Threat briefs

Adminer versions 6.0.0 through 6.0.1 are vulnerable to a pre-authentication SSRF in the ClickHouse driver, allowing unauthenticated attackers to probe internal networks and exfiltrate sensitive response data.

Budibase Server versions prior to 3.45.0 allow authenticated BUILDER role users to achieve arbitrary file write and remote code execution by uploading malicious ZIP archives to the PWA icon upload endpoint.

An unauthenticated stored cross-site scripting vulnerability in the Grav Data Manager plugin allows attackers to execute malicious JavaScript in the context of an administrator's session.

An authentication bypass vulnerability in the Grav CMS Comments plugin through version 1.2.10 allows unauthenticated attackers to exfiltrate comment data, including emails and server paths, via an improperly secured admin handler.

Netty versions 4.2.11.Final through 4.2.17.Final contain an incomplete hostname verification fix in the QUIC certificate verification path, allowing network-adjacent attackers to bypass certificate validation and conduct man-in-the-middle attacks.

An unauthenticated remote attacker can cause heap exhaustion in applications using Netty's HTTP/3 codec by exploiting improper QPACK dynamic table state management, leading to a denial-of-service condition.

SiYuan versions prior to 3.8.4 are vulnerable to a SQL injection vulnerability in the graph query endpoint that allows unauthenticated attackers to exfiltrate database contents.

A vulnerability in Parse Server's device token deduplication logic allows unauthenticated remote attackers to inject NoSQL query operators, leading to unauthorized deletion of device registrations.

Flowise versions up to 3.1.4 are vulnerable to unauthorized access due to missing route-level RBAC checks, allowing low-privileged API keys to read and delete sensitive chat history.

Flowise versions up to 3.1.4 contain an authentication bypass vulnerability in the SSO callback logic that allows attackers to hijack pending user invitations and gain unauthorized organization access.

The @openclaw/matrix npm package (versions 2026.2.2 to 2026.8.0) fails to properly enforce case-sensitivity when deriving authorization identities from Matrix user IDs, potentially allowing unauthorized users to hijack administrative privileges.

The confluent-kafka library contains a vulnerability in the HcVaultKmsClient component where TLS certificate verification is explicitly disabled, allowing attackers with a network MITM position to steal Vault tokens or AppRole credentials.

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions 2.9.2 and below, allowing remote attackers to upload executable PHP files.

OpenClaw Codex versions before 2026.7.1 contain an authorization bypass vulnerability allowing non-owner users to create native conversation bindings and execute arbitrary host-level commands.

The @openclaw/whatsapp npm package prior to version 2026.8.1 contains an authorization bypass vulnerability (CVE-2026-100532) allowing non-owner users to trigger the WhatsApp login tool, resulting in service disruption via account disconnection.

OpenClaw Slack versions prior to 2026.8.1 fail to enforce sender allowlists in multi-person direct messages, allowing unauthorized participants to interact with Slack agents and access restricted tools or data.

A vulnerability in OpenClaw allows a remote, authenticated attacker to trigger a denial of service condition, impacting system availability.

Ghidra versions 12.1.4 and earlier contain a stack-based out-of-bounds write vulnerability in the leftshift128 function that could allow arbitrary code execution when processing malicious binaries.

The OpenZeppelin confidential-contracts library is vulnerable to private data leakage due to improper validation of encrypted handles returned by untrusted ERC-7984 tokens and recipients.

An unauthenticated path traversal vulnerability in the Khoj /home/ endpoint allows remote attackers to read arbitrary files from the server filesystem.

The CliInvoke NuGet package is vulnerable to argument injection due to improper sanitization when constructing process arguments, potentially allowing attackers to execute arbitrary commands by manipulating command-line tokens.

The mpp Elixir package fails to validate client-supplied gas limits before broadcasting transactions as a fee-payer, allowing attackers to drain the server's wallet through repeated out-of-gas transaction failures.

An unauthenticated API endpoint in SCBE-AETHERMOORE AetherBrowser allows remote attackers to trigger the execution of a subprocess that retrieves and exposes operator email metadata from IMAP accounts.

A critical HTTP/2 request smuggling vulnerability, CVE-2026-86350, allows unauthenticated attackers to induce dynamic table desynchronization in Apache Tomcat via crafted header blocks.

A vulnerability in sudo (CVE-2026-96512) allows an authenticated local user to bypass time-based access restrictions by manipulating the TZ environment variable to influence timestamp evaluation.

The gitoxide gix-fs library before version 0.23.0 is vulnerable to a path validation bypass during worktree checkout that allows arbitrary file writes outside the intended directory via symlink manipulation.

A heap-based out-of-bounds write vulnerability in Esri LERC versions 4.1.0 and earlier allows remote, unauthenticated attackers to cause a denial of service via crafted imagery.

MediaFlow Proxy versions 2.4.9 and earlier are vulnerable to server-side request forgery (SSRF) via the /proxy route, allowing unauthorized access to internal resources and cloud metadata services.

Zoraxy versions 3.2.3 through 3.3.4 contain a vulnerability in IPv6 address parsing that allows unauthenticated attackers to spoof the X-Forwarded-For header and bypass IP-based access controls.

GestSup versions before 3.2.61 are vulnerable to unauthenticated remote code execution via malicious file attachments in the IMAP connector.