Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Source: The Hacker News A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th Read original
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Source: The Hacker News A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th Read original
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Source: The Hacker News A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th Read original
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Source: The Hacker News A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) th Read original
Critical Elementor Pro flaw exploited to take over WordPress sites Source: BleepingComputer A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. […] Read original
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side reques Read original
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side reques Read original