Top Tweets for #NewVulnerability
#NØØT_Security_Alerts
🚨 #ALERT — #FortiOS #NewVulnerability: Critical OSPF Authentication Bypass
10 Nov 2026
CVE-2026-126253 (CVSS 9.3): An unauthenticated adjacent-network attacker may inject unauthorized OSPF link-state advertisements—not execute OS code.
Affected → Fixed:
7.2.0–7.2.13 → 7.2.14
7.4.0–7.4.12 → 7.4.13
7.6.0–7.6.7 → 7.6.8
8.0.0–8.0.1 → 8.0.2
FortiOS 7.0.1–7.0.19 requires migration. FortiSASE 26.3.1/26.3.1_a was remediated in 26.3.2; older affected branches require migration.
Restrict OSPF to trusted peers, follow the supported upgrade path and verify routing stability.
Fortinet reports no known exploitation.
https://t.co/qQxjJLfHV7
#CVE #NetworkSecurity #RoutingSecurity
#NØØT_Security_Alerts
🚨 #ALERT — #FortiMail #NewVulnerability: Critical Unauthenticated HA Command Injection
10 Nov 2026
CVE-2026-126148 (CVSS 9.8): Crafted HA join packets may permit unauthenticated OS command execution when the vulnerable HA control plane is reachable.
Affected: 7.6.0–7.6.6 and 8.0.0–8.0.1.
Fixed: 7.6.7 and 8.0.2. Branches 7.2/7.4 are unaffected.
Restrict HA traffic to trusted peers without disrupting clustering. Apply the supported update and verify running firmware. FortiMail Cloud was remediated October 5.
Fortinet reports no known exploitation.
https://t.co/jyRe5vEcum
#CVE #EmailSecurity #NetworkSecurity
#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #NewVulnerability: Compromised Publisher Can Execute Code on Subscriber
12 Nov 2026
CVE-2026-120145 (CVSS 8.8): A compromised logical-replication publisher can target subscriber system catalogs and execute OS code through replication. Only subscriptions owned by a PostgreSQL superuser are vulnerable.
Fixed: 18.7 / 17.12 / 16.16 / 15.20 / 14.25.
Audit subscription ownership and publisher trust. Preserve replication evidence, coordinate containment to avoid disrupting data flows, and verify patched subscriber binaries. PostgreSQL 14 is EOL.
https://t.co/VJJvi6ejL2
#CVE #DatabaseSecurity #IncidentResponse
#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #NewVulnerability: Authenticated User Can Execute OS Code
12 Nov 2026
CVE-2026-120139 (CVSS 8.8): Oversized tuple data can trigger integer wraparound, allowing an authenticated database user to execute code with the PostgreSQL server’s OS-account privileges—not necessarily root.
Fixed: 18.7 / 17.12 / 16.16 / 15.20 / 14.25.
Restrict untrusted database access, preserve relevant logs, apply tested security updates and verify running server binaries. PostgreSQL 14.25 is the final 14.x release; migrate to a supported branch.
https://t.co/XB9lsIpcMH
#CVE #DatabaseSecurity #DevSecOps
#NØØT_Security_Alerts
🚨 #ALERT — #PostgreSQL #NewVulnerability: Crafted Backup Executes OS Code
12 Nov 2026
CVE-2026-116314 (CVSS 8.8): A malicious non-plain backup archive can execute code with pg_restore’s OS privileges when processed—not an unauthenticated database-server exploit.
Fixed clients: 18.7 / 17.12 / 16.16 / 15.20 / 14.25.
Verify pg_restore binaries on restore hosts. Do not process untrusted archives: even patched restores can execute SQL contained in backups. Preserve suspicious files. PostgreSQL 14 is now EOL.
https://t.co/BOM6EAi4fV
#CVE #DatabaseSecurity #IncidentResponse
#NØØT_Security_Alerts
🚨 #ALERT — #AVideo #NewVulnerability: Critical Social Login Account Takeover
November 9, 2026
GHSA-9rvm-cfc4-q9g9 (CRITICAL, CVSS 9.8): AVideo can bind an attacker’s social identity to an existing local account by matching its username rather than the provider’s unique identifier.
AFFECTED: Versions 6.5–29.7.1, per project advisory.
PREREQUISITES: A vulnerable X, Facebook, Yahoo or LinkedIn login integration is enabled; the provider returns no email; its attacker-controlled display name matches an existing username.
IMPACT: Account takeover, potentially including administrators.
EXPLOITATION: Researcher reproduction using extracted application code and a simulated database; no confirmed wild exploitation.
FIX: Commit d34ccf23. A patched tagged release was not verified.
ACTION: Deploy and validate the fix; otherwise restrict affected social logins, preserve logs and investigate suspicious account access.
CONFIDENCE: High for code-path vulnerability; production exploitation and packaged fix availability unverified.
SOURCE:
https://t.co/ZFsSswFDSu
https://t.co/1jo0EqWBTB
#CyberSecurity #AuthenticationBypass #AccountTakeover #AppSec #DevSecOps #IncidentResponse
#NØØT_Security_Alerts
🚨 #ALERT — #ApacheHTTPServer #NewVulnerability: Critical HTTP/2 Remote Code Execution
November 11, 2026
CVE-2026-119618: A concurrency flaw in mod_http2 may allow unauthenticated code execution with the server process’s privileges.
AFFECTED: Apache httpd 2.4.55–2.4.70 with HTTP/2 enabled; standalone mod_h2 2.0.8–2.0.42.
FIXED: httpd 2.4.71 or verified distribution backports.
EXPLOITATION: Red Hat reports reliable research exploitation of a default-configured server. No malicious in-the-wild exploitation established. RHEL 9/10 have mitigating allocator differences; RHEL 8 is unaffected.
ACTION: Verify running modules, protocols and package fixes. Apply tested updates; disabling HTTP/2 temporarily requires compatibility assessment.
CONFIDENCE: High—Apache and Red Hat confirm the technical risk; real-world exploitation remains unverified.
SOURCE:
https://t.co/V1c6GWni7a
https://t.co/RFUFo6gvgm
#CVE #CyberSecurity #AppSec #WebSecurity #DevSecOps #IncidentResponse
#NØØT_Security_Alerts
🚨 #ALERT — #NodeJS #NewVulnerability: HTTPS Heap Leak
11 Nov 2026
CVE-2026-123864: HTTPS heap leak with early flushHeaders() and body echo/storage. Fixed 22.23.5 / 24.22.3 / 26.13.1. Audit handlers.
https://t.co/ua5MLJooWz
#NØØT_ #CVE #AppSec
“OnTheThreshold” A painting about transition.
Between who you were
and who you’re becoming.
Available on @artsy and @Artsper for link in the first post.
_____________
#NewVulnerability #ContemporaryArt #FigurativePainting #oilpainting #artist #painting
I don't like to MoveIT MoveIT - disable the HTTP/S people there's a new vuln!
https://t.co/xwIPIanCZm
#MoveIT #NewVulnerability #RCE #HTTPS
Is Text4Shell really on Log4Shell level?
Everything you need to know about the new vulnerability is detailed in my blog post, go check it out😊
#text4shell #log4shell #newvulnerability
https://t.co/wtTr2npcif
Last Seen Hashtags on Sotwe
momsonnn
ISE1
Seen from United States
trudyleegayle
Seen from United States
hijab slave
Seen from United Arab Emirates
3èmes
Seen from United States
crying #forced filter:videos
Seen from Turkey
Spotthechallenge
Seen from United States
gloriatorres
Seen from Germany
ninadobrev
Seen from Japan
izmitcd
Seen from Turkey
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.4M followers
Kim Kardashian
@kimkardashian
70.8M followers
YouTube
@youtube
68.7M followers
Neymar Jr
@neymarjr
66.4M followers
Bill Gates
@billgates
65.2M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.6M followers