CVE Alert: CVE-2026-111356 - magicblack - MacCMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-111356-magicblack-maccms/
RedPacket Security
CVE Alert: CVE-2026-111356 - magicblack - MacCMS - RedPacket Security
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member
CVE Alert: CVE-2026-111359 - crmeb - CRMEB - https://www.redpacketsecurity.com/cve-alert-cve-2026-111359-crmeb-crmeb/
RedPacket Security
CVE Alert: CVE-2026-111359 - crmeb - CRMEB - RedPacket Security
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users'
CVE Alert: CVE-2026-111352 - ThinkCMF - ThinkCMF - https://www.redpacketsecurity.com/cve-alert-cve-2026-111352-thinkcmf-thinkcmf/
RedPacket Security
CVE Alert: CVE-2026-111352 - ThinkCMF - ThinkCMF - RedPacket Security
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call
CVE Alert: CVE-2026-111366 - cool-team-official - cool-admin-midway - https://www.redpacketsecurity.com/cve-alert-cve-2026-111366-cool-team-official-cool-admin-midway/
RedPacket Security
CVE Alert: CVE-2026-111366 - cool-team-official - cool-admin-midway - RedPacket Security
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments
CVE Alert: CVE-2026-111369 - classroomio - ClassroomIO - https://www.redpacketsecurity.com/cve-alert-cve-2026-111369-classroomio-classroomio/
RedPacket Security
CVE Alert: CVE-2026-111369 - classroomio - ClassroomIO - RedPacket Security
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member,
CVE Alert: CVE-2026-75941 - Lenovo - Legion Zone Application - https://www.redpacketsecurity.com/cve-alert-cve-2026-75941-lenovo-legion-zone-application/
RedPacket Security
CVE Alert: CVE-2026-75941 - Lenovo - Legion Zone Application - RedPacket Security
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on
CVE Alert: CVE-2026-111210 - n/a - bitcoinj - https://www.redpacketsecurity.com/cve-alert-cve-2026-111210-n-a-bitcoinj/
RedPacket Security
CVE Alert: CVE-2026-111210 - n/a - bitcoinj - RedPacket Security
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment
Active Exploitation of Vulnerability in Palo Alto Networks Products - https://www.redpacketsecurity.com/csa-gov-sg-active-exploitation-of-vulnerability-in-palo-alto-networks-products-16-10-2026/
RedPacket Security
Active Exploitation of Vulnerability in Palo Alto Networks Products - RedPacket Security
16 October 2026
[QILIN] - Ransomware Victim: Via Credit Union - https://www.redpacketsecurity.com/qilin-ransomware-victim-via-credit-union/
RedPacket Security
[QILIN] - Ransomware Victim: Via Credit Union - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Shared Medical Technology - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-shared-medical-technology/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Shared Medical Technology - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THE SEVEN DEADLY SINS] - Ransomware Victim: Harness Inc[.] - https://www.redpacketsecurity.com/the-seven-deadly-sins-ransomware-victim-harness-inc/
RedPacket Security
[THE SEVEN DEADLY SINS] - Ransomware Victim: Harness Inc[.] - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Newport Beach Dentistry - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-newport-beach-dentistry/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Newport Beach Dentistry - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: SONGWOOI - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-songwooi/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: SONGWOOI - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Martin LLP - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-martin-llp/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Martin LLP - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[STORM] - Ransomware Victim: Tech Electronics - https://www.redpacketsecurity.com/storm-ransomware-victim-tech-electronics/
RedPacket Security
[STORM] - Ransomware Victim: Tech Electronics - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Engineers Ireland - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-engineers-ireland/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Engineers Ireland - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: CAS Paper Mill - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-cas-paper-mill/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: CAS Paper Mill - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: CLIMEDI - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-climedi/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: CLIMEDI - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating
[THEGENTLEMEN] - Ransomware Victim: Museum Siam - https://www.redpacketsecurity.com/thegentlemen-ransomware-victim-museum-siam/
RedPacket Security
[THEGENTLEMEN] - Ransomware Victim: Museum Siam - RedPacket Security
NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating