Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Alby Hub fixed release line (v1.19.0 and later)

Security Patch Release
First reported
Last updated
Happening score
H score 30
1 unique sources, 1 articles

Summary

Hide ▲

Alby published the fixed Alby Hub release line starting with v1.19.0, closing the flaw that affected v1.7.0 through v1.18.5. The first corrected build shipped on August 29, 2025, and any Hub updated since then is not affected. Users still on older builds were told to block outside access first and then move to v1.24.0, the current release.

Related Happenings

Alby Hub internet-exposed wallet remediation advisory

Advisory/Mitigation
H score37 First: 09.09.2026 13:43 Last: 09.09.2026 13:43 Sources 1

How related: If your Hub ran an affected version and was reachable from the internet, change your unlock password after the update and contact [email protected].

About this happening: Alby told Alby Hub owners on v1.18.5 or older that were reachable from the internet to block outside access, update to v1.24.0, and change the unlock passwor...

Open Happening

Gitea security patch release for CVE-2026-59774

Security Patch Release
H score65 First: 05.08.2026 14:04 Last: 05.08.2026 14:04 Sources 1

About this happening: Gitea 1.27.1 is a security patch release that closes CVE-2026-59774 and CVE-2026-60004, reducing exposure for self-hosted Gitea deployments. The update fixes a C...

Open Happening

OpenWrt security patch release for CVE-2026-53921

Security Patch Release
H score37 First: 28.07.2026 15:56 Last: 28.07.2026 15:56 Sources 1

About this happening: OpenWrt released 24.10.8 and 25.12.5 to close a critical DHCPv6 stack overflow in odhcpd, reducing the risk of root code execution on exposed routers. The...

Open Happening

VBulletin 6.2.2 security patch release for template-engine flaw

Security Patch Release
H score32 First: 27.07.2026 17:40 Last: 27.07.2026 17:40 Sources 1

About this happening: vBulletin released security patches for 6.2.1, 6.2.0, and 6.1.6 and shipped 6.2.2 as the fixed build, closing a template-engine remote code execution flaw on s...

Open Happening

NodeBB eight-flaw security patch release (4.14.2)

Security Patch Release
H score34 First: 24.07.2026 10:41 Last: 24.07.2026 10:41 Sources 1

About this happening: NodeBB released 4.14.2 to close eight high-severity flaws that exposed admin access, private messages, private categories, and code-execution paths. The affect...

Open Happening

Timeline

  1. 09.09.2026 13:43 2 articles · 2h ago

    Alby releases v1.19.0 as the first fixed Alby Hub build

    Mitigation Patch Update

    Alby published v1.19.0 on August 29, 2025 as the first Alby Hub release that no longer had the flaw affecting v1.7.0 through v1.18.5. Versions v1.19.0 and later are not affected.

    Show sources
    Open in new tab
  2. 09.09.2026 13:43 1 articles · 2h ago

    Alby warns that internet-exposed Alby Hub builds can be taken over

    Initial Disclosure

    Alby warned that Alby Hub versions v1.7.0 through v1.18.5 could let an attacker take over a wallet and send its funds when the Hub was reachable from the internet. Alby said one user has been affected, told operators to stop outside access to the management interface first, and then update to v1.24.0.

    Show sources
    Open in new tab