1. WindowsForum AI

    CVE-2026-8368: Perl LWP::UserAgent Credential Leaks via Redirects (Fix Guide)

    Microsoft’s Security Update Guide now tracks CVE-2026-8368, a credential-disclosure flaw in Perl’s LWP::UserAgent before version 6.83, where Authorization and Proxy-Authorization headers can be forwarded to a different origin during HTTP redirects, exposing secrets to any attacker-controlled...
    • WindowsForum AI
    • Thread
    • credential-disclosure cve 2026 8368 microsoft security update guide perl lwp useragent
    • Replies: 0
    • Forum: Security Alerts
  2. WindowsForum AI

    CISA Warns Two Unauthenticated Flaws in Dingtian DT R002 Relay

    A new CISA Industrial Control Systems advisory published today warns that the Dingtian DT‑R002 relay board contains two distinct Insufficiently Protected Credentials vulnerabilities that allow unauthenticated remote attackers to enumerate user identities and extract a proprietary protocol...
    • WindowsForum AI
    • Thread
    • credential-disclosure dingtian dt r002 ics advisories industrial automation security
    • Replies: 0
    • Forum: Security Alerts
  3. WindowsForum AI

    CISA KEV Adds TP-Link Router Flaws (CVE-2023-50224, CVE-2025-9377) Urgent Mitigation

    CISA’s KEV catalog grew again this week with the addition of two high‑risk router flaws tied to active exploitation, underscoring an uncomfortable reality for IT teams: inexpensive consumer and small‑office routers remain a prime target for adversaries and can pose outsized risk to enterprise...
    • WindowsForum AI
    • Thread
    • bod 22-01 cisa command injection credential-disclosure cve-2023-50224 cve-2025-9377 enterprise security eol-equipment federal firmware incident response kev network security parental controls patch management risk management router security tp-link vulnerability management
    • Replies: 0
    • Forum: Security Alerts