Threat briefs

An unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in PhocaCart (CVE-2026-76565) allows attackers to inject malicious JavaScript via price filter parameters.

Remote attackers can exploit an unauthenticated OS command injection vulnerability (CVE-2026-58455) in Dockwatch versions up to 0.6.567, arising from a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php, to execute arbitrary shell commands leading to full host compromise, especially in deployments where the Docker socket is mounted.

An unauthenticated use-after-free vulnerability in the llama.cpp RPC server's GRAPH_RECOMPUTE handler allows remote attackers to achieve arbitrary read/write access and remote code execution.

The MoYu Group is targeting DoFun Android-based vehicle head units by weaponizing the legitimate TWCore system update application to distribute JarService malware, turning automotive hardware into nodes for ad fraud and proxy botnets.

A path traversal vulnerability in Stable Diffusion WebUI allows unauthorized file disclosure via symlink manipulation when IIB access control is active.

CVE-2026-77814 is a path traversal vulnerability in Stable Diffusion WebUI caused by improper prefix validation in the is_path_trusted function, enabling unauthorized file access in network-exposed deployments.

Paperclip versions prior to 0.3.1 are vulnerable to remote code execution due to improper Host header validation when running in 'local_trusted' mode, allowing attackers to leverage DNS rebinding to execute arbitrary commands.

The Headroom LLM proxy improperly derives memory ownership from the unauthenticated 'x-headroom-user-id' request header, allowing attackers to perform unauthorized read and write operations on arbitrary user LLM memory.

The MoYu Group is distributing multi-stage Android malware through compromised firmware updates on DoFun head units to facilitate ad fraud and proxy botnet recruitment.

Multiple vulnerabilities in VMware Tanzu Spring Security, tracked as CVE-2024-22259 and CVE-2024-22262, allow remote attackers to perform file manipulation, information disclosure, cross-site scripting (XSS), and security control bypass.

A memory corruption vulnerability in the zlib library allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial of service.

Adversaries are abusing the Python site module by planting malicious sitecustomize.py or usercustomize.py files in package directories to ensure persistent code execution during Python initialization.

Adversaries are modifying the PYTHONPATH environment variable during Python package installation to redirect module imports, enabling code execution and persistence whenever Python is invoked.

The threat actor TeamPCP leverages Python path configuration (.pth) files created during package installation to achieve persistent arbitrary code execution.

Adversaries can exploit Python build scripts such as setup.py to execute arbitrary code and establish outbound connections during package installation, potentially enabling supply chain compromises.

Detection rule identifies potential credential theft via Forced Authentication where attackers leverage WebDAV to trigger NTLM authentication requests from a victim's host.

A vulnerability exists in Docker where a malicious container image can execute arbitrary code with host root privileges by exploiting the decompression of compressed archives uploaded via the `PUT /containers/{id}/archive` endpoint, tracked as CVE-2026-41567.

An improper [AllowAnonymous] attribute in Reconmap's ReportsController allows unauthenticated remote attackers to perform enumeration of sensitive penetration testing engagement data by walking sequential project IDs.

An Execution After Redirect (EAR) vulnerability in ArchitectPanel Web Admin Panel allows unauthenticated attackers to bypass authentication and gain unauthorized access.

The Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to an authentication bypass via secret token leakage in the handle_email_otp_return function.

TrueConf Server versions 5.3.x, 5.4.x, and 5.5.x are vulnerable to CVE-2026-72529 and CVE-2026-72530, which are currently being exploited in the wild according to CISA KEV.

WPForms Pro versions up to 2.0.0.2 are vulnerable to unauthenticated Stored Cross-Site Scripting via improper input sanitization in text fields.

A vulnerability in the Red Hat multicluster engine (MCE) allows authenticated tenants to delete unauthorized ManagedCluster resources due to a missing ownership check in the clusterclaims-controller.

Multiple vulnerabilities in n8n allow a remote, authenticated attacker to achieve remote code execution, bypass security controls, perform SSRF, and manipulate sensitive data.

A critical vulnerability (CVE-2026-18963) in the keycloak-services component allows unauthenticated attackers to hijack user accounts by bypassing password reset verification requirements.

A logic flaw in langchain_community SitemapLoader allows attackers to bypass domain restrictions, enabling Server-Side Request Forgery to access internal network resources and exfiltrate sensitive content.

IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain intermediate CA private keys within publicly available update files, potentially allowing remote attackers to bypass security restrictions.

IBM AIX and PowerVM VIOS contain a remote, unauthenticated denial-of-service vulnerability (CVE-2026-19446) triggered by sending a crafted UDP packet to an RPC service, resulting in system unavailability.

An improper authorization vulnerability in EverShop versions prior to 2.2.1 allows unauthenticated attackers to hijack customer accounts by exploiting an incorrectly configured API route.

An authenticated user with HelmRelease creation permissions can exploit CVE-2026-73137 to exfiltrate sensitive credentials from arbitrary Kubernetes namespaces in Red Hat Advanced Cluster Management.