Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202608-00000018

【CVE-2025-62593】Ray-Project Ray Code Injection Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】Ray-Project Ray contains a code injection vulnerability that may lead to remote code execution. This vulnerability can be exploited through Firefox and Safari.

【CVE-2026-33824】Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Microsoft Internet Key Exchange (IKE) Service Extensions contain a Double Free vulnerability that may lead to remote code execution.

【CVE-2026-59310】Broadcom VMware vCenter Path Traversal Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Broadcom VMware vCenter contains a Path Traversal vulnerability that may allow a threat actor with network access to vCenter to execute arbitrary code.

【CVE-2026-55040】Microsoft SharePoint Weak Authentication Vulnerability (CVSS v3.1: 9.1)
【Whether exploited by ransomware: Unknown】Microsoft SharePoint contains a Weak Authentication vulnerability that may allow an unauthorized attacker to bypass security features over a network.

【CVE-2026-65400】Apple macOS Improper Authentication Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Apple macOS contains an Improper Authentication vulnerability that may allow an attacker on the network to pass Screen Sharing authentication without valid credentials.

【CVE-2026-64849】MLflow Server-Side Request Forgery Vulnerability (CVSS v3.1: 9.3)
【Whether exploited by ransomware: Unknown】MLflow contains a Server-Side Request Forgery vulnerability that may allow an attacker to access internal or cloud metadata services and obtain response_status and response_body.

【CVE-2026-72530】TrueConf Server Code Injection Vulnerability (CVSS v3.1: 9.0)
【Whether exploited by ransomware: Unknown】TrueConf Server contains a Code Injection vulnerability that may allow an unauthorized remote attacker with network access through port 4307/TCP to use a specially crafted script to escape the isolation environment and execute arbitrary code on the host system.

【CVE-2026-72529】TrueConf Server Missing Authentication for Critical Function Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】TrueConf Server contains a Missing Authentication for Critical Function vulnerability that may allow an unauthorized remote attacker with network access through port 4307/TCP to execute arbitrary scripts.

【CVE-2026-73570】Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (CVSS v3.1: 8.9)
【Whether exploited by ransomware: Unknown】Zimbra Collaboration Suite (ZCS) contains an OS Command Injection vulnerability that may allow an unauthenticated attacker to send specially crafted SMTP requests and execute arbitrary operating system commands as the Zimbra user.