Overview of incoming advisories.
2019 results found
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress. The attack allows threat actors to upload a PHP backdoor to compromised WordPress sites. The plugin, designed for WooCommerce-based stores, contains a flaw being leveraged in the wild. This represents an active exploitation campaign targeting WordPress e-commerce installations. Site administrators using the affected plugin are at immediate risk of full site compromise. The backdoor upload capability could grant attackers persistent remote access and control over affected sites. WordPress and WooCommerce site owners are urged to patch or remove the vulnerable plugin immediately.
View original advisory →CISA has issued a warning that ransomware gangs are actively exploiting a critical remote code execution (RCE) vulnerability in VMware vCenter Server. The flaw was patched by VMware in July but continues to be targeted by threat actors. CISA's alert indicates that exploitation has escalated beyond initial attackers to include ransomware groups, significantly raising the threat level. Organizations running VMware vCenter are urged to apply the patch immediately if they have not already done so. The vulnerability allows attackers to execute arbitrary code remotely, potentially giving them full control over affected systems. This type of critical infrastructure exposure is particularly dangerous as vCenter manages virtualized environments at enterprise scale.
View original advisory →CISA issued an advisory for CareCam CM2507 IP cameras running firmware v251211.1507, disclosing seven vulnerabilities. The flaws include missing authentication for live video streaming (CVE-2026-88259), empty password on the ONVIF management service (CVE-2026-84398), an unprotected remote debugging activation mechanism (CVE-2026-84400), arbitrary code execution via unverified removable media scripts (CVE-2026-81305), an unauthenticated physical debug interface exposing the bootloader (CVE-2026-85478), weak password hashing for the root account (CVE-2026-85497), and cleartext storage of wireless credentials (CVE-2026-81321). CVSS v4.0 scores range from 2.3 to 9.3, with two vulnerabilities rated CRITICAL. CareCam has not responded to CISA coordination attempts, leaving no vendor patch available. Users are advised to isolate devices behind firewalls, minimize network exposure, and use VPNs for remote access. No public exploitation has been reported at the time of publication.
View original advisory →Siemens Reyrolle 7SR5 protective relay devices running firmware versions prior to V2.70 are affected by 14 vulnerabilities spanning a wide range of weakness types. The highest severity vulnerability (CVE-2026-62645) carries a CVSS v3 score of 9.8 CRITICAL and allows unauthenticated remote attackers to bypass authentication by calculating session IDs exposed through the web interface. Additional critical issues include insufficient entropy in session ID generation, authentication bypass via alternate paths, out-of-bounds writes causing denial-of-service, and resource exhaustion from unthrottled HTTP requests. Physical access vulnerabilities allow arbitrary unsigned code execution via a maintenance boot mode and memory corruption during firmware update mode. The Cesanta Mongoose Web Server v7.14 component contributes several integer overflow, pointer offset, and delimiter neutralization flaws. The device is deployed worldwide in the Energy critical infrastructure sector. Siemens has released V2.70 to address all vulnerabilities and recommends immediate update. CISA republished this advisory from Siemens ProductCERT SSA-142885 on 2026-09-15.
View original advisory →CISA issued an advisory for Wärtsilä FOS-Onboard version 5.07.0923.01, disclosing two critical vulnerabilities (CVE-2026-78225 and CVE-2026-81855) involving hard-coded cryptographic keys (CWE-321). CVE-2026-78225 affects the deployer-ng Update Controller component with a hardcoded server key, while CVE-2026-81855 affects the robot testing framework with a hardcoded client authentication key. Both vulnerabilities carry CRITICAL CVSS scores (9.0 and 9.1 respectively for CVSS 3.1). Successful exploitation could allow attackers to deliver unauthorized updates, execute code, or extract credentials to impersonate privileged clients. The affected product is deployed worldwide in the Transportation Systems critical infrastructure sector, with Wärtsilä headquartered in Finland. Wärtsilä states vulnerabilities are not exploitable when installed as recommended and has developed a security patch available via direct contact. The vulnerabilities were reported by Cydome Security Ltd. No known public exploitation has been reported at the time of publication.
View original advisory →CISA has issued an advisory for mySCADA myPRO Manager versions 2.1 and below, identifying two critical vulnerabilities. CVE-2026-73807 (CVSS 9.8 Critical) involves missing authorization in the command API, allowing unauthenticated attackers to access privileged management functions. CVE-2026-82567 (CVSS 6.3 Medium) exposes an unauthenticated HTTP endpoint enabling arbitrary SMS messages to be sent via a connected GSM modem. Both vulnerabilities require no authentication and are remotely exploitable. Affected sectors include Critical Manufacturing, Energy, Food and Agriculture, Transportation, and Water/Wastewater systems deployed worldwide. The vendor mySCADA Technologies has released version 2.2 as a fix. No known public exploitation has been reported. Shirshak Secnora OÜ reported these vulnerabilities to CISA.
View original advisory →CISA has published an ICS advisory (ICSA-26-258-01) disclosing six vulnerabilities affecting Digital Watchdog VMAX DVR and NVR product lineups, including VMAX A1 G4 DVRs, VMAX IP G4 NVRs, VMAX A1 PLUS, VA1G4 Recorder, and VG4 Recorder (all versions). The vulnerabilities include authentication bypass (CVE-2026-68953), hard-coded credentials enabling root FTP access (CVE-2026-66890, CVE-2026-68950), missing authentication for critical functions allowing root command execution (CVE-2026-68070), missing authorization on state-changing CGIs (CVE-2026-66887), and predictable PRNG seeds leading to guessable session tokens (CVE-2026-66372). The highest CVSS v3.1 score is 9.6 (CRITICAL). Successful exploitation could grant full administrative control, allow viewing of live and recorded surveillance, alter configurations, and use devices as network pivot points. Affected sectors include Commercial Facilities, Government Services, Healthcare, and Transportation. Digital Watchdog has released updated firmware as mitigation. No known active public exploitation has been reported at this time.
View original advisory →Sysdig researchers highlight a case where a skilled human threat actor exploited a remote code execution (RCE) vulnerability in a Marimo notebook to pivot to an SSH bastion host in just eight seconds. The findings underscore that while AI is lowering the barrier for attackers and accelerating exploitation timelines, human operators remain highly capable of rapid post-exploitation movement. The incident demonstrates the speed at which attackers can escalate access after gaining an initial foothold in cloud environments. This research serves as a warning to organizations running Marimo notebooks or similar interactive computing environments about the risks of unpatched RCE vulnerabilities. The case highlights the need for robust lateral movement detection and network segmentation in cloud infrastructures.
View original advisory →A mass-scanning campaign has been identified targeting internet-exposed Vite development servers. Attackers are exploiting a flaw in Vite to extract sensitive cloud credentials and configuration data. The campaign specifically targets Amazon Web Services (AWS) and Microsoft Azure instances. Infrastructure state files are also being siphoned as part of the attack. The operation is automated and designed to scan broadly for exposed Vite dev servers. F5 Labs researchers disclosed the details of this campaign. The attack highlights risks of exposing development servers to the public internet.
View original advisory →A critical vulnerability in LiteSpeed Web Server Enterprise allows a low-privilege hosting account user to escalate privileges and gain root access on a shared hosting server. The flaw was disclosed in a cPanel advisory published on September 14, 2026. Shared hosting environments are particularly at risk since multiple customers share the same physical machine. An attacker exploiting this vulnerability could access, modify, or compromise other customers' websites and the underlying server infrastructure. The severity is high given the potential for cross-tenant compromise and full server takeover from a low-privilege starting point.
View original advisory →CVE-2026-57112 affects PraisonAI multi-agent system versions praisonaiagents 0.6.0 to 1.6.59 and PraisonAI 3.10.0 to 4.6.59. The vulnerability exists in ToolsMCPServer.run_sse() which mounts SseServerTransport on legacy /sse and /messages/ endpoints without Host, Origin, or authentication enforcement. An attacker can exploit this via DNS rebinding against a local or internal SSE server to supply malicious Host and Origin headers. This allows enumeration of registered tools and invocation of them with the server user's privileges. The flaw is isolated to the legacy SSE wrapper, as the Streamable HTTP transport correctly rejects hostile Origins. Remediation was released in praisonaiagents 1.6.59 and PraisonAI 4.6.59. Users should upgrade immediately to the patched versions to mitigate the risk of unauthorized tool invocation.
View original advisory →CVE-2026-45048 affects OpenAM (Open Access Management) versions prior to 16.1.1. The vulnerability exists in the SessionRequestHandler component of the session management endpoint, which fails to enforce ownership or privilege checks. A low-privileged authenticated user who knows a target identity identifier can query and retrieve another user's active session credentials, including those belonging to higher-privileged accounts. This allows the attacker to hijack privileged sessions, potentially leading to full account takeover or privilege escalation. The vulnerability only affects deployments using stateful session storage. The issue has been patched in OpenAM version 16.1.1, with fixes available via the official GitHub repository.
View original advisory →Polyaxon versions through 2.16.4 are vulnerable to server-side template injection (SSTI) due to the use of an unsandboxed Jinja2 templating environment during server-side run preparation. Authenticated users can submit malicious Jinja2 payloads in operation specification fields such as queue, namespace, conditions, presets, or dependencies to achieve arbitrary code execution. The vulnerability is exploited in the context of the scheduler process, which can expose sensitive information including database credentials and service tokens. The flaw originates in the engine.py and sections.py files within the Polyaxon CLI codebase. This issue requires authentication but does not require elevated privileges, making it accessible to any registered user. Successful exploitation could lead to full system compromise, data exfiltration, and lateral movement within the infrastructure. The vulnerability has been documented by VulnCheck and reported via the Polyaxon GitHub issue tracker.
View original advisory →A security vulnerability (CVE-2026-57137) was discovered in PraisonAI, a multi-agent teams system, affecting versions 1.4.0 through 1.7.2. The flaw exists in the createAgentLoop() function within agent-loop.ts, where executable tools are passed to generateText() before the onToolCall approval callback is invoked. Because the underlying AI SDK executes tool handlers during generation, a rejection callback returning false only logs the rejection after the tool has already executed and produced side effects. This means applications relying on onToolCall as a human-in-the-loop or policy approval boundary are effectively bypassed. Attackers or unauthorized workflows could execute rejected file operations, system commands, API calls, or data-modifying operations without proper authorization. The vulnerability undermines trust boundaries in agentic AI systems where human oversight is critical. The issue has been patched in version 1.7.2 of PraisonAI.
View original advisory →CVE-2026-57136 affects PraisonAI, a multi-agent teams system, in versions 1.2.3 through 1.7.2. The vulnerability exists in the CommandValidator component within sandbox-executor.ts, which only validates the first whitespace-delimited executable against an allowlist. The SandboxExecutor then passes the full command string to 'sh -c', allowing attackers to append arbitrary commands using shell metacharacters after an allowed executable. This constitutes a command injection vulnerability enabling arbitrary code execution with PraisonAI process-level privileges. The flaw is located in the TypeScript CLI feature sandbox executor. No authentication bypass is needed if an attacker can influence command inputs. The issue has been patched in version 1.7.2. A corresponding GitHub commit and security advisory (GHSA-vjv9-7m7j-h833) have been published.
View original advisory →CVE-2026-57135 affects PraisonAI, a multi-agent teams system, in versions 1.2.3 through 1.7.2. The SandboxExecutor's network-isolated mode fails to establish a true OS-level network boundary, relying solely on injecting invalid proxy environment variables via buildEnv(). Programs that bypass or ignore these proxy variables can open direct sockets, allowing them to reach localhost, internal services, cloud metadata endpoints, or external hosts. This misconfiguration enables potentially sensitive data exfiltration from supposedly isolated sandbox environments. The vulnerability resides in src/praisonai-ts/src/cli/features/sandbox-executor.ts. An initial remediation was released in version 1.7.2. The fix is tracked via a GitHub commit and a security advisory under GHSA-gqmf-56h7-rrpf.
View original advisory →A command injection vulnerability exists in PraisonAI, a multi-agent teams system, affecting versions 1.5.1 through 1.7.2. The shell() helper function in utility-tools.ts only validates the first whitespace-delimited token against a safeCommands allowlist before passing the full string to child_process.exec(). This flaw allows an attacker to append arbitrary shell commands after an allowlisted read-only command using shell syntax. Exploitation grants arbitrary command execution with the privileges of the PraisonAI process. The vulnerability is located in src/praisonai-ts/src/tools/utility-tools.ts. A fix has been released in version 1.7.2. Users are advised to upgrade immediately to mitigate the risk of unauthorized command execution.
View original advisory →pgweb versions through 0.17.0 contain a missing authorization vulnerability on the POST /api/connect endpoint. When connect-backend authorization is configured, this endpoint remains unguarded, allowing attackers to supply arbitrary database connection strings. Attackers can exploit this flaw by providing custom session identifiers and connection URLs to bypass resource-to-database mappings. This enables unauthorized access to databases and internal services that should be restricted. The vulnerability effectively undermines the authorization controls intended to restrict database access. It affects all deployments of pgweb up to and including version 0.17.0 that use connect-backend authorization. The issue has been documented in the pgweb GitHub repository and flagged by VulnCheck. Organizations using pgweb with connect-backend authorization should apply mitigations or updates promptly.
View original advisory →KubeSphere versions through 4.1.3 contain a server-side request forgery (SSRF) vulnerability in the git credential verification endpoint. The endpoint accepts unvalidated caller-supplied URLs without any allowlist restrictions, allowing authenticated attackers to supply arbitrary URLs. This enables attackers to reach internal services and potentially exfiltrate basic-auth credentials stored in Kubernetes Secrets across any namespace. The vulnerability is exploited by leveraging the endpoint's error response handling to expose sensitive credential data. The flaw is located in the handler and git model components of the KubeSphere codebase. Successful exploitation requires authentication but can lead to significant privilege escalation and data exfiltration within a Kubernetes cluster. The issue has been reported via GitHub issues and documented by VulnCheck.
View original advisory →lamp-cloud versions through 5.10.0 contain a missing authentication vulnerability where the path pattern /*/anno/** is whitelisted for anonymous access. Unauthenticated attackers can send POST requests to /defGenProject/anno/getProperties to retrieve the server's full JVM system property map. Sensitive information exposed includes JVM classpath, filesystem paths, operating system details, and startup secrets. The vulnerability stems from an overly permissive anonymous access whitelist configured in IgnoreProperties.java. The affected endpoint is implemented in DefGenProjectController.java. No authentication or authorization is required to exploit this issue. This represents a significant information disclosure risk that could facilitate further attacks.
View original advisory →