Threat briefs

Context7 versions 2.1.2 and earlier are vulnerable to a prompt injection flaw in the MCP server's Custom AI Instructions feature, enabling credential exfiltration and unauthorized file operations.

Multiple vulnerabilities in CISA Malcolm, including RCE, path traversal, and resource exhaustion, allow authenticated attackers to execute arbitrary code or cause denial-of-service.

Siemens Simcenter Femap is susceptible to arbitrary code execution via two out-of-bounds read vulnerabilities when parsing specially crafted BMP files.

CodeWhale versions before 0.8.64 contain a time-of-check-time-of-use vulnerability in DNS pinning logic, allowing attackers to bypass SSRF mitigations and access internal resources.

An SSRF vulnerability in the AWX webhook status callback mechanism allows attackers with template-level administrative access to exfiltrate Git Personal Access Tokens via forged webhook payloads.

The Expat library through version 2.8.3 contains an algorithmic complexity vulnerability in its XML attribute parsing logic that allows unauthenticated attackers to cause CPU exhaustion and denial of service.

A vulnerability in the Red Hat Ansible Automation Platform controller allows authenticated attackers to exfiltrate Kubernetes service account tokens via the HashiCorp Vault credential plugin.

A critical stack-based buffer overflow in the TRENDnet TEW-WLC100 HTTP Header Handler allows remote attackers to achieve arbitrary code execution via a malformed 'Server' header.

An unauthenticated remote SQL injection vulnerability in code-projects Task Management System 1.0 allows attackers to execute arbitrary SQL commands via the email parameter in the login form.

An authenticated remote attacker can exploit a SQL injection vulnerability in SuiteCRM to potentially gain unauthorized database access or manipulate backend data.

A remote unauthenticated attacker can exploit CVE-2024-4171 in HP Web JetAdmin to perform unauthorized file manipulation on the underlying host system.

A vulnerability in Checkmk allows a remote, authenticated attacker to disclose sensitive information due to insufficient authorization controls.

Remote attackers can exploit multiple vulnerabilities in Icinga Web to conduct Denial of Service attacks or disclose sensitive information due to improper request handling.

A critical vulnerability in GeoServer allows remote, unauthenticated attackers to perform SQL injection attacks, potentially leading to remote code execution.

A Server-Side Request Forgery vulnerability in Linuxfabrik monitoring-plugins 6.0.0 and earlier allows attackers to leak BMC credentials by manipulating @odata.id parameters to redirect requests to malicious endpoints.

Nodemailer version 9.0.0 and earlier fails to enforce security flags when using the raw message option, allowing attackers to bypass file and URL access restrictions for arbitrary file read or SSRF.

NanaZip 6.5 and earlier are vulnerable to a denial-of-service attack due to an unbounded memory allocation in the UFS codec handler triggered by a malicious fs_bsize value in a UFS image file.

PCMan FTP Server 2.0.7 is vulnerable to a remote buffer overflow via the REST command (CVE-2025-4871), allowing for unauthenticated remote code execution.

PostgreSQL has released patches for multiple high-severity vulnerabilities across several versions that could allow remote attackers to achieve arbitrary code execution, perform SQL injection, or conduct denial-of-service attacks.

ArcadeDB versions before 26.8.1 contain a vulnerability in the gRPC transaction executor that allows authenticated readers to execute arbitrary JavaScript, leading to server-wide privilege escalation.

The Grav API plugin before version 1.0.13 fails to enforce API key scope restrictions in ConfigController, enabling remote code execution via injected scheduler commands.

An API key scope-cap bypass in the Grav API plugin allows attackers with restricted keys to execute server-side templates via Server-Side Template Injection.

A path traversal vulnerability (CVE-2026-15585) in AKINSOFT Wolvox9 ERP KontrolPanel.exe versions s26.02.17 through s26.02.21 allows unauthenticated remote attackers to read arbitrary files from the host filesystem.

An authentication bypass vulnerability (CVE-2026-75627) in Bastillion versions 5.1.0 and earlier allows unauthenticated attackers to access administrative controllers via path prefix manipulation, enabling full control over managed SSH infrastructure.

SpiderFoot versions 4.0 and earlier are vulnerable to stored cross-site scripting (XSS) due to improper HTML sanitization in correlation titles, allowing attackers to execute arbitrary JavaScript in an operator's browser.

A persistent threat actor is utilizing a single VPS infrastructure to perform unauthorized data scraping from Salesforce and ServiceNow guest portals by exploiting over-privileged guest account permissions.

A vulnerability in libpng allows a remote, anonymous attacker to trigger a Denial of Service (DoS) condition via specially crafted image input, leading to potential application instability.

Budibase versions prior to 3.40.0 are vulnerable to NoSQL injection in the MongoDB datasource due to improper handling of user-supplied parameters, allowing unauthorized data access and potential server-side execution.

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the Quill Forms plugin (up to version 5.7.1) allows attackers to inject malicious scripts into web pages, facilitating client-side exploitation.

The Forminator Forms WordPress plugin version 1.56.1 and earlier contains an arbitrary file upload vulnerability allowing unauthenticated remote code execution via insufficient MIME type validation.