Critical Authentication Bypass Flaws (CVE-2025-30410–30416) Expose Acronis Cyber Protect Backup Servers to Full Remote Takeover Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 Vulnerability Overview CVE IDs: CVE-2025-30410, CVE-2025-30411, CVE-2025-30412, CVE-2025-30413, CVE-2025-30414, CVE-2025-30415, CVE-2025-30416Affected Product: Acronis Cyber Protect (on-prem) and…continue reading..
Critical Security Alert: Hardcoded SSH Keys and Database Credentials Expose RUCKUS Network Director to Full System Takeover (CVE-2025-67305 & CVE-2025-67304) Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 RUCKUS Network Director (RND) – Hardcoded SSH Keys & Hardcoded Database Credentials Executive Summary Product: RUCKUS Network…continue reading..
CISA Warns of Critical Flaws in USR-W610 Industrial Gateway, Exposing OT Networks to Remote Compromise and Wireless Disruption CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20268 mins0 The USR-W610 industrial serial-to-Ethernet/Wi-Fi gateway, manufactured by Jinan USR IOT Technology Limited, is affected by multiple security…continue reading..
CVE-2026-24790: Critical Authentication Bypass in Welker OdorEyes XL4 Controller Exposes Industrial Gas Systems to Remote Manipulation CyberSecurity News CyberDefenderFebruary 20, 2026February 20, 20268 mins0 CVE: CVE-2026-24790Name: Missing authentication for a critical function in Welker OdorEyes EcoSystem Pulse Bypass System (XL4 Controller)CVSS…continue reading..
RedEngine Strikes: New Multi-Stage Infostealer Fuels BEC Fraud and Ransomware Attacks Worldwide Vulnerabilities AegironFebruary 20, 2026February 20, 202610 mins0 RedEngine Infostealer (Observed 20 Feb 2026) RedEngine is a newly observed multi-stage loader combined with an information…continue reading..
Critical Security Alert: Splunk Enterprise Hit by High-Severity Third-Party Vulnerabilities — Immediate Upgrade Strongly Advised Vulnerabilities AegironFebruary 20, 2026February 20, 202613 mins0 Splunk Enterprise — Third-Party Package Updates (SVD-2026-0211) CVE Summary CVE Name Severity CVSS v3 Score Exploitability /…continue reading..
Critical Privilege Escalation Flaws Discovered in Splunk Enterprise for Windows — February 2026 Security Update Demands Immediate Action Vulnerabilities AegironFebruary 20, 2026February 20, 202611 mins0 Splunk Enterprise & Splunk DB Connect Vendor: Splunk Inc.Products Affected: Release Date: 18 February 2026Overall Risk Level:…continue reading..
Windows Under Siege: Three Zero-Days Silently Bypass Mark-of-the-Web Protections Vulnerabilities AegironFebruary 19, 2026February 19, 202610 mins0 Three Zero-Days Exploit “Mark-of-the-Web” Weakness in Windows and Office February 2026 — Security researchers are warning that…continue reading..
Microsoft 365 Copilot Bug Exposes Confidential Emails, Bypassing Enterprise Security Controls Vulnerabilities AegironFebruary 19, 2026February 19, 202610 mins0 What Actually Happened — And Why It Matters More Than It Looks In February, Microsoft confirmed a…continue reading..
CVE-2026-25232: Critical Gogs Flaw Lets Developers Delete Protected Branches and Bypass Repository Safeguards Vulnerabilities AegironFebruary 19, 2026February 19, 202610 mins0 Gogs – Protected Branch Deletion Bypass Overview CVE ID: CVE-2026-25232Product: Gogs (Git service)Vulnerability Type: Authorization Bypass /…continue reading..
