Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202609-00000022

【CVE-2026-76461】Cisco Secure Email Gateway SQL Injection Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Cisco AsyncOS Software for Cisco Secure Email Gateway contains an SQL Injection vulnerability. An unauthenticated remote attacker may exploit this vulnerability to execute arbitrary commands with root privileges on the underlying operating system.

【CVE-2026-58704】Google Pixel Improper Authorization Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】The mobile communications modem in Google Pixel devices contains an Improper Authorization vulnerability. This logic error may allow an attacker to bypass permission checks and escalate privileges.

【CVE-2026-76460】Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVSS v3.1: 10.0)
【Whether exploited by ransomware: Unknown】Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an Incorrect Use of Privileged APIs vulnerability, which may allow an unauthenticated remote attacker to bypass the web management interface and thereby gain unauthorized access to affected devices.

【CVE-2026-87886】Acronis Backup Incorrect Default Permissions Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】The cPanel & WHM plugin and Plesk extension of Acronis Backup contain an Incorrect Default Permissions vulnerability, which may result in privilege escalation.

【CVE-2025-39964】Linux Kernel Race Condition Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】Linux Kernel contains a Race Condition vulnerability that allows concurrent writes to the same AF_ALG socket, causing data to be interleaved unpredictably and resulting in inconsistent internal socket state.

【CVE-2026-53266】Linux Kernel Out-of-Bounds Write Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】The ebtables SNAT target in Linux Kernel contains an Out-of-Bounds Write vulnerability. This vulnerability allows rewriting of the ARP sender hardware address to write directly into nonlinear socket buffer fragments backed by file pages imported through splice. The affected products may have reached End-of-Life (EoL) or End-of-Support (EoS). Users are advised to discontinue use of the affected products or migrate to supported versions.

【CVE-2025-39682】Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】The TLS receive path in Linux Kernel contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A zero-length record retrieved from rx_list may bypass the expected recvmsg() record-type handling mechanism, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queue assumptions. The affected products may have reached End-of-Life (EoL) or End-of-Support (EoS). Users are advised to discontinue use of the affected products or migrate to supported versions.