function snd_ctl_new1 of the component ALSA. Such manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2026-64484. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.

CVE-2026-64485 | Linux Kernel up to 6.18.38/7.1.3 ALSA: compress snd_compr_task_new allocation of resources (EUVD-2026-48829)

Sun, 26 Jul 2026 09:19:20 +0200

A vulnerability has been found in Linux Kernel up to 6.18.38/7.1.3 and classified as very critical. This affects the function snd_compr_task_new of the component ALSA: compress. This manipulation causes allocation of resources. This vulnerability is handled as CVE-2026-64485. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

CVE-2026-64483 | Linux Kernel up to 7.1.3 ALSA FireWire iSight isight_packet sample_count buffer overflow (EUVD-2026-48827)

Sun, 26 Jul 2026 09:19:19 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been classified as very critical. Affected by this issue is the function isight_packet of the component ALSA FireWire iSight. Performing a manipulation of the argument sample_count results in buffer overflow. This vulnerability is identified as CVE-2026-64483. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is recommended.

CVE-2026-64482 | Linux Kernel up to 7.1.3 ALSA: gus snd_gf1_pcm_volume_control null pointer dereference (EUVD-2026-48826)

Sun, 26 Jul 2026 09:19:19 +0200

A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. Affected by this issue is the function snd_gf1_pcm_volume_control of the component ALSA: gus. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-64482. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

CVE-2026-64479 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 ALSA snd_seq_event_dup heap-based overflow (EUVD-2026-48823)

Sun, 26 Jul 2026 09:19:18 +0200

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. Affected is the function snd_seq_event_dup of the component ALSA. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked as CVE-2026-64479. The attack is restricted to local execution. No exploit exists. It is advisable to upgrade the affected component.

CVE-2026-64481 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 Alsa Hda Cs35l41 cs35l41_remove_dsp privilege escalation (EUVD-2026-48825)

Sun, 26 Jul 2026 09:19:18 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.96/6.18.38/7.1.3. This affects the function cs35l41_remove_dsp of the component Alsa Hda Cs35l41. This manipulation causes privilege escalation. This vulnerability is registered as CVE-2026-64481. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

IT Security News Hourly Summary 2026-07-26 09h : 1 posts

Sun, 26 Jul 2026 09:18:02 +0200

1 posts were published in the last hour 7:2 : PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows

The post IT Security News Hourly Summary 2026-07-26 09h : 1 posts appeared first on IT Security News.

Oppo Pad 5 im Test: Großes Display, großer Auftritt – großer Wurf?

Sun, 26 Jul 2026 09:15:18 +0200

Großes Display, moderne Technik, viel Ausdauer: Das Android-Tablet Oppo Pad 5 will den Platzhirschen wie iPad und Galaxy Tab Konkurrenz machen. Reichen starke Performance und clevere Ausstattung für den großen Wurf? Der Test.

The AI coding tutor paradox grows as educators scramble to rethink how they test real skills

Sun, 26 Jul 2026 09:10:20 +0200

An ACM survey of 763 computer science educators from 49 countries shows that 68 percent have already changed their exams because of AI, shifting toward oral exams, proctored tests, and project-based work. Teaching is moving from writing code to understanding it. But nearly half of respondents say they lack proven examples for integrating AI into their courses.

The article The AI coding tutor paradox grows as educators scramble to rethink how they test real skills appeared first on The Decoder.

Agent Kim Reactivated Season 2: Is Another Season Happening? Here’s What We Know

Sun, 26 Jul 2026 09:08:51 +0200

Agent Kim Reactivated Season 2 has not been officially confirmed, but the Season 1 finale leaves Kim Do-hyeon in a strong position to return for another dangerous mission. The Korean action drama completed its first season on July 25, 2026, after releasing two episodes each Friday and Saturday. The finale ended its run as the most-watched drama of 2026 in South Korea, giving SBS and Netflix a strong reason to consider another season. Season 2 status: Not officially renewed Possible release date: Late 2027 or 2028, depending on renewal and production Season 1 release: June 26 to July 25, 2026 Episodes: 10 Genre: Action, crime, spy thriller and comedy Streaming platform: Netflix Main cast: So Ji-sub, Choi Dae-hoon, Yoon Kyung-ho and Joo Sang-wook Netflix describes the series as an action drama about an ordinary father who brings back his black-ops skills after his daughter disappears. The show is based on the Manager Kim webtoon and mixes family drama with espionage, chases and close-combat action. Where could the story go in Season 2? Spoilers for the Agent Kim Reactivated Season 1 finale follow. Season 1 follows bank manager Kim Do-hyeon as he searches for his missing daughter, Min-ji. His investigation forces him to reveal that he once worked as a highly trained North Korean operative before building a quiet life in South Korea. Do-hyeon eventually confronts Joo Kang-chan, bringing their long and violent history to a final showdown. However, the last episode does more than close the kidnapping storyline. It shows Do-hyeon beginning a new chapter and attending an employment interview connected to Baekho, directly opening the door for another season. Agent Kim Reactivated Season 2 could follow Do-hyeon as he accepts professional missions instead of returning fully to his normal banking job. Baekho could recruit him for rescue operations involving missing people, criminal groups or former intelligence agents. The next season could also expand the roles of Park Jin-cheol and Han-soo. Their skills and history would allow the show to form a larger team around Do-hyeon while introducing a new enemy connected to his earlier life. When will Season 2 be announced? SBS has not announced a renewal or production schedule. However, the finale’s strong ratings and clear continuation scene make a second season possible. A decision could depend on cast availability, Netflix performance and whether the writers have another completed storyline. Would you watch Agent Kim Reactivated Season 2, and what mission should Manager Kim take on next? Let us know in the comments.

IDC: PC-Markt schrumpft, doch die Preise steigen weiter

Sun, 26 Jul 2026 09:00:14 +0200

Nach mittlerweile nun schon neun Quartalen mit stetigem Wachstum hat es die weltweite PC-Branche nun kalt erwischt, heißt es von der IDC. Im zweiten Quartal 2026...

Zum Beitrag: IDC: PC-Markt schrumpft, doch die Preise steigen weiter

Wo du uns folgen kannst: Facebook, Reddit, Google News, X, Threads

Auf dem Laufenden bleiben?
Fügt uns doch bei Google als bevorzugte Quelle hinzu!

Sullivan’s Crossing Season 5 Release Date: Everything You Need to Know

Sun, 26 Jul 2026 08:54:08 +0200

Sullivan’s Crossing Season 5 is officially happening, although Netflix viewers will probably need to wait until 2027 to watch the next chapter of Maggie and Cal’s story. CTV renewed the romantic drama for a fifth season in June 2026, describing it as the network’s number-one original drama. Production is scheduled to begin in Nova Scotia during summer 2026, while an exact premiere date and episode count remain unconfirmed. Renewal status: Officially renewed by CTV Expected filming period: Summer 2026 Likely CTV premiere: Spring 2027 Expected episode count: Around 10 episodes Genre: Romantic drama and medical drama Filming location: Nova Scotia, Canada Expected Netflix release: Summer 2027 The spring 2027 estimate follows the show’s recent release pattern. Seasons 3 and 4 arrived during the spring, while the fourth season contained 10 one-hour episodes. Where the story is heading Spoilers for the Sullivan’s Crossing Season 4 finale follow. Season 4 ended with Cal proposing to Maggie, but viewers did not hear her answer. Tracy interrupted the moment by asking Maggie and Cal to take her in, leaving the couple’s engagement and immediate future unresolved. Season 5 should return to Maggie’s decision and examine whether she and Cal can finally build a stable life together. Their relationship faced another major test during Season 4 after Liam, Maggie’s former husband, arrived and revealed more about their complicated past. Earlier seasons followed Maggie as she returned to Sullivan’s Crossing after legal trouble disrupted her medical career. Her time at the campground helped her rebuild her relationship with her father, Sully, while her friendship with Cal slowly developed into a romance. Season 5 will have a new showrunner The series will also experience a creative change behind the scenes. Creator Roma Roth will remain involved as an executive producer, while Floyd Kane takes over as showrunner for Season 5. Morgan Kohan and Chad Michael Murray are expected to return as Maggie and Cal. However, the complete cast has not been announced. Scott Patterson, who played Sully during the first three seasons, is also not currently expected to return. When should Season 5 arrive on Netflix? Netflix has not announced a Season 5 release date. Season 4 joined Netflix on June 30, 2026, shortly after its television finale aired on June 22. Based on that schedule, Sullivan’s Crossing Season 5 should reach Netflix a few weeks after its 2027 television finale. A release between June and August 2027 appears most likely, provided the new season premieres during spring. Season 4 recently reached Netflix’s global Top 10 with 1.3 million views during the week of July 13 to July 19, giving the streaming service another reason to carry the next season. Do you think Maggie will accept Cal’s proposal, or will Tracy’s arrival change their plans? Let us know what you expect from Sullivan’s Crossing Season 5 in the comments.

Microsoft-Ausfall legt Teams, Outlook und SharePoint lahm – CVE-2026-50522 im Fokus

Sun, 26 Jul 2026 08:35:33 +0200

Neben Client-Wirkungen wurden außerdem Windows Server Update Services (WSUS) erwähnt: Seit dem 17. Juli hätten sich angesammelte Test-Detectoids ...

SharePoint-Lücke CVE-2026-58644: Microsoft-Systeme unter Angriff - ad-hoc-news.de

Sun, 26 Jul 2026 08:35:32 +0200

CISA stuft die Gefahr als hoch ein und fordert schnelle Patches. SharePoint-Sicherheitslücke: CISA warnt vor aktiven Angriffen. Gedimmter Serverraum ...

Windows für Unternehmen: Microsoft koppelt Aktivierung an TPM und KMS-Infrastruktur

Sun, 26 Jul 2026 08:35:32 +0200

Microsoft stärkt die Windows-Server-Aktivierung für Unternehmen mit TPM-Pflicht über „KMS Hardware-Secured“. Zeitplan ab 2026, Gründe im ...

CVE-2026-34823 | Endian Firewall 3.3.25 Parameter /manage/password/web/ remark cross site scripting

Sun, 26 Jul 2026 08:20:12 +0200

A vulnerability marked as problematic has been reported in Endian Firewall 3.3.25. Affected is an unknown function of the file /manage/password/web/ of the component Parameter Handler. This manipulation of the argument remark causes cross site scripting. This vulnerability is registered as CVE-2026-34823. Remote exploitation of the attack is possible. No exploit is available.

CVE-2026-34818 | Endian Firewall 3.3.25 Parameter localdomains remark cross site scripting

Sun, 26 Jul 2026 08:20:12 +0200

A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /manage/dnsmasq/localdomains/ of the component Parameter Handler. Such manipulation of the argument remark leads to cross site scripting. This vulnerability is documented as CVE-2026-34818. The attack can be executed remotely. There is not any exploit available.

CVE-2026-34821 | Endian Firewall 3.3.25 Parameter user remark cross site scripting

Sun, 26 Jul 2026 08:20:11 +0200

A vulnerability identified as problematic has been detected in Endian Firewall 3.3.25. This affects an unknown function of the file /manage/vpnauthentication/user/ of the component Parameter Handler. The manipulation of the argument remark leads to cross site scripting. This vulnerability is listed as CVE-2026-34821. The attack may be initiated remotely. There is no available exploit.

CVE-2026-34822 | Endian Firewall 3.3.25 Certificate /manage/ca/certificate/ new_cert_name cross site scripting

Sun, 26 Jul 2026 08:20:11 +0200

A vulnerability labeled as problematic has been found in Endian Firewall 3.3.25. This impacts an unknown function of the file /manage/ca/certificate/ of the component Certificate Handler. The manipulation of the argument new_cert_name results in cross site scripting. This vulnerability is cataloged as CVE-2026-34822. The attack may be launched remotely. There is no exploit available.

CVE-2026-34819 | Endian Firewall 3.3.25 Parameter openvpnclient.cgi REMARK cross site scripting

Sun, 26 Jul 2026 08:20:10 +0200

A vulnerability was found in Endian Firewall 3.3.25. It has been declared as problematic. Impacted is an unknown function of the file /cgi-bin/openvpnclient.cgi of the component Parameter Handler. Such manipulation of the argument REMARK leads to cross site scripting. This vulnerability is referenced as CVE-2026-34819. It is possible to launch the attack remotely. No exploit is available.

CVE-2026-34820 | Endian Firewall 3.3.25 Parameter /manage/ipsec/ remark cross site scripting

Sun, 26 Jul 2026 08:20:10 +0200

A vulnerability categorized as problematic has been discovered in Endian Firewall 3.3.25. The impacted element is an unknown function of the file /manage/ipsec/ of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting. This vulnerability is tracked as CVE-2026-34820. The attack can be launched remotely. No exploit exists.

CVE-2026-34815 | Endian Firewall 3.3.25 Parameter /cgi-bin/smtpdomains.cgi DOMAIN cross site scripting

Sun, 26 Jul 2026 08:20:09 +0200

A vulnerability, which was classified as problematic, has been found in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/smtpdomains.cgi of the component Parameter Handler. Performing a manipulation of the argument DOMAIN results in cross site scripting. This vulnerability is known as CVE-2026-34815. Remote exploitation of the attack is possible. No exploit is available.

CVE-2026-34817 | Endian Firewall 3.3.25 Parameter /cgi-bin/smtprouting.cgi BCC cross site scripting

Sun, 26 Jul 2026 08:20:09 +0200

A vulnerability was found in Endian Firewall 3.3.25. It has been rated as problematic. The affected element is an unknown function of the file /cgi-bin/smtprouting.cgi of the component Parameter Handler. Performing a manipulation of the argument BCC results in cross site scripting. This vulnerability is identified as CVE-2026-34817. The attack can be initiated remotely. There is not any exploit available.

CVE-2026-34973 | thorsten phpMyFAQ up to 4.1.0 Search.php searchCustomPages data query logic injection (GHSA-gcp9-5jc8-976x)

Sun, 26 Jul 2026 08:20:08 +0200

A vulnerability labeled as problematic has been found in thorsten phpMyFAQ up to 4.1.0. This vulnerability affects the function searchCustomPages of the file phpmyfaq/src/phpMyFAQ/Search.php. Such manipulation leads to improper neutralization of special elements in data query logic. This vulnerability is documented as CVE-2026-34973. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

CVE-2026-34816 | Endian Firewall 3.3.25 Parameter domainrouting domain cross site scripting

Sun, 26 Jul 2026 08:20:08 +0200

A vulnerability was found in Endian Firewall 3.3.25. It has been classified as problematic. This issue affects some unknown processing of the file /manage/smtpscan/domainrouting/ of the component Parameter Handler. This manipulation of the argument domain causes cross site scripting. The identification of this vulnerability is CVE-2026-34816. It is possible to initiate the attack remotely. There is no exploit available.

What links Horrible Histories and Gordon Brown’s neighbour? The bumper summer quiz

Sun, 26 Jul 2026 08:15:41 +0200

From award-winning Julies to golfers who were nearly the best, test your knowledge with this bumper summer quiz

1 What is now the world’s most populous city, according to the UN?
2 Which two Julies won best actress Oscars in consecutive years?
3 What was thrown by the goddess Eris at the wedding of Peleus and Thetis?
4 Richard Nixon appeared a record 55 times on the cover of what?
5 What became Britain’s tallest structure in 1894?
6 Mojang Studios in Sweden is renowned for developing which video game?
7 Which golfer spent 270 weeks as world No 2, but never reached No 1?
8 Which “The” group, named after a Camus novel, went through over 65 members?
9 Who is the subject of Alberto Korda’s photograph Guerrillero Heroico?
10 What defines an Olimpico goal in football?
11 Who initiated the Fridays for Future school strikes?
12 Which British dynasty is commemorated by a monument in St Peter’s Basilica?
13 What type of souvenir was invented in Vienna in 1900?
14 Which Norwegian island gives its name to two shipping forecast areas?
15 Which art museum employs a colony of cats to protect it from rodents?
16 Millvina Dean, who died in 2009, was the last living survivor of what?
What links:
17 Arrival of spring; double portraits; swimming pools; Grand Canyon; Yorkshire landscape?
18 Mozart & Franz Süssmayr; Landseer & Millais; F Scott Fitzgerald & Edmund Wilson?
19 Cordelia, Goneril & Regan; Imogen; Marina?
20 Britannia (1717-1936); Golden Hind (1937-69); St Edward’s Crown (1971-84)?
21 Alba white truffles; Pule cheese; Wagyu beef; Yubari King melons?
22 Matt Damon; Robert Frost; Bill Gates; Bonnie Raitt; Mark Zuckerberg?
23 Horrible Histories; glucose; Gordon Brown’s neighbour; King-Smith’s swine; winter squash?
24 Mount Whitney in California and Mulhacén in Andalucía?
25 1991 defence of Baghdad; nacre; UK parliament; Virginia?
26 Carrying a double bass; missing a bus; walking two dogs; wearing a cowboy hat; winding a clock?
27 2 (1st); 29 (10th); 541 (100th); 7,919 (1,000th); 104,729 (10,000th)?
28 Ant; bull; cuckoo; eagle; shower of gold; swan?
29 Zlín, Czechoslovakia; Cohutta, US; Novo Mesto, Yugoslavia?
30 Drowned; large bread; pick me up; half cold?

CVE-2026-64460 | Linux Kernel up to 6.18.38/7.1.3 Pci Iov drivers/pci/iov.c sriov_restore_vf_rebar_state out-of-bounds (Nessus ID 329992)

Sun, 26 Jul 2026 07:48:50 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.38/7.1.3. The impacted element is the function sriov_restore_vf_rebar_state of the file drivers/pci/iov.c of the component Pci Iov. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-64460. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

CVE-2026-64287 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3 KVM arm64 pKVM hyp vCPU flush_hyp_vcpu used_lrs out-of-bounds (Nessus ID 329989)

Sun, 26 Jul 2026 07:48:49 +0200

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3. This affects the function flush_hyp_vcpu of the component KVM arm64 pKVM hyp vCPU. This manipulation of the argument used_lrs causes out-of-bounds read. This vulnerability appears as CVE-2026-64287. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

CVE-2026-64480 | Linux Kernel up to 7.1.3 ALSA ice1712 driver aureon.c snd_ctl_new1 null pointer dereference (Nessus ID 329990)

Sun, 26 Jul 2026 07:48:49 +0200

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. Affected by this vulnerability is the function snd_ctl_new1 of the file ice1712.c/ice1724.c/aureon.c of the component ALSA ice1712 driver. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-64480. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

CVE-2026-64416 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 swap_cgroup lookup_swap_cgroup_id null pointer dereference (Nessus ID 329991)

Sun, 26 Jul 2026 07:48:49 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.96/6.18.38/7.1.3. This vulnerability affects the function lookup_swap_cgroup_id of the component swap_cgroup. Executing a manipulation can lead to null pointer dereference. This vulnerability appears as CVE-2026-64416. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

CVE-2026-64410 | Linux Kernel up to 7.1.3/7.2-rc2 Netfilter Flowtable nf_flow_offload_add Remote Code Execution (Nessus ID 329988)

Sun, 26 Jul 2026 07:48:48 +0200

A vulnerability identified as critical has been detected in Linux Kernel up to 7.1.3/7.2-rc2. Affected is the function nf_flow_offload_add of the component Netfilter Flowtable. Performing a manipulation results in Remote Code Execution. This vulnerability is reported as CVE-2026-64410. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

CVE-2026-64418 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2 shrinker alloc_shrinker_info/expand_shrinker_info use after free (Nessus ID 329987)

Sun, 26 Jul 2026 07:48:48 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2. This issue affects the function alloc_shrinker_info/expand_shrinker_info of the component shrinker. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-64418. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

CVE-2026-64362 | Linux Kernel up to 7.2-rc2 HID lg-g15 lg_g15_event use after free (Nessus ID 329984)

Sun, 26 Jul 2026 07:48:47 +0200

A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been classified as critical. Impacted is the function lg_g15_event of the component HID lg-g15. Performing a manipulation results in use after free. This vulnerability is reported as CVE-2026-64362. The attack requires a local approach. No exploit exists. Upgrading the affected component is recommended.

CVE-2026-64348 | Linux Kernel up to 7.2-rc2 USB iso_stream_schedule hcpriv memory leak (Nessus ID 329985)

Sun, 26 Jul 2026 07:48:46 +0200

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2-rc2. Affected is the function iso_stream_schedule of the component USB. Executing a manipulation of the argument hcpriv can lead to memory leak. This vulnerability is registered as CVE-2026-64348. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

CVE-2026-64338 | Linux Kernel up to 7.2-rc2 uss720 uss720_probe allocation of resources (Nessus ID 329986)

Sun, 26 Jul 2026 07:48:46 +0200

A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been rated as problematic. Affected by this issue is the function uss720_probe of the component uss720. This manipulation causes allocation of resources. This vulnerability is handled as CVE-2026-64338. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is advised.

VW verschiebt Modelle intern: Der billige Standort erhält den Vorzug bei der Produktion

Sun, 26 Jul 2026 07:38:01 +0200

Bei Volkswagen geht es gerade vor allem darum, die Kosten für die Fahrzeuge zu reduzieren. Das heißt, die Kosten für Entwicklung und Produktion müssen runter,…

Dieser Artikel VW verschiebt Modelle intern: Der billige Standort erhält den Vorzug bei der Produktion erschien zuerst auf SmartDroid.de.

Immer wieder sonntags KW 30: Tankrabatt, FRITZ!-Service und DNS-Filter, Paperless und neue Banknoten

Sun, 26 Jul 2026 07:30:16 +0200

Moin zusammen! Der Juli 2026 neigt sich dem Ende zu, aber die Nachrichten-Pipeline ist weiterhin prall gefüllt. In den letzten Tagen gab es einige interessante Themen:...

Zum Beitrag: Immer wieder sonntags KW 30: Tankrabatt, FRITZ!-Service und DNS-Filter, Paperless und neue Banknoten

Wo du uns folgen kannst: Facebook, Reddit, Google News, X, Threads

Auf dem Laufenden bleiben?
Fügt uns doch bei Google als bevorzugte Quelle hinzu!

Alte Öllöcher als Akku: Bohrloch-Batterie soll Energie speichern

Sun, 26 Jul 2026 07:18:53 +0200

Der Beitrag Alte Öllöcher als Akku: Bohrloch-Batterie soll Energie speichern erschien zuerst beim Online-Magazin BASIC thinking. Über unseren Newsletter UPDATE startest du jeden Morgen bestens informiert in den Tag.

Stromspitzen bei den erneuerbaren Energien stellen die Stromnetze vor Herausforderungen. Ein neuer Ansatz nutzt nun stillgelegte Öl- und Gasbohrlöcher als thermische Großspeicher für überschüssigen Strom aus Photovoltaikanlagen. Das Verfahren soll ungenutzte Infrastrukturen in regulierbare grüne Leistung für Zeiten hoher Nachfrage umwandeln. Eine Analyse von Phil Cruver, Chef des US-Unternehmens Geo2Watts, beleuchte das Potenzial sogenannter Bohrloch-Batterien […]

Der Beitrag Alte Öllöcher als Akku: Bohrloch-Batterie soll Energie speichern erschien zuerst auf BASIC thinking. Folge uns auch auf Google News und Flipboard oder abonniere unseren Newsletter UPDATE.

Firefox's New Tab Page Will Get Widgets - Including an AI-Powered Daily Crossword

Sun, 26 Jul 2026 07:16:12 +0200

In a sign of the times, Firefox's New Tab page could soon include a crossword puzzle from AI-powered news platform Particle. The blog OMG Ubuntu reports: The mini crossword game is updated daily, with puzzles based around recent content Particle's AI has ingested and summarised that day. [After solving the crossword, links appear to related news articles...] If you just want to try the crossword, you access it in any browser via a direct link. While it may look like Mozilla is trying to capitalise on the Wordle craze several years too late, it's part of its strategy to make the Firefox new tab page a discover destination in itself, not just a springboard for new searches. The 'Daily Grind' crossword widget (name subject to change) is just one of several widgets Firefox has (or will get). You'll also find a to-do list, timer, stock checker, world clock, picture of the day, privacy report and new-look weather widget (bigger than the existing one). During the World Cup 2026, Firefox offered real-time match scores and fixture information too... [T]hey aren't mandatory. You can disable the ones you don't want to use, or, if you don't want any at all, turn them all off to hide the widget area itself. A button to 'show fewer widgets' frees up room to allow other distractions (sponsored stories) on the new tab page to show... [Presumably you can also still open new tabs to a blank page...] They're rolling out to users in certain region and locales already. Plus, Mozilla routinely tests new features with a small set of users before they hit stable builds (i.e., the "Allow Firefox to run feature studies" setting). If you don't have widgets in your Firefox build, but you want them, you can manually enable them in Firefox 153 and later from the about:config page. Search for the following master switch and set it to true to enable the widget area: browser.newtabpage.activity-stream.widgets.system.enabled Then, enable the widgets you want to use by searching: activity-stream.widgets.*.enabled However, the usual caveats about "trying things not enabled by default" still apply. Mozilla hasn't set a firm rollout date, though the feature is already documented on its support site. With fortnightly Firefox releases about to start, and a big Nova redesign, chances are we'll all be puzzling over these widgets sooner rather than later.

Google Maps: Darum solltet ihr den Bewertungen nicht mehr vertrauen – Betrug in allen Richtungen (Meinung)

Sun, 26 Jul 2026 07:15:18 +0200

Die Kartenplattform Google Maps ist gleichzeitig eine der größten Bewertungsplattformen und enthält Milliarden von Sternen-Angaben und Rezensionen, die den Nutzern eigentlich helfen sollen. Doch die Relevanz der Bewertungen hat dafür gesorgt, dass in alle Richtungen betrogen wird und diese damit nicht mehr vollständig vertrauenswürdig sind. Selbst objektiv betrachtet lassen sich diese nicht einmal mehr als Tendenz nutzen.

Mehr lesen: Google Maps: Darum solltet ihr den Bewertungen nicht mehr vertrauen – Betrug in allen Richtungen (Meinung)

Keine Google-News mehr verpassen: GoogleWatchBlog bei Google News abonnieren

Der Beitrag Google Maps: Darum solltet ihr den Bewertungen nicht mehr vertrauen – Betrug in allen Richtungen (Meinung) erschien zuerst auf GoogleWatchBlog.

CVE-2026-64412 | Linux Kernel up to 7.2-rc2 ebtables request_module buffer over-read (Nessus ID 329997)

Sun, 26 Jul 2026 06:50:22 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2-rc2. Affected by this issue is the function request_module of the component ebtables. The manipulation leads to buffer over-read. This vulnerability is traded as CVE-2026-64412. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

CVE-2026-64471 | Linux Kernel up to 7.1.3 Btusb use after free (Nessus ID 329993)

Sun, 26 Jul 2026 06:50:21 +0200

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.3. Affected by this vulnerability is an unknown functionality of the component Btusb. This manipulation causes use after free. This vulnerability is handled as CVE-2026-64471. It is possible to launch the attack on the local host. There is not any exploit available. It is advisable to upgrade the affected component.

CVE-2026-64323 | Linux Kernel up to 7.1.3 UDF udf_load_vat/udf_get_pblock_virt15 lengthHeader/i_size out-of-bounds (Nessus ID 329996)

Sun, 26 Jul 2026 06:50:21 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as problematic. This impacts the function udf_load_vat/udf_get_pblock_virt15 of the component UDF. The manipulation of the argument lengthHeader/i_size leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-64323. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

CVE-2026-64470 | Linux Kernel up to 7.1.3 btusb btusb.c btusb_probe use after free (Nessus ID 329995)

Sun, 26 Jul 2026 06:50:20 +0200

A vulnerability classified as very critical was found in Linux Kernel up to 7.1.3. Affected is the function btusb_probe of the file btusb.c of the component btusb. The manipulation results in use after free. This vulnerability is known as CVE-2026-64470. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is advised.

Sakana AI Releases Fugu-Cyber: An Orchestration Model Reporting 86.9% on CyberGym and 72.1% on CTI-REALM

Sun, 26 Jul 2026 06:40:38 +0200

Sakana AI has released Fugu-Cyber, a security-tuned endpoint on its Fugu orchestration model. It reports 86.9% on CyberGym and 72.1% on CTI-REALM, edging past GPT-5.5-Cyber and Claude Mythos Preview. Access is gated behind manual approval, a defensive-use policy, and the Token Plan. Here is what the numbers actually mean.

The post Sakana AI Releases Fugu-Cyber: An Orchestration Model Reporting 86.9% on CyberGym and 72.1% on CTI-REALM appeared first on MarkTechPost.

A Debian general resolution on LLM usage

Sun, 26 Jul 2026 06:39:06 +0200

The Debian project is considering a general resolution on the use of large language models in the creation of the distribution. There are three alternatives to consider: a total ban on LLM usage, rejecting LLMs "as far as practical", or explicitly allowing LLM usage subject to a set of conditions. The discussion period has just begun; the beginning of the voting period does not yet appear to have been set. Those who want to look over the discussion ahead of the inevitable LWN article can find it over here.

Windows 11’s File Explorer is now faster at deleting large files, in a rare speed win from Microsoft

Sun, 26 Jul 2026 06:36:54 +0200

File Explorer deletes large, fragmented files faster in Windows 11 Insider Build 26300.8935, though Microsoft only credits "certain scenarios." The real cause is fragmentation on nearly full drives, where NTFS has to clear thousands of scattered file fragments one by one before a delete finishes

The post Windows 11’s File Explorer is now faster at deleting large files, in a rare speed win from Microsoft appeared first on Windows Latest

GitHub Code Expired Sign-In Loop in Microsoft Scout [Fix]

Sun, 26 Jul 2026 06:36:54 +0200

Microsoft Scout is Microsoft’s latest agentic tool, offering an always-on way to automate workflows across Microsoft 365 and your local environment. However, when signing in to this tool, several users have reported the “GitHub code expired” sign-in loop error. Since Scout requires a GitHub Copilot Business or Enterprise license linked to your account, this error becomes […]

This article GitHub Code Expired Sign-In Loop in Microsoft Scout [Fix] first appeared on TheWindowsClub.com.

CVE-2026-64522 | Linux Kernel up to 6.18.33/7.0.10 eswitch mode net/mlx5e mlx5e_xfrm_add_state off-by-one (EUVD-2026-48866)

Sun, 26 Jul 2026 06:36:24 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.33/7.0.10. Affected is the function mlx5e_xfrm_add_state of the file net/mlx5e of the component eswitch mode. The manipulation results in off-by-one. This vulnerability is identified as CVE-2026-64522. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

CVE-2026-64517 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 GSC xe_gsc_init_post_hwconfig double free (EUVD-2026-48861)

Sun, 26 Jul 2026 06:36:23 +0200

A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This impacts the function xe_gsc_init_post_hwconfig of the component GSC. The manipulation results in double free. This vulnerability is cataloged as CVE-2026-64517. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

CVE-2026-64518 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 Tcp Ao Established Key tcp_ao_established_key out-of-bounds (EUVD-2026-48862)

Sun, 26 Jul 2026 06:36:23 +0200

A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. Affected is the function tcp_ao_established_key of the component Tcp Ao Established Key. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-64518. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

CVE-2026-64519 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 NFSD nfsd4_revoke_states infinite loop (EUVD-2026-48863)

Sun, 26 Jul 2026 06:36:23 +0200

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This affects the function nfsd4_revoke_states of the component NFSD. Executing a manipulation can lead to infinite loop. The identification of this vulnerability is CVE-2026-64519. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

CVE-2026-64520 | Linux Kernel up to 6.18.33/7.0.10 arm_ffa buffer overflow (EUVD-2026-48864)

Sun, 26 Jul 2026 06:36:23 +0200

A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10. It has been rated as very critical. The impacted element is an unknown function of the component arm_ffa. Performing a manipulation results in buffer overflow. This vulnerability was named CVE-2026-64520. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

CVE-2026-64521 | Linux Kernel up to 6.18.33/7.0.10 pinctrl pinconf_pins_show deadlock (EUVD-2026-48865)

Sun, 26 Jul 2026 06:36:23 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.33/7.0.10. This impacts the function pinconf_pins_show of the component pinctrl. The manipulation leads to deadlock. This vulnerability is referenced as CVE-2026-64521. The attack can only be performed from a local environment. No exploit is available. You should upgrade the affected component.

CVE-2026-64513 | Linux Kernel up to 6.18.38/7.1.3 KVM handle_tpr_below_threshold denial of service (EUVD-2026-48857)

Sun, 26 Jul 2026 06:36:22 +0200

A vulnerability has been found in Linux Kernel up to 6.18.38/7.1.3 and classified as critical. Affected by this vulnerability is the function handle_tpr_below_threshold of the component KVM. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2026-64513. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

CVE-2026-64515 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 mac80211 defragmentation routine heap-based overflow (EUVD-2026-48859)

Sun, 26 Jul 2026 06:36:22 +0200

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. The impacted element is the function defragmentation routine of the component mac80211. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked as CVE-2026-64515. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

CVE-2026-64516 | Linux Kernel up to 7.0.10 Drm Amgpu Vce1 drm/amdgpu/vce1 out-of-bounds (EUVD-2026-48860)

Sun, 26 Jul 2026 06:36:22 +0200

A vulnerability marked as very critical has been reported in Linux Kernel up to 7.0.10. This affects an unknown function of the file drm/amdgpu/vce1 of the component Drm Amgpu Vce1. The manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-64516. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

CVE-2026-64514 | Linux Kernel up to 7.1.3 userfaultfd userfaultfd_must_wait/userfaultfd_huge_must_wait encoding error (EUVD-2026-48858)

Sun, 26 Jul 2026 06:36:22 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. The affected element is the function userfaultfd_must_wait/userfaultfd_huge_must_wait of the component userfaultfd. Such manipulation leads to encoding error. This vulnerability is uniquely identified as CVE-2026-64514. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

CVE-2026-66038 | FFmpeg up to 8.1.2 LCL/ZLIB Video Decoder lcldec.c zlib_decomp information disclosure (Nessus ID 329734)

Sun, 26 Jul 2026 06:36:21 +0200

A vulnerability was found in FFmpeg up to 8.1.2. It has been classified as problematic. This affects the function zlib_decomp of the file lcldec.c of the component LCL/ZLIB Video Decoder. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2026-66038. The attack is possible to be carried out remotely. No exploit exists. It is suggested to install a patch to address this issue.

CVE-2026-66041 | FFmpeg up to 8.1.2 vf_quirc filter av_image_copy_plane out-of-bounds write (Nessus ID 329731)

Sun, 26 Jul 2026 06:36:21 +0200

A vulnerability was found in FFmpeg up to 8.1.2. It has been rated as critical. Affected is the function av_image_copy_plane of the component vf_quirc filter. Performing a manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-66041. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.

CVE-2026-64511 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 ACPI NFIT Core drivers/acpi/nfit/core.c acpi_nfit_uc_error_notify null pointer dereference (EUVD-2026-48855)

Sun, 26 Jul 2026 06:36:21 +0200

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. The affected element is the function acpi_nfit_uc_error_notify of the file drivers/acpi/nfit/core.c of the component ACPI NFIT Core. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2026-64511. The attack is only possible with local access. There is not any exploit available. You should upgrade the affected component.

CVE-2026-64510 | Linux Kernel up to 7.1.3 Nfit Core acpi_nfit_init use after free (EUVD-2026-48854)

Sun, 26 Jul 2026 06:36:21 +0200

A vulnerability was found in Linux Kernel up to 7.1.3. It has been classified as very critical. Impacted is the function acpi_nfit_init of the component Nfit Core. This manipulation causes use after free. This vulnerability is handled as CVE-2026-64510. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is recommended.

CVE-2026-64512 | Linux Kernel up to 7.1.3 Cppc drivers/acpi/cppc_acpi.c cpc_write access_width out-of-bounds (EUVD-2026-48856)

Sun, 26 Jul 2026 06:36:21 +0200

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.3. This impacts the function cpc_write of the file drivers/acpi/cppc_acpi.c of the component Cppc. This manipulation of the argument access_width causes out-of-bounds read. This vulnerability appears as CVE-2026-64512. The attack requires local access. There is no available exploit. It is advisable to upgrade the affected component.

CVE-2026-66039 | FFmpeg up to 8.1.2 MACE6 Audio Decoder mace_decode_frame bytes_per_packet integer overflow (Nessus ID 329729)

Sun, 26 Jul 2026 06:36:20 +0200

A vulnerability was found in FFmpeg up to 8.1.2. It has been declared as critical. This impacts the function mace_decode_frame of the component MACE6 Audio Decoder. Such manipulation of the argument bytes_per_packet leads to integer overflow. This vulnerability is listed as CVE-2026-66039. The attack may be performed from remote. There is no available exploit. A patch should be applied to remediate this issue.

CVE-2026-66374 | nic Knot Resolver up to 6.4.0 DNS-over-QUIC buffer overflow (Nessus ID 329728)

Sun, 26 Jul 2026 06:36:20 +0200

A vulnerability was found in nic Knot Resolver up to 6.4.0. It has been declared as critical. Affected by this issue is some unknown functionality of the component DNS-over-QUIC. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2026-66374. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

CVE-2026-15037 | Qt XML up to 6.11.x QDom xml injection (Nessus ID 329733)

Sun, 26 Jul 2026 06:36:20 +0200

A vulnerability categorized as critical has been discovered in Qt XML up to 6.11.x. This vulnerability affects unknown code of the component QDom. The manipulation results in xml injection. This vulnerability is reported as CVE-2026-15037. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

CVE-2026-5212 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/webdav_mgr.cgi Webdav_Upload_File f_file stack-based overflow

Sun, 26 Jul 2026 06:36:19 +0200

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. It has been rated as critical. This issue affects the function Webdav_Upload_File of the file /cgi-bin/webdav_mgr.cgi. The manipulation of the argument f_file leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-5212. The attack is possible to be carried out remotely. Moreover, an exploit is present.

CVE-2026-5213 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/account_mgr.cgi cgi_adduser_to_session read_list stack-based overflow

Sun, 26 Jul 2026 06:36:19 +0200

A vulnerability identified as critical has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. The identification of this vulnerability is CVE-2026-5213. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

CVE-2026-66036 | FFmpeg up to 8.1.2 vf_hqdn3d filter vf_hqdn3d.config_input/denoise_spatial heap-based overflow (Nessus ID 329726)

Sun, 26 Jul 2026 06:36:19 +0200

A vulnerability classified as critical was found in FFmpeg up to 8.1.2. This vulnerability affects the function vf_hqdn3d.config_input/denoise_spatial of the component vf_hqdn3d filter. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-66036. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

CVE-2026-66040 | FFmpeg up to 8.1.2 PNG/APNG encoders png_write_chunk out-of-bounds write (b506faf / Nessus ID 329727)

Sun, 26 Jul 2026 06:36:19 +0200

A vulnerability was found in FFmpeg up to 8.1.2 and classified as critical. The impacted element is the function png_write_chunk of the component PNG/APNG encoders. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2026-66040. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

CVE-2026-66037 | FFmpeg up to 8.1.1 IAMF demuxer libavformat/iamf_parse.c mix_presentation_obu count_label resource consumption (5d7112c / Nessus ID 329730)

Sun, 26 Jul 2026 06:36:19 +0200

A vulnerability classified as problematic has been found in FFmpeg up to 8.1.1. This affects the function mix_presentation_obu of the file libavformat/iamf_parse.c of the component IAMF demuxer. This manipulation of the argument count_label causes resource consumption. This vulnerability is handled as CVE-2026-66037. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

CVE-2026-34738 | WWBN AVideo up to 26.0 setStatus improper authorization (GHSA-m577-w9j8-ch7j)

Sun, 26 Jul 2026 06:36:18 +0200

A vulnerability identified as critical has been detected in WWBN AVideo up to 26.0. The impacted element is the function setStatus. This manipulation causes improper authorization. The identification of this vulnerability is CVE-2026-34738. It is possible to initiate the attack remotely. There is no exploit available.

CVE-2026-34400 | Alerta up to 9.0.x Query String Search API sql injection (GHSA-8prr-286p-4w7j)

Sun, 26 Jul 2026 06:36:18 +0200

A vulnerability labeled as critical has been found in Alerta up to 9.0.x. Affected by this vulnerability is an unknown functionality of the component Query String Search API. Executing a manipulation can lead to sql injection. The identification of this vulnerability is CVE-2026-34400. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

CVE-2026-34401 | Microsoft XmlNotepad prior 2.9.0.21 HTTP/SMB xml external entity reference (GHSA-5j32-486h-42ch)

Sun, 26 Jul 2026 06:36:18 +0200

A vulnerability was found in Microsoft XmlNotepad. It has been declared as problematic. Affected is an unknown function of the component HTTP/SMB. Such manipulation leads to xml external entity reference. This vulnerability is traded as CVE-2026-34401. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

CVE-2026-3468 | SonicWall Email Security cross site scripting (WLID-2026-0002)

Sun, 26 Jul 2026 06:36:17 +0200

A vulnerability classified as problematic was found in SonicWall Email Security. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability appears as CVE-2026-3468. The attack may be performed from remote. There is no available exploit.

CVE-2026-3470 | SonicWall Email Security improper authentication (SNWLID-2026-0002)

Sun, 26 Jul 2026 06:36:17 +0200

A vulnerability identified as critical has been detected in SonicWall Email Security. The affected element is an unknown function. The manipulation leads to improper authentication. This vulnerability is listed as CVE-2026-3470. The attack may be initiated remotely. There is no available exploit.

CVE-2026-34739 | WWBN AVideo up to 26.0 testIP.php htmlspecialchars cross site scripting (GHSA-jqrj-chh6-8h78)

Sun, 26 Jul 2026 06:36:17 +0200

A vulnerability classified as problematic was found in WWBN AVideo up to 26.0. This impacts the function htmlspecialchars of the file testIP.php. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2026-34739. It is possible to launch the attack remotely. No exploit is available.

CVE-2026-34737 | WWBN AVideo up to 26.0 Endpoint test.php retrieveSubscriptions authorization (GHSA-38rh-4v39-vfxv)

Sun, 26 Jul 2026 06:36:17 +0200

A vulnerability was found in WWBN AVideo up to 26.0. It has been declared as problematic. Affected by this issue is the function retrieveSubscriptions of the file test.php of the component Endpoint. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-34737. The attack can be launched remotely. No exploit exists.

CVE-2026-34740 | WWBN AVideo up to 26.0 EPG Page isSSRFSafeURL server-side request forgery (GHSA-x5vx-vrpf-r45f)

Sun, 26 Jul 2026 06:36:17 +0200

A vulnerability, which was classified as critical, has been found in WWBN AVideo up to 26.0. Affected is the function isSSRFSafeURL of the component EPG Page. The manipulation leads to server-side request forgery. This vulnerability is documented as CVE-2026-34740. The attack can be initiated remotely. There is not any exploit available.

CVE-2026-64507 | Linux Kernel up to 7.2-rc1 BPF JIT bugs.c allocation of resources (EUVD-2026-48851)

Sun, 26 Jul 2026 06:36:16 +0200

A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1. It has been rated as problematic. This issue affects some unknown processing of the file bugs.c of the component BPF JIT. This manipulation causes allocation of resources. The identification of this vulnerability is CVE-2026-64507. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is advised.

CVE-2026-64508 | Linux Kernel up to 7.2-rc1 BPF bpf_arch_pred_flush allocation of resources (EUVD-2026-48852)

Sun, 26 Jul 2026 06:36:16 +0200

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1. Impacted is the function bpf_arch_pred_flush of the component BPF. Such manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-64508. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

CVE-2026-64506 | Linux Kernel up to 7.1.3 rtw89 state issue (EUVD-2026-48850)

Sun, 26 Jul 2026 06:36:16 +0200

A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.1.3. Affected is an unknown function of the component rtw89. Such manipulation leads to state issue. This vulnerability is traded as CVE-2026-64506. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

CVE-2026-64509 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 block GenDiskBuilder::build memory leak (EUVD-2026-48853)

Sun, 26 Jul 2026 06:36:16 +0200

A vulnerability was found in Linux Kernel up to 6.12.96/6.18.38/7.1.3 and classified as very critical. This issue affects the function GenDiskBuilder::build of the component block. The manipulation results in memory leak. This vulnerability is known as CVE-2026-64509. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

CVE-2026-3469 | SonicWall Email Security denial of service (SNWLID-2026-0002)

Sun, 26 Jul 2026 06:36:16 +0200

A vulnerability categorized as problematic has been discovered in SonicWall Email Security. Impacted is an unknown function. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2026-3469. The attack can be launched remotely. No exploit exists.

CVE-2026-64502 | Linux Kernel up to 6.18.38/7.1.3 Iio Adc Ad Sigma Delta ad_sigma_delta_clear_pending_event heap-based overflow (EUVD-2026-48846)