Samsung MagicINFO 9 Server – database account and password are hardcoded (CVE-2026-25202)
– The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.
Read MoreCyber Security
Articles on SystemTek’s website that relate to cyber security.
Hancom Office DOC File Parsing Type Confusion Remote Code Execution Vulnerability (CVE-2025-29867)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office.
Read More
Vulnerability in WordPress File Uploads Addon for WooCommerce plugin (CVE-2026-24625)
– Missing Authorization vulnerability in Imaginate Solutions File Uploads Addon for WooCommerce woo-addon-uploads allows Exploiting Incorrectly Configured Access Control Security Levels.
Read More
NCSC issues warning over hacktivist groups disrupting UK organisations and online services
– On the 19th January 2026, the National Cyber Security Centre (NCSC) – a part of GCHQ – has issued an alert highlighting the persistent targeting of UK organisations by Russian state-aligned hacktivist groups aiming to disrupt networks.
Read More
Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability (CVE-2026-20092)
– A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance.
Read More
Cisco Unified Communications Products Remote Code Execution Vulnerability (CVE-2026-20045)
CVE number = CVE-2026-20045 A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition
Read MoreEnel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability (CVE-2026-0778)
– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations.
Read More
WordPress Modular DS Plugin 2.5.2 is vulnerable to a high priority Privilege Escalation (CVE-2026-23800)
CVE number = CVE-2026-23800 This could allow a malicious actor to escalate their low privileged account to something with higher
Read More
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (CVE-2026-20076)
– A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
Read MoreCyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager
– On December 10th 2025 Cisco became aware of a new cyberattack campaign targeting a limited subset of appliances with certain ports open to the internet that are running Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager.
Read More