Threat briefs

A public exploit and scanner have been published for CVE-2026-6516, a pre-authentication remote code execution vulnerability in ManageEngine ADAudit Plus Agent APIs.

An unauthenticated arbitrary file upload vulnerability in Chamilo LMS versions 1.11.24 and earlier allows remote attackers to execute arbitrary code by uploading malicious web shells to the bigUpload.php endpoint.

An authenticated administrator can exploit an unescaped URL parameter in the WordPress Premium Packages plugin (<= 5.9.6) to perform time-based blind SQL injection and exfiltrate database information.

An unauthenticated remote code execution vulnerability in the Delinea Privilege Manager Windows agent allows attackers to achieve system-level code execution by exploiting an insecure WCF callback endpoint on TCP 5593.

SuperAGI version 0.0.14 contains an incorrect access control vulnerability allowing remote authenticated attackers to bypass organization isolation and access unauthorized agent execution configurations.

A vulnerability in the autosave component of AppML neutriNote CE version 1387 allows unauthorized attackers to write arbitrary files.

An insecure permission vulnerability in ProjectMAXS MAXS Main version 0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allow unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

An insecure permission vulnerability in the ShortcutDispatchActivity component of canvoki version 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

An integer overflow vulnerability in GStreamer's gst-plugins-bad H.266/VVC parser can lead to stack-based buffer overflows and potential arbitrary code execution when processing malformed media.

The Email Templates Customizer and Designer for WordPress and WooCommerce plugin is vulnerable to an authorization bypass allowing unauthenticated attackers to enumerate WooCommerce order IDs and exfiltrate customer PII.

A critical path traversal and local file inclusion vulnerability in jsPDF versions prior to 4.0.0 allows unauthenticated attackers to read arbitrary files in Node.js server-side environments.

Vapor Panda (formerly VexatiousTemper, overlapping with Earth Estries) is utilizing the AI-powered ARTEX framework to conduct large-scale, concurrent, multi-vector intrusions targeting over 200 global organizations, including foreign ministries, telecommunications, and defense sectors.

An authenticated administrator can exploit a Server-Side Template Injection (SSTI) vulnerability in the Zammad AI Agent feature to achieve remote code execution via the type_enrichment_data configuration.

Blender contains a heap-based buffer overflow in the ptcache_data_alloc function, allowing attackers to trigger memory corruption and potential code execution via a maliciously crafted point cache file.

Blender versions prior to 4.5.15 and 5.x prior to 5.2.3 contain a heap buffer overflow in the thumbnail extractor that can lead to remote code execution when parsing maliciously crafted .blend files.

The pybars4 library through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows execution of Python code via unescaped bracketed path segments in Handlebars templates.

SonicJS versions through 3.0.0 contain a missing authorization vulnerability in API routes that allows authenticated Authors or Editors to bypass document-level ACLs and modify content owned by other users.

Scribus versions prior to 1.6.7 contain a heap out-of-bounds write vulnerability in the PSD loader that allows attackers to trigger memory corruption via a malicious file.

GIMP contains a stack-based buffer overflow vulnerability in the PSD plug-in image resource header loader, allowing an attacker to execute arbitrary code via a crafted PSD file.

InternLM LMDeploy versions 0.9.0 through 0.18.0 are vulnerable to unauthenticated remote code execution via insecure deserialization of pickled data.

OpenDeepWiki versions up to 2.0.6 include a hard-coded JWT signing key, allowing unauthenticated attackers to forge administrative tokens and gain full application control.

IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to remote code execution due to improper neutralization of code in eval/exec functions by a remote authenticated attacker.

Business::GoCardless for Perl versions before 1.01 are vulnerable to memory exhaustion, forged webhook processing, and insufficient redirect flow validation, potentially allowing for Denial of Service and authentication bypass.

An authorization vulnerability in the Apache Pinot single-stage query engine allows users to read unauthorized dimension tables by utilizing the lookup() transform function, which bypasses table-level access controls.

CVE-2026-116366 is a high-severity vulnerability in ClickHouse Server that allows an unauthenticated user with network access to execute arbitrary code.

The camel-azure-files component in Apache Camel is vulnerable to path traversal (CVE-2026-79986) due to insufficient validation of filenames returned during Azure File share listing, allowing unauthorized file access, deletion, or renaming.

Jeecg-Boot version 3.5.0 contains an unauthenticated SQL injection vulnerability in the /jmreport/qurestSql endpoint, enabling remote attackers to execute error-based SQL queries and disclose sensitive database information.

A critical RCE vulnerability in the Ingress NGINX admission webhook allows unauthenticated attackers to inject malicious configuration snippets and execute arbitrary code or load malicious libraries.

CoreShop versions up to 1.5.5 contain an unauthenticated SQL injection vulnerability in the api/Agent/GetGoodsPageList endpoint, allowing attackers to extract sensitive data via blind SQL injection techniques.