CRITICALVulnerability
Global

Iran's Cyber Crosshairs Focus Beyond Critical Infrastructure

·Source: Dark Reading

Updated:

Executive Summary

Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.

Analysis

Obscurity isn't a defense. If your company has any Internet-facing vulnerability, you're at risk from multiple threats.
Source Attribution

Originally published by Dark Reading on Jul 9, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-58123 — Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution v...

Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. Attackers can create a session, attach a PTY shell, and write arbitrary commands through the terminal input endpoint to achieve full command execution as the server process

CVE-2026-58123
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-58122 — Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability tha...

Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to perform server-side request forgery against internal services including cloud metadata endpoints, overw

CVE-2026-58122
NIST NVD
MEDIUMVulnerability

OpenMandriva Linux says contributor tried to sabotage the project

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. [...]

BleepingComputer