Threat briefs

navi version 2.24.0 and earlier contains a command injection vulnerability due to improper escaping of cheatsheet variable values, allowing arbitrary command execution via crafted file names.

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 are vulnerable to a password reset poisoning attack, allowing unauthenticated attackers to hijack administrator accounts via Host header manipulation.

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

Edgeless Systems Contrast versions 1.14.0 to 1.23.1 contain an insecure runtime policy configuration that allows attackers with Kata agent API access to substitute container images by bypassing digest verification.

Prolific infostealer families like Lumma, RedLine, and Vidar are leveraging industrialized malware-as-a-service to exfiltrate session tokens and API keys, enabling bypass of MFA and unauthorized access to cloud, code, and AI environments.

A critical out-of-bounds write vulnerability (CVE-2026-100740) in the D-Link DIR-895L L2TP control channel parser allows remote attackers to potentially achieve code execution.

An unauthenticated remote code execution vulnerability (CVE-2026-100746) in Coolify versions 4.1.0 and earlier allows attackers to bypass authentication via the GitHub App setup flow.

The heym expression engine before version 0.0.91 is vulnerable to a sandbox escape via the DotList map/filter and fallback resolver, allowing authenticated users to achieve arbitrary Python code execution.

AzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection flaw in the sortOrder API parameter, allowing attackers to exfiltrate sensitive database contents.

MONAI versions through 1.6.0 are vulnerable to remote code execution due to insecure deserialization and evaluation of arbitrary Python callables within bundle configuration files.

Contrast versions before 1.18.0 are vulnerable to an AML injection attack (BadAML), allowing a malicious host to execute arbitrary code within the guest kernel on AMD SEV-SNP confidential computing platforms.

Coolify versions 4.1.2 and prior contain a missing authorization vulnerability in the Route-Level Middleware component, allowing remote attackers to perform unauthorized resource updates.

Edgelesssys Contrast versions 1.9.0 through 1.12.1 insecurely log workload secrets to stdout, allowing unauthorized access to sensitive credentials by users with pod log permissions.

A vulnerability in AcyMailing Enterprise (CVE-2026-94132) allows unauthenticated remote code execution by sending malicious MIME attachments to a POP3-monitored mailbox.

The Joomla UP plugin (Universal Plugin) is vulnerable to unauthenticated remote code execution via insecure GitHub action installation (CVE-2026-97163), allowing attackers to force the download of arbitrary code due to disabled TLS certificate verification.

An improper authorization vulnerability in the Groups - Memberships and Access Control WordPress plugin allows authenticated subscribers to escalate privileges by manipulating group enrollment context.

Froxlor versions through 2.3.10 are vulnerable to arbitrary file deletion where authenticated users can plant symlinks to trigger recursive deletion by a root-privileged cron task, leading to potential data destruction.

An unauthenticated remote attacker can exploit an improper SVG resolution vulnerability in the Stoatchat January media proxy to perform local file enumeration, arbitrary file disclosure, and memory exhaustion via unbounded filesystem I/O.

An unauthenticated remote attacker can cause cumulative memory exhaustion and service denial by sending incomplete STOMP frames that trigger a buffer leak in Netty's StompSubframeDecoder.

A vulnerability in capgo.app allows authenticated administrators to bypass organization boundaries by assigning channel-specific permissions to arbitrary external user UUIDs.

An authentication bypass vulnerability in the miniOrange OTP Login, Verification and SMS Notifications plugin allows unauthenticated attackers to log in as administrators by abusing a flawed login intent parameter.

Hugo versions 0.161.0 through 0.165.0 contain a directory traversal vulnerability where the Node.js sandbox fails to resolve symbolic links correctly, allowing unauthorized disclosure of sensitive files during the build process.

stoatchat versions prior to 0.15.5 are vulnerable to an authentication bypass where attackers can use their own MFA ticket to authenticate against a victim's session.

Grav CMS versions 2.0.14 through 2.0.24 contain a privilege escalation vulnerability allowing authenticated backend operators to bypass security guards and grant themselves super-admin privileges.

A memory exhaustion vulnerability in Netty's SpdySessionHandler allows remote attackers to trigger JVM OutOfMemoryErrors via unbounded concurrent SPDY stream allocation.

An authorization vulnerability in the Capgo PUT /app/:id endpoint allows authenticated users to trick a privileged backend worker into overwriting restricted storage objects.

An unauthenticated remote SQL injection vulnerability in the CloudClassroom-PHP-Project loginlinkfaculty.php script allows attackers to manipulate authentication parameters to compromise database integrity.

Kyverno versions before 1.19.1 contain a path traversal vulnerability in apiCall urlPath processing, enabling namespace-restricted users to perform unauthorized cluster-wide object manipulation via URL-encoded segments.

Kyverno versions before 1.19.1 are vulnerable to Server-Side Request Forgery due to inadequate egress filtering in the legacy apiCall and GlobalContextEntry components, allowing attackers to access internal cloud metadata and cluster services using the Kyverno ServiceAccount token.

Nodemailer versions before 10.0.6 are vulnerable to a Regular Expression Denial of Service (ReDoS) in the addressparser component, allowing attackers to block the Node.js event loop via crafted email headers.