ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-42542

HIGH CVSS 7.5 CVSS 3.1 📌 Analyzed

CVE-2026-42542 - TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.

Publicatum: Jun 10, 2026 22:16

Ultima Mutatio: Jul 23, 2026 09:10