Threat briefs

A command injection vulnerability in libgit2 versions v0.27.0 through v1.9.0 allows remote code execution during recursive repository clones when using the libssh2 SSH backend.

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved reference vulnerability in cJSON_Utils that allows unauthenticated attackers to manipulate JSON object keys via crafted RFC 6902 JSON Pointer escape sequences.

CVE-2026-6727 is an information disclosure vulnerability in the TPM 2.0 reference implementation caused by an RSA OAEP timing side-channel that potentially allows for sensitive key material recovery.

Adversaries can gain unauthorized access to Google Cloud Platform environments by granting themselves service account impersonation roles, enabling long-term persistence and privilege escalation that survives credential rotation.

Authenticated attackers can perform CBC bit-flipping attacks on the Frontend Admin plugin to reset arbitrary user passwords, enabling full site compromise.

FileRun versions up to 2026.2.0 contain a command injection vulnerability in the thumbnail generation component allowing authenticated attackers to execute arbitrary code.

A stored cross-site scripting (XSS) vulnerability (CVE-2026-73031) in telegram-search allows remote attackers to execute arbitrary JavaScript by injecting unsanitized HTML into shared Telegram messages.

The GeoDirectory WordPress plugin contains an arbitrary file deletion vulnerability (CVE-2026-19091) allowing authenticated attackers to delete critical files and potentially achieve remote code execution.

The InstaWP Connect WordPress plugin (<= 0.1.3.6) is vulnerable to remote code execution due to insecure configuration file storage and missing access controls on Apache servers with directory listing enabled.

DSPy version 3.3.0b1 is vulnerable to arbitrary local file exfiltration via path traversal in its Image and Audio field adapters, allowing an attacker to read and transmit sensitive file contents.

An authorization bypass vulnerability in AcyMailing allows authenticated subscribers to hijack WordPress password reset emails by modifying notification template BCC fields.

Weaver E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files via the markId parameter.

PapersGPT for Zotero 0.6.1 is vulnerable to remote code execution due to unsanitized LLM responses being passed to window.eval(), allowing full system access.

The Gunra ransomware-as-a-service group is leveraging critical Fortinet vulnerabilities (CVE-2024-55591 and CVE-2025-24472) to gain initial access, hijack VDI sessions, and bypass multi-factor authentication in attacks against critical infrastructure.

Kimwolf v7 is an evolved Android/IoT botnet that leverages unauthenticated ADB access, Ethereum Name Service (ENS) resolution, and HTTP/2 browser fingerprinting to perform resilient DDoS operations.

MaxKey contains a critical vulnerability due to a hard-coded JWT signing secret that allows unauthenticated attackers to forge authentication tokens and gain administrative access.

The threat actor UAC-0145 (Sandworm) is targeting IT professionals with a recruitment-themed social engineering campaign that directs victims to install a malicious, backdoored WireGuard VPN client capable of arbitrary command execution.

The DeadLock ransomware group employs decentralized infrastructure, including Polygon smart contracts, to rotate proxy servers and host data leak blogs, complicating traditional takedown efforts.

Grafana Labs has addressed a security vulnerability identified as CVE-2026-19516 affecting the Grafana MCP Server and mcp-grafana components in versions 1.0.0 and earlier.

Rapid7 Velociraptor versions prior to 0.77.2 are affected by an authenticated identity-spoofing vulnerability, CVE-2026-18972, that may allow unauthorized access or impersonation within the platform.

An incomplete patch for CVE-2026-14380 introduced a code injection vulnerability (CWE-94) in the perl-DBI package for Red Hat Enterprise Linux 9 and 10, potentially allowing authenticated attackers to execute arbitrary code.

CVE-2026-68082 describes two unsafe bare decode operations within the libceph decode_lockers() function that could lead to memory corruption during network data deserialization.

An information disclosure vulnerability in AMD Zen processors allows an authorized local attacker to access sensitive information.

The Gentlemen ransomware group leverages VPN/firewall exploits to gain initial access, utilizes BYOVD techniques to disable security tools, and propagates ransomware via the NETLOGON share.

The Pulsetto Vagus Nerve Stimulator firmware contains undocumented Bluetooth Low Energy commands that allow an adjacent attacker to bypass safety mechanisms and modify stimulation settings without authentication.

Multiple critical vulnerabilities in Quanovate Tech Inc. Mira Hormone Monitor firmware and Android application enable unauthenticated remote access, health data tampering, and credential theft via BLE and cloud-based attack vectors.

Multiple vulnerabilities in Johnson Controls C-CURE 9000 and victor application servers, including .NET deserialization (CVE-2026-21655), allow unauthenticated remote code execution and unauthorized information disclosure.

TECNO Hi Browser version 2.23.1.1 is vulnerable to path traversal via malicious Content-Disposition headers, allowing arbitrary file writes outside the intended download directory.

Attackers can exploit CVE-2026-61447, a critical remote code execution vulnerability in PraisonAI versions before 1.6.78, by using prompt injection to manipulate LLM-generated Python code, leading to arbitrary code execution and exfiltration of environment secrets on the host system.

Apache Gravitino versions 1.0.0 through 1.2.1 contain an authenticated SSRF vulnerability (CVE-2026-49876) allowing attackers to perform internal network reconnaissance or access metadata services.