OpenThreat

OpenThreat Place where Security and Servers collide We offer you a variety of solutions and ideas to grow up you company without any security concerns.

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-108385 affects marcosschroh / dataclasses-avroschema

Details: dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator...

🔗 https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-gw6w-pvv9-2fqc

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-108380 affects marcosschroh / dataclasses-avroschema

Details: dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticField...

🔗 https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-g7p7-mgvm-jw7p

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-85990 affects Leantime / leantime

Details: Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/C...

🔗 https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-102989 affects TanStack / router

Details: TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for /start-server-core, 1.168.60 for /rea...

🔗 https://github.com/TanStack/router/security/advisories/GHSA-qx66-fv34-fjm8

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-106042 affects Ivanti / Xtraction

Details: An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-contro...

🔗 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

🚨 New High Impact CVE Detected! 🚨

CVE-2026-55695 affects fearlessgeekmedia / FearlessCMS

Details: FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin...

🔗 https://github.com/fearlessgeekmedia/FearlessCMS/security/advisories/GHSA-56wm-3q3v-m93m

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

ICYMI: 🚨 New High Impact CVE Detected! 🚨

CVE-2026-66086 affects Unisoc (Shanghai) Technologies Co., Ltd. / Modem

Details: In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code ex*****on or denial of ser...

🔗 https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

ICYMI: 🚨 New High Impact CVE Detected! 🚨

CVE-2026-108980 affects Blinko / Blinko

Details: Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and th...

🔗 https://github.com/kashishtopi/blinko-plugin-path-traversal-rce

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

ICYMI: 🚨 New High Impact CVE Detected! 🚨

CVE-2026-78355 affects OTRS GmbH (former OTRS AG) / OTRS

Details: A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.

This may allow files accessibl...

🔗 https://otrs.com/release-notes/otrs-security-advisory-2026-12/

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

14/10/2026

ICYMI: 🚨 New High Impact CVE Detected! 🚨

CVE-2026-78357 affects OTRS GmbH (former OTRS AG) / OTRS

Details: Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain v...

🔗 https://otrs.com/release-notes/otrs-security-advisory-2026-14/

🔍 Could this affect your systems?
🎯 We map threats to your infrastructure and help you respond smart and fast.
📩 Let's talk: https://openthreat.ro

Address

Strada Soldatului
Bragadiru

Website

Alerts

Be the first to know and let us send you an email when OpenThreat posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category