AgentPrime

agentprime - we share just the CVE and vulnerabilities you need to know about to keep your software secure.

[AgentPrime @agentprime_io]

🔴 4 critical CVEs from NetScaler today, including Citrix NetScaler ADC (CVSS 9.3)
https://t.co/UWOKU8KCYW

[AgentPrime @agentprime_io]

🔴 Citrix NetScaler ADC: Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler… (CVE-2026-120868)
Fix → 14.1-73.57, 13.1-64.39 +2
https://t.co/RdIfGHm8Yf

[AgentPrime @agentprime_io]

🔴 Rucio: Unauthenticated administrator impersonation through SSH challenge tokens (CVE-2026-100397)
Fix → 35.9.1, 38.6.1 +2
https://t.co/em9cKv8Tpn

[AgentPrime @agentprime_io]

🔴 Linksys EA8100: Linksys EA8100 SMB Service service_smbd.sh initialization (CVE-2026-127277)
No fix listed yet
https://t.co/qFmkF1RidD

[AgentPrime @agentprime_io]

🔴 Linksys EA8100: Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication (CVE-2026-127275)
No fix listed yet
https://t.co/EGCfr3VMCt

[AgentPrime @agentprime_io]

🔴 DataComm RMM+: The third-party RMM+ extension for ConnectWise ScreenConnect uses a static API secret by default (CVE-2026-127063)
No fix listed yet
https://t.co/Oa8eBdC0YK

[AgentPrime @agentprime_io]

🔴 7 critical CVEs from VulnCheck today, including Copeland XWEB EVO (CVSS 9.3)
https://t.co/6K96vTeGHC

[AgentPrime @agentprime_io]

🔴 Azul Payara Payara Server: Azul Payara JMX/RMI Remote Authentication Bypass Leading to Remote Code Execution via GenericAdminAuthenticator (CVE-2026-90908)
Fix → 7.6.0, 7.2026.11 +3
https://t.co/TVd0l4go3p

[AgentPrime @agentprime_io]

🔴 Azul Payara Payara Server: Azul Payara Administration REST Interface Authentication Bypass via X-GlassFish-authToken Header Leading to Remote… (CVE-2026-110003)
Fix → 7.6.0, 7.2026.11 +3
https://t.co/k3KKqTnclI

[AgentPrime @agentprime_io]

🔴 Red Hat Satellite 6: Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions (CVE-2026-107360)
No fix listed yet
https://t.co/wfZY3NlkWB

[AgentPrime @agentprime_io]

🔴 Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gate (CVE-2026-68548)
Fix → 1.17.10
https://t.co/dcGsv4bhJx

[AgentPrime @agentprime_io]

🔴 Microchip TimePictra: TimePictra Stored Cross-site Scripting (CVE-2026-8333)
Fix → 12.0
https://t.co/wBsf717MHA

[AgentPrime @agentprime_io]

🔴 7 critical CVEs from Google Chrome today, including Google Chrome (CVSS 9.6)
https://t.co/rcNrBPWltp

[AgentPrime @agentprime_io]

🔴 Descope: Descope < 1.2.0 - Unauthenticated Account Takeover (CVE-2026-110959)
Fix → 1.2.0
https://t.co/ZTlpqpJiPJ

[AgentPrime @agentprime_io]

🔴 jdownloads․com jDownloads extension for Joomla: Joomla Extension - jdownloads․com - RCE through file upload in jDownloads < 4.1.8 (CVE-2026-117551)
No fix listed yet
https://t.co/xRDH9Ltqx5

[AgentPrime @agentprime_io]

🔴 Ultimate Addons for Elementor Forms: Ultimate Addons for Elementor Forms < 1.0.8 - Unauthenticated Arbitrary File Upload via 'type' Parameter (CVE-2026-124814)
Fix → 1.0.8
https://t.co/9PmJwCl2HU

[AgentPrime @agentprime_io]

🔴 SQL injection in Synology DiskStation Manager (DSM) (CVE-2026-76954)
Fix → 7.4.1-90080-1, 7.3.2-86009-5 +2
https://t.co/Sn2aF2b77a

[AgentPrime @agentprime_io]

🔴 Zohocorp M365 Manager Plus: Privilege Escalation (CVE-2026-12591)
Fix → 4818
https://t.co/s4CFbvHCHj

[AgentPrime @agentprime_io]

🔴 Clockinator Lite: Clockinator Lite < 1.1.0 - Unauthenticated SQLi via Record Deletion Actions (CVE-2026-124815)
Fix → 1.1.0
https://t.co/gS6RBbw100

[AgentPrime @agentprime_io]

Last 24h on agentprime: 41 critical, 0 newly exploited, 16 with a fix listed. → https://t.co/A8euEkbhuK