Threat briefs

AeternaLabsHQ PullMD version 3.2.0 contains a Server-Side Request Forgery vulnerability in the REST API endpoint that allows remote attackers to perform unauthorized outbound requests.

DeDeCMS version 53_1_UTF8 is vulnerable to a remote SQL injection attack via the 'sql' argument in /plus/advancedsearch.php, for which public exploit code is available.

An unauthenticated stack-based buffer overflow in the Netis NC63 router management interface allows remote code execution via a crafted HTTP request to skk_set.cgi.

Employee Management System 1.0 is vulnerable to unauthenticated SQL injection via the 'mailuid' parameter in the '/process/aprocess.php' administrative login endpoint, allowing for remote exploitation.

An unauthenticated SQL injection vulnerability in the /welcome.php file of Assessment Management 1.0 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

An unauthenticated remote code injection vulnerability in the Authenticate function of chenhg5 cc-connect (up to 1.4.1) allows attackers to execute arbitrary code via the exec parameter.

Marimo versions before 0.23.15 contain a command injection vulnerability in the notebook configuration handler, allowing arbitrary command execution when a malicious notebook is opened in edit mode.

Agno PythonTools contains a path traversal vulnerability in its read_file, save_to_file, and run_python_file functions that allows attackers to read, write, or execute arbitrary files.

A critical stack-based buffer overflow vulnerability in the /sbin/mycli binary of TRENDnet TEW-755AP access points allows remote unauthenticated attackers to execute arbitrary code via the 'ssid' argument.

Splunk Connect for Kafka versions below 2.2.7 are vulnerable to credential theft through an unauthenticated REST API endpoint, allowing attackers to redirect HEC traffic to malicious servers.

A privilege escalation vulnerability in Splunk AI Toolkit versions prior to 6.0.0 allows non-privileged users to execute searches with system-level permissions by exploiting an insecure session token replacement mechanism in the Agent Run History handler.

Splunk AI Toolkit versions prior to 6.0.0 are vulnerable to an authorization bypass where low-privileged users can perform unauthorized administrative actions via the REST API.

Roundup of Cisco security advisories published in August 2026.

Splunk Enterprise Security versions below 8.6.1 contain a privilege escalation vulnerability where users with the ess_analyst role can modify UEBA search macros, allowing for unauthorized execution of administrative queries.

A local privilege escalation vulnerability in Splunk Enterprise for Windows allows attackers to bind to the management port before service startup, enabling the interception of authentication tokens.

IBM DS8A00 and DS8900F storage systems are vulnerable to an authentication bypass via improper encoding of DSCLI command output, potentially enabling information disclosure or denial of service.

A critical stack-based buffer overflow vulnerability (CVE-2026-75877) in the TRENDnet TV-IP751WIC alphapd component allows remote attackers to execute arbitrary code via multiple affected functions.

TRENDnet TEW-821DAP firmware version 2.2.01b05 is vulnerable to remote command injection via the /cgi-bin/ping.cgi endpoint, allowing authenticated attackers to execute arbitrary system commands.

CVE-2026-76139 allows attackers to perform remote code execution during the acm-operator-bundle build process by exploiting an unverified remote script download.

An authenticated tenant can exploit CVE-2026-73266 in the Red Hat Multicluster Engine clusterclaims-controller to perform a cross-tenant cluster join, enabling the unauthorized injection of workloads and policies.

IBM Portieris versions 0.5.0 through 0.14.2 contain a missing authorization vulnerability that allows authenticated attackers to bypass image policy enforcement by manipulating pod owner references.

The LMDeploy library insecurely deserializes untrusted peer-to-peer messages using Python's pickle module, allowing unauthenticated remote attackers to achieve remote code execution by providing a malicious ZMQ endpoint.

Splunk MCP Server app versions below 1.2.1 are vulnerable to remote code execution due to improper deserialization of untrusted data in the credential management component, allowing users with administrative privileges to execute arbitrary commands.

Splunk Enterprise is vulnerable to an authentication bypass via embedded report tokens, allowing unauthenticated attackers to hijack search job sessions and escalate privileges to the report owner's level.

The grok-faf-mcp MCP server contains an arbitrary file read vulnerability via inadequate path validation, allowing attackers to access sensitive host files by injecting path traversal sequences into tool arguments.

The faf-mcp package contains an arbitrary local file read/write vulnerability due to failure to validate user-supplied path arguments, allowing attackers to access or modify sensitive files outside the project directory.

The claude-faf-mcp MCP server exposes arbitrary file read and write primitives through unconfined path parameters, allowing LLM-based prompt injection to access sensitive local files or modify system files.

Copier versions 9.5.0 through 9.15.1 contain an authorization bypass vulnerability in the 'trust' configuration where insufficient path normalization allows attackers to execute arbitrary tasks by traversing out of trusted template prefixes.

The Contentful MCP tools 'export_space' and 'import_space' are vulnerable to Server-Side Request Forgery (SSRF) due to the unsafe passing of LLM-controlled 'host' and 'proxy' arguments directly to the Contentful Management API client, enabling credential exfiltration.

The Adfinis document-merge-service is vulnerable to RCE via server-side template injection (SSTI) in XLSX templates due to an improperly sandboxed Jinja2 environment.