CERT Vulnerability Notes @cert_vulnerability_notes@robot.villas
Recently published vulnerability notes from CERT/CC at Carnegie Mellon University's Software Engineering Institute, with technical details, affected vendors, and remediation information.
Source: https://www.kb.cert.org/vuls/atomfeed/
Homepage: https://kb.cert.org/vuls
Follow on the fediverse Follow from your server Enter the server your account is on. You'll finish following there.
or
Or search your app for @cert_vulnerability_notes@robot.villasCopy
Don't have an account? Find a server at joinmastodon.org
VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations #Vulnerability #CyberSecurity #Software
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433047Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433047Copy
Don't have an account? Find a server at joinmastodon.org
Oct 1, 2026 VU#762428: Authlib library contains a signature‑verification bypass vulnerability #Vulnerability #CyberSecurity #Authlib
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433058Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433058Copy
Don't have an account? Find a server at joinmastodon.org
Sep 28, 2026 VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities #Vulnerability #CyberSecurity #Android
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433067Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433067Copy
Don't have an account? Find a server at joinmastodon.org
Sep 25, 2026 VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise #Vulnerability #CyberSecurity #ViewSonic
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433075Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433075Copy
Don't have an account? Find a server at joinmastodon.org
Sep 24, 2026 VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability #Vulnerability #CyberSecurity #Networking
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433085Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433085Copy
Don't have an account? Find a server at joinmastodon.org
Sep 24, 2026 VU#273940: Enterprise Access Management EAM does not rotate RSA keys #Vulnerability #CyberSecurity #InfoSec
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433095Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433095Copy
Don't have an account? Find a server at joinmastodon.org
Sep 23, 2026 VU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers #Vulnerability #CyberSecurity #Software
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433103Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433103Copy
Don't have an account? Find a server at joinmastodon.org
Sep 23, 2026 VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass #Vulnerability #Security #UEFI
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433112Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433112Copy
Don't have an account? Find a server at joinmastodon.org
Sep 22, 2026 VU#280377: Dokploy is vulnerable to OS command injection #Vulnerability #CyberSecurity #InfoSec
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433121Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433121Copy
Don't have an account? Find a server at joinmastodon.org
Sep 17, 2026 VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control #Vulnerability #CyberSecurity #SoftwareEngineering
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433134Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433134Copy
Don't have an account? Find a server at joinmastodon.org
Sep 16, 2026 VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment #Vulnerability #CyberSecurity #Exploit
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433146Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433146Copy
Don't have an account? Find a server at joinmastodon.org
Sep 16, 2026 VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index #Vulnerability #Security #ExLlamaV3
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433155Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433155Copy
Don't have an account? Find a server at joinmastodon.org
Sep 11, 2026 VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks #Vulnerability #CyberSecurity #Exploit
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433164Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433164Copy
Don't have an account? Find a server at joinmastodon.org
Sep 10, 2026 VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot #Vulnerability #Security #UEFI
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433171Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433171Copy
Don't have an account? Find a server at joinmastodon.org
Sep 8, 2026 VU#859658: Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability #Vulnerability #CyberSecurity #Bluetooth
0Boost from your server Enter the server your account is on. The post opens there so you can boost it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433179Copy
Don't have an account? Find a server at joinmastodon.org
0Favorite from your server Enter the server your account is on. The post opens there so you can favorite it.
or
Or paste this post's address into your app's search: https://robot.villas/users/cert_vulnerability_notes/posts/22433179Copy
Don't have an account? Find a server at joinmastodon.org
Sep 8, 2026