Threat briefs

The Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.

Smarty versions before 4.5.8 and 5.8.5 are susceptible to code injection via template inheritance due to improper management of the nocache_hash variable, enabling unauthenticated remote code execution.

The Kirki plugin for WordPress is vulnerable to Stored XSS due to insufficient input validation in registration metadata, allowing unauthenticated attackers to inject malicious scripts.

Progress Software has released a security advisory regarding CVE-2026-91140, a critical vulnerability affecting the ARCGenAI-Generator component in versions prior to 2.1.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain an improper access control vulnerability (CVE-2026-104335) that allows an authenticated remote attacker to execute arbitrary code.

Public proof-of-concept exploits for CVE-2021-21985 have been released, enabling unauthenticated remote code execution in VMware vCenter Server via the Virtual SAN Health Check plug-in.

The MsQuic library using OpenSSL or QuicTLS backends fails to perform proper TLS hostname verification, enabling on-path attackers to perform man-in-the-middle (MITM) attacks and spoof server identities.

Rapid7 Velociraptor is affected by multiple vulnerabilities allowing a remote, authenticated attacker to manipulate files, bypass security controls, escalate privileges, and exfiltrate sensitive data.

A sandbox bypass vulnerability in Ghostscript allows attackers to achieve arbitrary command execution by rendering malicious PostScript or EPS documents that circumvent the -dSAFER protection.

Threat actors, linked to Red Menshen, are deploying advanced Linux backdoors like BPFDoor and AVERAT against telecom and network appliances in South Korea and Taiwan, utilizing process name spoofing and BPF-based triggers to evade detection.

An unauthenticated exposure of Go pprof debug endpoints in postgres-exporter allows remote attackers to perform information disclosure of credentials and process memory or trigger a denial of service.

Authenticated users can exploit an SSTI vulnerability in NetBox versions 2.9.5 through 4.6.x to exfiltrate session cookies and API tokens by injecting malicious Django HttpRequest references into Jinja2 templates.

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization flaw in crayons_store.php that allows unauthenticated attackers to modify arbitrary objects, leading to remote code execution.

A vulnerability in the External Secrets Operator enables authenticated users to bypass label enforcement checks in webhook generators, allowing unauthorized exfiltration of Kubernetes secrets to malicious URLs.

The openapi-python-client library is vulnerable to arbitrary code generation when processing malicious OpenAPI documents, leading to remote code execution upon importing the generated client.

The Model Context Protocol (MCP) TypeScript SDK fails to validate authorization server endpoints, allowing malicious MCP servers to intercept refresh tokens and client secrets via credential exfiltration.

The Kiota Java and PHP generators are vulnerable to a code injection attack where malicious OpenAPI descriptions can lead to the generation of attacker-controlled source code due to improper sanitization of block-comment delimiters.

An improper access control vulnerability (CVE-2026-105806) in the @payloadcms/plugin-mcp package allows authenticated users to manage API keys across accounts, facilitating privilege escalation and account takeover.

A logic flaw in the @payloadcms/plugin-ecommerce Stripe payment adapter allows order confirmations to be processed multiple times, posing a risk of duplicate fulfillment.

The Akira ransomware group utilized RDP for initial access, disabled Bitdefender security services, performed credential dumping with procdump.exe, and deployed GOST tunnels for persistence before executing final file encryption.

LibreOffice is affected by multiple vulnerabilities that could allow a local attacker to execute arbitrary code, manipulate data, or disclose sensitive information.

An unauthenticated, remote attacker can exploit a path traversal vulnerability in the Progress Software Sitefinity Next.js Renderer SDK, enabling arbitrary file manipulation and unauthorized sensitive information disclosure.

Multiple vulnerabilities in the vLLM inference engine allow an unauthenticated attacker to trigger a denial of service, impacting the availability of LLM inference services.

Adversaries are leveraging high-volume network logon failures against Windows systems to brute force or spray credentials, often targeting multiple accounts from a single source IP.

This detection identifies potential password brute force or spraying activity targeting Windows administrative accounts by monitoring for high volumes of failed network logon attempts from a single source IP.

End-of-life Hitachi Energy RTU500 CMU firmware versions 11.x and prior are susceptible to multiple critical vulnerabilities, including authentication bypass and path traversal, which could allow remote attackers to compromise device integrity or disrupt industrial control operations.

A critical buffer overflow vulnerability (CVE-2026-15340) in Savannah lwIP SMTP client 2.2.1 allows unauthenticated remote attackers to trigger denial-of-service or potential remote code execution.

A remote code execution vulnerability (CVE-2026-34197) in Apache ActiveMQ Classic allows authenticated attackers to invoke management operations through the Jolokia API to retrieve a remote configuration file and execute OS commands, potentially exploitable without authentication via CVE-2024-32114.

Johnson Controls EasyIO FG firmware versions <=2.0b52 are affected by hard-coded credentials and improper privilege management vulnerabilities (CVE-2026-27872, CVE-2026-27873), potentially allowing full device compromise.

Hitachi Energy Asset Suite versions 9.9.0 and prior are susceptible to unauthenticated access to sensitive servlets, enabling unauthorized configuration file uploads and denial-of-service conditions.