Threat briefs

Apache Airflow is affected by multiple vulnerabilities that could allow an attacker to bypass security measures or perform unauthorized information disclosure.

Apache Camel's camel-ftp component contains a path traversal vulnerability (CVE-2026-79983) allowing unauthorized file operations outside the intended directory via malicious server-supplied file listings.

A high volume of failed tool invocations against an AWS Bedrock AgentCore Gateway may indicate an adversary attempting to discover injection points or authorization bypasses within AI agent infrastructure.

This threat brief details the detection of shell or scripting interpreters spawned by processes containing LLM prompt-injection or jailbreak language, which attackers use to coerce GenAI agents into executing malicious commands.

This threat brief details the potential for unauthorized data collection via Model Context Protocol (MCP) tools within OpenAI ChatGPT Enterprise, where attackers may leverage new or unusual connectors to exfiltrate organizational data from internal repositories.

Cisco AI Defense alerts indicate potential iterative prompt injection or unauthorized data exfiltration attempts against generative AI applications, characterized by bursts of high-risk guardrail violations.

Cisco AI Defense alerts indicate that generative AI applications have bypassed privacy guardrails, resulting in the exposure of personally identifiable information or payment card information in allowed responses.

An unauthenticated account takeover vulnerability in the Theme My Login WordPress plugin allows attackers to change arbitrary user passwords due to improper identity validation.

SGLang versions up to 0.5.21 are vulnerable to a denial-of-service condition via an unbounded memory allocation issue in the /v1/audio/transcriptions endpoint.

The WP Sessions Time Monitoring Full Automatic WordPress plugin up to version 1.1.5 is vulnerable to stored XSS via multiple input parameters, allowing unauthenticated attackers to execute arbitrary scripts in the context of user sessions.

An authenticated attacker can trigger a heap-based buffer overflow in spice-server during VM live migration by exploiting an integer truncation vulnerability in the GLZ encoder dictionary restore path.

An unauthenticated stored XSS vulnerability in GoSMTP Pro (<= 1.2.3) allows attackers to inject arbitrary web scripts via email log body content.

The Vitepos plugin for WooCommerce is vulnerable to unauthenticated SQL injection via the 'src_by' parameter, potentially allowing unauthorized database information extraction.

An observable response discrepancy vulnerability (CVE-2026-14177) in Ikas E-Commerce Infrastructure allows unauthorized actors to perform account footprinting by analyzing varying platform responses.

An arbitrary file upload vulnerability in the DoubleScale CRM plugin for WordPress up to version 1.5.1 allows authenticated subscribers to achieve remote code execution when the Helpdesk module is enabled.

The SureCart plugin for WordPress (<= 4.9.4) is vulnerable to Stored Cross-Site Scripting (XSS) via the comment parameter, allowing unauthenticated attackers to execute arbitrary scripts in the context of victims viewing specific e-commerce pages.

An unauthenticated stored cross-site scripting vulnerability in the User Registration PRO premium WordPress plugin allows attackers to inject malicious scripts via the HTTP Referer header.

An authentication bypass vulnerability (CVE-2026-75903) in the Vulnity Security plugin for WordPress allows unauthenticated attackers to retrieve credentials and gain administrative access via misconfigured Nginx path restrictions.

The WPConsent WordPress plugin up to version 1.1.9 is vulnerable to stored Cross-Site Scripting (XSS) via mXSS, allowing unauthenticated attackers to execute arbitrary scripts in a user's browser session.

The YaySMTP WordPress plugin (<= 2.7.7) is vulnerable to arbitrary file upload due to insufficient validation in the putFile function, allowing authenticated users to achieve remote code execution.

Authenticated users with specific plugin privileges can achieve remote code execution in WP Photo Album Plus via command injection in the update-photo AJAX action.

The CP Multi View Events Calendar plugin for WordPress contains a Stored Cross-Site Scripting vulnerability allowing unauthenticated attackers to inject arbitrary web scripts via the CalendarTitle parameter.

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in HivePress plugin versions 1.7.32 and earlier allows attackers to inject malicious scripts into attribute fields.

The TranslatePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment parameter, allowing unauthenticated attackers to execute arbitrary web scripts.

The Search Regex WordPress plugin version 3.5 is vulnerable to PHP Object Injection, allowing authenticated users with subscriber access to achieve remote code execution via a POP chain.

The Sunshine Photo Cart plugin for WordPress is vulnerable to unauthenticated PHP object injection in versions up to 3.7.4, which can be leveraged for RCE if secondary plugins provide a viable POP chain.

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to unauthenticated privilege escalation due to insufficient entropy in activation token generation when configured to use the 'hashids' encoding method.

A use-after-free vulnerability in librsvg (CVE-2026-96889) allows remote attackers to trigger memory corruption and potential code execution by providing specially crafted SVG documents.

Authenticated attackers can exploit a SQL injection vulnerability in specific Frappe HRMS API endpoints to extract sensitive database information due to missing input validation.

The Schema & Structured Data for WP & AMP plugin is vulnerable to unauthenticated stored XSS via the 'saswp_review_text' parameter due to insufficient input sanitization and an exposed, ineffective nonce.