Threat briefs

A server-side request forgery vulnerability in Zylon PrivateGPT versions 1.0.0 and 1.0.1 allows remote attackers to perform unauthorized requests via the URI Artifact Loader component.

Onyx Craft versions through 5.0.0 contain a stored Cross-Site Scripting vulnerability in the output preview panel caused by insecure iframe sandbox configuration, allowing malicious preview content to access the parent document DOM.

Starman versions prior to 0.4019 are susceptible to multiple denial-of-service vectors, including resource exhaustion via stalled request bodies, CPU exhaustion from regex backtracking, and response desynchronization.

A command injection vulnerability in the Apache Airflow SSH provider allows attackers to achieve remote code execution on SSH hosts by injecting shell syntax into the environment parameter of SSHRemoteJobOperator.

CVE-2024-3094 affects Tukaani Xz versions 5.6.0 and 5.6.1. Public detection scripts are available.

VMime version 0.9.2 and earlier contains an integer underflow vulnerability in the uuEncoder::decode function, allowing remote attackers to trigger a stack-based buffer overflow via crafted uuencoded MIME parts.

A vulnerability in the Godot 4.x .po translation file loader allows for arbitrary code execution due to improper validation of the Plural-Forms header during plural lookup operations.

Malicious extensions or compromised IDE agents may use VS Code or Cursor process trees to exfiltrate multiple sensitive credential stores from a developer workstation.

Credential-stealing malware embedded in compromised software packages uses language runtimes to exfiltrate local developer secrets before querying cloud instance metadata services to hijack cloud workload identities.

Multiple vulnerabilities across MongoDB drivers and tools expose systems to arbitrary code execution, data integrity and confidentiality loss, denial of service, and injection attacks.

Multiple vulnerabilities discovered in various VMware Tanzu Platform components, including API Gateway, Tanzu Hub, and associated buildpacks, require urgent review of Broadcom security advisories for remediation.

A security policy bypass vulnerability in Citrix XenServer versions 8.4 and 9 allows attackers to circumvent established security controls, as detailed in Citrix bulletin CTX697257.

A public proof-of-concept (PoC) exists for CVE-2026-38903, an unauthenticated remote HTML injection vulnerability in Alertus Desktop Alert v5.4.98.0. The vulnerability stems from a certificate validation bypass that allows attackers to render arbitrary HTML and execute JavaScript within a Trident WebBrowser control.

A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0 involving a hard-coded cryptographic key in the Flask Secret Key Handler.

A flaw in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) function UploadCustomModule allows for remote command injection via manipulation of the FileMd5 argument.

An authenticated SQL injection vulnerability in the Anuko Time Tracker puncher component allows attackers to exfiltrate database credentials via the date parameter.

Adminer versions 4.7.8 and earlier are vulnerable to an arbitrary file read via a rogue MySQL server connection that facilitates the LOAD DATA LOCAL INFILE command.

Burrito Kubernetes operator prior to 0.13.0 fails to verify webhook signatures when the secret is empty, allowing attackers to forge repository events and trigger unauthorized terraform plan operations.

An authorization bypass in HashiCorp Consul and Consul Enterprise service mesh proxy registration allows users with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission.

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges.

OpenSTAManager versions 2.9.8 and earlier contain an authenticated remote code execution vulnerability (CVE-2025-69212) due to improper file path sanitization in the importFE_ZIP plugin.

A high-severity SSRF vulnerability exists in the Postiz application via Next.js, allowing attackers to bypass firewalls, scan internal networks, access sensitive cloud metadata (AWS IMDS), potentially leak instance credentials, and pivot within the internal network.

Multiple vulnerabilities in Redis could allow an attacker to execute arbitrary code remotely, potentially leading to complete system compromise.

Routinator is vulnerable to a denial-of-service condition where specifically crafted or malformed RRDP notification files cause memory exhaustion during delta entry processing.

An unauthenticated denial of service vulnerability in the HashiCorp Consul HTTP API allows remote attackers to exhaust memory on target agents, leading to service unavailability.

The zip Rust library is vulnerable to a denial-of-service condition where a malicious ZIP64 archive triggers an unrecoverable process abort through an impossible memory allocation request.

An SQL injection vulnerability in the @aws-cdk/aws-redshift-alpha module allows attackers to execute arbitrary SQL commands with superuser privileges on Amazon Redshift clusters by manipulating construct property values.

TTLock Android applications before v9.8.260718 and associated smart-lock firmware utilize a hardcoded static AES key, allowing an attacker within Bluetooth range to intercept session keys and forge administrative commands.

Vulnerabilities in Apache Camel HTTP producers allow unauthenticated users to trigger arbitrary property resolution and bean method invocation via manipulated CamelHttpUri or CamelRestHttpUri headers.

A vulnerability in HCL BigFix allows a remote, unauthenticated attacker to bypass security measures and manipulate files on the affected system.