WordPress is one of the most widely deployed content management systems, making vulnerabilities in its core software potentially significant for organizations operating public-facing websites. CVE-2026-63030 is a critical REST API batch endpoint route confusion vulnerability in WordPress Core. The flaw causes a mismatch between request validation and execution within the WordPress REST API batch processing mechanism, allowing specially crafted requests to bypass expected security controls. When chained with CVE-2026-60137, an SQL injection vulnerability in WP_Query, an unauthenticated attacker can achieve remote code execution and fully compromise a vulnerable WordPress site.

Affected Versions:

• WordPress 6.9.0 through 6.9.4
• WordPress 7.0 through 7.0.1
• WordPress 7.1 beta releases prior to 7.1 beta 2

Impact:

Successful exploitation may allow attackers to execute arbitrary code on the affected server.

Resolution:

Upgrade affected WordPress installations to:-

• WordPress 6.9.5 or later.
• WordPress 7.0.2 or later.
• WordPress 7.1 beta 2 or later.

Reference:

UIT Information Security

The post WordPress RCE Vulnerability (CVE-2026-63030) appeared first on Information Security.

CVE-2026-53412 is a critical vulnerability caused by improper input validation in Zoom Workplace for Windows and Zoom Workplace VDI Client for Windows. An unauthenticated attacker can exploit the flaw remotely over a network to perform an account takeover.

Affected Versions:

• Zoom Workplace for Windows before 7.0.0.
• Zoom Workspace VDI client for Windows before (7.0.10, 6.6.15, 6.5.18)

Impact:

Successful exploitation may allow attackers to take over affected Zoom account.

Resolution:

Upgrade affected software to the latest supported versions.

Reference:

UIT Information Security

The post Zoom Workplace for Windows - Improper Input Validation (CVE-2026-53412) appeared first on Information Security.

CVE-2026-43503 (DirtyClone) is a high-severity Linux kernel privilege escalation vulnerability caused by improper handling of shared memory fragments in the networking subsystem. A local attacker can exploit the flaw to modify file-backed page-cache memory and alter the behavior of privileged executables, potentially gaining root privileges on the affected system. The attack occurs in memory without modifying files on disk, making detection more difficult.

Affected Versions:

• Major Linux distributions.
• Linux systems running kernel versions prior to vendor-provided fixes for CVE-2026-43503.

Impact:

Successful exploitation may allow attackers to escalate privileges from local user account to root.

Resolution:

Apply the latest security updates provided by the Linux distribution and upgrade the kernel.

Reference:

UIT Information Security

The post Linux kernel vulnerability (CVE-2026-43503) appeared first on Information Security.

CVE‑2026‑35273 is a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. The flaw allows an unauthenticated attacker with network access over HTTP to exploit the application due to missing or improper access controls. An attacker can send specially crafted requests to the vulnerable component to execute arbitrary code, potentially leading to full application takeover without requiring credentials or user interaction.

Affected Versions:

Oracle PeopleSoft Enterprise PeopleTools.

• Version 8.61.
• Version 8.62.

Impact:

Successful exploitation may allow attackers to gain complete control of the PeopleSoft application.

Resolution:

Install the latest available Oracle PeopleTools patches.

Reference:

UIT Information Security

The post Oracle PeopleSoft Remote Code Execution Vulnerability (CVE-2026-35273) appeared first on Information Security.

CVE‑2026‑41089 is a stack‑based buffer overflow vulnerability in the Windows Netlogon service. The flaw occurs due to improper handling of specially crafted network requests in the Netlogon RPC interface.

An attacker can exploit this vulnerability by sending a malicious request to a vulnerable domain controller, causing the service to overwrite memory on the stack. This can result in remote code execution with SYSTEM‑level privileges, without requiring authentication or user interaction.

Affected Versions:

• Microsoft Windows Server 2012/ 2012 R2.
• Microsoft Windows Server 2016.
• Microsoft Windows Server 2019.
• Microsoft Windows Server 2022 / 2022 23H2.
• Microsoft Windows Server 2025.

Impact:

Successful exploitation may allow attackers to execute arbitrary code with system privileges.

Resolution:

• Install the Microsoft’s May 2026 updates immediately.
• Prioritize Domain Controller and identity Infrastructure systems.

Reference:

UIT Information Security

The post Windows Netlogon RCE Vulnerability (CVE-2026-41089) appeared first on Information Security.

UIT Information Security

The post 7-Zip Heap Buffer Overflow (CVE-2026-48095) appeared first on Information Security.

Impacted Linux Distribution:

• Ubuntu.
• Debian.
• Red Hat Enterprise Linux (RHEL).
• SUSE Linux Enterprise.
• Fedora, Arch Linux and other mainstream distributions.

Impact:
Successful exploitation may allow attackers to read sensitive files and escalate privileges to root.

Resolution:
Please update the Linux kernel to the fixed version released by the distribution vendor.

Mitigations:
Where immediate patching is not possible:

• Disable or restrict untrusted local user access.
• Restrict ptrace access.

Reference:

UIT Information Security 

The post Linux Kernel Local root Privilege Escalation (CVE-2026-46333) appeared first on Information Security.

• Apache HTTP Server version 2.4.66 with mod_http2_enabled.

Impact:

Successful exploitation may allow attackers to potentially execute arbitrary code remotely on vulnerable systems.

Resolution:

• Please upgrade to Apache HTTP Server 2.4.67 or later.

Reference:

UIT Information Security

The post Apache HTTP Server Vulnerability (CVE-2026-23918) appeared first on Information Security.

Linux Kernel :- All kernel versions released from August 2017 up to the availability of vendor patches.

Impacted Linux Distribution:-

• Ubuntu (all supported releases prior to patched kernels).
• Debian.
• Red Hat Enterprise Linux (RHEL).
• Amazon Linux.
• SUSE Linux Enterprise.
• Fedora, Arch Linux, AlmaLinux, Rocky Linux, Oracle Linux

Impact:

Successful exploitation may allow attackers to escalate from an unprivileged local user to full root access.

Resolution:

Please update the Linux kernel to the fixed version released by the distribution vendor.

Mitigations:

Where immediate patching is not possible:

• Disable or restrict access to the AF_ALG interface.
• Prevent loading of the vulnerable algif_aead module where supported.
• Limit local shell access and enforce least‑privilege controls.

Reference:

UIT Information Security

The post Linux Kernel Local Privilege Escalation (CVE-2026-31431) appeared first on Information Security.

• cPanel & WHM:- All versions after 11.40.
• WP Squared:- all versions prior to 11.136.1.7.

Impact:
Successful exploitation may allow attackers to bypass authentication without valid credentials and gain full admin access to cPanel/WHM.

Resolution:

Administrators must upgrade immediately to one of the following patched versions or later:

cPanel & WHM patched versions:

• 11.86.0.41
• 11.110.0.97
• 11.118.0.63
• 11.126.0.54
• 11.130.0.19
• 11.132.0.29
• 11.134.0.20
• 11.136.0.5

WP Squared patched version:

• 11.136.1.7

Reference:

UIT Information Security

The post cPanel Authentication bypass Vulnerability (CVE-2026-41940) appeared first on Information Security.