Hírolvasó

Overview

VPS.org's one-click deployment templates provision services with default passwords and predefined network bindings instead of generating randomized secrets or applying per-deployment hardening measures.

Description

VPS.org is a cloud and virtual private server hosting provider that offers a library of templates for quickly provisioning common applications and services. Multiple vulnerabilities exist in the one-click deployment templates feature. These vulnerabilities stem from the same root cause: content is directly instantiated from static templates, using default passwords and static secrets with no deployment-specific randomization or interface-binding hardening at provisioning time.

CVE-2026-16503 The Supabase template provides an instance of PostgreSQL that is bound to all network interfaces (0.0.0.0:5432) and uses the hard-coded database password postgres. Because Docker manages its own iptables rules, this exposure can bypass standard host UFW firewall configurations. If the the instance is exposed to the internet, a remote attacker could connect to the host's published TCP port 5432 and authenticate as the postgres superuser account using the default postgres password.

CVE-2026-16504 The Zulip template ships with a hard-coded application key secret_key: changeme, a default database password zulip, and the setting DISABLE_HTTPS=True. An attacker can use this public secret key to forge or validate signed session material, enabling session forgery and authentication bypass against the instance. If unchanged, the default database password zulip can be used to authenticate to the database. Furthermore, the DISABLE_HTTPS=True configuration causes all traffic to be sent over unencrypted HTTP by default, exposing credentials and session data to potential interception in certain deployments.

Impact

CVE-2026-16503 (Supabase template): PostgreSQL superuser access from the internet enables the following:
* read and exfiltrate data
* insert/modify/delete data
* alter the database schema, roles, and privileges
* establish persistence via database objects
* denial of service through destructive statements (dropping tables/databases)

CVE-2026-16504 (Zulip template): Authentication bypass and session forgery allows the following:
* account and instance takeover
* interception of credentials and session tokens over unencrypted transport

This constitutes a Technical Impact = Total under the SSVC framework, meaning:

The vulnerability gives the adversary total control over the behavior of the software or total disclosure of all information on the affected system.

Solution

Unfortunately, VPS.org could not be reached to coordinate these vulnerabilities, and a patch is not yet available. Users of VPS.org one-click deployment templates are advised to change any default passwords and secret keys before deploying to a production environment. Firewall rules and network segmentation should be implemented to restrict internet access to back-end systems such as databases and other sensitive resources. Finally, where applicable, HTTPS should be enabled to protect credentials and session data in transit.

Acknowledgements

Thank you to Simon Gajdosik for reporting these vulnerabilities. This document was written by Bob Kemerer.

Overview

Six vulnerabilities have been discovered within the SGLang project, including remote code execution (RCE), server-side request forgery (SSRF), local file read, credential leakage, and model weight exfiltration on a target server. Exploitation does not require authentication in most cases, and some vulnerabilities require only network access with no API keys or user credentials. At the time of publication, no patches are available from the project maintainers, and coordination attempts have been unsuccessful.

Description

SGLang is an open-source framework for serving large language models (LLMs) and multimodal AI models, supporting models such as Qwen, DeepSeek, Mistral, and Skywork, and is compatible with OpenAI APIs. Six vulnerabilities have been discovered within the tool and are tracked as follows:

CVE-2026-15969
SGLang contains unauthenticated RCE in /load_lora_adapter_from_tensors by bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.

CVE-2026-15971
SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, which allows for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.

CVE-2026-15974
SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions because image_url input is unsanitized, allowing access to internal metadata, secrets, and services.

CVE-2026-15976
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.

CVE-2026-15977
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which returns API keys and SSL keyfile information when only the --admin-api-key is configured.

CVE-2026-15978
SGLang contains a model weight exfiltration vulnerability when no API keys are configured, because SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights.

Impact

If exploited, these vulnerabilities could allow an unauthenticated attacker to achieve remote code execution, exfiltrate model weights, or overwrite arbitrary files on the host machine running SGLang. Deployments that expose the affected interface to untrusted networks are at the highest risk of exploitation.

Solution

Until a patch is available, affected users should consider the following mitigations:

Mitigations

• Restrict access to the service interfaces and ensure they are not exposed to untrusted networks.
• Implement network segmentation and access controls to prevent unauthorized interaction with the vulnerable endpoints.
• Change SGLANG_USE_PICKLE_IPC to "false" within environ.py.
• Disable endpoints not in use to remove potential attack vectors.

The SGLang maintainers have begun addressing pickle deserialization vulnerabilities and are working to refactor the code base with msgpack to prevent deserialization issues such as CVE-2026-14890, but the SGLANG_USE_PICKLE_IPC defaults to true within the codebase at the time of writing.

Acknowledgements

Thanks to the reporter, Apoorv Dayal [apoorvdayal@outlook.com]. This document was written by Christopher Cullen.

Overview

Two vulnerabilities in the REST API were found in Golf Compete foreUP. The first exposes the merchant, Finix, API credentials directly in customer record responses, allowing any user to obtain and use the payment processor account. The second is a missing object-level authorization check, which lets a user retrieve any other customer's full profile, payment token, and transaction history by changing the golfer_id in the request path.

Description

Golf Compete foreUP provides cloud-based golf course management software to over 2,000 golf courses. They offer tools that allow the management of customers, inventory, tee times, food & beverages, marketing, billing, etc. The vulnerabilities identified are listed below.

CVE-2026-15657 A vulnerability in the foreUP customer REST API exposes merchant credentials. Each customer record response includes the facility’s merchant API credentials in cleartext, exposing the following details:

• finix_username
• finix_password
• finix_merchant_id

Merchant credentials are identical across for customers at the same facility and are actively used by the backend to register new payment instruments. Any authenticated customer can obtain the facility’s merchant credentials when querying own record. Combined with the second vulnerability described below, an attacker can retrieve merchant credentials from any customer record at the facility.

CVE-2026-15658 A missing object-level authorization also known as BOLA (Broken Object Level Authorization) and IDOR (Insecure Direct Object References) in the REST API endpoint returns the record identified by golfer_id without verifying ownership. A caller can substitute any golfer_id while using their own valid JSON Web Token (JWT) and receive another customer's full profile, including the following details:

• Name, email, phone numbers, date of birth, address
• Free‑text household relationship notes
• Finix payment‑instrument tokens
• Dwolla bank funding‑source tokens
• Billing and transaction history

Impact

With a single valid low‑privilege foreUP customer account, someone can perform the following actions:
1. Retrieve any customer’s full profile and contact data
2. Access stored card tokens and Dwolla ACH funding-source tokens
3. Enumerate and view full billing and transaction history for any customer
4. Obtain live Finix merchant API credentials for the facility

Also, because the web API is shared by all tenants, all facilities using foreUP are affected, meaning that a customer from facility A could query merchant information from facility B.

Solution

On 07/26/2026, foreUP confirmed that all vulnerabilities in this report have been remediated. Users should remain aware of increased phishing and identity theft risks and monitor their accounts for suspicious activity.

Acknowledgements

Thank you to Eric Mead for reporting this vulnerability. This document was written by Bob Kemerer.

A Ruby on Rails egy kritikus sebezhetőség miatt sürgősségi frissítéseket adott ki július 29-én, mert a hiba lehetővé teheti, hogy egy nem hitelesített támadó fájlokat olvasson ki a szerverről. A sérülékenységet CVE-2026-66066 azonosítón tartják nyilván, és a KindaRails2Shell becenevet kapta. A hibát egymástól függetlenül jelentette az Ethiack két kutatócsapata, illetve a GMO Flatt Security egyik […]

A Huntress egy aktív, automatizált credential stuffing kampányt azonosított, amely SonicWall VPN- és tűzfaleszközök bejelentkezéseit célozza. A támadások 2026. július 25-én indultak, és nem egyetlen célpontra koncentráltak, hanem nagy tömegben tesztelik a korábban megszerzett felhasználónév-jelszó párosokat, és ahol működik a bejelentkezés, ott azonnal hozzáférést nyernek. A kampány során több sikeres SonicWall VPN- és firewall-bejelentkezést észleltek, […]

A Dysphoria nevű botnet világszerte mintegy 200 ezer eszközt fertőzött meg, amelyeket DDoS-támadások végrehajtására és hálózati forgalom továbbítására használnak.

Több száz, az Anthropic Claude nevű mesterséges intelligencia chatbotjával folytatott felhasználói beszélgetés vált nyilvánosan hozzáférhetővé az interneten.

Overview

A vulnerability in the zipx.Unzip extraction routine of Develar’s app-builder allows an attacker to overwrite arbitrary files on macOS using Apple File System (APFS). The issue arises from a combination of Unicode normalization collisions and unsafe symlink-following behavior. APFS treats certain Unicode equivalent filenames as identical (e.g., ß ↔ ss), while app builder performs no canonical normalization before validating or writing paths.

Description

Develar’s app-builder is a command‑line build tool used heavily in the Electron ecosystem to package, sign, notarize, and produce distributable application bundles for macOS, Windows, and Linux. It is popular because it is a transitive dependency of electron-builder, one of the most widely used packaging tools for Electron apps.

The vulnerability arises from how the zipx.Unzip routine handles Unicode‑equivalent filenames and symbolic links during ZIP extraction. APFS treats certain Unicode representations as identical (e.g., ß and ss), but app-builder does not perform canonical normalization before validating output paths. As a result, an attacker can craft ZIP archives that combine Unicode normalization collisions with malicious symlinks to redirect writes outside the intended extraction directory.

The GitHub Pull Request addresses the symlink-following variant of this vulnerability (CWE‑22 and CWE‑59) by rejecting any symlink whose resolved target escapes the intended output directory and by adding O_NOFOLLOW to regular file writes. Without these protections, an attacker can craft ZIP archives containing malicious symlinks and Unicode-colliding filenames to overwrite arbitrary files on APFS-backed systems.

Impact

Exploitation of this vulnerability allows an attacker to overwrite arbitrary files on macOS systems using APFS. By combining Unicode normalization collisions with symlink‑following behavior in the zipx.Unzip routine, an attacker can craft ZIP archives that bypass path‑validation checks and redirect writes outside the intended extraction directory. This may result in loss of integrity, denial of service, or potential code execution, depending on which files are overwritten. Because APFS treats certain Unicode‑equivalent filenames as identical, the attack can evade typical sanitization logic unless canonical normalization is enforced. The vulnerability is exploitable during ZIP extraction without requiring elevated privileges.

Supply-chain Impact

Develar’s app-builder is widely used as a dependency across the ecosystem, affecting numerous downstream repositories. Several projects have already mitigated their exposure, while others may still be affected. A complete remediation requires fixing the vulnerability at its source.

Solution

Develar has not responded to several emails or to issues posted in the GitHub repository requesting contact. The reporter has developed a Pull Request to provide downstream customers with a reference fix and to enable them to analyze the vulnerable code or implement their own patches: https://github.com/develar/app-builder/pull/163

Acknowledgements

CERT/CC thanks the reporter, Tomas Illuminati, Cyber Security Researcher & Threat Intelligence Specialist, for assisting many downstream vendors and developers in mitigating this issue.

We also thank Electron-Userland for responding quickly and implementing a mitigation to protect their downstream users.

This AI-assisted vulnerability note was prepared by Laurie Tyzenhaus.

Overview

A vulnerability has been discovered in the OPeNDAP Hyrax software solution. A remote attacker with the ability to submit crafted requests to an affected Hyrax instance could cause the application to communicate with unauthorized remote systems. Under certain conditions, the vulnerability may also result in the unintended disclosure of user authentication tokens to unauthorized destinations.

Description

CVE-2026-16637
OPeNDAP Hyrax is vulnerable to Server Side Request Forgery (SSRF) and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

OPeNDAP Hyrax is an open-source data server software that enables remote access to scientific datasets over the internet using the OPeNDAP protocol. It allows users to query, subset, and retrieve data in various formats (such as NetCDF, HDF, or GrADS) without downloading entire files. OPeNDAP Hyrax uses a list of allowed hosts, specified through a regular expression, to limit where it can fetch data. When a requested server responds with a redirect, HTTP 3xx, the software follows the redirect without checking whether the new destination is still on the allowed list. This behavior enables an attacker to redirect the system to an untrusted or internal target that would otherwise be blocked. Additionally, when the system follows such a redirect, it may carry certain user identification headers, including a legacy credential called Echo-Token, to the new destination, even though the main authorization token is correctly stripped by the underlying library.

Impact

Successful exploitation could allow an unauthenticated remote attacker to access internal services that are not intended to be reachable from the internet. If a user is authenticated when exploitation occurs, the attacker may also obtain the user's Earthdata identifier and a reusable legacy credential. These credentials could be used to access protected datasets or other resources as the affected user.

Solution

The CERT/CC is currently unaware of a practical solution to this problem. OPeNDAP has been notified and is working to develop a patch that will be released shortly, if it hasn't already. Administrator of Hyrax server are advised to review their allowed host configurations carefully and consider limiting exposure of the gateway endpoint to trusted networks until the fix is available, likely in versions Hyrax-1.18.0 or later.

Acknowledgements

Thanks to the Juan Salvador Sleibe for reporting this issue. This AI-assisted document was written by Timur Snoke.

A Steam közösségi fórumain terjedő új ClickFix-kampány során a támadók hamis hibaelhárítási útmutatókkal próbálják rávenni a felhasználókat rosszindulatú PowerShell-parancsok futtatására. A csalók frissen létrehozott Steam-fiókokkal arra veszik rá a felhasználókat, hogy rendszergazdai jogosultsággal futtassanak egy PowerShell-parancsot, amely állítólag megoldja a problémát. Valójában a parancs egy XMRig alapú kriptobányász programot tölt le és telepít a háttérben, […]

Overview

Firmware versions 2.7.7 and earlier of the Arris BGW210-700 residential gateway contain an authentication bypass vulnerability, tracked as CVE-2026-16771, that allows any unauthenticated LAN-side user to read sensitive configuration data and modify device settings through web management endpoints. Although this vulnerability was recently discovered, the majority of in-service gateways are not expected to be running the affected version. Only devices that have not received automated ISP-managed firmware updates since version 2.7.7 in 2020 are vulnerable.

Description

The Arris BGW210-700 is a residential gateway used widely in AT&T deployments to provide routing, wireless networking, and wide-area network (WAN) connectivity for home users. The device exposes a browser-based management interface on the local-area network (LAN) side that allows users to configure WiFi settings, check diagnostics, and run system operations.

Several CGI (Common Gateway Interface) handlers within the BGW210-700's web interface do not enforce any server-side authentication checks. Although the interface presents an "Access Code" prompt to users, this restriction is entirely implemented through client-side HTML and JavaScript and is not validated by the server before processing requests. As a result, any HTTP client that ignores client-side code can directly access and interact with the underlying CGI endpoints.

The lack of server-side authentication affects multiple configuration and diagnostic pages. The wconfig_unified.ha endpoint returns the plaintext WiFi pre-shared key for all configured SSIDs to any unauthenticated requester. The broadbandconfig.ha endpoint accepts unauthenticated POST requests that directly modify WAN configuration parameters, including settings that persist across device reboots. Additional diagnostic endpoints, such as diag.ha, allow unauthenticated triggering of backend diagnostic jobs.

Impact

This vulnerability allows any unauthenticated user on the LAN, including devices connected to the gateway through the main WiFi network, Guest WiFi network, or LAN ethernet, to read sensitive configuration information and make persistent changes to gateway settings. A local attacker can retrieve the network's plaintext WiFi password with a single HTTP request and achieve unauthorized access to manipulate, intrude on, and interfere with protected networks.

Solution

This gateway is ISP-managed, so all standard internet-connected devices are expected to have been automatically updated to newer unaffected versions. Users can determine their active version by checking their router's diagnostic settings via web browser, and optionally contact their ISP to confirm that automatic updates are functioning correctly. Because the vulnerability is limited to the LAN-side management interface, standard network hygiene practices such as isolating untrusted devices, keeping IoT systems updated, and monitoring for the presence of unknown clients can further reduce risk in environments where older firmware may still be present.

Acknowledgements

Thanks to David Weekly for researching and reporting this vulnerability. This document was written by Molly Jaconski.

Hackerek egy autonóm mesterségesintelligencia-ügynök segítségével hajtottak végre kiberkémkedési műveletet a thaiföldi pénzügyminisztérium ellen.

Ismét jelt adott magáról a „The Gentlemen” nevű zsarolóvírus-csoport: a támadók rövid időn belül egy portugál közlekedési vállalatot, és egy világhírű holland jégstadiont is felvettek a feltételezett áldozataik közé. A portugál Metro Mondego neve 2026. július 16-án jelent meg a csoport dark webes kiszivárogtatási oldalán. A közlekedési vállalat elleni támadás tényét egyelőre független forrásból még […]

A CISA az ipari vezérlők, vagyis PLC-k elleni aktív támadási kampányra hívja fel a figyelmet. A CISA szerint a támadási kampány mögött iráni kötődésű támadók állnak, akik internetre kitett PLC-ket céloznak a kritikus infrastruktúrában. A célpontok között főként az Egyesült Államok víz- és szennyvízkezelése, az energia és az állami/önkormányzati környezetei szerepelnek. A támadók a vezérlési […]

Vizsgálat indult az Egyesült Államokban, hogy kiderítsék, kik állnak a hétfő reggeli minnesotai Braham város vízművét érő kibertámadás mögött. Az incidens következtében a létesítmény rövid időre leállt, miután ismeretlen támadók kompromittálták a számítógépes irányítórendszereket. A támadás az üzemi vezérlők működését bénította meg, ami a kút és a vízkezelő üzem leállását eredményezte. A város szakemberei azonban […]

Az amerikai étteremlánc megerősítette, hogy több mint 13.000 ügyféladat szivárgott ki a közelmúltban történt credential stuffing támadásokat követően. A vállalat a több államügyészséghez benyújtott adatvédelmi incidensről szóló értesítő levelekben közölte, hogy június 17. és 19. között gyanús bejelentkezési tevékenységeket észlelt bizonyos Chick-fil-A One-fiókoknál, melyeket a weboldalt és mobilalkalmazást célzó támadásokként azonosított. Az étteremlánc közleménye szerint […]

A GitHub és a PyPI, vagyis a Python Package Index időalapú védelmi mechanizmusokat vezetett be annak érdekében, hogy mérsékelje a szoftveres ellátási láncot célzó támadások kockázatát.

A CISA és nemzetközi partnerei (NSA, FBI, valamint brit, holland, ausztrál és kanadai hatóságok) 2026. július 23-án közös biztonsági riasztást adtak ki egy orosz állami hátterű hackercsoport, a LAUNDRY BEAR (más néven Void Blizzard, CL-STA-1114, TA488) kampányáról, amely a Zimbra Collaboration Suite (ZCS) webmail platform egy magas súlyosságú sebezhetőségét, a CVE-2025-66376-ot használja ki kormányzati és […]

Az ukrán CERT-UA újabb kiberbiztonsági kampányt azonosított, amelyben a UAC-0099 nevű APT csoport legitimnek tűnő Notepad++ csomag segítségével próbál megfertőzni célpontokat. A támadók egy PDF dokumentumnak álcázott VBS szkripten keresztül juttatják el a káros ZIP-archívumot, amely a valódi Notepad++ 8.8.3 alkalmazás mellett egy manipulált bővítményt is tartalmaz. A művelet nem a Notepad++ ellátási láncának kompromittálására […]

A válogatásban ezen a héten az internet felől elérhető vállalati rendszerek kritikus sérülékenységei, az AI- és fejlesztői környezeteket célzó támadások, valamint a legitim felhőszolgáltatások mögé rejtett vezérlési csatornák kaptak hangsúlyt. Kiemelt figyelmet érdemelnek az aktívan kihasznált SharePoint- és SonicWall-hibák, valamint az AI-modellekhez és vektoradatbázisokhoz kapcsolódó új zsarolóvírus-kockázatok.