Threat briefs

An unauthenticated remote code execution vulnerability (CVE-2019-11581) exists in the 'ContactAdministrators' form of Atlassian Jira Server due to insecure Velocity template rendering of the 'subject' parameter.

The datadog-opentelemetry Rust library is vulnerable to a remote denial-of-service attack due to unbounded parsing of the W3C tracestate header, allowing unauthenticated attackers to exhaust CPU and memory resources.

A vulnerability in the Graylog syslog parser allows unauthenticated attackers to overwrite or discard logs from devices using key-value formats, such as Fortigate, facilitating log evasion.

An authentication state race condition in free5GC AUSF allows an attacker to perform a targeted denial-of-service by overwriting authentication contexts keyed by SUPI, preventing successful subscriber authentication.

MapFish Print is susceptible to an XML External Entity (XXE) injection vulnerability via the GML layer processing feature, allowing attackers to perform arbitrary file reads or Server-Side Request Forgery (SSRF).

An authenticated user in a multi-company Snipe-IT deployment can exploit an authorization flaw in the asset maintenance update API to re-parent records to assets owned by other companies, breaking tenant isolation.

RestrictedPython (<= 8.2) fails to validate positional-only arguments, allowing an attacker to shadow security guard hooks (_getattr_, _getitem_, _write_, _print_) and bypass sandbox access policies.

CVE-2026-82286 is a path traversal vulnerability in gpt-crawler (<= 1.5.1) allowing unauthenticated attackers to perform arbitrary file writes through the /crawl endpoint.

Kotaemon through version 0.12.0 contains an authorization bypass vulnerability allowing unauthorized users to access, modify, or delete chat histories belonging to others.

IBM Application Runtime Expert (ARE) for i version 1R1M0 contains a vulnerability in its GUI component that allows an unauthenticated remote attacker to gain elevated privileges by masquerading as an authenticated user.

CVE-2026-82017 allows attackers with physical access to inject arbitrary kernel command-line parameters into IGEL OS boot configurations, resulting in privilege escalation while bypassing TPM measurements.

IBM Administration Runtime Expert for i 1R1M0 contains an improper authentication enforcement vulnerability allowing a remote authenticated attacker to access sensitive information.

A format string vulnerability in IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 allows local authenticated users to achieve privilege escalation.

HeyForm versions prior to 3.0.0-rc.8 are vulnerable to a CORS misconfiguration that allows cross-origin authentication, potentially leading to unauthorized data access or account modification.

IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to a remote SQL injection attack, allowing unauthenticated attackers to query, modify, or delete data in the back-end database.

Gitingest versions 0.3.1 and earlier contain a hostname validation vulnerability allowing attackers to force outbound connections and exfiltrate GitHub personal access tokens.

Stable Diffusion WebUI versions 1.10.1 and earlier contain a credential disclosure vulnerability allowing unauthenticated remote attackers to retrieve cleartext authentication credentials.

A CORS misconfiguration in Rybbit versions prior to 2.7.0 allows unauthorized cross-origin requests to read sensitive data and perform authenticated actions.

Authenticated users can achieve remote code execution in BISHENG versions prior to 2.6.0 by submitting crafted Python payloads to the /api/v1/workflow/run_once endpoint.

An authorization flaw in Quivr versions 0.0.322 and earlier allows authenticated users to modify or overwrite arbitrary prompts via unvalidated API endpoints.

VoltAgent versions up to 2.1.20 are vulnerable to an authorization flaw in memory API handlers that allows authenticated users to access, modify, or delete conversations belonging to other users.

HyperDX versions through 1.10.1 contain an improper access control vulnerability allowing authenticated users to perform unauthorized administrative actions via team management API endpoints.

Qwen-Agent version 0.0.34 and earlier contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to force the server to perform arbitrary internal HTTP requests and exfiltrate metadata service content.

Portkey AI Gateway through 1.15.2 is vulnerable to SSRF via the /v1/proxy/* route, allowing unauthenticated attackers to query internal services and exfiltrate API keys.

Gophish versions through 0.12.1 contain a vulnerability in the API authentication middleware that fails to enforce account lockout and password change requirements, allowing attackers with valid API keys to maintain persistent unauthorized access.

Hermes Agent versions prior to 0.19.0 contain a supply chain vulnerability where the bundled MCP catalog uses mutable branch references, enabling remote code execution if an upstream repository is compromised.

Synk Sweater Comb before version 3.8.8 contains a command injection vulnerability in the expectGitBranch() function, allowing arbitrary OS command execution via crafted .vervet.yaml configuration files.

PLANET GS-4210-16P2S switches running firmware older than 3.441b260626 are vulnerable to authenticated OS command injection via the memberTags parameter.

SpringBlade versions 2.7.3 through 3.5.0 allow authenticated attackers to forge administrative tokens using a hardcoded JWT signing key and escalate privileges via an unprotected internal endpoint.

Argo Rollouts dashboard versions 1.10.0 and earlier expose sensitive, mutating operations without authentication, authorization, or CSRF protection when bound to all network interfaces.