Threat briefs

An unauthenticated remote command injection vulnerability in the web management backend of legacy TRENDnet routers allows arbitrary OS command execution via manipulated arguments to pigwidgeon.cgi.

A SQL injection vulnerability in the jackq XCMS password recovery function allows remote attackers to execute arbitrary database queries via the email parameter.

The PRVTPRO Amnezia-Web-Panel contains a vulnerability in the Backup Download component within app.py, allowing for remote exploitation via default credentials.

CVE-2024-53345 is an arbitrary file upload vulnerability in the Car Rental Management System (versions 1.0-1.3) that allows authenticated attackers to achieve remote code execution via uploaded PHP web shells.

The Divi Plus WordPress plugin contains an arbitrary file read vulnerability (CVE-2026-91136) in the SVG animator REST endpoint that allows unauthenticated attackers to exfiltrate sensitive server files.

Authenticated users can exploit a path traversal vulnerability in the pH7Builder picture module to delete arbitrary files on the server.

AmoyLab Unla versions 0.10.0 and earlier are vulnerable to an authentication bypass in the OAuth2 implementation that permits unauthenticated attackers to obtain valid access tokens and interact with restricted APIs.

Katanemo Plano versions 0.4.37 and earlier contain a missing authentication vulnerability on the Envoy admin interface that allows unauthenticated remote attackers to exfiltrate LLM provider API keys.

mcp-go versions through 1.2.1 contain a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote, unauthenticated attackers to trigger memory exhaustion via oversized POST request bodies.

UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability (CVE-2026-108853) that allows authenticated attackers to delete unauthorized tenants' applications.

BotSharp versions 5.2.0 and earlier contain an authentication bypass vulnerability allowing unauthenticated attackers to forge administrative bearer tokens using a hard-coded JWT signing key.

LlamaFarm versions 0.0.34 and earlier contain an insecure default configuration that binds an unauthenticated FastAPI service to all network interfaces, allowing remote attackers to exfiltrate API keys and manipulate project data.

Easy!Appointments versions 1.6.0 and earlier are vulnerable to an authorization bypass allowing unauthenticated modification of appointments via the Booking::register function.

Vearch versions 3.5.2 through 3.5.9 contain an incorrect authorization vulnerability allowing authenticated non-root users to perform unauthorized document modifications and escalate privileges to cluster administrator.

GoatCounter versions 2.7.0 and earlier are vulnerable to a mass assignment flaw in the userPrefSave handler, enabling authenticated users to escalate privileges to administrator status.

An information disclosure vulnerability in the OpenAgents Workspace backend allows unauthenticated attackers to exfiltrate workspace metadata and API keys via the /v1/workspaces endpoint.

Rill versions 0.77.0 through 0.90.5 contain a missing authorization vulnerability that allows attackers to obtain non-expiring API tokens with elevated permissions via unauthorized OAuth code issuance.

The MCP Kotlin SDK through version 0.15.0 is vulnerable to denial of service due to the absence of a maxFrameSize limit in the Ktor WebSocket configuration, allowing remote clients to trigger heap exhaustion.

Agnaistic Agnai versions 1.0.555 and earlier contain hard-coded administrative credentials and a static JWT secret, enabling unauthenticated account takeover and configuration manipulation.

An unauthenticated remote OS command injection vulnerability in the TOZED X300 IPPingDiagnostics Handler allows attackers to execute arbitrary code via the Host argument.

A SQL injection vulnerability (CVE-2026-108571) in Xinhu Rainrock RockOA versions 2.7.6 and earlier allows remote attackers to execute arbitrary database queries via the ID argument.

OpenSpug Spug versions 3.4.0, 4.0.1, and earlier contain a remote OS command injection vulnerability in the File Transfer component, which is currently subject to public exploit availability.

Studio-Saelix Sencho versions up to 0.94.1 contain an authentication bypass vulnerability (CVE-2026-108522) where improper processing of the X-Forwarded-For header allows remote attackers to circumvent login rate limits.

The MultiVendorX WordPress plugin through version 5.0.19 contains an authorization bypass vulnerability allowing authenticated store owners to modify global marketplace settings via the REST API.

ImageMagick versions through 7.1.2-33 and 6.9.13-58 are vulnerable to arbitrary code execution via binary planting due to an insecure search path for gswin64c.exe.

Wukong_HRM up to commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to access sensitive HR administrative API endpoints.

JeecgBoot versions 3.9.5 and earlier contain a missing authorization vulnerability in the SysLogController that allows low-privileged authenticated users to delete system audit logs via a specially crafted request.

An unauthenticated remote code execution vulnerability in Floci 1.1.0-2.1.9 allows attackers to achieve command execution via malicious Velocity templates.

The openapi-typescript-codegen package through version 0.31.0 is vulnerable to code injection when processing malicious OpenAPI documents, allowing attackers to execute arbitrary JavaScript.

An authenticated local user can trigger a system-wide denial of service by exploiting a null pointer dereference vulnerability in the Lenovo Power Management Driver, pmdrvs.sys.