Threat briefs

Authlib versions prior to 1.9.0 contain a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method returns the payload as successfully verified when provided with a JWS JSON Serialization object containing an empty signatures array, without checking for a signature or requiring a cryptographic key.

Dell PowerProtect Data Domain Virtual Edition contains a path traversal vulnerability that could allow a high-privileged remote attacker to perform command execution.

NVIDIA NeMo Agent Toolkit is vulnerable to a SQL injection flaw that may allow an unauthorized attacker to perform data tampering, cause a denial of service, or facilitate unauthorized information disclosure.

REDAXO versions prior to 5.21.5 contain a missing authorization flaw in the backup addon that allows unauthorized export of sensitive database tables.

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates.

SourceCodester Performance Indicator System 1.0 contains an SQL injection vulnerability in the 'Contact' argument of '/opils/staff/adddealer.php', which can be triggered remotely.

An unauthenticated denial of service vulnerability in vLLM versions 0.10.2 through 0.24.x allows attackers to trigger an out-of-memory condition by submitting decompression-bomb images to the /v1/chat/completions endpoint.

Travisun Opptrix 0.4.0 contains a remote command injection vulnerability in the /api/auth/setup endpoint of the Schedule API component.

Roundup of Oracle security advisories published in October 2026.

An authorization bypass vulnerability in the Grav CMS Debugger component allows unauthenticated remote attackers to access sensitive profiler data when the application is deployed behind a reverse proxy.

OpenReception appointment booking software prior to version 2.0.0 is vulnerable to host header injection in the confirmation email generation process, allowing unauthenticated attackers to hijack user accounts.

An unauthenticated attacker can trigger a process-wide memory exhaustion denial-of-service in Twisted versions prior to 26.10.0rc1 by sending a specially crafted, unterminated Telnet subnegotiation sequence.

Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.

A local privilege escalation vulnerability in the Zimbra Collaboration Suite zmmailboxdmgr launcher allows the zimbra user to execute arbitrary commands as root via improper JVM argument validation in sudo.

baserCMS versions 5.0.0 through 5.3.1 and 5.4.0 through 5.4.1 contain an SQL injection vulnerability in the Admin and Api/Admin interfaces allowing authenticated users to execute arbitrary SQL queries.

A path traversal vulnerability exists in the BcThemeFile plugin for baserCMS where percent-encoded traversal sequences bypass validation, allowing an authenticated administrator to write PHP files outside the intended theme directory.

PraisonAI AgentOS versions 4.2.1 through 4.6.58 contain an authentication bypass vulnerability in the FastAPI deployment surface, allowing unauthenticated requests to interact with agents.

PraisonAI versions 4.5.2 to before 4.6.59 contain an authorization bypass vulnerability in Discord, Slack, and Telegram approval backends, allowing unauthorized users to approve high-risk multi-agent tool calls.

A Cross-Site Request Forgery (CSRF) vulnerability in the VikRentCar WordPress plugin (versions 1.4.8 and earlier) allows unauthenticated attackers to perform unauthorized administrative actions.

Incus versions 7.0.0 through 7.0.1 and 7.1.0 through 7.4.0 contain a path traversal vulnerability in instance backup processing that allows authenticated attackers to write files to the host filesystem, resulting in full host compromise.

Threat actors are leveraging Adversary-in-the-Middle relays to capture M365 authentication tokens and bypass MFA, resulting in unauthorized account access, rogue device registration, and malicious inbox rule creation across multiple organizations.

A local privilege escalation vulnerability in the macOS diskutil utility allows unprivileged users to gain root access via manipulated filesystem mounting.

A vulnerability has been discovered in Mattermost Server that allows a remote attacker to cause a denial of service.

An indirect prompt injection technique exploits AI coding agents by planting malicious AGENTS.md files in user download directories to execute unauthorized commands or exfiltrate credentials.

Pillow, a Python image library, contains vulnerabilities that allow for remote code execution or process crashes through the processing of crafted image files or filenames.

An authenticated user with the internal_user_viewer role can read arbitrary local files from the LiteLLM proxy runtime by exploiting an incomplete blocklist in the vertex_ai_credentials parameter.

Highcharts Dashboards parses fullscreen labels as HTML, allowing an attacker who controls the Dashboards language options to execute script in the origin of the page hosting the dashboard.

Roundcube has released security updates for Roundcube Webmail versions prior to 1.6.20 and 1.7.5 to address undisclosed vulnerabilities.

A vulnerability in Asterisk allows a remote, authenticated attacker to perform a Denial of Service attack.

Multiple vulnerabilities in Red Hat Enterprise Linux components pki and Libreswan allow remote attackers to bypass security measures or trigger denial-of-service conditions.