Threat briefs

The Model Context Protocol (MCP) TypeScript SDK is vulnerable to a denial-of-service condition where unauthenticated HTTP requests can exhaust server memory by bypassing array element and object key validation limits.

A high-severity vulnerability in the MCP TypeScript SDK (CVE-2026-111770) allows an MCP server to misroute messages between clients due to JSON-RPC request ID collisions when server instances are incorrectly shared.

A resource exhaustion vulnerability in the markdown-it Markdown parser allows for denial of service (DoS) when processing untrusted input with the typographer option enabled.

Pillow is vulnerable to denial of service through unbounded recursion when parsing malformed PDF files using Image.save with append=True due to insufficient depth checks in page tree and trailer chain traversals.

A heap-based out-of-bounds read vulnerability in the Pillow TIFF encoder occurs when saving images with crafted metadata, potentially leading to application crashes.

The A2A Java SDK for Android fails to properly disable HTTP redirects in synchronous POST requests, allowing sensitive authentication tokens to be leaked to unauthorized authorities following a 302 redirect.

The uv package manager, in versions prior to 0.13.4, included a vulnerable root certificate in its vendored trust store, allowing attackers to perform man-in-the-middle attacks using compromised intermediate CA keys.

Adversaries may leverage AWS IoT Core as a command-and-control rendezvous point by deploying agents on Linux hosts that utilize MQTT over TLS to relay commands through cloud-based brokers.

EG Secure Solutions SiteGuard Server Edition is susceptible to an OS command injection vulnerability, allowing remote attackers to execute arbitrary commands with root or SYSTEM privileges.

A path-handling flaw in @fastify/middie versions 9.0.0 through 9.3.5 causes security middleware to be silently skipped, enabling unauthorized access to route handlers.

An incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications (versions 1.0.7-1.0.10) allows authenticated users with repository push access to perform unauthorized privilege escalation and resource modification across an AWS account.

A command injection vulnerability in virtualenv prior to 21.14.9 allows arbitrary code execution via malformed interpreter paths when generating POSIX console scripts.

A missing authorization vulnerability in the Kiro Crew WhatsApp integration allows remote attackers who are group members to hijack agent sessions and execute arbitrary commands on the host system.

EyeLock nano NXT biometric devices contain a path traversal vulnerability in logdownload.php that allows unauthenticated attackers to read arbitrary system files via the path parameter.

Cherry Plugin for WordPress versions before 1.2.7 contain a path traversal vulnerability in the import-export module that allows unauthenticated attackers to read arbitrary files from the web server.

The Issuu Panel plugin for WordPress before 1.6.6 is susceptible to unauthenticated remote and local file inclusion via the abspath parameter, enabling arbitrary PHP code execution.

The Memphis Documents Library plugin for WordPress is vulnerable to path traversal via the mdocs-img-preview parameter, allowing unauthenticated attackers to read arbitrary files.

FooSun DotNetCMS versions 1.0 and 2.0 contain an unauthenticated SQL injection vulnerability in the CityId parameter of the /user/City_ajax.aspx endpoint, which is being actively exploited to extract database information.

The Aspose PDF Exporter plugin for WordPress before version 2.0 is vulnerable to path traversal via the file parameter, allowing unauthenticated remote attackers to retrieve arbitrary files like wp-config.php.

The Aspose Importer & Exporter WordPress plugin before 3.0 contains a path traversal vulnerability allowing unauthenticated attackers to read sensitive files via the file parameter.

The Aspose Doc Exporter WordPress plugin before version 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files from the server.

The ChurcHope theme for WordPress before version 2.2 is vulnerable to an unauthenticated path traversal attack, allowing remote adversaries to read arbitrary files from the host server.

The NativeChurch WordPress theme before version 1.6.2 is vulnerable to unauthenticated path traversal via the download.php file parameter, allowing for the arbitrary download of sensitive system files.

The TinyMCE Thumbnail Gallery WordPress plugin versions prior to 1.1.0 are vulnerable to unauthenticated path traversal via the href parameter, allowing remote attackers to read arbitrary system files.

An OS command injection vulnerability in the TOTOLINK X2000R router allows an authenticated attacker to execute arbitrary system commands via the boa formPasswordSetup function.

Argo CD versions 2.1.0 through 3.6.0-rc1 are vulnerable to arbitrary code execution if --enable-helm is used, allowing attackers to inject a malicious Helm plugin via repository-controlled configuration.

A stored cross-site scripting vulnerability in the SNS Enrollment Portal allows an unauthenticated attacker to inject malicious scripts during the certificate request process, which execute when an administrator validates the request.

A logic error in the Stormshield Network Security (SNS) dynamic data file signature verification routine allows attackers to bypass validation and inject unauthenticated updates during the autoupdate process.

The Model Context Protocol (MCP) TypeScript SDK between versions 1.24.0 and 1.32.0 contains an authorization flaw in the InMemoryTaskStore that permits cross-session unauthorized access to tasks.

An OS command injection vulnerability exists in aaPanel versions 8.25.0 and earlier, allowing authenticated remote attackers to execute arbitrary system commands through the File Manager component.