Cybersecurity Intelligence Feed

A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulation of the argument Description leads to command injection. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Source: nvd.nist.gov · View source → · Apr 26, 2026

A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the function R7WebsSecurityHandlerfunction of the component HTTP Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Source: nvd.nist.gov · View source → · Apr 26, 2026

A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. Executing a manipulation of the argument Go can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Source: nvd.nist.gov · View source → · Apr 26, 2026

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

Source: nvd.nist.gov · View source → · Apr 26, 2026

A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Source: nvd.nist.gov · View source → · Apr 26, 2026

Notice: Energy Department, Federal Energy Regulatory Commission published a cybersecurity-related document in the Federal Register. Compliance and GRC professionals should review for regulatory impact. Source: Federal Register.

Source: Federal Register · View source → · Apr 27, 2026

Rule: Transportation Department, Pipeline and Hazardous Materials Safety Administration published a cybersecurity-related document in the Federal Register. Compliance and GRC professionals should review for regulatory impact. Source: Federal Register.

Source: Federal Register · View source → · Apr 24, 2026

Rule: Transportation Department, Pipeline and Hazardous Materials Safety Administration published a cybersecurity-related document in the Federal Register. Compliance and GRC professionals should review for regulatory impact. Source: Federal Register.

Source: Federal Register · View source → · Apr 24, 2026

Rule: Transportation Department, Pipeline and Hazardous Materials Safety Administration published a cybersecurity-related document in the Federal Register. Compliance and GRC professionals should review for regulatory impact. Source: Federal Register.

Source: Federal Register · View source → · Apr 24, 2026

Rule: Transportation Department, Pipeline and Hazardous Materials Safety Administration published a cybersecurity-related document in the Federal Register. Compliance and GRC professionals should review for regulatory impact. Source: Federal Register.

Source: Federal Register · View source → · Apr 24, 2026

Bruce Schneier, security technologist and author, published analysis on this topic. Schneier's commentary is widely read by security professionals and often shapes industry perspective. Read his full analysis at the link. Source: Schneier on Security.

Source: Bruce Schneier / Schneier on Security · View source → · Apr 24, 2026

Bruce Schneier, security technologist and author, published analysis on this topic. Schneier's commentary is widely read by security professionals and often shapes industry perspective. Read his full analysis at the link. Source: Schneier on Security.

Source: Bruce Schneier / Schneier on Security · View source → · Apr 24, 2026

Google's security research team published technical analysis on this topic. Google Security publishes vulnerability research, threat intelligence, and defensive methodology. Review the full post for technical details. Source: Google Security Blog.

Source: Google Security Blog · View source → · Apr 23, 2026

Bruce Schneier, security technologist and author, published analysis on this topic. Schneier's commentary is widely read by security professionals and often shapes industry perspective. Read his full analysis at the link. Source: Schneier on Security.

Source: Bruce Schneier / Schneier on Security · View source → · Apr 23, 2026

Microsoft Threat Intelligence published analysis on this security topic. Microsoft tracks threat actors and provides guidance on defending against active campaigns. Review the full post for technical details and remediation steps. Source: Microsoft Security Blog.

Source: Microsoft Security Blog · View source → · Apr 22, 2026