Threat briefs

A critical remote code execution vulnerability (CVE-2024-53677) in Apache Struts versions 2.0.0 through 6.3.0.2 allows attackers to leverage path traversal during file uploads to execute arbitrary code.

An arbitrary file upload vulnerability in the WordPress ACF City Selector plugin (<= 1.14.0) allows an authenticated administrator to achieve remote code execution by uploading a malicious PHP shell.

BlogEngine.NET versions 3.3.8.0 and earlier are vulnerable to arbitrary file upload via the /api/upload endpoint, allowing authenticated users with EditOwnPosts permissions to achieve remote code execution.

An authenticated SQL injection vulnerability in YS-infoware BA-Workflow allows remote attackers to execute arbitrary database commands, compromising data integrity and confidentiality.

An incomplete security fix in Ghostscript 9.27 on RHEL 8 allows attackers to bypass -dSAFER restrictions, leading to arbitrary file access or command execution via crafted PostScript files.

Uniong WebITR contains an insecure deserialization vulnerability, CVE-2026-113404, allowing authenticated remote attackers to execute arbitrary code via malicious serialized data.

CVE-2025-3568 allows an authenticated low-privileged user to perform an administrative account takeover in Krayin CRM 2.0.0 and 2.1.0 by leveraging SVG-based XSS to bypass password verification controls.

Roundcube Webmail versions prior to 1.6.20 and 1.7.5 are vulnerable to IMAP command injection via CRLF sequences in the _uid parameter, allowing authenticated remote attackers to execute arbitrary IMAP commands.

The Mercury server defaults to unauthenticated access and uses an ineffective blocklist mechanism, enabling remote, unauthenticated attackers to execute arbitrary Python code via the /api/kernels websocket endpoint.

A vulnerability in Pingora versions prior to 0.8.1 allows unauthenticated remote attackers to trigger out-of-memory termination via HTTP/2 header-list and stream resource exhaustion.

Letta versions through 0.16.8 ship with a insecure compose.yaml that disables authentication middleware and exposes a PostgreSQL database with default credentials, enabling remote code execution and administrative account takeover.

Coze Studio versions up to 0.5.1 are vulnerable to an IDOR flaw in workflow.go allowing authenticated users to perform unauthorized operations on other tenants workflows.

Coze Studio versions prior to 0.5.0 allow authenticated users to execute arbitrary commands by bypassing sandbox protections in Python workflow nodes.

EvoScientist versions 0.1.0 through 0.2.4 contain an approval bypass vulnerability enabling attackers to execute arbitrary shell commands via unsanitized content ingestion.

Authenticated non-admin users can execute arbitrary system commands in Aix-DB version 1.2.4 by exploiting an unvalidated execute tool within the ChatBI agent via crafted HTTP requests.

OpenSRE versions through 0.1.2026.10.19 are vulnerable to an approval gate bypass that enables arbitrary command execution via manipulated alert or messaging inputs.

JoySafeter version 1.0.0 and earlier contains a remote code execution vulnerability allowing authenticated users to execute shell commands via an unsandboxed agent tool.

LangAlpha versions through 2026.09.07 are vulnerable to indirect prompt injection that permits remote attackers to execute arbitrary code and exfiltrate credentials via insecure agent functions.

DB-GPT versions 0.8.2 and earlier contain an unauthenticated remote code execution vulnerability in the ReAct agent endpoint that allows attackers to execute arbitrary system commands as root.

Langchain-Chatchat versions up to 0.3.1.3 contain a critical vulnerability in the /tools/call endpoint that permits unauthenticated remote code execution via arbitrary tool invocation.

An unauthenticated remote code execution vulnerability in piflow versions 2.0.0 through 2.0.1 allows attackers to execute arbitrary system commands via the DeepAgents chat agent.

Ning compress-lzf versions prior to 1.2.0 are vulnerable to an out-of-bounds memory access flaw in the UnsafeChunkDecoder, which can be exploited via crafted LZF streams to leak JVM heap memory or cause application crashes.

Mozilla Sccache versions prior to 0.4.0 are vulnerable to arbitrary code execution due to improper handling of the LD_PRELOAD environment variable when invoking compilers.

CVE-2024-34693 is an arbitrary file read vulnerability in Apache Superset (versions < 3.1.3 and 4.0.1) that allows authenticated attackers to leverage rogue MariaDB servers and the LOAD DATA LOCAL INFILE command to exfiltrate sensitive files.

A NULL pointer dereference vulnerability in FFmpeg version N-119856-gbe46370941 allows remote attackers to trigger a Denial of Service through specially crafted media files.

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 contain hard-coded credentials that allow a physically proximate attacker to gain elevated administrative privileges.

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to an authorization bypass in message endpoints that enables unauthorized session hijacking, message deletion, and prompt injection.

IBM Sterling Connect Direct for Unix is susceptible to local privilege escalation due to improper privilege management in versions 6.3.0.0 through 6.4.0.6, identified as CVE-2026-105453.

A vulnerability in the Netis EAP930 CGI endpoint allows remote attackers to trigger a backdoor via crafted manipulation of the SIGNATURE argument in the /cgi-bin/debug file.

An integer overflow vulnerability in the GIMP file-pvr plug-in allows heap-based buffer overflow via malicious .pvr files, potentially leading to arbitrary code execution or application crashes.