Threat briefs

An authenticated local file inclusion vulnerability in the WP Maps plugin allows subscribers to execute arbitrary PHP files on WordPress servers via the page parameter.

The BA Book Everything WordPress plugin contains a stored XSS vulnerability in the first_name parameter, allowing unauthenticated attackers to inject arbitrary scripts.

An unauthenticated stored DOM-based cross-site scripting vulnerability in the HT Contact Form plugin for WordPress allows attackers to execute arbitrary scripts via crafted draft resume URLs.

An unauthenticated stored cross-site scripting vulnerability in the Fancy Product Designer WordPress plugin allows attackers to inject malicious scripts via the output_format parameter.

Adversaries may abuse legitimate Microsoft Office binaries to initiate arbitrary file downloads from remote locations, bypassing security controls by leveraging trusted processes.

A publicly disclosed authorization bypass vulnerability in the student-management-system allows remote attackers to access unauthorized student records via manipulated sid parameters.

IBM Concert versions 1.0.0 through 3.0.0 contain an access control vulnerability due to wildcard usage in RBAC permissions that allows authenticated attackers to access or modify unauthorized resources.

Roundup of Adobe security advisories published in August 2026.

Pangolin versions prior to 1.22.0 are vulnerable to an authentication bypass in the share-link endpoint, allowing unauthenticated access to arbitrary resources.

A server-side request forgery (SSRF) vulnerability in the songxinjianqwe Chat server allows remote attackers to perform unauthorized requests by manipulating internal component functionality.

A remote authorization bypass in the ruoyi-vue-pro payment callback handler allows unauthorized manipulation of payment order states via the ID argument.

Taskview Community versions before 1.56.0 are vulnerable to an authentication bypass in the OAuth 2.0 Dynamic Client Registration endpoint, allowing unauthenticated attackers to register clients and hijack user accounts.

Storm-2570 is a persistent ransomware affiliate that uses standardized post-compromise tooling across multiple RaaS ecosystems to conduct lateral movement and exfiltration.

Snipe-IT contains a stored XSS vulnerability in the uploaded-files API due to the failure to apply safe-inline allowlists to XML documents, allowing authenticated attackers to execute arbitrary JavaScript in the victim's session context via CVE-2026-63498.

An insecure configuration of the goja JavaScript runtime in ZITADEL Actions V1 allows authenticated organization owners to perform a sandbox escape and read arbitrary host files via the require() module loader, leading to potential privilege escalation to instance administrator.

A session-reuse vulnerability in ZITADEL Login V2 (CVE-2026-85056) allows attackers with valid credentials to bypass MFA by abandoning and restarting the login flow in organizations where MFA is not strictly enforced.

The langchain-nvidia-ai-endpoints library versions prior to 1.4.2 are vulnerable to local file disclosure when attacker-controlled image inputs are passed to ChatNVIDIA or VLM reranking APIs, leading to unauthorized file reading and exfiltration to remote endpoints.

An authenticated administrator can exploit an unescaped SQL insertion vulnerability in the phpMyFAQ StopWords::add() method (CVE-2026-56738) to execute arbitrary database commands.

A vulnerability (CVE-2026-56744) in @bsv/wallet-toolbox and related packages allows a compromised or malicious storage provider to silently substitute transaction recipient scripts, causing funds to be sent to attacker-controlled addresses.

DBHub 0.21.2 fails to securely validate hostnames in its HTTP transport mode, allowing attackers to use DNS rebinding to execute arbitrary SQL queries via a victim's browser.

A vulnerability in Podman allows malicious container images containing malformed environment variables to exfiltrate host environment variables into the container environment at runtime.

The @rsdoctor/rspack-plugin binds its report server to all network interfaces with no authentication, allowing attackers to exfiltrate source code and build metadata via an unauthenticated POST request.

The zbateson/mail-mime-parser library is vulnerable to CRLF header injection (CVE-2026-61815), allowing attackers to inject arbitrary email headers such as Bcc for silent data exfiltration.

The Cline Hub dashboard fails to validate Origin headers and bypasses authorization when no secret is configured, allowing malicious websites to hijack local WebSocket connections to execute arbitrary code.

The compliance-trestle application is vulnerable to arbitrary file write via path traversal; the `-o/--output` argument in `trestle author jinja` allows writing files outside the intended workspace due to improper validation of path traversal characters, leading to potential CI/CD compromise or local code execution by overwriting sensitive files such as `.github/workflows/*.yml` or `.git/hooks/*`.

The social-auth-core library fails to verify signatures in the vk-app backend when the auth_key parameter is missing, allowing attackers to impersonate arbitrary VK users.

SunEditor versions up to 2.47.10 contain a critical XSS vulnerability (CVE-2026-59167) where insufficient sanitization of namespaced HTML tags allows for arbitrary JavaScript execution via event-handler attributes.

The Decepticon agent framework fails to sanitize model-specific special-token literals in external reconnaissance data, allowing attackers to forge system-level instructions and execute arbitrary commands in the agent's Kali Linux sandbox.

A critical authorization flaw in the ixo-blockchain consensus logic allows unauthorized movement of user funds via DID-linked address manipulation.

The http4s-scala-xml library is vulnerable to XML External Entity (XXE) attacks due to improper configuration of the SAXParserFactory, allowing unauthenticated attackers to perform SSRF or local file disclosure.