Threat briefs

The Undertow AJP listener incorrectly trusts ssl_cert and is_ssl attributes within the AJP protocol without validating a shared secret, allowing unauthenticated attackers to bypass CLIENT-CERT authentication.

A vulnerability in Picketlink's SAML Service Provider (SP) signature validation logic allows unauthenticated actors to forge SAML assertions and authenticate as arbitrary users.

A deserialization vulnerability in JBoss Marshalling allows remote attackers to achieve code execution through the Infinispan session replication path.

A vulnerability in QEMU allows a remote, authenticated attacker to trigger memory corruption or a denial-of-service condition, impacting system availability.

A vulnerability, CVE-2024-5225, in TIBCO JasperReports enables remote, unauthenticated attackers to bypass application-level security controls.

A vulnerability in the PicketLink Federation SAML unsolicited response handler allows unauthenticated attackers to forge assertions, resulting in full authentication bypass as any principal.

A critical authentication bypass vulnerability, CVE-2026-18072, affects version 10.8.7 of the Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress, allowing unauthenticated attackers to gain full administrative control by supplying a hardcoded token via the `_wplogin` or `_wpm` URL parameter.

Chiline Cloud contains an Insecure Direct Object Reference (IDOR) vulnerability that allows unauthenticated remote attackers to access sensitive data belonging to other users by modifying specific parameters.

The Travel Agency Management System by Win Men International contains an unauthenticated SQL injection vulnerability allowing remote adversaries to read, modify, or delete database content.

Roundup of SAP security advisories published in August 2026.

Hugging Face Accelerate versions 1.14.0 and earlier contain a path traversal vulnerability in checkpoint loading functions that allows arbitrary file reads or denial of service via named pipes.

A vulnerability in the libarchive library allows remote, anonymous attackers to trigger a denial-of-service condition through malicious archive processing.

Aeternum is a C++ botnet loader that utilizes Polygon blockchain smart contracts for resilient, decentralized command-and-control communication and payload delivery.

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

A configuration vulnerability in the Red Hat OpenShift AI (RHOAI) MaaS Gateway enables low-privileged users to intercept and manipulate model-serving traffic, resulting in the unauthorized disclosure of access keys and AI prompts.

A vulnerability in the TrustyAI Service (TAS) deployment allows pods within the same cluster network to bypass authentication, enabling unauthorized read and write access to the backend API.

The unearth library version 0.18.2 and earlier contains a path traversal vulnerability in the is_within_directory function that permits arbitrary file writes via malicious archives.

A local privilege escalation vulnerability in libvirt allows a confined swtpm process to trick the libvirt daemon into changing file ownership through symlink following, potentially granting root-level file access.

A privilege escalation vulnerability in the RHOAI training-operator allows authenticated users with standard Kubernetes edit or admin roles to achieve host filesystem access and remote code execution through the creation of malicious training jobs.

A vulnerability in the Open Data Hub odh-dashboard allows an attacker with a compromised Service Account token to escalate to cluster-administrator privileges due to excessive RBAC permissions.

Feast improperly deserializes user-defined functions via the 'dill' library, allowing remote unauthenticated attackers to achieve arbitrary code execution on feature servers.

Feast and feast-operator contain a vulnerability due to a default 'no_auth' configuration, allowing unauthenticated attackers to achieve RCE via malicious User-Defined Functions and perform unauthorized cross-tenant data access.

An attacker with namespace editor privileges can bypass security hardening via the V1 API to execute malicious Argo Workflows, resulting in node-root access.

An authorization bypass vulnerability in Data Science Pipelines allows restricted tenants to execute containers with elevated privileges by specifying a highly-privileged ServiceAccount in a CreateRun request.

Roundup of Google security advisories published in August 2026.

The Data Science Pipelines Operator (DSPO) ClusterRole contains excessive permissions that allow an attacker who compromises the operator pod to escalate privileges to cluster administrator.

An authenticated user within a Kubernetes cluster can exploit the LMEvalJob controller in trustyai-service-operator to bypass security policies via custom sidecar containers, enabling arbitrary code execution.

Cachet versions 2.4.1 and earlier are vulnerable to server-side template injection in incident template rendering, allowing authenticated attackers to execute arbitrary system commands.

The MaaS API incorrectly trusts X-MaaS-Username and X-MaaS-Group headers, allowing internal cluster pods to bypass authentication and escalate privileges to other tenants.

Flowise v3.1.2 and earlier are vulnerable to unauthenticated remote code execution because the CVE-2025-8943 patch relies on an incomplete environment variable blocklist, allowing attackers to inject configuration variables that force arbitrary package installation.