Security Advisories Digest

{"success":true,"data":{"feed":"threat-intel","publisher":"0xb90b00f891dc534a5b59c60170661b868f3c26de","timestamp":"2026-07-07T01:18:18Z","source":"byte-library-broadcast","txHash":"0x6037c536a86871ed65416899528588d0c36a6906a96352bb60b910b103365e72","payloadHash":"0x7d13d768785240f5b4c94157ac363325f4255541424339e45eb11475f82bbeae","payloadBytes":10263,"data":{"feed":"threat-intel","v":1,"ts":"2026-07-07T01:18:12Z","sources":["cisa-kev","nvd"],"kev":{"catalogVersion":"2026.07.01","catalogDate":"2026-07-01T19:00:06.9016Z","totalCount":1631,"recentlyAdded":[{"cveID":"CVE-2026-45659","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-01","shortDescription":"Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-07-04"},{"cveID":"CVE-2026-48558","vendorProject":"SimpleHelp ","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Authentication Bypass Vulnerability","dateAdded":"2026-06-29","shortDescription":"SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-07-02"},{"cveID":"CVE-2026-12569","vendorProject":"PTC","product":"Windchill and FlexPLM","vulnerabilityName":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","dateAdded":"2026-06-25","shortDescription":"PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-06-28"},{"cveID":"CVE-2026-20230","vendorProject":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-06-25","shortDescription":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-06-28"},{"cveID":"CVE-2025-67038","vendorProject":"Lantronix","product":"EDS5000","vulnerabilityName":"Lantronix EDS5000 Code Injection Vulnerability","dateAdded":"2026-06-23","shortDescription":"Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-06-26"},{"cveID":"CVE-2026-34910","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","dateAdded":"2026-06-23","shortDescription":"Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-06-26"},{"cveID":"CVE-2026-34909","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Path Traversal Vulnerability","dateAdded":"2026-06-23","shortDescription":"Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.","knownRansomwareCampaignUse":"Unknown","dueDate":"2026-06-26"},{"cveID":"CVE-2026-34908","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Access Control Vulnerability","dateAdded":"2026-06-23","shortDescription":"Ubiquiti UniFi OS contains an improper access control vulnerabili