Threat briefs

News Kit Elementor Addons versions 1.5.0 and earlier contain a Subscriber PHP Object Injection vulnerability.

The Extra Fees Plugin for WooCommerce versions 4.4.0 and below contains a contributor-level PHP object injection vulnerability.

A reflected cross-site scripting vulnerability exists in the OceanWP theme for WordPress due to improper neutralization of input during web page generation.

ZITADEL versions 4.0.0 before 4.19.5 are vulnerable to host header injection, allowing unauthenticated attackers to redirect sensitive authentication-related emails to attacker-controlled infrastructure.

OpenEMR versions prior to 8.5.0 contain an authenticated SQL injection vulnerability in the Syndromic Surveillance module, enabling Clinician-level users to perform error-based data exfiltration and administrative account takeover.

Since September 2026, threat actors have leveraged fake Anthropic AI preview invitations, abused legitimate services, and utilized multi-layer CAPTCHA bypasses to harvest Google and Microsoft credentials.

InstaWP Connect versions n/a through 0.1.4.2 are affected by a Cross-Site Request Forgery (CSRF) vulnerability.

VillaTheme HANDMADE - Dropshipping for Etsy and WooCommerce up to version 1.0.10 contains a missing authorization vulnerability that allows unauthorized users to perform restricted actions or manipulate plugin settings.

Frontend Dashboard and ProfileGrid WordPress plugins allow unauthenticated users to perform PHP object injection via user metadata, potentially leading to arbitrary file write and remote code execution.

A heap out-of-bounds write vulnerability in llama.cpp versions b5899 through b10260 allows attackers to achieve memory corruption or potential code execution via maliciously crafted GGUF model files.

Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions via prompt injection.

FreeMail versions before 5.3.2 contain an authorization bypass vulnerability allowing authenticated users to claim ownership of other mailboxes via the assignMailboxToUser functionality.

oapi-codegen versions 2.5.0 before 2.8.1 contain a code injection vulnerability allowing attackers to execute Go code via crafted OpenAPI documents.

Siemens has identified an authentication bypass vulnerability in its Mendix SAML module, which could allow unauthenticated attackers to circumvent authentication controls.

A security policy bypass vulnerability in Belden ICX35 industrial gateways allows attackers to reset login lockouts, circumventing authentication security controls.

Threat actor JadePuffer exploited CVE-2025-3248 in Langflow instances, leveraging agentic LLM capabilities for advanced reconnaissance, lateral movement, and ultimately encrypting data on production servers with ransomware.

An authenticated remote attacker can exploit a vulnerability in Octopus Deploy to bypass security controls and disclose sensitive information.

The OpenStack Ironic Conductor service is vulnerable to a denial-of-service attack due to improper handling of maliciously crafted compressed configuration drive files.

A vulnerability in OpenStack keystonemiddleware allows attackers to bypass access_rules using a malicious X-Service-Token, resulting in unauthorized access to restricted resources.

The GOLD OGRE threat group leverages agentic AI frameworks, including Cursor AI and LLMs, to automate post-exploitation tasks, evade EDR, and conduct Aur0ra ransomware attacks.

CVE-2024-13346 affects Theme-fusion Avada versions prior to 7.11.14, allowing unauthenticated arbitrary shortcode execution. A public exploit is available.

GLPI versions before 10.0.18 are vulnerable to remote code execution through Local File Inclusion, where authenticated users can modify file extension allowlists to execute arbitrary PHP payloads.

A heap buffer overflow in the Linux kernel SMB client (cifs.ko) allows a malicious SMB server to trigger an out-of-bounds write during DACL reconstruction, potentially enabling privilege escalation to root.

An entity identifying as the 'Department of Peace' exfiltrated and leaked sensitive DHS records involving 41,000 personnel and internal system configurations, reportedly obtained via the DHS Okta login portal.

Frangoteam Fuxa version 1.1.13 contains an unauthenticated remote command execution vulnerability in the /api/runscript endpoint due to improper sanitization of the code parameter.

The Yamaha NWR100 wireless LAN router is susceptible to an OS command injection vulnerability, allowing arbitrary OS commands to be executed via a specially crafted request.

A reflected cross-site scripting vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce (versions <= 3.1.6) allows attackers to execute arbitrary scripts in a user's browser via crafted input.

The Login with phone number plugin for WordPress is vulnerable to authentication abuse due to weak authentication mechanisms, affecting versions up to and including 1.8.78.

BuddyPress versions from n/a through 14.5.2 contain a blind SQL injection vulnerability due to improper neutralization of special elements used in an SQL command.

The VideoWhisper Broadcast Live Video WordPress plugin contains a missing authorization vulnerability (CVE-2026-115963) in versions up to 7.3.9, allowing unauthorized users to bypass access control checks.