Threat briefs

A vulnerability in the SSSD IdP authentication provider allows an attacker to impersonate a target user if their IdP identifier is a prefix of the victim's identifier.

A critical unauthenticated stack-based buffer overflow vulnerability, tracked as CVE-2025-32756, affects multiple Fortinet products and can be triggered via a crafted 'enc' parameter in the 'AuthHash' cookie.

The go-chi/chi middleware.RealIP component contains a vulnerability (CVE-2026-72815) that allows attackers to bypass IP-based ACLs and rate limits by forging the X-Forwarded-For header.

An authentication bypass vulnerability in the AJAX backend of Rizwan17 inventory-management-system allows remote attackers to execute unauthorized category additions via the userid parameter.

An unauthenticated server-side request forgery vulnerability (CVE-2026-55864) in the GeoNetwork SLD tool allows attackers to perform unauthorized outbound requests and potentially disclose internal XML data.

The nuxt-ollama module version 1.2.26 inadvertently publishes Ollama cloud API keys in the client-side serialized runtime configuration, allowing unauthorized remote extraction via standard HTTP requests.

The @yeger/turbo-graph package exposes an unauthenticated HTTP endpoint (/api/run) that binds to all network interfaces, allowing adjacent attackers to execute arbitrary Turborepo tasks defined in the victim repository.

The Komari management interface lacks CSRF protections and secure cookie attributes, allowing an attacker to perform unauthorized administrative actions including arbitrary code execution.

Joker versions before 1.8.2 are vulnerable to arbitrary code execution because the linter automatically traverses directory structures to execute project-local 'linter.*' files, allowing execution of attacker-supplied code within untrusted repositories.

The set_functype_version MCP tool in functype-mcp-server allows unauthenticated attackers to execute arbitrary code by passing a malicious package alias to pnpm, which the server subsequently executes via dynamic import.

An auth bypass in the ESPHome Home Assistant add-on allows unauthenticated LAN access to the dashboard due to improper interface binding, enabling remote code execution on the host.

The @openhop/server package is vulnerable to unauthenticated path traversal, allowing remote attackers to read or delete arbitrary YAML files via unsanitized route parameters in the Flow ID endpoint.

An improper validation vulnerability in Identrail allows authenticated tenants to perform cross-tenant access to private GitHub repository metadata by supplying an arbitrary installation_id during the connection flow.

Dell Secure Connect Gateway (SCG) contains a critical command injection vulnerability allowing unauthenticated remote attackers to perform script injection and potential unauthorized command execution.

MaxSite CMS versions up to 109.6 contain a local file inclusion vulnerability in its ajax and require-maxsite dispatchers allowing unauthenticated attackers to execute arbitrary privileged handlers.

An insecure deserialization vulnerability in the community.general Ansible collection's memcached cache plugin allows unauthenticated attackers to achieve remote code execution via pickle payload injection.

The MergingDigest.fromBytes method in t-digest versions 3.1 through 3.3 fails to validate centroid means during deserialization, allowing attackers to inject NaN values that trigger a denial-of-service via algorithmic complexity degradation.

MaxSite CMS versions 109.6 and earlier contain a hardcoded encryption key in application/config/config.php, enabling unauthenticated attackers to forge administrator session cookies.

A privilege escalation vulnerability (CVE-2026-0304) in Palo Alto Networks Cortex XDR Broker VM allows an authenticated, low-privileged attacker with man-in-the-middle positioning to execute arbitrary code as root.

A stored cross-site scripting (XSS) vulnerability in the PAN-OS web interface allows an authenticated administrator to execute arbitrary JavaScript within the context of the management interface.

An information disclosure vulnerability in the Prisma Access Agent for Linux allows local, low-privileged users to access sensitive configuration data and stored credentials (CVE-2026-0305).

CVE-2026-0302 allows local users with low privileges to achieve OS command injection by influencing input consumed during Checkov scanning processes.

CISA has added CVE-2025-62593, a code injection vulnerability in the Ray framework, to its Known Exploited Vulnerabilities catalog following reports of active exploitation.

The smol-toml library (<= 1.7.0) is vulnerable to a denial-of-service condition (CVE-2026-85730) where malformed TOML input triggers an infinite loop, causing 100% CPU utilization.

Multiple vulnerabilities in Microsoft development tools allow remote, anonymous attackers to perform privilege escalation, bypass security mechanisms, and perform unauthorized information manipulation or disclosure.

A vulnerability in OPNsense allows a remote, authenticated attacker to escalate their privileges, potentially gaining unauthorized administrative control over the firewall appliance.

A privilege escalation vulnerability, CVE-2026-12858, in ESET AV Remover allows local attackers to gain elevated privileges on affected host systems.

Multiple vulnerabilities, including CVE-2026-62437 and CVE-2026-79602 through CVE-2026-79606, allow for arbitrary code execution, remote denial-of-service, and security policy bypass in the Xen hypervisor.

A local privilege escalation vulnerability known as FalconFlank exists in the CrowdStrike Falcon Sensor Windows agent due to a TOCTOU race condition in the Office macro remediation workflow.

Adversaries are leveraging OAuth-based Device Code Authentication phishing to hijack user sessions and exfiltrate large volumes of files from Microsoft 365 cloud storage.