The Consensus Security Vulnerability Alert

ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service Providers to fight back against the most malicious attackers. https://isc.sans.edu/about.html

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary

Published: 2026-08-31

Last Updated: 2026-08-31 20:00:34 UTC

by Renato Marinho (Version: 1)

One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM backends. It then received a real coding-agent session — history, filesystem output, working paths, and the agent's local tool manifest. The honeypot did not request or cause any tool execution; what the request exposed is what a malicious operator in that position could do.

Chasing the "free API key" is not new. What is new is what you get to chase now: not a key, but an agent — a client that arrives carrying its own file-read, file-write, and shell tools, asking a server whose identity and operator it may never have verified to decide what to do next. Point that client at the wrong endpoint and its replies stop being just text: they can request tool calls that the agent, depending on its configuration, may carry out on the machine it runs on.

This is not a classic watering hole — nobody compromised a site or service the users already trusted. It is better understood as a rogue model endpoint: a server that agents are configured to trust as their reasoning backend. In a deliberate campaign an operator could go further and run it as an evil twin of a real provider — sought-after model names, advertised as free — and wait for tool-enabled agents to connect. This diary is one worked example, caught on a honeypot: an exposed endpoint that was scavenged, relabeled, and handed a real agent's session. The lesson underneath it: a model endpoint is not merely a source of text — for a tool-enabled agent, it is part of the control plane ...

Read the full entry: https://isc.sans.edu/diary/The+CodingAgent+Trap+When+a+Free+LLM+Endpoint+Is+the+Adversary/33298/

Guildma (Astaroth) malware infection from Brazilian Portuguese email

Published: 2026-09-01

Last Updated: 2026-09-01 21:30:18 UTC

by Brad Duncan (Version: 1)

Introduction

On Monday 2026-08-31, I used a link from a malicious Brazilian Portuguese email to infect a Windows host in my lab. This was a Guildma (Astaroth) malware infection.

The link from the email is geofenced for Brazil, meaning that it would only deliver the malware if I checked it from a Brazil-based IP address. Otherwise, it would send a legitimate installer (in this case for Android Studio) and not the malware. Furthermore, my web browser and operating system needed to use Brazilian Portuguese language settings and Brazil regional settings.

The initial downloaded file was a zip archive that contained a Windows shortcut. The shortcut retrieved content from a web server and saved it as an alternate data stream to a file created under the user's AppData\Local\Temp directory. This alternate data stream contained a 64-bit DLL file that doesn't appear to be malicious, but it was used to retrieve and install an AutoIt package for Guildma malware.

Today's diary shares indicators from the activity. Of note, many of the specific indicators like some of the SHA-256 hashes appear to be unique for this particular infection ...

Read the full entry: https://isc.sans.edu/diary/Guildma+Astaroth+malware+infection+from+Brazilian+Portuguese+email/33300

Some Malicious PE Stats

Published: 2026-08-27

Last Updated: 2026-08-28 07:04:13 UTC

by Xavier Mertens (Version: 1)

During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used to generate malicious PE files? A couple of months ago, I shared some stats about the trend in 64bits VS. 32bits malware. Can we go a bit further? I (vibe-)coded a Python script based on the pefile library to extract some info from the PE headers. Indeed, the PE file format contains a lot of metadata! They can be accessed using a lot of tools, like Detect It Easy ...

Read the full entry: https://isc.sans.edu/diary/Some+Malicious+PE+Stats/33292/

YARA-X 1.20.0 Release (2026.08.30)

https://isc.sans.edu/diary/YARAX+1200+Release/33288/

A polymorphic phishing page (that occasionally breaks itself) (2026.08.27)

https://isc.sans.edu/diary/A+polymorphic+phishing+page+that+occasionally+breaks+itself/33290/

Who Has Admin Rights in your Entra ID Directory? (2026.08.26)

https://isc.sans.edu/diary/Who+Has+Admin+Rights+in+your+Entra+ID+Directory/33284/

The list is assembled by pulling recent vulnerabilities from NIST NVD, Microsoft, Twitter mentions of vulnerabilities, ISC Diaries and Podcast, and the CISA list of known exploited vulnerabilities. There are also some unscored, but significant, vulnerabilities at the end. This includes vulnerabilities that have not been added to the NVD yet.

CVE-2026-60004 - Gitea Code Injection Vulnerability

Product: Gitea

CVSS Score: 9.8

** KEV since 2026-08-25 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-60004

NVD References: https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60004

CVE-2021-23758 - Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Product: Ajax.Net Professional

CVSS Score: 0

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-23758

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-23758

CVE-2019-1068 - Microsoft SQL Server Remote Code Execution Vulnerability

Product: Microsoft SQL Server

CVSS Score: 0

GitHub Stars: -1

Exploitability: 45 %

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-1068

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1068

CVE-2023-49105 - ownCloud Improper Authentication Vulnerability

Product: ownCloud Server

CVSS Score: 0

** KEV since 2026-08-27 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-49105

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49105

CVE-2015-3246 - Red Hat Libuser Race Condition Vulnerability

Product: Red Hat Libuser

CVSS Score: 0

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3246

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3246

CVE-2015-5287 - Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Product: Redhat Enterprise_Linux_Workstation 7.0

CVSS Score: 0

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5287

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5287

CVE-2026-48282 - Adobe ColdFusion Path Traversal Vulnerability

Product: Adobe ColdFusion

CVSS Score: 0

** KEV since 2026-07-07 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48282

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48282

CVE-2026-82078 - PaperCut NG/MF Unsafe Reflection Vulnerability

Product: PaperCut NG/MF

CVSS Score: 0

** KEV since 2026-08-31 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82078

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82078

CVE-2026-81578 - PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

Product: PaperCut NG/MF

CVSS Score: 0

** KEV since 2026-08-31 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81578

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81578

CVE-2022-0995 - Linux Kernel Out-of-Bounds Write Vulnerability

Product: Netapp H700S Firmware

CVSS Score: 0

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-0995

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0995

CVE-2026-53362 - Linux Kernel Unspecified Vulnerability

Product: Linux Kernel

CVSS Score: 0

** KEV since 2026-08-27 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-53362

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53362

CVE-2026-66384 - JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Product: JFrog Artifactory

CVSS Score: 0

** KEV since 2026-08-27 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-66384

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-66384

CVE-2026-8452 - Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Product: Citrix NetScaler ADC and NetScaler Gateway

CVSS Score: 0

** KEV since 2026-08-26 **

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-8452

CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8452

CVE-2026-73194 - DBI versions before 1.652 for Perl are vulnerable to a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse.

Product: DBI Perl

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73194

CVE-2026-52491 - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component

Product: libtiff

CVSS Score: 9.4

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-52491

CVE-2026-52490 - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c

Product: libtiff

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-52490

CVE-2026-53791 - rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

Product: Samba Rsync

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-53791

CVE-2026-74233 - The Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-EC_QP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 are vulnerable to unauthenticated command injection in the infosrvd service (UDP/9992), allowing remote attackers to execute arbitrary commands as root.

Product: Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, WG3526, WE2426-C, WE5926-EC_QP, WF3526-P, CTN720-W1, LF-1541, MT7620N, WRC1

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-74233

NVD References:

- http://vulncheck.com/blog/zbt-darklantern-speakingstone

- https://www.vulncheck.com/advisories/zbtlink-mqwrt-infosrvd-command-injection

CVE-2026-70419 - Dell Cloud Disaster Recovery, versions 20.2 and prior, is vulnerable to OS command injection, allowing a high privileged attacker with remote access to execute commands.

Product: Dell Cloud Disaster Recovery

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70419

NVD References: https://www.dell.com/support/kbdoc/en-us/000500898/dsa-2026-353-security-update-for-cloud-disaster-recovery-vulnerabilities

CVE-2026-13214 - The OCPP 1.6 client contains a stack buffer overflow vulnerability in parse_getconfig_msg() when handling attacker-controlled JSON data, allowing for potential remote code execution.

Product: OCPP 1.6 client

CVSS Score: 9.

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-13214

NVD References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fqhf-6v24-4px2

CVE-2026-63586 - Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability. The web-based management interface of the product uses a modified uhttpd server with CGI shell scripts, allowing an unauthenticated attacker to execute arbitrary commands with root privileges by inserting malicious shell metacharacters in the HTTP Basic Authentication username. Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

Product: Weidmueller security routers

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63586

NVD References: https://www.certvde.com/en/advisories/VDE-2026-083/

CVE-2026-79657 - NLTK versions before 3.10.3 are vulnerable to remote code execution through malicious pickle payloads.

Product: NLTK

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79657

NVD References:

- https://github.com/nltk/nltk/security/advisories/GHSA-x99w-6fgc-pmfw

- https://www.vulncheck.com/advisories/nltk-before-3.10.3-remote-code-execution-via-unsafe-pickle-deserialization

CVE-2026-76193, CVE-2026-76195, CVE-2026-76197 - Vulnerabilities in Adobe Campaign Classic (ACC) is vulnerable to a Server-Side Request Forgery (SSRF) flaw that allows attackers to execute arbitrary code without user interaction, resulting in a change in scope.

Product: Adobe Campaign Classic

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76193 (Server-Side Request Forgery (SSRF)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76195 (OS Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76197 (OS Command Injection)

NVD References: https://helpx.adobe.com/security/products/campaign/apsb26-134.html

CVE-2026-45018 - Chainlit allows attackers to execute arbitrary shell commands through the POST /mcp endpoint in versions 2.4.0rc0 to 2.12.0.

Product: Chainlit

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-45018

NVD References:

- https://github.com/Chainlit/chainlit/blob/2.12.0/docs/security-advisory-2026-mcp.md#spl-2026-001--command-injection-via-mcp-stdio

- https://github.com/Chainlit/chainlit/security/advisories/GHSA-w3fx-mc44-mf6j

CVE-2026-65083 & CVE-2026-65093 - Vulnerabilities in NVIDIA OpenShell for Linux

Product: NVIDIA OpenShell for Linux

CVSS Score: 9.9

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65083 (API manipulation leading to potential code execution)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65093 (sandbox escape)

NVD References: https://github.com/NVIDIA/product-security/tree/main/2026/5872

CVE-2026-78935 - Google Chrome on iOS prior to 152.0.7977.65 had a critical vulnerability that allowed remote attackers to potentially execute arbitrary code through a crafted HTML page.

Product: Google Chrome on iOS

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78935

NVD References: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html

CVE-2026-78937, CVE-2026-79129, CVE-2026-79152, CVE-2026-79282 - Vulnerabilities in Google Chrome on Android prior to version 152.0.7977.65

Product: Google Chrome on Android

CVSS Scores: 9.6 - 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78937 (use-after-free)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79129 (use-after-free)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79152 (incorrect authorization)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79282 (use-after-free)

NVD References: https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html

CVE-2026-80104 - DB-GPT allows remote attackers to write attacker-controlled bytes to any path the server process can write and potentially execute code within the server."

Product: DB-GPT

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80104

NVD References: https://www.vulncheck.com/advisories/db-gpt-0.8.0-path-traversal-arbitrary-file-write-via-skill-upload-filename

CVE-2026-65182 - Apache Tomcat is vulnerable to improper access control and incorrect authorization, potentially leading to security constraint bypass.

Product: Apache Tomcat

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65182

NVD References: http://www.openwall.com/lists/oss-security/2026/08/26/1

CVE-2026-65637 - Apache Tomcat is vulnerable to improper input validation due to an incomplete fix for CVE-2026-32990, affecting versions 11.0.20 through 11.0.24, 10.1.53 through 10.1.57, and 9.0.115 through 9.0.120, with recommended upgrades to versions 11.0.25, 10.1.58, or 9.0.121.

Product: Apache Tomcat

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65637

NVD References: https://lists.apache.org/thread/djog953z1ohsyt25bdvhfzbmsy22vgcj

CVE-2026-65905 - Apache Tomcat's DIGEST authenticator is vulnerable to an authentication bypass by capture-replay where a client can make a request that is replayable once within a specific window.

Product: Apache Tomcat

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65905 (authentication bypass by capture-replay)

NVD References: https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj

CVE-2026-68525 - Apache Tomcat before versions 11.0.25, 10.1.58, and 9.0.121 allows bypassing of security constraints in its FORM authentication process.

Product: Apache Tomcat

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-68525

NVD References: https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7

CVE-2026-80138 - ClipBucket V5's web installer allows unauthenticated attackers to execute arbitrary commands as the web server user by submitting a crafted POST request with a malicious php_cli_filepath value.

Product: ClipBucket V5

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80138

NVD References: https://www.vulncheck.com/advisories/clipbucket-v5-5.5.1-through-5.5.3-153-os-command-injection-via-installer-php-cli-filepath-parameter

On Wednesday, August 26, 2-26, Ubiquiti released a security bulletin addressing multiple vulnerabilities in Ubiquiti UniFi

Product: Ubiquiti UniFi

CVSS Scores: 9.0 - 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77543 (UniFi Access Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77546 (UniFi Access Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77547 (UniFi Access Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77553 (UniFi Access Application - Improper Access Control)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77551 (UniFi Connect Display Cast Pro - Privilege Escalation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77552 (UniFi Enterprise Audio/Video Bridge - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77535 (UniFi Network Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77541 (UniFi Network Application - Improper Access Control)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77534 (UniFi OS Devices - Privilege Escalation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77536 (UniFi OS Devices - Privilege Escalation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77545 (UniFi OS Devices - Privilege Escalation)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77549 (UniFi OS Devices - Authentication Bypass)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77550 (UniFi OS Devices - Improper Neutralization of CRLF Sequences)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77539 (UniFi OS Server - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77540 (UniFi OS Server - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77533 (UniFi Protect Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77537 (UniFi Protect Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77548 (UniFi Protect Application - Command Injection)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77557 (UniFi Protect AI Key - Improper Access Control)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77554 (UniFi Talk Application - Command Injection)

NVD References: https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9

CVE-2026-59682 - Arbitrary file overwrite via SAVE_PROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3.

Product: OpenRGB

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-59682

CVE-2026-59683 - OpenRGB network protocol is vulnerable to allowing attacker-controlled strings to be written into arbitrary file system paths, potentially leading to full system compromise or account takeover.

Product: OpenRGB network protocol

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-59683

CVE-2026-54569 - SENAITE.CORE is vulnerable to unauthenticated remote code execution through a two-request chain, allowing attackers to expose or modify laboratory data and disrupt the service.

Product: SENAITE.CORE

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-54569

NVD References: https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j

CVE-2026-80428 - ILIAS is vulnerable to code execution as the web server user due to deserialising stored session data for an unauthenticated caller and running an unprotected logout-notification handler.

Product: ILIAS

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80428

NVD References: https://www.vulncheck.com/advisories/ilias-before-9.22-10.10-and-11.3-unauthenticated-php-object-injection-via-shibboleth-logout-endpoint

CVE-2026-57499 - Liman server management software prior to version 2.2.2 - 1103 allows authenticated administrators to execute arbitrary operating system commands through an OS command injection vulnerability in the log rotation configuration endpoint.

Product: Liman Open Source Server Management Software

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-57499

NVD References: https://github.com/limanmys/core/security/advisories/GHSA-3jrp-54r2-9g63

CVE-2026-81096 - ToolUniverse allowed callers to escape its Python sandbox and execute code without authentication, due to inadequate attribute checks and lack of restrictions on allowed imports, until version 1.3.0.

Product: ToolUniverse

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81096

NVD References: https://www.vulncheck.com/advisories/tooluniverse-through-1.2.6-unauthenticated-remote-code-execution-via-python-code-executor-sandbox-escape

CVE-2026-81098 - The Telnyx MCP server exposed its HTTP transport on every interface without requiring a caller credential.

Product: Telnyx MCP server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81098

NVD References: https://www.vulncheck.com/advisories/telnyx-mcp-server-through-6.83.0-missing-authentication-on-streamable-http-transport

CVE-2026-81735 - The mcp-http-server package of UI-TARS-desktop had a vulnerability where startServer.ts defaulted its listen address to '::', allowing unauthenticated clients to run arbitrary commands or access files on the server.

Product: @agent-infra mcp-http-server package

CVSS Score: 10.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81735

NVD References: https://www.vulncheck.com/advisories/ui-tars-desktop-agent-infra-mcp-servers-bind-every-interface-without-authentication-exposing-arbitrary-command-execution

CVE-2026-35868 - LB-link Router AC2100_AZ3 V1.0.4 is vulnerable to Command Injection via the bs_SetLimitCli_info function in the libshare.so library, allowing attackers to execute arbitrary commands by injecting malicious input.

Product: LB-link Router AC2100_AZ3

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35868

NVD References: https://github.com/Orcust-Automaton/Vulnerability/blob/main/LB-Link/AC2100_AZ3/bs_SetLimitCli_info.md

CVE-2026-35869 - LB-link Router AC450M V4.0.0 is vulnerable to a Command Injection flaw in the bs_SetLimitCli_info function of the libshare.so library, allowing attackers to execute arbitrary commands by inserting malicious input.

Product: LB-link Router AC450M V4.0.0

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35869

NVD References: https://github.com/Orcust-Automaton/Vulnerability/blob/main/LB-Link/AC450M/bs_SetLimitCli_info.md

CVE-2026-37003 - Agno versions up to 2.5.8 are vulnerable to Remote Code Execution (RCE) through prompt injection, allowing unauthenticated attackers to execute arbitrary code on the host server.

Product: Agno up to and including 2.5.8

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37003

CVE-2026-37006 - GPT-Researcher v0.14.7 and earlier versions are vulnerable to an unauthenticated remote attacker achieving code execution through malicious Model Context Protocol configurations in the WebSocket endpoint.

Product: GPT-Researcher

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37006

CVE-2026-71187 - The Ebyte device is vulnerable to unauthorized users generating valid authentication requests to gain administrative access.

Product: Ebyte device

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-71187

NVD References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

CVE-2026-73125 - Ebyte device web management interface allows unauthenticated remote attackers to access sensitive configuration information and modify settings.

Product: Ebyte device web management interface

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73125

NVD References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

CVE-2026-76943 - Xiiaozet LK100Wt has an authentication weakness in its administrative service, enabling attackers to bypass access controls and gain command execution capabilities, leading to potential device compromise.

Product: Xiiaozet LK100Wt

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-76943

NVD References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01

CVE-2026-78239 - Xiiaozet LK100W allows remote attackers to enable unauthorized administrative services by exploiting a critical management function without authentication.

Product: Xiiaozet LK100W

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78239

NVD References: https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01

CVE-2026-61800 - Wazuh is vulnerable to remote code execution as root due to a flaw in versions 4.4.0 through 4.14.6, allowing a party with the cluster key to write, overwrite, or delete arbitrary files under /var/ossec on worker nodes.

Product: Wazuh

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-61800

NVD References: https://github.com/wazuh/wazuh/security/advisories/GHSA-3jff-488g-335f

CVE-2026-56705 - Adminer before 5.4.3 allows for remote code execution by injecting ODBC parameters via semicolons in the server field.

Product: Adminer

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56705

NVD References: https://www.vulncheck.com/advisories/adminer-before-remote-code-execution-via-mssql-pdo-dsn-injection

CVE-2026-56710 - The Grav Login plugin version prior to 1.0.16 does not properly validate privilege levels, allowing an attacker with certain permissions to clear login lockout counters on admin.super accounts.

Product: Grav Login plugin

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56710

NVD References: https://www.vulncheck.com/advisories/grav-login-plugin-before-privilege-escalation-via-unlock

CVE-2026-80203 - The getgrav/grav-plugin-api plugin before 1.0.18 allows API keys with lower super authority to act against other super-admin accounts in sensitive user-management endpoints.

Product: getgrav grav-plugin-api

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80203

NVD References:

- https://github.com/getgrav/grav/security/advisories/GHSA-94q7-vrqr-cx5v

- https://www.vulncheck.com/advisories/grav-before-1.0.18-authentication-bypass-via-scoped-api-key

CVE-2026-78676 - GitPython before 3.1.59 is vulnerable to code execution through malicious config file injection.

Product: GitPython

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78676

NVD References:

- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w

- https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-config-injection

CVE-2026-78683 - NLTK before version 3.10.0 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method.

Product: NLTK

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78683

NVD References:

- https://github.com/nltk/nltk/security/advisories/GHSA-rhp5-r9x4-f5g2

- https://www.vulncheck.com/advisories/nltk-before-remote-code-execution-via-unsafe-pickle-deserialization

CVE-2026-79675 - NLTK before version 3.10.3 is vulnerable to JVM option injection in the java() function, enabling attackers to execute arbitrary code through malicious options like -agentpath or -javaagent.

Product: NLTK

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79675

NVD References:

- https://github.com/nltk/nltk/security/advisories/GHSA-m4rf-3fr8-xwx3

- https://www.vulncheck.com/advisories/nltk-before-jvm-argument-injection-via-per-call-options

CVE-2026-59769 - FA-50 all versions have hard-coded credentials that can be exploited by an attacker with internal network access to manipulate the identification number settings.

Product: FA

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-59769

CVE-2026-49845 - Apache Hive before version 4.2.1 is vulnerable to SQL injection in Hive Metastore direct SQL partition-name resolution, allowing authenticated users to manipulate unintended partition metadata.

Product: Apache Hive 4.2.0

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-49845

NVD References: https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05

CVE-2026-55976 - Apache Hive before 4.2.1 is vulnerable to Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution, allowing an authenticated remote attacker to manipulate the schema URL and potentially expose sensitive information.

Product: Apache Hive 4.2.0

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-55976

NVD References: https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05

CVE-2026-75803 - EVP_Cipher() API call in OpenSSL may report decryption success without verifying the AEAD tag when an empty ciphertext is used, potentially allowing for acceptance of forged messages.

Product: OpenSSL AES-OCB cipher implementations

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75803

CVE-2022-51000 - Nokogiri before 1.13.2 is vulnerable to denial-of-service attacks and potential code execution due to packaged libraries with known security issues.

Product: Nokogiri

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-51000

NVD References:

- https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-fq42-c5rg-92c2

- https://www.vulncheck.com/advisories/nokogiri-before-multiple-vulnerabilities-via-libxml2-libxslt

CVE-2026-55536 - PraisonAI's Browser Server in versions before 4.6.58 allows unauthorized browser automation due to a regex vulnerability.

Product: PraisonAI

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-55536

NVD References: https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6g6r-q6gw-w8fg

CVE-2026-55546 - QWED-MCP's verify_math_expression() function prior to version 0.2.1 allows for arbitrary code execution by passing attacker-controlled expressions directly to SymPy's parse_expr() without proper input validation.

Product: QWED MCP

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-55546

NVD References: https://github.com/QWED-AI/qwed-mcp/security/advisories/GHSA-mw6r-2hvm-4rp2

CVE-2026-55640 - Nextcloud MCP Server prior to 0.117.2 allows unauthenticated attackers to manipulate vector embeddings and potentially destroy the semantic search index.

Product: Nextcloud MCP Server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-55640

NVD References: https://github.com/cbcoutinho/nextcloud-mcp-server/security/advisories/GHSA-8vh3-g2qg-2h2c

CVE-2026-19912 - The Kaltura HTML5 player (mwEmbed / html5lib) is vulnerable to unauthenticated remote code execution due to unsafe data deserialization and unsanitized filesystem path construction.

Product: Kaltura HTML5 player

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19912

NVD References: https://kb.cert.org/vuls/id/308749

CVE-2026-79787 - Alluxio's S3 REST proxy in its default configuration allows unauthenticated attackers to spoof user identity by failing to verify AWS Signature Version 4 signatures.

Product: Alluxio S3 REST proxy

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-79787

NVD References: https://www.vulncheck.com/advisories/alluxio-through-2.9.5-s3-rest-proxy-authentication-bypass-via-unverified-request-signature

CVE-2026-16639 - Drupal Internationalization Single Sign-On allows Authentication Bypass with potential alternate paths or channels, affecting versions 0.0.0 to 1.8.0.

Product: Drupal Internationalization Single Sign-On

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16639

NVD References: https://www.drupal.org/sa-contrib-2026-081

CVE-2026-16641 - Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.

Product: Drupal Commerce Elavon

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16641

NVD References: https://www.drupal.org/sa-contrib-2026-084

CVE-2026-16644 - Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.1.0.

Product: Drupal Webform REST

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16644

NVD References: https://www.drupal.org/sa-contrib-2026-087

CVE-2026-16645 - Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery versions from 0.0.0 to 3.2.0 are vulnerable to Missing Authorization, allowing for Forceful Browsing.

Product: Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16645

NVD References: https://www.drupal.org/sa-contrib-2026-088

CVE-2026-80349 - TarsWeb exposes a critical security vulnerability by allowing a request with a forged X-Forwarded-For value and uid parameter to access sensitive routes without any credentials.

Product: TarsWeb

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80349

NVD References: https://www.vulncheck.com/advisories/tarsweb-through-3.0.14-authentication-bypass-via-spoofed-x-forwarded-for-and-uid-parameter

CVE-2026-77532 - EdgeMAX EdgeSwitch is vulnerable to a Buffer Overflow flaw in DHCPv6, enabling a remote attacker to execute code on the device.

Product: EdgeMAX EdgeSwitch

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77532

NVD References: https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-068-068/b95ea5e8-1a80-4ffc-ad42-625eae300cc9

CVE-2026-54523 - Kyverno's NamespacedMutatingPolicy CEL compiler from version 1.18.0 to 1.18.2 allows unauthorized modification and potential privilege escalation by enabling a user to create resources in a different namespace.

Product: Kyverno NamespacedMutatingPolicy

CVSS Score: 9.6

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-54523

NVD References: https://github.com/kyverno/kyverno/security/advisories/GHSA-79gf-7frw-68m9

CVE-2026-81032 - NebulaGraph's unauthenticated HTTP service exposes runtime configuration, allowing unauthorized users to modify flags and settings without authentication or restrictions.

Product: NebulaGraph WebService

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81032

NVD References: https://www.vulncheck.com/advisories/nebulagraph-through-3.8.0-unauthenticated-read-and-modification-of-runtime-configuration

CVE-2023-42179 - Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.

Product: Bird Home Automation GmbH D1101V-F

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-42179

NVD References: https://github.com/johndoe31415/doorbird-kdf-vulnerability

CVE-2025-61163 - Cohere North AI v1.1.5 is vulnerable to cross-domain attacks due to an overly permissive cross-domain policy.

Product: Cohere North AI v1.1.5

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-61163

NVD References: https://github.com/bdadoa/Cohere---North-AI-1.1.5---Vulnerabilities/blob/main/CVE-2025-61163.md

CVE-2025-61165 - Cohere North AI v1.1.5 is vulnerable to an arbitrary file upload flaw that enables remote code execution by uploading a specially crafted file.

Product: cohere North AI v1.1.5

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-61165

NVD References: https://github.com/bdadoa/Cohere---North-AI-1.1.5---Vulnerabilities/blob/main/CVE-2025-61165.md

CVE-2026-51106 - An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component

Product: TokTok qTox

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-51106

NVD References: https://github.com/TokTok/qTox/issues/706

CVE-2026-75325 - DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

Product: DWSurvey v6.14.0

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75325

CVE-2025-70290 & CVE-2025-70293 - Integer overflow vulnerabilities in Denx U-Boot before 2026.04.

Product: Denx U-Boot

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-70290

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-70293

NVD References: https://gist.github.com/c0zy1/4d9648d10a5ff07bda2771ea1298e469

CVE-2025-51679 - openRISC OR1200 is vulnerable to unexpected behavior due to a mismatch between the RTL and netlist in commit 83ac6b.

Product: openRISC OR1200

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-51679

CVE-2026-52103 - SimpleX Chat before v6.5 is vulnerable to a zero-click RCE flaw in /Terminal/Notification.hs, allowing for remote code execution without any user input by sending a specific text message payload.

Product: SimpleX Chat

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-52103

CVE-2026-75411 - JeecgBoot v3.9.2 is vulnerable to remote command execution due to bypassing the blacklist mechanism in the `SecurityCheck` class by using string concatenation and reflection with Groovy script execution in the CodeNode component of the AI Flow module.

Product: JeecgBoot

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75411

CVE-2026-75338 - Disconf 2.6.36 allows anonymous attackers to access configuration items and files without authentication via exposed APIs.

Product: Disconf

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75338

CVE-2026-75340 - The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).

Product: jetlinks

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75340

NVD References: https://github.com/fangtang7/CVE/blob/main/jetlinks-community/ssrf.md

CVE-2026-47884 - Spring Framework Improper Path Limitation in XsltView

Product: Spring Framework

CVSS Score: 9.8

Reference: https://spring.io/security/cve-2026-47884

CVE-2026-47890 - Spring Framework Server Sent Event stream corruption while rendering fragments

Product: Spring Framework Server

CVSS Score: 9.8

Reference: https://spring.io/security/cve-2026-47890

CVE-2026-47891 - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

Product: Spring Framework

CVSS Score: 9.8

Reference: https://spring.io/security/cve-2026-47891

CVE-2026-47892 - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

Product: Spring Framework

CVSS Score: 9.8

Reference: https://spring.io/security/cve-2026-47892

CVE-2026-59270 - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces

Product: Spring Security

CVSS Score: 9.4

Reference: https://spring.io/security/cve-2026-59270

CVE-2026-59354 - Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

Product: Spring Security

CVSS Score: 9.6

Reference: https://spring.io/security/cve-2026-59354

CVE-2026-59283 - Spring Framework Safety Guard Bypass via SpEL Expression Compilation

Product: Spring Framework

CVSS Score: 9.1

Reference: https://spring.io/security/cve-2026-59283

CVE-2026-59313 - Server Sent Event stream corruption in Spring MVC functional web framework

Product: Server Sent Event

CVSS Score: 9.8

Reference: https://spring.io/security/cve-2026-59313

CVE-2026-74232 - The Zbtlink L3_V2_8 firmware 3.0.0.4.528 and other related products have a backdoor command-and-control implant allowing remote attackers to execute commands as root, modify DNS entries, exfiltrate credentials, and open reverse SSH tunnels.

Product: Zbtlink L3_V2_8 firmware 3.0.0.4.528

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-74232

NVD References: https://www.vulncheck.com/advisories/zbtlink-mqwrt-yunmgrd-cloud-c2-implant

CVE-2026-16279 - 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x has an improper authorization vulnerability allowing unauthorized access to user accounts.

Product: 3DS 3DPassport

CVSS Score: 9.3

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16279

NVD References: https://www.3ds.com/trust-center/security/security-advisories/cve-2026-16279

CVE-2026-81094 - The mcp-router CLI exposed its MCP aggregator to anyone on a fixed port, without requiring authentication by default.

Product: mcp-router CLI

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81094

NVD References: https://www.vulncheck.com/advisories/mcp-router-cli-before-0.6.3-binds-the-mcp-aggregator-to-all-interfaces-without-requiring-authentication

CVE-2026-81700, CVE-2026-81701, CVE-2026-81702, CVE-2026-81707 - Vulnerabilities in OpenSSL encrypt versions before 1.4.9

Product: OpenSSL encrypt

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81700 (Improper Verification of Cryptographic Signature)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81701 (Improper Verification of Cryptographic Signature)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81702 (Insufficient Verification of Data Authenticity)

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-81707 (Improper Input Validation)

NVD References:

- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-x38r-8wf3-q9hq

- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-wxx9-p55f-wm34

- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-q8p3-7h6h-ghfr

- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-qjr2-x6mr-8xgf

CVE-2026-37004 - BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI) due to unsandboxed jinja2.Environment, allowing remote attackers to execute arbitrary OS commands via crafted dotprompt_content parameter in the /prompts/test endpoint.

Product: BerriAI litellm

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37004

CVE-2026-37007 - FileWriterTool in crewai-tools <= 1.10.2rc1 is vulnerable to remote code execution due to malicious path traversal sequences in the filename argument.

Product: FileWriterTool

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37007

CVE-2026-50152 - Ceph is vulnerable to unauthorized access to sensitive secrets in versions prior to 20.2.4 and 19.2.6, potentially allowing low-privileged users to escalate to full cluster and host compromise.

Product: Ceph

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50152

NVD References: https://github.com/ceph/ceph/security/advisories/GHSA-rg9p-5xcp-wm8h

CVE-2026-75337 - Yu AI Code Mother v4.3 is susceptible to path traversal in the /api/static/{deployKey}/ interface, enabling attackers to read files outside the preview root.

Product: Yu AI Code Mother v4.3

CVSS Score: 9.8

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75337

NVD References: https://github.com/fangtang7/CVE/blob/main/yu-ai/YU_AI_4.3_TRAVERSAL_POC.md

CVE-2026-40541 - Synology Chat Server is vulnerable to Cross-site Scripting, allowing remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks in DSM.

Product: Synology Chat Server

CVSS Score: 9.0

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-40541

NVD References: https://www.synology.com/en-global/security/advisory/Synology_SA_26_10

CVE-2026-42007 - The vulnerable product allows an attacker with valid credentials to exploit a use-after-free vulnerability by using a Sieve script with the editheader extension, leading to memory corruption and potential code execution during mail delivery.

Product: Cyrus IMAP Server

CVSS Score: 9.1

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-42007

CVE-2026-65770 - Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Product: Microsoft Azure_Managed_Instance_For_Apache_Cassandra -

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65770

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65770

CVE-2026-69502 - Azure SQL Database Elevation of Privilege Vulnerability

Product: Microsoft Azure SQL Database

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69502

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69502

CVE-2026-69836 - Microsoft Entra ID Remote Code Execution Vulnerability

Product: Microsoft Entra ID

CVSS Score: 10.0

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69836

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836

CVE-2026-69851 - Microsoft Entra ID Elevation of Privilege Vulnerability

Product: Microsoft Entra ID

CVSS Score: 9.9

NO CUSTOMER ACTION REQUIRED

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69851

MSFT Details: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69851

*Linux Kernel Vulnerabilities*

On July 19th and 20th, the Linux kernel project released patches for 432 different vulnerabilities. Many, if not all, of these vulnerabilities were discovered and fixed using AI tools. @Risk will not enumerate these vulnerabilities individually. Linux distributions will include these patches in future kernel updates. The Linux kernel team does not prioritize patches, and takes a quite liberal approach as to what it considers a vulnerability. For more details regarding the Linux kernel’s policy on assigning CVEs see: http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignment-process/