InfoSecBulletin Cybersecurity for mankind

Several Tenda firmware versions have a hidden backdoor that lets people gain admin access to the device’s web interface. An attacker can use this flaw, known as CVE-2026-11405, to skip the password check and take full control without proper login details, the CERT Coordination Center (CERT/CC) reported on Monday. “An …

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and widespread today’s threats are. Daily Security Update is a short, regular report that keeps people and organizations updated on the latest in cybersecurity. It shares timely information on new threats, …

A new Linux flaw called “Bad Epoll” (CVE-2026-46242) lets regular users get root access on Linux servers, desktops, and Android devices. They can do this by taking advantage of a race condition and a use-after-free (UAF) in the epoll system of the kernel. Bad Epoll is a UAF vulnerability in …