{"site":"https://erroneo.us","generated":"2026-10-21","count":3781,"fields":"id,type(brief|cve|ghsa|digest),title,date,url,md,severity,cvss,kev,epss,verdict","items":[{"id":"php2shell-php-rce","type":"brief","title":"PHP2Shell: Critical Unauthenticated RCE in PHP","date":"2026-10-21","url":"https://erroneo.us/security/briefs/php2shell-php-rce/","md":"https://erroneo.us/security/briefs/php2shell-php-rce/index.md","severity":"critical","kev":false,"epss":null,"verdict":"act-now","cves":["CVE-2026-109618","CVE-2026-109619"],"summary":"If PHP answers HTTP requests anywhere you run it, patch or apply a vendor fix today; this is pre-application, unauthenticated, and attack traffic started before the patch shipped."},{"id":"nodejs-october-2026-security-releases","type":"brief","title":"Node.js October 2026 Security Releases: 10 CVEs Fixed","date":"2026-10-21","url":"https://erroneo.us/security/briefs/nodejs-october-2026-security-releases/","md":"https://erroneo.us/security/briefs/nodejs-october-2026-security-releases/index.md","severity":"high","kev":false,"epss":null,"verdict":"patch-this-week","cves":["CVE-2026-111497","CVE-2026-105482","CVE-2026-105483","CVE-2026-106069","CVE-2026-105481","CVE-2026-106072","CVE-2026-106074","CVE-2026-106070","CVE-2026-106071","CVE-2026-106073"],"summary":"Four high-severity fixes, including a Brotli decoder memory-corruption bug the project says permits remote code execution, make this a routine-but-real upgrade: roll every supported line forward this week."},{"id":"litellm-1-107-0-supply-chain-compromise","type":"brief","title":"LiteLLM 1.107.0: Malicious PyPI and Docker Release","date":"2026-10-21","url":"https://erroneo.us/security/briefs/litellm-1-107-0-supply-chain-compromise/","md":"https://erroneo.us/security/briefs/litellm-1-107-0-supply-chain-compromise/index.md","severity":"critical","kev":false,"epss":null,"verdict":"act-now","cves":[],"summary":"Check right now whether anything installed litellm 1.107.0 or pulled a LiteLLM image by a floating tag on October 21; if it did, assume every secret that host could read is stolen."},{"id":"CVE-2026-96639","type":"cve","title":"CVE-2026-96639: Pillow multi-frame loaders can reuse stale native image storage after mode transitions","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-96639/","md":"https://erroneo.us/security/cve/CVE-2026-96639/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":"patch-this-week","product":"python-pillow Pillow"},{"id":"CVE-2026-91403","type":"cve","title":"CVE-2026-91403: Oracle Corporation Oracle Java SE vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-91403/","md":"https://erroneo.us/security/cve/CVE-2026-91403/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Oracle Corporation Oracle Java SE"},{"id":"CVE-2026-114125","type":"cve","title":"CVE-2026-114125: Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-114125/","md":"https://erroneo.us/security/cve/CVE-2026-114125/index.md","severity":"high","cvss":8.6,"kev":false,"epss":null,"verdict":null,"product":"storybook (npm)"},{"id":"CVE-2026-112900","type":"cve","title":"CVE-2026-112900: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-112900/","md":"https://erroneo.us/security/cve/CVE-2026-112900/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00431,"verdict":"patch-this-week","product":"Pillow (PyPI)"},{"id":"CVE-2026-112393","type":"cve","title":"CVE-2026-112393: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-112393/","md":"https://erroneo.us/security/cve/CVE-2026-112393/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00528,"verdict":"patch-this-week","product":"Pillow (PyPI)"},{"id":"CVE-2026-111943","type":"cve","title":"CVE-2026-111943: Distrust compromised intermediate certificates in crypto/x509","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-111943/","md":"https://erroneo.us/security/cve/CVE-2026-111943/index.md","severity":null,"cvss":null,"kev":false,"epss":0.00145,"verdict":"patch-this-week","product":"Go standard library crypto/x509"},{"id":"CVE-2026-111497","type":"cve","title":"CVE-2026-111497: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-111497/","md":"https://erroneo.us/security/cve/CVE-2026-111497/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-109619","type":"cve","title":"CVE-2026-109619: RCE via stale global state","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-109619/","md":"https://erroneo.us/security/cve/CVE-2026-109619/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":"act-now","product":"PHP Group PHP"},{"id":"CVE-2026-109618","type":"cve","title":"CVE-2026-109618: RCE via OOM corruption","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-109618/","md":"https://erroneo.us/security/cve/CVE-2026-109618/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":"act-now","product":"PHP Group PHP"},{"id":"CVE-2026-106074","type":"cve","title":"CVE-2026-106074: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106074/","md":"https://erroneo.us/security/cve/CVE-2026-106074/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-106073","type":"cve","title":"CVE-2026-106073: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106073/","md":"https://erroneo.us/security/cve/CVE-2026-106073/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-106072","type":"cve","title":"CVE-2026-106072: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106072/","md":"https://erroneo.us/security/cve/CVE-2026-106072/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-106071","type":"cve","title":"CVE-2026-106071: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106071/","md":"https://erroneo.us/security/cve/CVE-2026-106071/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-106070","type":"cve","title":"CVE-2026-106070: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106070/","md":"https://erroneo.us/security/cve/CVE-2026-106070/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-106069","type":"cve","title":"CVE-2026-106069: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-106069/","md":"https://erroneo.us/security/cve/CVE-2026-106069/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-105483","type":"cve","title":"CVE-2026-105483: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-105483/","md":"https://erroneo.us/security/cve/CVE-2026-105483/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-105482","type":"cve","title":"CVE-2026-105482: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-105482/","md":"https://erroneo.us/security/cve/CVE-2026-105482/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"CVE-2026-105481","type":"cve","title":"CVE-2026-105481: Node.js vulnerability","date":"2026-10-21","url":"https://erroneo.us/security/cve/CVE-2026-105481/","md":"https://erroneo.us/security/cve/CVE-2026-105481/index.md","severity":null,"cvss":null,"kev":false,"epss":null,"verdict":"patch-this-week","product":"Node.js"},{"id":"2026-10-21","type":"digest","title":"Security digest for October 21, 2026","date":"2026-10-21","url":"https://erroneo.us/security/2026-10-21/","md":"https://erroneo.us/security/2026-10-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":0,"critical":3}},{"id":"plex2shell-plex-media-server-rce-chain","type":"brief","title":"Plex2Shell: Exploited RCE Chain in Plex Media Server","date":"2026-10-20","url":"https://erroneo.us/security/briefs/plex2shell-plex-media-server-rce-chain/","md":"https://erroneo.us/security/briefs/plex2shell-plex-media-server-rce-chain/index.md","severity":"critical","kev":true,"epss":0.00758,"verdict":"act-now","cves":["CVE-2026-96652","CVE-2026-96654","CVE-2026-96655","CVE-2026-96656"],"summary":"A public proof of concept chains four Plex bugs into code execution without credentials, and attackers have used it since October 17: update any internet-reachable server now, then check it for a miner or proxy."},{"id":"emudhra-emsign-intermediate-ca-key-compromise","type":"brief","title":"eMudhra CA Key Compromise: Update Non-Browser TLS Clients","date":"2026-10-20","url":"https://erroneo.us/security/briefs/emudhra-emsign-intermediate-ca-key-compromise/","md":"https://erroneo.us/security/briefs/emudhra-emsign-intermediate-ca-key-compromise/index.md","severity":"high","kev":false,"epss":0.00145,"verdict":"patch-this-week","cves":["CVE-2026-111943","CVE-2026-91403"],"summary":"Anyone can mint certificates from these broken CA keys, but only clients that skip Certificate Transparency and still trust the emSign root are exposed, and only to an on-path attacker: update those trust bundles this week, build machines first."},{"id":"GHSA-hq85-5cpj-mr62","type":"ghsa","title":"uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised","date":"2026-10-20","url":"https://erroneo.us/security/ghsa/GHSA-hq85-5cpj-mr62/","md":"https://erroneo.us/security/ghsa/GHSA-hq85-5cpj-mr62/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"uv"},{"id":"GHSA-6q48-6c7w-9gw2","type":"ghsa","title":"certifi bundles emSign root CAs with compromised intermediate CA keys","date":"2026-10-20","url":"https://erroneo.us/security/ghsa/GHSA-6q48-6c7w-9gw2/","md":"https://erroneo.us/security/ghsa/GHSA-6q48-6c7w-9gw2/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"certifi"},{"id":"CVE-2026-96656","type":"cve","title":"CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-96656/","md":"https://erroneo.us/security/cve/CVE-2026-96656/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.00758,"verdict":"act-now","product":"Plex Media Server"},{"id":"CVE-2026-96655","type":"cve","title":"CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-96655/","md":"https://erroneo.us/security/cve/CVE-2026-96655/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.00423,"verdict":"act-now","product":"Plex Media Server"},{"id":"CVE-2026-96654","type":"cve","title":"CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-96654/","md":"https://erroneo.us/security/cve/CVE-2026-96654/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.00432,"verdict":"act-now","product":"Plex Media Server"},{"id":"CVE-2026-96652","type":"cve","title":"CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-96652/","md":"https://erroneo.us/security/cve/CVE-2026-96652/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.00423,"verdict":"act-now","product":"Plex Media Server"},{"id":"CVE-2026-113709","type":"cve","title":"CVE-2026-113709: Argo CD: A Kustomize Helm config home can run commands in the repo-server","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-113709/","md":"https://erroneo.us/security/cve/CVE-2026-113709/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00424,"verdict":"patch-this-week","product":"argoproj argo-cd"},{"id":"CVE-2026-113708","type":"cve","title":"CVE-2026-113708: Argo CD: A Kustomize remote ref can run commands in the repo-server","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-113708/","md":"https://erroneo.us/security/cve/CVE-2026-113708/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00666,"verdict":"patch-this-week","product":"argoproj argo-cd"},{"id":"CVE-2026-113672","type":"cve","title":"CVE-2026-113672: Argo CD: A Jsonnet import can read files from the repo-server","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-113672/","md":"https://erroneo.us/security/cve/CVE-2026-113672/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00837,"verdict":"patch-this-week","product":"argoproj argo-cd"},{"id":"CVE-2026-112403","type":"cve","title":"CVE-2026-112403: Pillow: Heap buffer overflow in ImagingJpegDecode","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-112403/","md":"https://erroneo.us/security/cve/CVE-2026-112403/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00321,"verdict":"patch-this-week","product":"Pillow (PyPI)"},{"id":"CVE-2026-110936","type":"cve","title":"CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-110936/","md":"https://erroneo.us/security/cve/CVE-2026-110936/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.00262,"verdict":"check-exposure","product":"Siemens Software Center"},{"id":"CVE-2026-106931","type":"cve","title":"CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability","date":"2026-10-20","url":"https://erroneo.us/security/cve/CVE-2026-106931/","md":"https://erroneo.us/security/cve/CVE-2026-106931/index.md","severity":"high","cvss":8.5,"kev":true,"epss":0.01367,"verdict":"patch-this-week","product":"EG Secure Solutions SiteGuard Server Edition"},{"id":"2026-10-20","type":"digest","title":"Security digest for October 20, 2026","date":"2026-10-20","url":"https://erroneo.us/security/2026-10-20/","md":"https://erroneo.us/security/2026-10-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":6,"critical":3}},{"id":"CVE-2026-111058","type":"cve","title":"CVE-2026-111058: Mercury: Unauthenticated Remote Code Execution via /api/kernels","date":"2026-10-19","url":"https://erroneo.us/security/cve/CVE-2026-111058/","md":"https://erroneo.us/security/cve/CVE-2026-111058/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00437,"verdict":null,"product":"mercury (PyPI)"},{"id":"CVE-2026-111057","type":"cve","title":"CVE-2026-111057: Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass","date":"2026-10-19","url":"https://erroneo.us/security/cve/CVE-2026-111057/","md":"https://erroneo.us/security/cve/CVE-2026-111057/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00443,"verdict":null,"product":"mercury (PyPI)"},{"id":"2026-10-19","type":"digest","title":"Security digest for October 19, 2026","date":"2026-10-19","url":"https://erroneo.us/security/2026-10-19/","md":"https://erroneo.us/security/2026-10-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"pillow-13-0-0-security-release-image-parsing-rce","type":"brief","title":"Pillow 13.0.0: Critical Image-Parsing Memory Bugs Fixed","date":"2026-10-16","url":"https://erroneo.us/security/briefs/pillow-13-0-0-security-release-image-parsing-rce/","md":"https://erroneo.us/security/briefs/pillow-13-0-0-security-release-image-parsing-rce/index.md","severity":"critical","kev":false,"epss":0.00528,"verdict":"patch-this-week","cves":["CVE-2026-96639","CVE-2026-112403","CVE-2026-112393","CVE-2026-112900"],"summary":"If your service opens images that users or the internet supply, move to Pillow 13.0.0 this week; the worst bugs are memory corruption reachable from a crafted file, and reproducers are in the published advisories."},{"id":"connectwise-cloud-backup-skykick-m365-oauth-compromise","type":"brief","title":"ConnectWise Cloud Backup: App Credential Abused in M365","date":"2026-10-16","url":"https://erroneo.us/security/briefs/connectwise-cloud-backup-skykick-m365-oauth-compromise/","md":"https://erroneo.us/security/briefs/connectwise-cloud-backup-skykick-m365-oauth-compromise/index.md","severity":"critical","kev":false,"epss":null,"verdict":"act-now","cves":[],"summary":"If any tenant you run or manage ever consented to a ConnectWise or SkyKick app, disable those apps and audit the tenant today; attackers used the vendor's own credential to sign in as the app, so MFA did not stop them."},{"id":"CVE-2026-96620","type":"cve","title":"CVE-2026-96620: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","date":"2026-10-16","url":"https://erroneo.us/security/cve/CVE-2026-96620/","md":"https://erroneo.us/security/cve/CVE-2026-96620/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00578,"verdict":null,"product":"claude-agent-sdk (PyPI)"},{"id":"CVE-2026-105192","type":"cve","title":"CVE-2026-105192: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport","date":"2026-10-16","url":"https://erroneo.us/security/cve/CVE-2026-105192/","md":"https://erroneo.us/security/cve/CVE-2026-105192/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00482,"verdict":null,"product":"lmcache (PyPI)"},{"id":"CVE-2026-102764","type":"cve","title":"CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","date":"2026-10-16","url":"https://erroneo.us/security/cve/CVE-2026-102764/","md":"https://erroneo.us/security/cve/CVE-2026-102764/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.0118,"verdict":"act-now","product":"BeyondTrust Remote Support"},{"id":"CVE-2025-61624","type":"cve","title":"CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability","date":"2026-10-16","url":"https://erroneo.us/security/cve/CVE-2025-61624/","md":"https://erroneo.us/security/cve/CVE-2025-61624/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.01081,"verdict":"act-now","product":"Fortinet Multiple Products"},{"id":"2026-10-16","type":"digest","title":"Security digest for October 16, 2026","date":"2026-10-16","url":"https://erroneo.us/security/2026-10-16/","md":"https://erroneo.us/security/2026-10-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":2,"critical":2}},{"id":"siemens-software-center-dll-sideloading-cve-2026-110936","type":"brief","title":"Siemens Software Center DLL Flaw Abused in ClickFix Attacks","date":"2026-10-15","url":"https://erroneo.us/security/briefs/siemens-software-center-dll-sideloading-cve-2026-110936/","md":"https://erroneo.us/security/briefs/siemens-software-center-dll-sideloading-cve-2026-110936/index.md","severity":"high","kev":true,"epss":0.00262,"verdict":"check-exposure","cves":["CVE-2026-110936"],"summary":"Siemens users get the fix automatically, but the real threat is attackers shipping their own signed, older copy as a malware loader, so Windows defenders should block the indicators and hunt rather than rely on patching."},{"id":"beyondtrust-remote-support-cve-2026-102764-zero-day","type":"brief","title":"BeyondTrust Remote Support CVE-2026-102764 Zero-Day","date":"2026-10-15","url":"https://erroneo.us/security/briefs/beyondtrust-remote-support-cve-2026-102764-zero-day/","md":"https://erroneo.us/security/briefs/beyondtrust-remote-support-cve-2026-102764-zero-day/index.md","severity":"critical","kev":true,"epss":0.0118,"verdict":"act-now","cves":["CVE-2026-102764"],"summary":"If you run a self-hosted BeyondTrust Remote Support appliance, patch it today and assume it may already be compromised; an espionage group used this as a zero-day for about seven weeks."},{"id":"CVE-2026-94603","type":"cve","title":"CVE-2026-94603: Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-94603/","md":"https://erroneo.us/security/cve/CVE-2026-94603/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00918,"verdict":"check-exposure","product":"github.com/containers/podman (Go)"},{"id":"CVE-2026-77524","type":"cve","title":"CVE-2026-77524: KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-77524/","md":"https://erroneo.us/security/cve/CVE-2026-77524/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00635,"verdict":null,"product":"github.com/kedacore/keda (Go)"},{"id":"CVE-2026-77459","type":"cve","title":"CVE-2026-77459: Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-77459/","md":"https://erroneo.us/security/cve/CVE-2026-77459/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0072,"verdict":"patch-this-week","product":"github.com/argoproj/argo-cd/v2 (Go)"},{"id":"CVE-2026-21589","type":"cve","title":"CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-21589/","md":"https://erroneo.us/security/cve/CVE-2026-21589/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.12711,"verdict":"act-now","product":"Atlassian Multiple Products"},{"id":"CVE-2026-104252","type":"cve","title":"CVE-2026-104252: Vitess vttablet /twopcz reflected XSS","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-104252/","md":"https://erroneo.us/security/cve/CVE-2026-104252/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00885,"verdict":null,"product":"vitess.io/vitess (Go)"},{"id":"CVE-2026-102989","type":"cve","title":"CVE-2026-102989: TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-102989/","md":"https://erroneo.us/security/cve/CVE-2026-102989/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00516,"verdict":null,"product":"@tanstack/start-server-core (npm)"},{"id":"CVE-2026-102748","type":"cve","title":"CVE-2026-102748: Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","date":"2026-10-15","url":"https://erroneo.us/security/cve/CVE-2026-102748/","md":"https://erroneo.us/security/cve/CVE-2026-102748/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00486,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"2026-10-15","type":"digest","title":"Security digest for October 15, 2026","date":"2026-10-15","url":"https://erroneo.us/security/2026-10-15/","md":"https://erroneo.us/security/2026-10-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":1,"critical":6}},{"id":"siteguard-server-edition-cve-2026-106931-zero-day","type":"brief","title":"SiteGuard WAF CVE-2026-106931: Exploited Command Injection","date":"2026-10-14","url":"https://erroneo.us/security/briefs/siteguard-server-edition-cve-2026-106931-zero-day/","md":"https://erroneo.us/security/briefs/siteguard-server-edition-cve-2026-106931-zero-day/index.md","severity":"high","kev":true,"epss":0.01367,"verdict":"patch-this-week","cves":["CVE-2026-106931"],"summary":"If you run SiteGuard Server Edition, save its diagnostic data and patch this week, sooner on public web servers; the bug is exploited, but its local rating means attackers need a foothold first."},{"id":"pan-os-cve-2026-0322-management-interface-rce","type":"brief","title":"PAN-OS CVE-2026-0322: Exploited Management-Interface RCE","date":"2026-10-14","url":"https://erroneo.us/security/briefs/pan-os-cve-2026-0322-management-interface-rce/","md":"https://erroneo.us/security/briefs/pan-os-cve-2026-0322-management-interface-rce/index.md","severity":"high","kev":true,"epss":0.01215,"verdict":"patch-this-week","cves":["CVE-2026-0322"],"summary":"Patch every PAN-OS firewall and Panorama this week, and today if the management interface is reachable from the internet; the bug needs an admin login but is already being exploited."},{"id":"nextjs-use-cache-image-optimizer-rce","type":"brief","title":"Next.js: Two Critical Unauthenticated RCEs (Oct 14)","date":"2026-10-14","url":"https://erroneo.us/security/briefs/nextjs-use-cache-image-optimizer-rce/","md":"https://erroneo.us/security/briefs/nextjs-use-cache-image-optimizer-rce/index.md","severity":"critical","kev":false,"epss":0.00151,"verdict":"patch-this-week","cves":["CVE-2026-96889"],"summary":"Self-hosted Next.js apps should move to 16.4.1 or 15.5.28 this week; both RCEs have preconditions and no exploitation is reported, but the fix is a routine minor upgrade."},{"id":"CVE-2026-76519","type":"cve","title":"CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability","date":"2026-10-14","url":"https://erroneo.us/security/cve/CVE-2026-76519/","md":"https://erroneo.us/security/cve/CVE-2026-76519/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.01573,"verdict":"act-now","product":"Cisco Secure Email Gateway"},{"id":"CVE-2026-105134","type":"cve","title":"CVE-2026-105134: Ahsay AhsayCBS Command Injection Vulnerability","date":"2026-10-14","url":"https://erroneo.us/security/cve/CVE-2026-105134/","md":"https://erroneo.us/security/cve/CVE-2026-105134/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.04782,"verdict":"act-now","product":"Ahsay AhsayCBS"},{"id":"CVE-2026-105133","type":"cve","title":"CVE-2026-105133: Ahsay AhsayCBS Improper Authentication Vulnerability","date":"2026-10-14","url":"https://erroneo.us/security/cve/CVE-2026-105133/","md":"https://erroneo.us/security/cve/CVE-2026-105133/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.00854,"verdict":"act-now","product":"Ahsay AhsayCBS"},{"id":"CVE-2026-0322","type":"cve","title":"CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability","date":"2026-10-14","url":"https://erroneo.us/security/cve/CVE-2026-0322/","md":"https://erroneo.us/security/cve/CVE-2026-0322/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.01215,"verdict":"patch-this-week","product":"Palo Alto Networks PAN-OS"},{"id":"2026-10-14","type":"digest","title":"Security digest for October 14, 2026","date":"2026-10-14","url":"https://erroneo.us/security/2026-10-14/","md":"https://erroneo.us/security/2026-10-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":4,"critical":0}},{"id":"windows-shell-motw-bypass-cve-2026-96951","type":"brief","title":"Windows Shell CVE-2026-96951: Exploited MOTW Bypass","date":"2026-10-13","url":"https://erroneo.us/security/briefs/windows-shell-motw-bypass-cve-2026-96951/","md":"https://erroneo.us/security/briefs/windows-shell-motw-bypass-cve-2026-96951/index.md","severity":"high","kev":true,"epss":0.01512,"verdict":"patch-this-week","cves":["CVE-2026-96951"],"summary":"Roll the October 2026 Windows update out to every desktop this week; attackers are using this to make malicious attachments and downloads skip the warnings that would stop them."},{"id":"visual-studio-copilot-cve-2026-103572-rce","type":"brief","title":"Visual Studio Copilot CVE-2026-103572: Trailing-Dot RCE","date":"2026-10-13","url":"https://erroneo.us/security/briefs/visual-studio-copilot-cve-2026-103572-rce/","md":"https://erroneo.us/security/briefs/visual-studio-copilot-cve-2026-103572-rce/index.md","severity":"high","kev":false,"epss":0.00822,"verdict":"patch-this-week","cves":["CVE-2026-103572"],"summary":"If your developers use Copilot in Visual Studio or SSMS, update this week: exploitation needs only text the agent reads, and the researcher's write-up spells out the chain."},{"id":"slugfest-npm-trusted-publishing-slug-hijack","type":"brief","title":"SlugFest: npm Trusted Publishing Repo-Name Hijack","date":"2026-10-13","url":"https://erroneo.us/security/briefs/slugfest-npm-trusted-publishing-slug-hijack/","md":"https://erroneo.us/security/briefs/slugfest-npm-trusted-publishing-slug-hijack/index.md","severity":"high","kev":false,"epss":null,"verdict":"most-can-relax","cves":[],"summary":"The hole was closed on npm's side on October 2, 2026 and no abuse has been reported, so most teams have nothing to patch; maintainers should still spend five minutes auditing trusted publisher bindings and recent publishes."},{"id":"podman-checkpoint-image-sandbox-bypass-cve-2026-94603","type":"brief","title":"Podman CVE-2026-94603: Images Can Disable the Sandbox","date":"2026-10-13","url":"https://erroneo.us/security/briefs/podman-checkpoint-image-sandbox-bypass-cve-2026-94603/","md":"https://erroneo.us/security/briefs/podman-checkpoint-image-sandbox-bypass-cve-2026-94603/index.md","severity":"high","kev":false,"epss":0.00918,"verdict":"check-exposure","cves":["CVE-2026-94603"],"summary":"If you run third-party images with rootful Podman, upgrade to 5.8.8 or 6.1.3 now, because an image can switch off the sandbox you asked for; rootless Podman and trusted-image-only hosts can patch on a normal cycle."},{"id":"ivanti-connect-secure-cve-2026-104935-zero-day","type":"brief","title":"Ivanti Connect Secure CVE-2026-104935: Exploited Zero-Day","date":"2026-10-13","url":"https://erroneo.us/security/briefs/ivanti-connect-secure-cve-2026-104935-zero-day/","md":"https://erroneo.us/security/briefs/ivanti-connect-secure-cve-2026-104935-zero-day/index.md","severity":"critical","kev":true,"epss":0.25982,"verdict":"act-now","cves":["CVE-2026-104935"],"summary":"Upgrade Connect Secure today and investigate with memory and network forensics, because the Integrity Checker missed this compromise and part of the attack chain still has no fix."},{"id":"CVE-2026-96951","type":"cve","title":"CVE-2026-96951: Microsoft Windows Command Injection Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-96951/","md":"https://erroneo.us/security/cve/CVE-2026-96951/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.01512,"verdict":"patch-this-week","product":"Microsoft Windows"},{"id":"CVE-2026-88092","type":"cve","title":"CVE-2026-88092: Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-88092/","md":"https://erroneo.us/security/cve/CVE-2026-88092/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00786,"verdict":null,"product":"Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)"},{"id":"CVE-2026-86063","type":"cve","title":"CVE-2026-86063: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-86063/","md":"https://erroneo.us/security/cve/CVE-2026-86063/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00171,"verdict":"check-exposure","product":"anthropics claude-code"},{"id":"CVE-2026-70188","type":"cve","title":"CVE-2026-70188: Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-70188/","md":"https://erroneo.us/security/cve/CVE-2026-70188/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00827,"verdict":null,"product":"Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)"},{"id":"CVE-2026-105016","type":"cve","title":"CVE-2026-105016: Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-105016/","md":"https://erroneo.us/security/cve/CVE-2026-105016/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00986,"verdict":null,"product":"Microsoft.Native.Quic.MsQuic.Schannel (NuGet)"},{"id":"CVE-2026-104935","type":"cve","title":"CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-104935/","md":"https://erroneo.us/security/cve/CVE-2026-104935/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.25982,"verdict":"act-now","product":"Ivanti Connect Secure"},{"id":"CVE-2026-103849","type":"cve","title":"CVE-2026-103849: Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-103849/","md":"https://erroneo.us/security/cve/CVE-2026-103849/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00841,"verdict":"act-now","product":"Adobe Adobe Commerce"},{"id":"CVE-2026-103572","type":"cve","title":"CVE-2026-103572: Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability","date":"2026-10-13","url":"https://erroneo.us/security/cve/CVE-2026-103572/","md":"https://erroneo.us/security/cve/CVE-2026-103572/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00822,"verdict":"patch-this-week","product":"Microsoft Microsoft Visual Studio 2022 version 17.14"},{"id":"2026-10-13","type":"digest","title":"Security digest for October 13, 2026","date":"2026-10-13","url":"https://erroneo.us/security/2026-10-13/","md":"https://erroneo.us/security/2026-10-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":5,"kev":2,"critical":3}},{"id":"CVE-2026-68582","type":"cve","title":"CVE-2026-68582: Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)","date":"2026-10-09","url":"https://erroneo.us/security/cve/CVE-2026-68582/","md":"https://erroneo.us/security/cve/CVE-2026-68582/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00267,"verdict":null,"product":"code.vikunja.io/api (Go)"},{"id":"CVE-2026-55797","type":"cve","title":"CVE-2026-55797: Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","date":"2026-10-09","url":"https://erroneo.us/security/cve/CVE-2026-55797/","md":"https://erroneo.us/security/cve/CVE-2026-55797/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.01548,"verdict":"patch-this-week","product":"argoproj argo-cd"},{"id":"CVE-2026-108261","type":"cve","title":"CVE-2026-108261: TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment","date":"2026-10-09","url":"https://erroneo.us/security/cve/CVE-2026-108261/","md":"https://erroneo.us/security/cve/CVE-2026-108261/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0016,"verdict":null,"product":"tinacms (npm)"},{"id":"CVE-2026-107845","type":"cve","title":"CVE-2026-107845: Contao: Cross-site scripting in the comments bundle","date":"2026-10-09","url":"https://erroneo.us/security/cve/CVE-2026-107845/","md":"https://erroneo.us/security/cve/CVE-2026-107845/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00272,"verdict":null,"product":"contao/comments-bundle (Composer (PHP))"},{"id":"CVE-2026-107806","type":"cve","title":"CVE-2026-107806: Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite","date":"2026-10-09","url":"https://erroneo.us/security/cve/CVE-2026-107806/","md":"https://erroneo.us/security/cve/CVE-2026-107806/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00405,"verdict":null,"product":"github.com/0xJacky/Nginx-UI (Go)"},{"id":"2026-10-09","type":"digest","title":"Security digest for October 9, 2026","date":"2026-10-09","url":"https://erroneo.us/security/2026-10-09/","md":"https://erroneo.us/security/2026-10-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"proftpd-mod-copy-cve-2015-3306-kev","type":"brief","title":"ProFTPD mod_copy CVE-2015-3306: 2015 Bug Added to KEV","date":"2026-10-08","url":"https://erroneo.us/security/briefs/proftpd-mod-copy-cve-2015-3306-kev/","md":"https://erroneo.us/security/briefs/proftpd-mod-copy-cve-2015-3306-kev/index.md","severity":"critical","kev":true,"epss":0.99497,"verdict":"check-exposure","cves":["CVE-2015-3306"],"summary":"Nearly everyone fixed this a decade ago; the real job is finding any ProFTPD 1.3.5-era build with mod_copy still answering on port 21, usually inside old appliances, and replacing or removing it."},{"id":"go-october-2026-security-releases","type":"brief","title":"Go October 2026 Security Releases: 16 Stdlib Fixes","date":"2026-10-08","url":"https://erroneo.us/security/briefs/go-october-2026-security-releases/","md":"https://erroneo.us/security/briefs/go-october-2026-security-releases/index.md","severity":"high","kev":false,"epss":0.00574,"verdict":"patch-this-week","cves":["CVE-2026-97032","CVE-2026-78659","CVE-2026-78669","CVE-2026-78663","CVE-2026-78660","CVE-2026-56866","CVE-2026-94439","CVE-2026-78667","CVE-2026-94440","CVE-2026-97031","CVE-2026-94448","CVE-2026-97030","CVE-2026-94444","CVE-2026-94447","CVE-2026-56857","CVE-2026-111943"],"summary":"Rebuild and redeploy Go services with Go 1.27.3 or 1.26.10 this week, starting with internet-facing HTTP/2 servers and reverse proxies; none of these bugs is known to be exploited."},{"id":"CVE-2026-97032","type":"cve","title":"CVE-2026-97032: HTTP/2 server crash due to HPACK encoder race in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-97032/","md":"https://erroneo.us/security/cve/CVE-2026-97032/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.0042,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-97031","type":"cve","title":"CVE-2026-97031: Reject malformed ECH outer extension references in crypto/tls","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-97031/","md":"https://erroneo.us/security/cve/CVE-2026-97031/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00394,"verdict":"patch-this-week","product":"Go standard library crypto/tls"},{"id":"CVE-2026-97030","type":"cve","title":"CVE-2026-97030: Recognize yield as regexp preceder keyword in html/template","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-97030/","md":"https://erroneo.us/security/cve/CVE-2026-97030/index.md","severity":"medium","cvss":6.1,"kev":false,"epss":0.00202,"verdict":"patch-this-week","product":"Go standard library html/template"},{"id":"CVE-2026-94448","type":"cve","title":"CVE-2026-94448: Reset context tracking on consecutive template expressions in html/template","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-94448/","md":"https://erroneo.us/security/cve/CVE-2026-94448/index.md","severity":"medium","cvss":6.1,"kev":false,"epss":0.00202,"verdict":"patch-this-week","product":"Go standard library html/template"},{"id":"CVE-2026-94447","type":"cve","title":"CVE-2026-94447: Checksum database bypass for golang.org/toolchain in cmd/go","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-94447/","md":"https://erroneo.us/security/cve/CVE-2026-94447/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.00103,"verdict":"patch-this-week","product":"Go toolchain cmd/go"},{"id":"CVE-2026-94444","type":"cve","title":"CVE-2026-94444: Checksum bypass for golang.org/fips140 in cmd/go","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-94444/","md":"https://erroneo.us/security/cve/CVE-2026-94444/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.00094,"verdict":"patch-this-week","product":"Go toolchain cmd/go"},{"id":"CVE-2026-94440","type":"cve","title":"CVE-2026-94440: Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-94440/","md":"https://erroneo.us/security/cve/CVE-2026-94440/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00404,"verdict":"patch-this-week","product":"Go standard library net/textproto"},{"id":"CVE-2026-94439","type":"cve","title":"CVE-2026-94439: HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-94439/","md":"https://erroneo.us/security/cve/CVE-2026-94439/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00315,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-78669","type":"cve","title":"CVE-2026-78669: Excessive CPU consumption from repeated initial window changes in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-78669/","md":"https://erroneo.us/security/cve/CVE-2026-78669/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00568,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-78667","type":"cve","title":"CVE-2026-78667: Lack of limit on size of parsed Range headers in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-78667/","md":"https://erroneo.us/security/cve/CVE-2026-78667/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00379,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-78663","type":"cve","title":"CVE-2026-78663: Double flow control refund on HTTP/2 server streams in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-78663/","md":"https://erroneo.us/security/cve/CVE-2026-78663/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00574,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-78660","type":"cve","title":"CVE-2026-78660: HTTP/2 transport accepts malformed framing-related headers in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-78660/","md":"https://erroneo.us/security/cve/CVE-2026-78660/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00303,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-78659","type":"cve","title":"CVE-2026-78659: HTTP/2 server memory exhaustion due to Trailer headers in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-78659/","md":"https://erroneo.us/security/cve/CVE-2026-78659/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.0057,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-61447","type":"cve","title":"CVE-2026-61447: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-61447/","md":"https://erroneo.us/security/cve/CVE-2026-61447/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0249,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-61445","type":"cve","title":"CVE-2026-61445: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-61445/","md":"https://erroneo.us/security/cve/CVE-2026-61445/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00881,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-56866","type":"cve","title":"CVE-2026-56866: HTTP/1 client connection desynchronization after CONNECT rejection in net/http","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-56866/","md":"https://erroneo.us/security/cve/CVE-2026-56866/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00309,"verdict":"patch-this-week","product":"Go standard library net/http"},{"id":"CVE-2026-56857","type":"cve","title":"CVE-2026-56857: Root.Mkdir(All) can follow junctions out of the root on Windows in os","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-56857/","md":"https://erroneo.us/security/cve/CVE-2026-56857/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00493,"verdict":"patch-this-week","product":"Go standard library os"},{"id":"CVE-2026-107726","type":"cve","title":"CVE-2026-107726: Hazelcast allows arbitrary member memory access by low-privileged client","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-107726/","md":"https://erroneo.us/security/cve/CVE-2026-107726/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00383,"verdict":null,"product":"com.hazelcast:hazelcast (Maven)"},{"id":"CVE-2026-107722","type":"cve","title":"CVE-2026-107722: fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-107722/","md":"https://erroneo.us/security/cve/CVE-2026-107722/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00272,"verdict":null,"product":"fast-jwt (npm)"},{"id":"CVE-2026-107282","type":"cve","title":"CVE-2026-107282: AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-107282/","md":"https://erroneo.us/security/cve/CVE-2026-107282/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00189,"verdict":null,"product":"org.asynchttpclient:async-http-client (Maven)"},{"id":"CVE-2026-106446","type":"cve","title":"CVE-2026-106446: Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-106446/","md":"https://erroneo.us/security/cve/CVE-2026-106446/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0064,"verdict":null,"product":"handlebars (npm)"},{"id":"CVE-2026-106445","type":"cve","title":"CVE-2026-106445: Handlebars: JavaScript Injection via Own Property Check Bypass","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2026-106445/","md":"https://erroneo.us/security/cve/CVE-2026-106445/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00411,"verdict":null,"product":"handlebars (npm)"},{"id":"CVE-2023-22894","type":"cve","title":"CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2023-22894/","md":"https://erroneo.us/security/cve/CVE-2023-22894/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.03609,"verdict":"check-exposure","product":"Strapi Strapi"},{"id":"CVE-2021-3199","type":"cve","title":"CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2021-3199/","md":"https://erroneo.us/security/cve/CVE-2021-3199/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.20136,"verdict":"check-exposure","product":"ONLYOFFICE Docs"},{"id":"CVE-2016-3081","type":"cve","title":"CVE-2016-3081: Apache Struts Command Injection Vulnerability","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2016-3081/","md":"https://erroneo.us/security/cve/CVE-2016-3081/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.96052,"verdict":"check-exposure","product":"Apache Struts"},{"id":"CVE-2015-5477","type":"cve","title":"CVE-2015-5477:  ISC BIND Data Processing Errors Vulnerability","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2015-5477/","md":"https://erroneo.us/security/cve/CVE-2015-5477/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.99409,"verdict":"check-exposure","product":"ISC BIND"},{"id":"CVE-2015-3306","type":"cve","title":"CVE-2015-3306: ProFTPD Improper Access Control Vulnerability","date":"2026-10-08","url":"https://erroneo.us/security/cve/CVE-2015-3306/","md":"https://erroneo.us/security/cve/CVE-2015-3306/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99497,"verdict":"check-exposure","product":"ProFTPD ProFTPD"},{"id":"2026-10-08","type":"digest","title":"Security digest for October 8, 2026","date":"2026-10-08","url":"https://erroneo.us/security/2026-10-08/","md":"https://erroneo.us/security/2026-10-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":5,"critical":7}},{"id":"ghostaction-github-workflow-credential-theft","type":"brief","title":"GhostAction: Fake Security Workflows Steal GitHub Secrets","date":"2026-10-07","url":"https://erroneo.us/security/briefs/ghostaction-github-workflow-credential-theft/","md":"https://erroneo.us/security/briefs/ghostaction-github-workflow-credential-theft/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"If any repository you own or contribute to gained a security-audit.yml or github_actions_security.yml workflow you did not write, treat its Actions secrets, every credential ever committed to it, and the pushing account as compromised."},{"id":"argo-cd-october-2026-repo-server-rce-appproject-bypass","type":"brief","title":"Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026)","date":"2026-10-07","url":"https://erroneo.us/security/briefs/argo-cd-october-2026-repo-server-rce-appproject-bypass/","md":"https://erroneo.us/security/briefs/argo-cd-october-2026-repo-server-rce-appproject-bypass/index.md","severity":"critical","kev":false,"epss":0.01548,"verdict":"patch-this-week","cves":["CVE-2026-77459","CVE-2026-113708","CVE-2026-113709","CVE-2026-113672","CVE-2026-55797"],"summary":"Upgrade Argo CD to a patched 3.3, 3.4 or 3.5 release this week, and today on shared instances where people you do not fully trust can push to tracked repos or merely view an Application."},{"id":"CVE-2026-93605","type":"cve","title":"CVE-2026-93605: vm2 contains a sandbox escape vulnerability","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-93605/","md":"https://erroneo.us/security/cve/CVE-2026-93605/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00726,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-73487","type":"cve","title":"CVE-2026-73487: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-73487/","md":"https://erroneo.us/security/cve/CVE-2026-73487/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00961,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-73483","type":"cve","title":"CVE-2026-73483: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-73483/","md":"https://erroneo.us/security/cve/CVE-2026-73483/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00621,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-62253","type":"cve","title":"CVE-2026-62253: Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-62253/","md":"https://erroneo.us/security/cve/CVE-2026-62253/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00423,"verdict":null,"product":"github.com/sipcapture/homer-app (Go)"},{"id":"CVE-2026-62252","type":"cve","title":"CVE-2026-62252: Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-62252/","md":"https://erroneo.us/security/cve/CVE-2026-62252/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00653,"verdict":null,"product":"github.com/sipcapture/homer-app (Go)"},{"id":"CVE-2026-62176","type":"cve","title":"CVE-2026-62176: PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-62176/","md":"https://erroneo.us/security/cve/CVE-2026-62176/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0046,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-106501","type":"cve","title":"CVE-2026-106501: Backstage: Sensitive information exposure in Scaffolder","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-106501/","md":"https://erroneo.us/security/cve/CVE-2026-106501/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00483,"verdict":null,"product":"@backstage/plugin-scaffolder-backend (npm)"},{"id":"CVE-2026-106102","type":"cve","title":"CVE-2026-106102: Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-106102/","md":"https://erroneo.us/security/cve/CVE-2026-106102/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00299,"verdict":null,"product":"quasar (npm)"},{"id":"CVE-2026-105863","type":"cve","title":"CVE-2026-105863: Payload authentication token field handling issue","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-105863/","md":"https://erroneo.us/security/cve/CVE-2026-105863/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00376,"verdict":null,"product":"payload (npm)"},{"id":"CVE-2026-105859","type":"cve","title":"CVE-2026-105859: Payload: Unauthorized update to collection documents","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-105859/","md":"https://erroneo.us/security/cve/CVE-2026-105859/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00351,"verdict":null,"product":"payload (npm)"},{"id":"CVE-2026-105857","type":"cve","title":"CVE-2026-105857: Payload Form Builder has an RCE issue","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-105857/","md":"https://erroneo.us/security/cve/CVE-2026-105857/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00434,"verdict":null,"product":"@payloadcms/plugin-form-builder (npm)"},{"id":"CVE-2026-105697","type":"cve","title":"CVE-2026-105697: Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration","date":"2026-10-07","url":"https://erroneo.us/security/cve/CVE-2026-105697/","md":"https://erroneo.us/security/cve/CVE-2026-105697/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00471,"verdict":null,"product":"langflow (PyPI)"},{"id":"2026-10-07","type":"digest","title":"Security digest for October 7, 2026","date":"2026-10-07","url":"https://erroneo.us/security/2026-10-07/","md":"https://erroneo.us/security/2026-10-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":12}},{"id":"CVE-2026-105851","type":"cve","title":"CVE-2026-105851: Payload: Field access control bypass on auth collections","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-105851/","md":"https://erroneo.us/security/cve/CVE-2026-105851/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00249,"verdict":null,"product":"payload (npm)"},{"id":"CVE-2026-105845","type":"cve","title":"CVE-2026-105845: Payload: SQL Injection in SQLite and Postgres","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-105845/","md":"https://erroneo.us/security/cve/CVE-2026-105845/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00381,"verdict":null,"product":"payload (npm)"},{"id":"CVE-2026-105844","type":"cve","title":"CVE-2026-105844: Payload: Prototype pollution in Payload Import Export plugin","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-105844/","md":"https://erroneo.us/security/cve/CVE-2026-105844/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00519,"verdict":null,"product":"@payloadcms/plugin-import-export (npm)"},{"id":"CVE-2026-105794","type":"cve","title":"CVE-2026-105794: MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-105794/","md":"https://erroneo.us/security/cve/CVE-2026-105794/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01001,"verdict":null,"product":"Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet)"},{"id":"CVE-2026-10561","type":"cve","title":"CVE-2026-10561: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-10561/","md":"https://erroneo.us/security/cve/CVE-2026-10561/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0082,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-102422","type":"cve","title":"CVE-2026-102422: shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token","date":"2026-10-06","url":"https://erroneo.us/security/cve/CVE-2026-102422/","md":"https://erroneo.us/security/cve/CVE-2026-102422/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00383,"verdict":null,"product":"shell-quote (npm)"},{"id":"2026-10-06","type":"digest","title":"Security digest for October 6, 2026","date":"2026-10-06","url":"https://erroneo.us/security/2026-10-06/","md":"https://erroneo.us/security/2026-10-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"atlassian-data-center-file-read-cve-2026-21589","type":"brief","title":"Atlassian Data Center File Read CVE-2026-21589 Exploited","date":"2026-10-05","url":"https://erroneo.us/security/briefs/atlassian-data-center-file-read-cve-2026-21589/","md":"https://erroneo.us/security/briefs/atlassian-data-center-file-read-cve-2026-21589/index.md","severity":"critical","kev":true,"epss":0.12711,"verdict":"act-now","cves":["CVE-2026-21589"],"summary":"Every self-managed Atlassian Data Center product is affected, a public detection script exists and CISA confirms exploitation; patch to a fixed LTS or block traversal patterns at the edge today."},{"id":"CVE-2026-92956","type":"cve","title":"CVE-2026-92956: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92956/","md":"https://erroneo.us/security/cve/CVE-2026-92956/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00587,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92955","type":"cve","title":"CVE-2026-92955: vm2: Sandbox Escape (NodeVM)","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92955/","md":"https://erroneo.us/security/cve/CVE-2026-92955/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00712,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92954","type":"cve","title":"CVE-2026-92954: vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92954/","md":"https://erroneo.us/security/cve/CVE-2026-92954/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00488,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92953","type":"cve","title":"CVE-2026-92953: vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92953/","md":"https://erroneo.us/security/cve/CVE-2026-92953/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00501,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92947","type":"cve","title":"CVE-2026-92947: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92947/","md":"https://erroneo.us/security/cve/CVE-2026-92947/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00482,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92946","type":"cve","title":"CVE-2026-92946: vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92946/","md":"https://erroneo.us/security/cve/CVE-2026-92946/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00857,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92934","type":"cve","title":"CVE-2026-92934: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-92934/","md":"https://erroneo.us/security/cve/CVE-2026-92934/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00762,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-9205","type":"cve","title":"CVE-2026-9205: Langflow: Weak Fernet Key via random.seed()","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-9205/","md":"https://erroneo.us/security/cve/CVE-2026-9205/index.md","severity":"high","cvss":7.4,"kev":false,"epss":0.00302,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-90711","type":"cve","title":"CVE-2026-90711: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-90711/","md":"https://erroneo.us/security/cve/CVE-2026-90711/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00332,"verdict":null,"product":"proxy-addr (npm)"},{"id":"CVE-2026-8505","type":"cve","title":"CVE-2026-8505: Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-8505/","md":"https://erroneo.us/security/cve/CVE-2026-8505/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00719,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-104849","type":"cve","title":"CVE-2026-104849: Tinypool: Prototype Pollution Gadget to RCE in run() options","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-104849/","md":"https://erroneo.us/security/cve/CVE-2026-104849/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.0039,"verdict":null,"product":"tinypool (npm)"},{"id":"CVE-2026-104848","type":"cve","title":"CVE-2026-104848: Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-104848/","md":"https://erroneo.us/security/cve/CVE-2026-104848/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00497,"verdict":null,"product":"tinypool (npm)"},{"id":"CVE-2026-104846","type":"cve","title":"CVE-2026-104846: Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-104846/","md":"https://erroneo.us/security/cve/CVE-2026-104846/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00345,"verdict":null,"product":"seroval (npm)"},{"id":"CVE-2026-103922","type":"cve","title":"CVE-2026-103922: Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-103922/","md":"https://erroneo.us/security/cve/CVE-2026-103922/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00213,"verdict":null,"product":"@capacitor/android (npm)"},{"id":"CVE-2026-102829","type":"cve","title":"CVE-2026-102829: simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-102829/","md":"https://erroneo.us/security/cve/CVE-2026-102829/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00275,"verdict":null,"product":"@simple-git/argv-parser (npm)"},{"id":"CVE-2026-102828","type":"cve","title":"CVE-2026-102828: simple-git unsafe-operation guard does not block trailer command configuration","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-102828/","md":"https://erroneo.us/security/cve/CVE-2026-102828/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00375,"verdict":null,"product":"simple-git (npm)"},{"id":"CVE-2026-100721","type":"cve","title":"CVE-2026-100721: vm2: NodeVM custom resolution bypasses external path boundaries","date":"2026-10-05","url":"https://erroneo.us/security/cve/CVE-2026-100721/","md":"https://erroneo.us/security/cve/CVE-2026-100721/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.004,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"2026-10-05","type":"digest","title":"Security digest for October 5, 2026","date":"2026-10-05","url":"https://erroneo.us/security/2026-10-05/","md":"https://erroneo.us/security/2026-10-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":17}},{"id":"ahsaycbs-cve-2026-105133-105134-backup-server-rce","type":"brief","title":"AhsayCBS: Exploited Pre-Auth RCE Chain in Backup Server","date":"2026-10-04","url":"https://erroneo.us/security/briefs/ahsaycbs-cve-2026-105133-105134-backup-server-rce/","md":"https://erroneo.us/security/briefs/ahsaycbs-cve-2026-105133-105134-backup-server-rce/index.md","severity":"critical","kev":true,"epss":0.04782,"verdict":"act-now","cves":["CVE-2026-105133","CVE-2026-105134"],"summary":"If you or your MSP run an AhsayCBS backup server, install the October 12 hotfix today and hunt for webshells: the chain is unauthenticated, runs as SYSTEM, is being exploited by several actors, and the August patch did not fix it."},{"id":"CVE-2026-88779","type":"cve","title":"CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","date":"2026-10-04","url":"https://erroneo.us/security/cve/CVE-2026-88779/","md":"https://erroneo.us/security/cve/CVE-2026-88779/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.00592,"verdict":"act-now","product":"Citrix NetScaler"},{"id":"2026-10-04","type":"digest","title":"Security digest for October 4, 2026","date":"2026-10-04","url":"https://erroneo.us/security/2026-10-04/","md":"https://erroneo.us/security/2026-10-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"GHSA-v2f8-6655-7grj","type":"ghsa","title":"Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain","date":"2026-10-02","url":"https://erroneo.us/security/ghsa/GHSA-v2f8-6655-7grj/","md":"https://erroneo.us/security/ghsa/GHSA-v2f8-6655-7grj/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"vibe-trading-ai"},{"id":"GHSA-jqmf-mx4f-hfr6","type":"ghsa","title":"Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF","date":"2026-10-02","url":"https://erroneo.us/security/ghsa/GHSA-jqmf-mx4f-hfr6/","md":"https://erroneo.us/security/ghsa/GHSA-jqmf-mx4f-hfr6/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"vibe-trading-ai"},{"id":"GHSA-gg6r-gp4c-89hp","type":"ghsa","title":"Trigger.dev: V1 coordinator default-secret unauth Socket.IO","date":"2026-10-02","url":"https://erroneo.us/security/ghsa/GHSA-gg6r-gp4c-89hp/","md":"https://erroneo.us/security/ghsa/GHSA-gg6r-gp4c-89hp/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"trigger.dev"},{"id":"CVE-2026-73802","type":"cve","title":"CVE-2026-73802: gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled","date":"2026-10-02","url":"https://erroneo.us/security/cve/CVE-2026-73802/","md":"https://erroneo.us/security/cve/CVE-2026-73802/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00472,"verdict":null,"product":"gitea.com/gitea/runner (Go)"},{"id":"CVE-2026-102490","type":"cve","title":"CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability","date":"2026-10-02","url":"https://erroneo.us/security/cve/CVE-2026-102490/","md":"https://erroneo.us/security/cve/CVE-2026-102490/index.md","severity":"high","cvss":8.5,"kev":true,"epss":0.0055,"verdict":"act-now","product":"Zammad GmbH Zammad"},{"id":"CVE-2026-102489","type":"cve","title":"CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability","date":"2026-10-02","url":"https://erroneo.us/security/cve/CVE-2026-102489/","md":"https://erroneo.us/security/cve/CVE-2026-102489/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.01255,"verdict":"act-now","product":"Zammad GmbH Zammad"},{"id":"CVE-2026-10032","type":"cve","title":"CVE-2026-10032: @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions","date":"2026-10-02","url":"https://erroneo.us/security/cve/CVE-2026-10032/","md":"https://erroneo.us/security/cve/CVE-2026-10032/index.md","severity":"medium","cvss":6.1,"kev":false,"epss":0.00125,"verdict":null,"product":"@a2ui/web_core (npm)"},{"id":"2026-10-02","type":"digest","title":"Security digest for October 2, 2026","date":"2026-10-02","url":"https://erroneo.us/security/2026-10-02/","md":"https://erroneo.us/security/2026-10-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":5}},{"id":"fortimail-ibe-path-traversal-cve-2026-104286","type":"brief","title":"FortiMail CVE-2026-104286: Exploited Pre-Auth File Write","date":"2026-10-01","url":"https://erroneo.us/security/briefs/fortimail-ibe-path-traversal-cve-2026-104286/","md":"https://erroneo.us/security/briefs/fortimail-ibe-path-traversal-cve-2026-104286/index.md","severity":"critical","kev":true,"epss":0.02201,"verdict":"act-now","cves":["CVE-2026-104286"],"summary":"If you run a self-managed FortiMail, upgrade today and check Fortinet's indicators; this is an unauthenticated file-write zero-day on an internet-facing mail gateway."},{"id":"CVE-2026-92957","type":"cve","title":"CVE-2026-92957: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92957/","md":"https://erroneo.us/security/cve/CVE-2026-92957/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00537,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92951","type":"cve","title":"CVE-2026-92951: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92951/","md":"https://erroneo.us/security/cve/CVE-2026-92951/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00539,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92948","type":"cve","title":"CVE-2026-92948: vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92948/","md":"https://erroneo.us/security/cve/CVE-2026-92948/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00654,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92944","type":"cve","title":"CVE-2026-92944: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92944/","md":"https://erroneo.us/security/cve/CVE-2026-92944/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00841,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92941","type":"cve","title":"CVE-2026-92941: vm2 NodeVM can replace the host process TLS trust store","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92941/","md":"https://erroneo.us/security/cve/CVE-2026-92941/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00289,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92940","type":"cve","title":"CVE-2026-92940: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92940/","md":"https://erroneo.us/security/cve/CVE-2026-92940/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00474,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92939","type":"cve","title":"CVE-2026-92939: vm2 crypto builtin loads attacker native code through setEngine","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92939/","md":"https://erroneo.us/security/cve/CVE-2026-92939/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00616,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92938","type":"cve","title":"CVE-2026-92938: vm2 allows a sandboxed plugin to execute native code through `node:sqlite`","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92938/","md":"https://erroneo.us/security/cve/CVE-2026-92938/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00616,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92937","type":"cve","title":"CVE-2026-92937: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92937/","md":"https://erroneo.us/security/cve/CVE-2026-92937/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01033,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-92935","type":"cve","title":"CVE-2026-92935: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-92935/","md":"https://erroneo.us/security/cve/CVE-2026-92935/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00673,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-69085","type":"cve","title":"CVE-2026-69085: SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-69085/","md":"https://erroneo.us/security/cve/CVE-2026-69085/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01488,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-104286","type":"cve","title":"CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-104286/","md":"https://erroneo.us/security/cve/CVE-2026-104286/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.02201,"verdict":"act-now","product":"Fortinet FortiMail"},{"id":"CVE-2026-102992","type":"cve","title":"CVE-2026-102992: piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env","date":"2026-10-01","url":"https://erroneo.us/security/cve/CVE-2026-102992/","md":"https://erroneo.us/security/cve/CVE-2026-102992/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00434,"verdict":null,"product":"piscina (npm)"},{"id":"2026-10-01","type":"digest","title":"Security digest for October 1, 2026","date":"2026-10-01","url":"https://erroneo.us/security/2026-10-01/","md":"https://erroneo.us/security/2026-10-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":12}},{"id":"zammad-cve-2026-102489-102490-rce-root-chain","type":"brief","title":"Zammad CVE-2026-102489/102490: Exploited RCE-to-Root Chain","date":"2026-09-30","url":"https://erroneo.us/security/briefs/zammad-cve-2026-102489-102490-rce-root-chain/","md":"https://erroneo.us/security/briefs/zammad-cve-2026-102489-102490-rce-root-chain/index.md","severity":"critical","kev":true,"epss":0.01255,"verdict":"act-now","cves":["CVE-2026-102489","CVE-2026-102490"],"summary":"Self-hosted Zammad on 6.x is remotely exploitable and was used in a real breach: upgrade to 7.2.2 today (6.5.5 only as a stopgap), and patch DEB/RPM installs of any version to close the root escalation."},{"id":"cisco-sd-wan-manager-cve-2026-76504-api-auth-bypass","type":"brief","title":"Cisco SD-WAN Manager CVE-2026-76504: Exploited Auth Bypass","date":"2026-09-30","url":"https://erroneo.us/security/briefs/cisco-sd-wan-manager-cve-2026-76504-api-auth-bypass/","md":"https://erroneo.us/security/briefs/cisco-sd-wan-manager-cve-2026-76504-api-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.01819,"verdict":"act-now","cves":["CVE-2026-76504"],"summary":"If you run SD-WAN Manager on-prem, upgrade now and check the logs Cisco names; one crafted HTTP request gives an unauthenticated attacker admin over the controller for your whole WAN."},{"id":"GHSA-vcvr-r3jv-pc5j","type":"ghsa","title":"Next.js: Remote Code Execution in next/og ImageResponse","date":"2026-09-30","url":"https://erroneo.us/security/ghsa/GHSA-vcvr-r3jv-pc5j/","md":"https://erroneo.us/security/ghsa/GHSA-vcvr-r3jv-pc5j/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":null,"verdict":null,"product":"next"},{"id":"CVE-2026-94545","type":"cve","title":"CVE-2026-94545: Satori-generated SVG has improper escaping","date":"2026-09-30","url":"https://erroneo.us/security/cve/CVE-2026-94545/","md":"https://erroneo.us/security/cve/CVE-2026-94545/index.md","severity":"medium","cvss":5.3,"kev":false,"epss":0.01038,"verdict":"patch-this-week","product":"vercel satori"},{"id":"CVE-2026-76504","type":"cve","title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","date":"2026-09-30","url":"https://erroneo.us/security/cve/CVE-2026-76504/","md":"https://erroneo.us/security/cve/CVE-2026-76504/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.01819,"verdict":"act-now","product":"Cisco Catalyst SD-WAN Manager"},{"id":"2026-09-30","type":"digest","title":"Security digest for September 30, 2026","date":"2026-09-30","url":"https://erroneo.us/security/2026-09-30/","md":"https://erroneo.us/security/2026-09-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":1,"critical":1}},{"id":"CVE-2026-86950","type":"cve","title":"CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","date":"2026-09-29","url":"https://erroneo.us/security/cve/CVE-2026-86950/","md":"https://erroneo.us/security/cve/CVE-2026-86950/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.01242,"verdict":"patch-this-week","product":"Apple Multiple Products"},{"id":"CVE-2026-102268","type":"cve","title":"CVE-2026-102268: PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard","date":"2026-09-29","url":"https://erroneo.us/security/cve/CVE-2026-102268/","md":"https://erroneo.us/security/cve/CVE-2026-102268/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00202,"verdict":null,"product":"PyJWT (PyPI)"},{"id":"CVE-2026-101894","type":"cve","title":"CVE-2026-101894: @xhmikosr/decompress: Path traversal via symlink chain","date":"2026-09-29","url":"https://erroneo.us/security/cve/CVE-2026-101894/","md":"https://erroneo.us/security/cve/CVE-2026-101894/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00814,"verdict":null,"product":"@xhmikosr/decompress (npm)"},{"id":"2026-09-29","type":"digest","title":"Security digest for September 29, 2026","date":"2026-09-29","url":"https://erroneo.us/security/2026-09-29/","md":"https://erroneo.us/security/2026-09-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"apple-coregraphics-cve-2026-86950-exploited-zero-day","type":"brief","title":"Apple CoreGraphics CVE-2026-86950: Exploited Zero-Day","date":"2026-09-28","url":"https://erroneo.us/security/briefs/apple-coregraphics-cve-2026-86950-exploited-zero-day/","md":"https://erroneo.us/security/briefs/apple-coregraphics-cve-2026-86950-exploited-zero-day/index.md","severity":"high","kev":true,"epss":0.01242,"verdict":"patch-this-week","cves":["CVE-2026-86950"],"summary":"A targeted file-parsing zero-day with a fix out since September 28: confirm every iPhone, iPad and Mac is on 26.7.1, 15.8.1 or a 27.x release this week, and today for high-risk users."},{"id":"2026-09-28","type":"digest","title":"Security digest for September 28, 2026","date":"2026-09-28","url":"https://erroneo.us/security/2026-09-28/","md":"https://erroneo.us/security/2026-09-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"citrix-netscaler-cve-2026-88771-88772-zero-days","type":"brief","title":"NetScaler CVE-2026-88771/88772: Exploited Pre-Auth RCE","date":"2026-09-27","url":"https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-88771-88772-zero-days/","md":"https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-88771-88772-zero-days/index.md","severity":"critical","kev":true,"epss":0.01301,"verdict":"act-now","cves":["CVE-2026-88771","CVE-2026-88772","CVE-2026-88779"],"summary":"Every customer-managed NetScaler ADC or Gateway needs the latest build today, and any appliance that was unpatched in September should be investigated as compromised, because patching does not evict attackers."},{"id":"CVE-2026-88772","type":"cve","title":"CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","date":"2026-09-27","url":"https://erroneo.us/security/cve/CVE-2026-88772/","md":"https://erroneo.us/security/cve/CVE-2026-88772/index.md","severity":"critical","cvss":9.5,"kev":true,"epss":0.01301,"verdict":"act-now","product":"Citrix NetScaler"},{"id":"CVE-2026-88771","type":"cve","title":"CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability","date":"2026-09-27","url":"https://erroneo.us/security/cve/CVE-2026-88771/","md":"https://erroneo.us/security/cve/CVE-2026-88771/index.md","severity":"critical","cvss":9.5,"kev":true,"epss":0.01083,"verdict":"act-now","product":"Citrix NetScaler"},{"id":"CVE-2026-100723","type":"cve","title":"CVE-2026-100723: vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool","date":"2026-09-27","url":"https://erroneo.us/security/cve/CVE-2026-100723/","md":"https://erroneo.us/security/cve/CVE-2026-100723/index.md","severity":"medium","cvss":6.9,"kev":false,"epss":0.00316,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-100722","type":"cve","title":"CVE-2026-100722: vm2 before 3.12.2 Host Process Termination via Construct Trap","date":"2026-09-27","url":"https://erroneo.us/security/cve/CVE-2026-100722/","md":"https://erroneo.us/security/cve/CVE-2026-100722/index.md","severity":"high","cvss":8.9,"kev":false,"epss":0.0026,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"2026-09-27","type":"digest","title":"Security digest for September 27, 2026","date":"2026-09-27","url":"https://erroneo.us/security/2026-09-27/","md":"https://erroneo.us/security/2026-09-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":0}},{"id":"CVE-2026-92161","type":"cve","title":"CVE-2026-92161: FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider","date":"2026-09-25","url":"https://erroneo.us/security/cve/CVE-2026-92161/","md":"https://erroneo.us/security/cve/CVE-2026-92161/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00272,"verdict":null,"product":"fof/oauth (Composer (PHP))"},{"id":"CVE-2026-87902","type":"cve","title":"CVE-2026-87902: WordPress Core Remote File Inclusion Vulnerability","date":"2026-09-25","url":"https://erroneo.us/security/cve/CVE-2026-87902/","md":"https://erroneo.us/security/cve/CVE-2026-87902/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.39979,"verdict":"act-now","product":"WordPress Core"},{"id":"CVE-2026-67279","type":"cve","title":"CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","date":"2026-09-25","url":"https://erroneo.us/security/cve/CVE-2026-67279/","md":"https://erroneo.us/security/cve/CVE-2026-67279/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.01027,"verdict":"act-now","product":"MikroTik RouterOS"},{"id":"CVE-2026-65660","type":"cve","title":"CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability","date":"2026-09-25","url":"https://erroneo.us/security/cve/CVE-2026-65660/","md":"https://erroneo.us/security/cve/CVE-2026-65660/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.02101,"verdict":"act-now","product":"Microsoft SharePoint"},{"id":"2026-09-25","type":"digest","title":"Security digest for September 25, 2026","date":"2026-09-25","url":"https://erroneo.us/security/2026-09-25/","md":"https://erroneo.us/security/2026-09-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"actions-cool-mini-shai-hulud-reactivation","type":"brief","title":"actions-cool Actions Re-Enabled With Mini Shai-Hulud Payload","date":"2026-09-24","url":"https://erroneo.us/security/briefs/actions-cool-mini-shai-hulud-reactivation/","md":"https://erroneo.us/security/briefs/actions-cool-mini-shai-hulud-reactivation/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"If any workflow referenced either actions-cool action by tag and ran between September 16 and 25, 2026, assume its secrets and repository were compromised; everyone else can confirm with one grep."},{"id":"CVE-2026-71362","type":"cve","title":"CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability ","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-71362/","md":"https://erroneo.us/security/cve/CVE-2026-71362/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.87507,"verdict":"act-now","product":"Adobe Commerce and Magento"},{"id":"CVE-2026-61742","type":"cve","title":"CVE-2026-61742: DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-61742/","md":"https://erroneo.us/security/cve/CVE-2026-61742/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00201,"verdict":null,"product":"@bytebase/dbhub (npm)"},{"id":"CVE-2026-61741","type":"cve","title":"CVE-2026-61741: http4s-scala-xml has an XML External Entity (XXE) processing issue","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-61741/","md":"https://erroneo.us/security/cve/CVE-2026-61741/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00294,"verdict":null,"product":"org.http4s:http4s-scala-xml_2.12 (Maven)"},{"id":"CVE-2026-61732","type":"cve","title":"CVE-2026-61732: Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-61732/","md":"https://erroneo.us/security/cve/CVE-2026-61732/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01221,"verdict":null,"product":"decepticon-core (PyPI)"},{"id":"CVE-2026-61604","type":"cve","title":"CVE-2026-61604: ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-61604/","md":"https://erroneo.us/security/cve/CVE-2026-61604/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00266,"verdict":null,"product":"github.com/ixofoundation/ixo-blockchain/v8 (Go)"},{"id":"CVE-2026-59167","type":"cve","title":"CVE-2026-59167: SunEditor: Critical XSS vulnerability - sanitizer bypass","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-59167/","md":"https://erroneo.us/security/cve/CVE-2026-59167/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00393,"verdict":null,"product":"suneditor (npm)"},{"id":"CVE-2026-5430","type":"cve","title":"CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability ","date":"2026-09-24","url":"https://erroneo.us/security/cve/CVE-2026-5430/","md":"https://erroneo.us/security/cve/CVE-2026-5430/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.00588,"verdict":"act-now","product":"WSO2 Multiple Products"},{"id":"2026-09-24","type":"digest","title":"Security digest for September 24, 2026","date":"2026-09-24","url":"https://erroneo.us/security/2026-09-24/","md":"https://erroneo.us/security/2026-09-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":5}},{"id":"CVE-2026-96889","type":"cve","title":"CVE-2026-96889: Librsvg: use-after-free when xml includes have duplicated entities","date":"2026-09-23","url":"https://erroneo.us/security/cve/CVE-2026-96889/","md":"https://erroneo.us/security/cve/CVE-2026-96889/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.00151,"verdict":"patch-this-week","product":"Red Hat Red Hat Enterprise Linux 10"},{"id":"CVE-2026-85724","type":"cve","title":"CVE-2026-85724: Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable","date":"2026-09-23","url":"https://erroneo.us/security/cve/CVE-2026-85724/","md":"https://erroneo.us/security/cve/CVE-2026-85724/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0027,"verdict":null,"product":"io.moquette:moquette-broker (Maven)"},{"id":"CVE-2026-77602","type":"cve","title":"CVE-2026-77602: OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)","date":"2026-09-23","url":"https://erroneo.us/security/cve/CVE-2026-77602/","md":"https://erroneo.us/security/cve/CVE-2026-77602/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00574,"verdict":null,"product":"openc3 (RubyGems)"},{"id":"CVE-2026-57149","type":"cve","title":"CVE-2026-57149: plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection","date":"2026-09-23","url":"https://erroneo.us/security/cve/CVE-2026-57149/","md":"https://erroneo.us/security/cve/CVE-2026-57149/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00638,"verdict":null,"product":"plone.app.portlets (PyPI)"},{"id":"2026-09-23","type":"digest","title":"Security digest for September 23, 2026","date":"2026-09-23","url":"https://erroneo.us/security/2026-09-23/","md":"https://erroneo.us/security/2026-09-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"wordpress-core-page-template-lfi-cve-2026-87902","type":"brief","title":"WordPress Core: Page-Template File Inclusion to RCE","date":"2026-09-22","url":"https://erroneo.us/security/briefs/wordpress-core-page-template-lfi-cve-2026-87902/","md":"https://erroneo.us/security/briefs/wordpress-core-page-template-lfi-cve-2026-87902/index.md","severity":"critical","kev":true,"epss":0.39979,"verdict":"act-now","cves":["CVE-2026-87902"],"summary":"Every WordPress branch back to 4.7 was affected, no login is needed, public scanning tooling exists and attackers are already writing files through pearcmd.php, so confirm you are on a fixed release today."},{"id":"linux-af-unix-gc-container-escape-cve-2026-80521","type":"brief","title":"Linux AF_UNIX CVE-2026-80521: Public Container Escape","date":"2026-09-22","url":"https://erroneo.us/security/briefs/linux-af-unix-gc-container-escape-cve-2026-80521/","md":"https://erroneo.us/security/briefs/linux-af-unix-gc-container-escape-cve-2026-80521/index.md","severity":"high","kev":false,"epss":0.0017,"verdict":"patch-this-week","cves":["CVE-2026-80521"],"summary":"If you run untrusted or third-party code in containers on a 6.10+ kernel, install fixed kernels as they ship and move that code behind stronger isolation now; a public exploit turns an unprivileged container process into a host compromise."},{"id":"graphalgo-go-modules-terraform-provider-typosquats","type":"brief","title":"Graphalgo Malware in Go Modules and Terraform Providers","date":"2026-09-22","url":"https://erroneo.us/security/briefs/graphalgo-go-modules-terraform-provider-typosquats/","md":"https://erroneo.us/security/briefs/graphalgo-go-modules-terraform-provider-typosquats/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Grep your go.mod, go.sum and Terraform files for four names; if none match you are done, and if one does, treat the machine as compromised."},{"id":"CVE-2026-94127","type":"cve","title":"CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-94127/","md":"https://erroneo.us/security/cve/CVE-2026-94127/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.02226,"verdict":"patch-this-week","product":"F5 BIG-IP APM"},{"id":"CVE-2026-93952","type":"cve","title":"CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-93952/","md":"https://erroneo.us/security/cve/CVE-2026-93952/index.md","severity":"critical","cvss":9.5,"kev":true,"epss":0.01062,"verdict":"act-now","product":"Arista VeloCloud Orchestrator"},{"id":"CVE-2026-93616","type":"cve","title":"CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-93616/","md":"https://erroneo.us/security/cve/CVE-2026-93616/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.75872,"verdict":"act-now","product":"Check Point Multiple Products"},{"id":"CVE-2026-91130","type":"cve","title":"CVE-2026-91130: Home Assistant: XSS in Statistics Graph Card","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-91130/","md":"https://erroneo.us/security/cve/CVE-2026-91130/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00386,"verdict":null,"product":"homeassistant (PyPI)"},{"id":"CVE-2026-85734","type":"cve","title":"CVE-2026-85734: lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-85734/","md":"https://erroneo.us/security/cve/CVE-2026-85734/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00355,"verdict":null,"product":"lightrag-hku (PyPI)"},{"id":"CVE-2026-85102","type":"cve","title":"CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-85102/","md":"https://erroneo.us/security/cve/CVE-2026-85102/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.504,"verdict":"act-now","product":"Check Point Multiple Products"},{"id":"CVE-2026-77244","type":"cve","title":"CVE-2026-77244: [mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-77244/","md":"https://erroneo.us/security/cve/CVE-2026-77244/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00286,"verdict":null,"product":"mcp-atlassian (PyPI)"},{"id":"CVE-2026-63132","type":"cve","title":"CVE-2026-63132: OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack","date":"2026-09-22","url":"https://erroneo.us/security/cve/CVE-2026-63132/","md":"https://erroneo.us/security/cve/CVE-2026-63132/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00497,"verdict":null,"product":"github.com/openbao/openbao (Go)"},{"id":"2026-09-22","type":"digest","title":"Security digest for September 22, 2026","date":"2026-09-22","url":"https://erroneo.us/security/2026-09-22/","md":"https://erroneo.us/security/2026-09-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":4,"critical":4}},{"id":"CVE-2026-7273","type":"cve","title":"CVE-2026-7273: Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability","date":"2026-09-21","url":"https://erroneo.us/security/cve/CVE-2026-7273/","md":"https://erroneo.us/security/cve/CVE-2026-7273/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.02501,"verdict":"check-exposure","product":"Zyxel GS1900 Series Switches"},{"id":"2026-09-21","type":"digest","title":"Security digest for September 21, 2026","date":"2026-09-21","url":"https://erroneo.us/security/2026-09-21/","md":"https://erroneo.us/security/2026-09-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"linux-kernel-five-exploited-lpe-bugs-kev","type":"brief","title":"Linux Kernel: Five Exploited Root Bugs Added to CISA KEV","date":"2026-09-18","url":"https://erroneo.us/security/briefs/linux-kernel-five-exploited-lpe-bugs-kev/","md":"https://erroneo.us/security/briefs/linux-kernel-five-exploited-lpe-bugs-kev/index.md","severity":"high","kev":true,"epss":0.08859,"verdict":"patch-this-week","cves":["CVE-2025-39682","CVE-2025-39964","CVE-2026-53266","CVE-2026-53362","CVE-2022-0995"],"summary":"Five local root bugs, all with fixes and most with public exploits, are now confirmed exploited; get every Linux host onto a current kernel and reboot this week, container hosts, CI runners and shared servers first."},{"id":"CVE-2026-84383","type":"cve","title":"CVE-2026-84383: libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2026-84383/","md":"https://erroneo.us/security/cve/CVE-2026-84383/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00608,"verdict":"patch-this-week","product":"strukturag libheif"},{"id":"CVE-2026-63374","type":"cve","title":"CVE-2026-63374: AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2026-63374/","md":"https://erroneo.us/security/cve/CVE-2026-63374/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00289,"verdict":null,"product":"anyio (PyPI)"},{"id":"CVE-2026-61682","type":"cve","title":"CVE-2026-61682: kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2026-61682/","md":"https://erroneo.us/security/cve/CVE-2026-61682/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00384,"verdict":null,"product":"github.com/kcp-dev/kcp (Go)"},{"id":"CVE-2026-59163","type":"cve","title":"CVE-2026-59163: Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2026-59163/","md":"https://erroneo.us/security/cve/CVE-2026-59163/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00325,"verdict":null,"product":"mnemosyne-memory (PyPI)"},{"id":"CVE-2026-53266","type":"cve","title":"CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2026-53266/","md":"https://erroneo.us/security/cve/CVE-2026-53266/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.00827,"verdict":"patch-this-week","product":"Linux Kernel"},{"id":"CVE-2025-66455","type":"cve","title":"CVE-2025-66455: LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2025-66455/","md":"https://erroneo.us/security/cve/CVE-2025-66455/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00693,"verdict":null,"product":"lmdeploy (PyPI)"},{"id":"CVE-2025-53837","type":"cve","title":"CVE-2025-53837: org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2025-53837/","md":"https://erroneo.us/security/cve/CVE-2025-53837/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00642,"verdict":null,"product":"org.xwiki.rendering:xwiki-rendering-xml (Maven)"},{"id":"CVE-2025-39964","type":"cve","title":"CVE-2025-39964: Linux Kernel Race Condition Vulnerability","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2025-39964/","md":"https://erroneo.us/security/cve/CVE-2025-39964/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01362,"verdict":"patch-this-week","product":"Linux Kernel"},{"id":"CVE-2025-39682","type":"cve","title":"CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","date":"2026-09-18","url":"https://erroneo.us/security/cve/CVE-2025-39682/","md":"https://erroneo.us/security/cve/CVE-2025-39682/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.0288,"verdict":"patch-this-week","product":"Linux Kernel"},{"id":"2026-09-18","type":"digest","title":"Security digest for September 18, 2026","date":"2026-09-18","url":"https://erroneo.us/security/2026-09-18/","md":"https://erroneo.us/security/2026-09-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":5}},{"id":"plugin4shell-ai-agent-plugin-sha-pin-bypass","type":"brief","title":"Plugin4Shell: Plugin Pin Bypass in AI Coding Agents","date":"2026-09-17","url":"https://erroneo.us/security/briefs/plugin4shell-ai-agent-plugin-sha-pin-bypass/","md":"https://erroneo.us/security/briefs/plugin4shell-ai-agent-plugin-sha-pin-bypass/index.md","severity":"high","kev":false,"epss":0.00171,"verdict":"check-exposure","cves":["CVE-2026-86063"],"summary":"Claude Code and Codex users on current versions are fixed; the real exposure is Copilot or Gemini CLI plugins that auto-update from repositories hosted outside GitHub."},{"id":"CVE-2026-92959","type":"cve","title":"CVE-2026-92959: vm2 before 3.11.8 allowAsync Bypass via Promise Thenable","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92959/","md":"https://erroneo.us/security/cve/CVE-2026-92959/index.md","severity":"high","cvss":7.1,"kev":false,"epss":0.00449,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92958","type":"cve","title":"CVE-2026-92958: vm2 before 3.11.7 Denylist Bypass via fs/promises","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92958/","md":"https://erroneo.us/security/cve/CVE-2026-92958/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.00384,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92952","type":"cve","title":"CVE-2026-92952: vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92952/","md":"https://erroneo.us/security/cve/CVE-2026-92952/index.md","severity":"high","cvss":8.9,"kev":false,"epss":0.00461,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92950","type":"cve","title":"CVE-2026-92950: vm2 before 3.11.7 Sandbox Escape via CLI require","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92950/","md":"https://erroneo.us/security/cve/CVE-2026-92950/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00197,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92949","type":"cve","title":"CVE-2026-92949: vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92949/","md":"https://erroneo.us/security/cve/CVE-2026-92949/index.md","severity":"medium","cvss":6.3,"kev":false,"epss":0.00319,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92945","type":"cve","title":"CVE-2026-92945: vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matching","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92945/","md":"https://erroneo.us/security/cve/CVE-2026-92945/index.md","severity":"low","cvss":2.3,"kev":false,"epss":0.00277,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92942","type":"cve","title":"CVE-2026-92942: vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92942/","md":"https://erroneo.us/security/cve/CVE-2026-92942/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00488,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92936","type":"cve","title":"CVE-2026-92936: vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92936/","md":"https://erroneo.us/security/cve/CVE-2026-92936/index.md","severity":"medium","cvss":6.9,"kev":false,"epss":0.00455,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-92933","type":"cve","title":"CVE-2026-92933: vm2 before 3.11.8 Information Disclosure via util.getCallSites","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-92933/","md":"https://erroneo.us/security/cve/CVE-2026-92933/index.md","severity":"medium","cvss":6.9,"kev":false,"epss":0.00372,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2026-79752","type":"cve","title":"CVE-2026-79752: CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-79752/","md":"https://erroneo.us/security/cve/CVE-2026-79752/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00621,"verdict":null,"product":"cakephp/database (Composer (PHP))"},{"id":"CVE-2026-77411","type":"cve","title":"CVE-2026-77411: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-77411/","md":"https://erroneo.us/security/cve/CVE-2026-77411/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00524,"verdict":null,"product":"github.com/rabbitmq/amqp091-go (Go)"},{"id":"CVE-2026-77408","type":"cve","title":"CVE-2026-77408: RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-77408/","md":"https://erroneo.us/security/cve/CVE-2026-77408/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00524,"verdict":null,"product":"github.com/rabbitmq/amqp091-go (Go)"},{"id":"CVE-2026-77405","type":"cve","title":"CVE-2026-77405: RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-77405/","md":"https://erroneo.us/security/cve/CVE-2026-77405/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00282,"verdict":null,"product":"github.com/rabbitmq/amqp091-go (Go)"},{"id":"CVE-2026-75828","type":"cve","title":"CVE-2026-75828: Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-75828/","md":"https://erroneo.us/security/cve/CVE-2026-75828/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00389,"verdict":null,"product":"getgrav/grav (Composer (PHP))"},{"id":"CVE-2026-75827","type":"cve","title":"CVE-2026-75827: Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-75827/","md":"https://erroneo.us/security/cve/CVE-2026-75827/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00859,"verdict":null,"product":"getgrav/grav (Composer (PHP))"},{"id":"CVE-2026-75513","type":"cve","title":"CVE-2026-75513: Marten's LINQ provider has SQL injection via unescaped string literals","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-75513/","md":"https://erroneo.us/security/cve/CVE-2026-75513/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00468,"verdict":null,"product":"Marten (NuGet)"},{"id":"CVE-2026-63472","type":"cve","title":"CVE-2026-63472: Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-63472/","md":"https://erroneo.us/security/cve/CVE-2026-63472/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00589,"verdict":null,"product":"@vendure/core (npm)"},{"id":"CVE-2026-45140","type":"cve","title":"CVE-2026-45140: Chamilo LMS CStudio upload flow allows unauthenticated remote code execution","date":"2026-09-17","url":"https://erroneo.us/security/cve/CVE-2026-45140/","md":"https://erroneo.us/security/cve/CVE-2026-45140/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01326,"verdict":null,"product":"chamilo/chamilo-lms (Composer (PHP))"},{"id":"2026-09-17","type":"digest","title":"Security digest for September 17, 2026","date":"2026-09-17","url":"https://erroneo.us/security/2026-09-17/","md":"https://erroneo.us/security/2026-09-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":9}},{"id":"cisco-ise-cve-2026-76460-api-auth-bypass","type":"brief","title":"Cisco ISE CVE-2026-76460: Exploited CVSS 10 Auth Bypass","date":"2026-09-16","url":"https://erroneo.us/security/briefs/cisco-ise-cve-2026-76460-api-auth-bypass/","md":"https://erroneo.us/security/briefs/cisco-ise-cve-2026-76460-api-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.14026,"verdict":"act-now","cves":["CVE-2026-76460"],"summary":"If you run Cisco ISE or ISE-PIC on any release before the fixed patches, patch now and hunt every node; the bug needs no login, is exploited, and Cisco warns attackers may get root and erase their tracks."},{"id":"CVE-2026-87886","type":"cve","title":"CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2026-87886/","md":"https://erroneo.us/security/cve/CVE-2026-87886/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00233,"verdict":"check-exposure","product":"Acronis Backup"},{"id":"CVE-2026-76460","type":"cve","title":"CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2026-76460/","md":"https://erroneo.us/security/cve/CVE-2026-76460/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.14026,"verdict":"act-now","product":"Cisco Identity Services Engine"},{"id":"CVE-2026-61594","type":"cve","title":"CVE-2026-61594: djust has an authorization bypass on the WebSocket/SSE mount path","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2026-61594/","md":"https://erroneo.us/security/cve/CVE-2026-61594/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00485,"verdict":null,"product":"djust (PyPI)"},{"id":"CVE-2026-61560","type":"cve","title":"CVE-2026-61560: @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2026-61560/","md":"https://erroneo.us/security/cve/CVE-2026-61560/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02901,"verdict":null,"product":"@zereight/mcp-gitlab (npm)"},{"id":"CVE-2026-58704","type":"cve","title":"CVE-2026-58704: Google Pixel Improper Authorization Vulnerability","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2026-58704/","md":"https://erroneo.us/security/cve/CVE-2026-58704/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.00591,"verdict":"patch-this-week","product":"Google Pixel"},{"id":"CVE-2025-59953","type":"cve","title":"CVE-2025-59953: LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy","date":"2026-09-16","url":"https://erroneo.us/security/cve/CVE-2025-59953/","md":"https://erroneo.us/security/cve/CVE-2025-59953/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00802,"verdict":null,"product":"lmdeploy (PyPI)"},{"id":"2026-09-16","type":"digest","title":"Security digest for September 16, 2026","date":"2026-09-16","url":"https://erroneo.us/security/2026-09-16/","md":"https://erroneo.us/security/2026-09-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":3}},{"id":"google-pixel-modem-cve-2026-58704-zero-day","type":"brief","title":"Google Pixel Modem CVE-2026-58704: Exploited Zero-Day","date":"2026-09-15","url":"https://erroneo.us/security/briefs/google-pixel-modem-cve-2026-58704-zero-day/","md":"https://erroneo.us/security/briefs/google-pixel-modem-cve-2026-58704-zero-day/index.md","severity":"high","kev":true,"epss":0.00591,"verdict":"patch-this-week","cves":["CVE-2026-58704"],"summary":"A targeted, no-interaction modem bug on Pixel phones with a fix already out: make 2026-09-05 the minimum patch level for every managed Pixel this week, and sooner for high-risk users."},{"id":"acronis-backup-cpanel-plesk-lpe-cve-2026-87886","type":"brief","title":"Acronis Backup cPanel Plugin CVE-2026-87886: Exploited LPE","date":"2026-09-15","url":"https://erroneo.us/security/briefs/acronis-backup-cpanel-plesk-lpe-cve-2026-87886/","md":"https://erroneo.us/security/briefs/acronis-backup-cpanel-plesk-lpe-cve-2026-87886/index.md","severity":"high","kev":true,"epss":0.00233,"verdict":"check-exposure","cves":["CVE-2026-87886"],"summary":"Only hosting servers running the Acronis Backup plugin for cPanel & WHM, Plesk or DirectAdmin are affected; on those, especially multi-tenant cPanel boxes, update the plugin now because it is being exploited."},{"id":"CVE-2026-69204","type":"cve","title":"CVE-2026-69204: Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)","date":"2026-09-15","url":"https://erroneo.us/security/cve/CVE-2026-69204/","md":"https://erroneo.us/security/cve/CVE-2026-69204/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00574,"verdict":null,"product":"org.http4s:http4s-ember-core_2.12 (Maven)"},{"id":"CVE-2026-61568","type":"cve","title":"CVE-2026-61568: @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport","date":"2026-09-15","url":"https://erroneo.us/security/cve/CVE-2026-61568/","md":"https://erroneo.us/security/cve/CVE-2026-61568/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00532,"verdict":null,"product":"@zereight/mcp-gitlab (npm)"},{"id":"CVE-2026-61559","type":"cve","title":"CVE-2026-61559: @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery","date":"2026-09-15","url":"https://erroneo.us/security/cve/CVE-2026-61559/","md":"https://erroneo.us/security/cve/CVE-2026-61559/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00426,"verdict":null,"product":"@zereight/mcp-gitlab (npm)"},{"id":"2026-09-15","type":"digest","title":"Security digest for September 15, 2026","date":"2026-09-15","url":"https://erroneo.us/security/2026-09-15/","md":"https://erroneo.us/security/2026-09-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":3}},{"id":"cisco-secure-email-gateway-cve-2026-76461-76519-root-rce","type":"brief","title":"Cisco Secure Email Gateway: Two Exploited Root RCE Bugs","date":"2026-09-14","url":"https://erroneo.us/security/briefs/cisco-secure-email-gateway-cve-2026-76461-76519-root-rce/","md":"https://erroneo.us/security/briefs/cisco-secure-email-gateway-cve-2026-76461-76519-root-rce/index.md","severity":"critical","kev":true,"epss":0.29543,"verdict":"act-now","cves":["CVE-2026-76461","CVE-2026-76519","CVE-2026-76440"],"summary":"Every on-premises Secure Email Gateway below 15.5.5-014 or 16.5.0-780 can be rooted by an email and both bugs are exploited: upgrade now, and check for compromise before and after, because attackers can wipe local evidence."},{"id":"CVE-2026-76461","type":"cve","title":"CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability","date":"2026-09-14","url":"https://erroneo.us/security/cve/CVE-2026-76461/","md":"https://erroneo.us/security/cve/CVE-2026-76461/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.29543,"verdict":"act-now","product":"Cisco Secure Email Gateway"},{"id":"CVE-2026-76440","type":"cve","title":"CVE-2026-76440: Cisco Secure Email Gateway Security Hardening Release","date":"2026-09-14","url":"https://erroneo.us/security/cve/CVE-2026-76440/","md":"https://erroneo.us/security/cve/CVE-2026-76440/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00623,"verdict":"act-now","product":"Cisco Cisco Secure Email"},{"id":"CVE-2026-59178","type":"cve","title":"CVE-2026-59178: ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade","date":"2026-09-14","url":"https://erroneo.us/security/cve/CVE-2026-59178/","md":"https://erroneo.us/security/cve/CVE-2026-59178/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00779,"verdict":null,"product":"esphome-device-builder (PyPI)"},{"id":"2026-09-14","type":"digest","title":"Security digest for September 14, 2026","date":"2026-09-14","url":"https://erroneo.us/security/2026-09-14/","md":"https://erroneo.us/security/2026-09-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2026-85706","type":"cve","title":"CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-85706/","md":"https://erroneo.us/security/cve/CVE-2026-85706/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.91951,"verdict":"act-now","product":"GitLab Community Edition and Enterprise Edition"},{"id":"CVE-2026-84869","type":"cve","title":"CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-84869/","md":"https://erroneo.us/security/cve/CVE-2026-84869/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.00924,"verdict":"act-now","product":"ConnectWise ScreenConnect"},{"id":"CVE-2026-61534","type":"cve","title":"CVE-2026-61534: yayson: Prototype pollution in Store/LegacyStore deserialization","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-61534/","md":"https://erroneo.us/security/cve/CVE-2026-61534/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0084,"verdict":null,"product":"yayson (npm)"},{"id":"CVE-2026-59971","type":"cve","title":"CVE-2026-59971: MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-59971/","md":"https://erroneo.us/security/cve/CVE-2026-59971/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00418,"verdict":null,"product":"mysql-mcp-server (PyPI)"},{"id":"CVE-2026-59151","type":"cve","title":"CVE-2026-59151: Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-59151/","md":"https://erroneo.us/security/cve/CVE-2026-59151/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00534,"verdict":null,"product":"prowler-cloud (PyPI)"},{"id":"CVE-2026-42018","type":"cve","title":"CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-42018/","md":"https://erroneo.us/security/cve/CVE-2026-42018/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.09805,"verdict":"act-now","product":"JFrog Artifactory"},{"id":"CVE-2026-42016","type":"cve","title":"CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-42016/","md":"https://erroneo.us/security/cve/CVE-2026-42016/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.08643,"verdict":"act-now","product":"JFrog Artifactory"},{"id":"CVE-2026-11746","type":"cve","title":"CVE-2026-11746: Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover","date":"2026-09-11","url":"https://erroneo.us/security/cve/CVE-2026-11746/","md":"https://erroneo.us/security/cve/CVE-2026-11746/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00229,"verdict":null,"product":"com.linecorp.centraldogma:centraldogma-server (Maven)"},{"id":"2026-09-11","type":"digest","title":"Security digest for September 11, 2026","date":"2026-09-11","url":"https://erroneo.us/security/2026-09-11/","md":"https://erroneo.us/security/2026-09-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":4}},{"id":"gitlab-commits-api-file-read-cve-2026-85706","type":"brief","title":"GitLab CVE-2026-85706: Unauthenticated File Read, Exploited","date":"2026-09-10","url":"https://erroneo.us/security/briefs/gitlab-commits-api-file-read-cve-2026-85706/","md":"https://erroneo.us/security/briefs/gitlab-commits-api-file-read-cve-2026-85706/index.md","severity":"critical","kev":true,"epss":0.91951,"verdict":"act-now","cves":["CVE-2026-85706"],"summary":"Any unpatched self-managed GitLab 18.7 or later can have its configuration and secret keys read by anyone on the network, and CISA says it is being exploited; upgrade today and rotate secrets if you were exposed."},{"id":"CVE-2026-88062","type":"cve","title":"CVE-2026-88062: OmniRoute ACP Custom-Agent Remote Code Execution (RCE)","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-88062/","md":"https://erroneo.us/security/cve/CVE-2026-88062/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.01424,"verdict":null,"product":"omniroute (npm)"},{"id":"CVE-2026-88044","type":"cve","title":"CVE-2026-88044: rclone: RC per-server auth-proxy bypass","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-88044/","md":"https://erroneo.us/security/cve/CVE-2026-88044/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00492,"verdict":null,"product":"github.com/rclone/rclone (Go)"},{"id":"CVE-2026-88018","type":"cve","title":"CVE-2026-88018: rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-88018/","md":"https://erroneo.us/security/cve/CVE-2026-88018/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0051,"verdict":null,"product":"github.com/rclone/rclone (Go)"},{"id":"CVE-2026-88007","type":"cve","title":"CVE-2026-88007: Traefik HTTP/3 Backend NTLM Connection Reuse","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-88007/","md":"https://erroneo.us/security/cve/CVE-2026-88007/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.006,"verdict":null,"product":"github.com/traefik/traefik/v3 (Go)"},{"id":"CVE-2026-86060","type":"cve","title":"CVE-2026-86060: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-86060/","md":"https://erroneo.us/security/cve/CVE-2026-86060/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.06392,"verdict":"act-now","product":"MikroTik RouterOS"},{"id":"CVE-2026-67277","type":"cve","title":"CVE-2026-67277: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","date":"2026-09-10","url":"https://erroneo.us/security/cve/CVE-2026-67277/","md":"https://erroneo.us/security/cve/CVE-2026-67277/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.0156,"verdict":"act-now","product":"MikroTik RouterOS"},{"id":"2026-09-10","type":"digest","title":"Security digest for September 10, 2026","date":"2026-09-10","url":"https://erroneo.us/security/2026-09-10/","md":"https://erroneo.us/security/2026-09-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":4}},{"id":"check-point-vpn-and-management-cve-2026-85102-93616","type":"brief","title":"Check Point: Exploited VPN Gateway and Management RCEs","date":"2026-09-09","url":"https://erroneo.us/security/briefs/check-point-vpn-and-management-cve-2026-85102-93616/","md":"https://erroneo.us/security/briefs/check-point-vpn-and-management-cve-2026-85102-93616/index.md","severity":"critical","kev":true,"epss":0.75872,"verdict":"act-now","cves":["CVE-2026-85102","CVE-2026-93616"],"summary":"Check Point shops should patch both gateways and management servers now: each flaw is unauthenticated RCE, both are exploited, and fixing one tier does not fix the other."},{"id":"CVE-2026-87491","type":"cve","title":"CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability","date":"2026-09-09","url":"https://erroneo.us/security/cve/CVE-2026-87491/","md":"https://erroneo.us/security/cve/CVE-2026-87491/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.03142,"verdict":"check-exposure","product":"Google Chromium V8"},{"id":"CVE-2026-84939","type":"cve","title":"CVE-2026-84939: Apache FreeMarker template loading mechanism vulnerable to path traversal","date":"2026-09-09","url":"https://erroneo.us/security/cve/CVE-2026-84939/","md":"https://erroneo.us/security/cve/CVE-2026-84939/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00854,"verdict":null,"product":"org.freemarker:freemarker (Maven)"},{"id":"CVE-2026-20079","type":"cve","title":"CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-09-09","url":"https://erroneo.us/security/cve/CVE-2026-20079/","md":"https://erroneo.us/security/cve/CVE-2026-20079/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.88472,"verdict":"act-now","product":"Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management"},{"id":"CVE-2026-19490","type":"cve","title":"CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-09-09","url":"https://erroneo.us/security/cve/CVE-2026-19490/","md":"https://erroneo.us/security/cve/CVE-2026-19490/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.23158,"verdict":"act-now","product":"Citrix NetScaler"},{"id":"CVE-2025-25249","type":"cve","title":"CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","date":"2026-09-09","url":"https://erroneo.us/security/cve/CVE-2025-25249/","md":"https://erroneo.us/security/cve/CVE-2025-25249/index.md","severity":"high","cvss":7.4,"kev":true,"epss":0.03802,"verdict":"act-now","product":"Fortinet Multiple Products"},{"id":"2026-09-09","type":"digest","title":"Security digest for September 9, 2026","date":"2026-09-09","url":"https://erroneo.us/security/2026-09-09/","md":"https://erroneo.us/security/2026-09-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":4,"critical":1}},{"id":"windows-update-stack-alpc-zero-days-cve-2026-81963-85880","type":"brief","title":"Windows Zero-Days: Update Stack and ALPC EoP (Sep 2026)","date":"2026-09-08","url":"https://erroneo.us/security/briefs/windows-update-stack-alpc-zero-days-cve-2026-81963-85880/","md":"https://erroneo.us/security/briefs/windows-update-stack-alpc-zero-days-cve-2026-81963-85880/index.md","severity":"high","kev":true,"epss":0.03616,"verdict":"patch-this-week","cves":["CVE-2026-81963","CVE-2026-85880"],"summary":"Make sure every Windows machine has the September 2026 or a later cumulative update; both bugs are exploited, but an attacker needs code running on the box first."},{"id":"GHSA-2xp9-vwfh-vxw4","type":"ghsa","title":"Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used","date":"2026-09-08","url":"https://erroneo.us/security/ghsa/GHSA-2xp9-vwfh-vxw4/","md":"https://erroneo.us/security/ghsa/GHSA-2xp9-vwfh-vxw4/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":null,"verdict":null,"product":"next, next"},{"id":"GHSA-26w7-cxv4-gfx2","type":"ghsa","title":"Astro: Remote code execution through AVIF image optimization","date":"2026-09-08","url":"https://erroneo.us/security/ghsa/GHSA-26w7-cxv4-gfx2/","md":"https://erroneo.us/security/ghsa/GHSA-26w7-cxv4-gfx2/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"astro"},{"id":"CVE-2026-86218","type":"cve","title":"CVE-2026-86218: N-able N-central Static Code Injection Vulnerability","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-86218/","md":"https://erroneo.us/security/cve/CVE-2026-86218/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.13349,"verdict":"act-now","product":"N-able N-central"},{"id":"CVE-2026-85880","type":"cve","title":"CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-85880/","md":"https://erroneo.us/security/cve/CVE-2026-85880/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.03616,"verdict":"patch-this-week","product":"Microsoft Windows"},{"id":"CVE-2026-85061","type":"cve","title":"CVE-2026-85061: MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-85061/","md":"https://erroneo.us/security/cve/CVE-2026-85061/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00522,"verdict":null,"product":"maplibre-gl (npm)"},{"id":"CVE-2026-84372","type":"cve","title":"CVE-2026-84372: Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-84372/","md":"https://erroneo.us/security/cve/CVE-2026-84372/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00726,"verdict":null,"product":"predis/predis (Composer (PHP))"},{"id":"CVE-2026-82533","type":"cve","title":"CVE-2026-82533: DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-82533/","md":"https://erroneo.us/security/cve/CVE-2026-82533/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01238,"verdict":null,"product":"@deepseek-ai/dsh-client-connection (npm)"},{"id":"CVE-2026-81963","type":"cve","title":"CVE-2026-81963: Microsoft Windows Link Following Vulnerability","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-81963/","md":"https://erroneo.us/security/cve/CVE-2026-81963/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00393,"verdict":"patch-this-week","product":"Microsoft Windows"},{"id":"CVE-2026-79657","type":"cve","title":"CVE-2026-79657: NLTK: Allowlisted pickle loaders still permit code execution in current source","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-79657/","md":"https://erroneo.us/security/cve/CVE-2026-79657/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01267,"verdict":null,"product":"nltk (PyPI)"},{"id":"CVE-2026-78683","type":"cve","title":"CVE-2026-78683: NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-78683/","md":"https://erroneo.us/security/cve/CVE-2026-78683/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0051,"verdict":null,"product":"nltk (PyPI)"},{"id":"CVE-2026-78676","type":"cve","title":"CVE-2026-78676: GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-78676/","md":"https://erroneo.us/security/cve/CVE-2026-78676/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00775,"verdict":null,"product":"GitPython (PyPI)"},{"id":"CVE-2026-77635","type":"cve","title":"CVE-2026-77635: CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-77635/","md":"https://erroneo.us/security/cve/CVE-2026-77635/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00493,"verdict":null,"product":"cakephp/cakephp (Composer (PHP))"},{"id":"CVE-2026-75650","type":"cve","title":"CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-75650/","md":"https://erroneo.us/security/cve/CVE-2026-75650/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.03949,"verdict":"act-now","product":"Adobe Commerce and Magento"},{"id":"CVE-2026-75604","type":"cve","title":"CVE-2026-75604: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-75604/","md":"https://erroneo.us/security/cve/CVE-2026-75604/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.02105,"verdict":"patch-this-week","product":"next (npm)"},{"id":"CVE-2026-75595","type":"cve","title":"CVE-2026-75595: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-75595/","md":"https://erroneo.us/security/cve/CVE-2026-75595/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00277,"verdict":null,"product":"io.netty:netty-handler (Maven)"},{"id":"CVE-2026-73294","type":"cve","title":"CVE-2026-73294: Semaphore U: OS Command Injection","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-73294/","md":"https://erroneo.us/security/cve/CVE-2026-73294/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0065,"verdict":null,"product":"github.com/semaphoreui/semaphore (Go)"},{"id":"CVE-2026-62815","type":"cve","title":"CVE-2026-62815: Microsoft QUIC: Remote Code Execution Vulnerability","date":"2026-09-08","url":"https://erroneo.us/security/cve/CVE-2026-62815/","md":"https://erroneo.us/security/cve/CVE-2026-62815/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.00974,"verdict":null,"product":"Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet)"},{"id":"2026-09-08","type":"digest","title":"Security digest for September 8, 2026","date":"2026-09-08","url":"https://erroneo.us/security/2026-09-08/","md":"https://erroneo.us/security/2026-09-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":4,"critical":14}},{"id":"magento-stylesmuggler-cve-2026-75650-zero-day-rce","type":"brief","title":"Magento StyleSmuggler CVE-2026-75650: Exploited Pre-Auth RCE","date":"2026-09-07","url":"https://erroneo.us/security/briefs/magento-stylesmuggler-cve-2026-75650-zero-day-rce/","md":"https://erroneo.us/security/briefs/magento-stylesmuggler-cve-2026-75650-zero-day-rce/index.md","severity":"critical","kev":true,"epss":0.03949,"verdict":"act-now","cves":["CVE-2026-75650","CVE-2026-103849"],"summary":"Any self-run Magento or Adobe Commerce store without the September hotfix should be presumed compromised: patch, then scan, then rotate the encryption key and every credential it protects, and add the October fix for the follow-on BlockStrap bug."},{"id":"CVE-2026-76969","type":"cve","title":"CVE-2026-76969: @sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)","date":"2026-09-07","url":"https://erroneo.us/security/cve/CVE-2026-76969/","md":"https://erroneo.us/security/cve/CVE-2026-76969/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00443,"verdict":null,"product":"@sap/cds-mtxs (npm)"},{"id":"2026-09-07","type":"digest","title":"Security digest for September 7, 2026","date":"2026-09-07","url":"https://erroneo.us/security/2026-09-07/","md":"https://erroneo.us/security/2026-09-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2026-85046","type":"cve","title":"CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability","date":"2026-09-04","url":"https://erroneo.us/security/cve/CVE-2026-85046/","md":"https://erroneo.us/security/cve/CVE-2026-85046/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.48881,"verdict":"check-exposure","product":"Google Chromium V8"},{"id":"CVE-2026-75856","type":"cve","title":"CVE-2026-75856: CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning","date":"2026-09-04","url":"https://erroneo.us/security/cve/CVE-2026-75856/","md":"https://erroneo.us/security/cve/CVE-2026-75856/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00495,"verdict":null,"product":"deepseek-tui (crates.io (Rust))"},{"id":"CVE-2026-73842","type":"cve","title":"CVE-2026-73842: OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation","date":"2026-09-04","url":"https://erroneo.us/security/cve/CVE-2026-73842/","md":"https://erroneo.us/security/cve/CVE-2026-73842/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00269,"verdict":null,"product":"github.com/openchoreo/openchoreo (Go)"},{"id":"2026-09-04","type":"digest","title":"Security digest for September 4, 2026","date":"2026-09-04","url":"https://erroneo.us/security/2026-09-04/","md":"https://erroneo.us/security/2026-09-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"mikrotik-routeros-mikrotrick-ssh-cve-2026-86060","type":"brief","title":"MikroTrick: Exploited MikroTik RouterOS SSH Takeover Chain","date":"2026-09-03","url":"https://erroneo.us/security/briefs/mikrotik-routeros-mikrotrick-ssh-cve-2026-86060/","md":"https://erroneo.us/security/briefs/mikrotik-routeros-mikrotrick-ssh-cve-2026-86060/index.md","severity":"critical","kev":true,"epss":0.06392,"verdict":"act-now","cves":["CVE-2026-86060","CVE-2026-67279","CVE-2026-67277"],"summary":"If you run MikroTik routers, upgrade them now and check for an 'ops' admin account; an unauthenticated SSH chain to full admin was exploited a day before patches shipped."},{"id":"connectwise-screenconnect-cve-2026-84869-guest-file-execution","type":"brief","title":"ScreenConnect CVE-2026-84869: Guest-to-Host File Execution","date":"2026-09-03","url":"https://erroneo.us/security/briefs/connectwise-screenconnect-cve-2026-84869-guest-file-execution/","md":"https://erroneo.us/security/briefs/connectwise-screenconnect-cve-2026-84869-guest-file-execution/index.md","severity":"critical","kev":true,"epss":0.00924,"verdict":"act-now","cves":["CVE-2026-84869"],"summary":"If your technicians use a ScreenConnect client older than 26.6.5, a compromised machine they connect to can run code on theirs; upgrade on-premises servers and reinstall host clients now."},{"id":"chrome-v8-cve-2026-85046-87491-exploited-zero-days","type":"brief","title":"Chrome V8 Zero-Days CVE-2026-85046 and CVE-2026-87491","date":"2026-09-03","url":"https://erroneo.us/security/briefs/chrome-v8-cve-2026-85046-87491-exploited-zero-days/","md":"https://erroneo.us/security/briefs/chrome-v8-cve-2026-85046-87491-exploited-zero-days/index.md","severity":"high","kev":true,"epss":0.48881,"verdict":"check-exposure","cves":["CVE-2026-85046","CVE-2026-87491"],"summary":"Both were exploited zero-days, but Chrome and Edge fixed them in early September and auto-update has had six weeks to deliver the fix; the job now is finding browsers that did not update, not a scramble."},{"id":"CVE-2026-85394","type":"cve","title":"CVE-2026-85394: python-jose algorithm confusion guard bypassed by DER-encoded public keys","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-85394/","md":"https://erroneo.us/security/cve/CVE-2026-85394/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00222,"verdict":null,"product":"python-jose (PyPI)"},{"id":"CVE-2026-72811","type":"cve","title":"CVE-2026-72811: SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-72811/","md":"https://erroneo.us/security/cve/CVE-2026-72811/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00436,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-72717","type":"cve","title":"CVE-2026-72717: Orval: Import-time RCE via schema default -> zod module-level template literal","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-72717/","md":"https://erroneo.us/security/cve/CVE-2026-72717/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71963","type":"cve","title":"CVE-2026-71963: Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71963/","md":"https://erroneo.us/security/cve/CVE-2026-71963/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.00858,"verdict":"patch-this-week","product":"NousResearch hermes-agent"},{"id":"CVE-2026-71871","type":"cve","title":"CVE-2026-71871: Orval: Import-time RCE via header-parameter default -> zod module-level template literal","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71871/","md":"https://erroneo.us/security/cve/CVE-2026-71871/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71869","type":"cve","title":"CVE-2026-71869: Orval: Import-time RCE via array-items default -> zod module-level template literal","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71869/","md":"https://erroneo.us/security/cve/CVE-2026-71869/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71868","type":"cve","title":"CVE-2026-71868: Orval: Import-time RCE via enum-typed default -> zod module-level template literal","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71868/","md":"https://erroneo.us/security/cve/CVE-2026-71868/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71867","type":"cve","title":"CVE-2026-71867: Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71867/","md":"https://erroneo.us/security/cve/CVE-2026-71867/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71865","type":"cve","title":"CVE-2026-71865: Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71865/","md":"https://erroneo.us/security/cve/CVE-2026-71865/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71864","type":"cve","title":"CVE-2026-71864: Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71864/","md":"https://erroneo.us/security/cve/CVE-2026-71864/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71428","type":"cve","title":"CVE-2026-71428: unstructured: Server-Side Request Forgery in the URL-based partitioning","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-71428/","md":"https://erroneo.us/security/cve/CVE-2026-71428/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00436,"verdict":null,"product":"unstructured (PyPI)"},{"id":"CVE-2026-69084","type":"cve","title":"CVE-2026-69084: SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-69084/","md":"https://erroneo.us/security/cve/CVE-2026-69084/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01573,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-69083","type":"cve","title":"CVE-2026-69083: SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-wr","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-69083/","md":"https://erroneo.us/security/cve/CVE-2026-69083/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00475,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-62682","type":"cve","title":"CVE-2026-62682: Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-62682/","md":"https://erroneo.us/security/cve/CVE-2026-62682/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-62681","type":"cve","title":"CVE-2026-62681: Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)","date":"2026-09-03","url":"https://erroneo.us/security/cve/CVE-2026-62681/","md":"https://erroneo.us/security/cve/CVE-2026-62681/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"2026-09-03","type":"digest","title":"Security digest for September 3, 2026","date":"2026-09-03","url":"https://erroneo.us/security/2026-09-03/","md":"https://erroneo.us/security/2026-09-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":0,"critical":14}},{"id":"litellm-proxy-mcp-auth-bypass-kev","type":"brief","title":"LiteLLM Proxy: Three Exploited Flaws in CISA KEV","date":"2026-09-02","url":"https://erroneo.us/security/briefs/litellm-proxy-mcp-auth-bypass-kev/","md":"https://erroneo.us/security/briefs/litellm-proxy-mcp-auth-bypass-kev/index.md","severity":"critical","kev":true,"epss":0.9257,"verdict":"patch-this-week","cves":["CVE-2026-59822","CVE-2026-42208","CVE-2026-42271","CVE-2026-59821"],"summary":"If you run a self-hosted LiteLLM Proxy older than 1.84.0, upgrade now and treat the provider keys it holds as possibly exposed; SDK-only users are not affected."},{"id":"CVE-2026-9586","type":"cve","title":"CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-9586/","md":"https://erroneo.us/security/cve/CVE-2026-9586/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.18979,"verdict":"act-now","product":"Sangoma Switchvox"},{"id":"CVE-2026-83549","type":"cve","title":"CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-83549/","md":"https://erroneo.us/security/cve/CVE-2026-83549/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.09889,"verdict":"act-now","product":"SonicWall SMA1000 Appliances"},{"id":"CVE-2026-83548","type":"cve","title":"CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-83548/","md":"https://erroneo.us/security/cve/CVE-2026-83548/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.08043,"verdict":"act-now","product":"SonicWall SMA1000 Appliances"},{"id":"CVE-2026-82329","type":"cve","title":"CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-82329/","md":"https://erroneo.us/security/cve/CVE-2026-82329/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.14121,"verdict":"act-now","product":"JFrog Artifactory"},{"id":"CVE-2026-73843","type":"cve","title":"CVE-2026-73843: OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-73843/","md":"https://erroneo.us/security/cve/CVE-2026-73843/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00482,"verdict":null,"product":"github.com/openchoreo/openchoreo (Go)"},{"id":"CVE-2026-72920","type":"cve","title":"CVE-2026-72920: SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-72920/","md":"https://erroneo.us/security/cve/CVE-2026-72920/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00779,"verdict":null,"product":"github.com/seaweedfs/seaweedfs (Go)"},{"id":"CVE-2026-72716","type":"cve","title":"CVE-2026-72716: Orval: Import-time RCE via query-parameter default -> zod module-level template literal","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-72716/","md":"https://erroneo.us/security/cve/CVE-2026-72716/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71866","type":"cve","title":"CVE-2026-71866: Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-71866/","md":"https://erroneo.us/security/cve/CVE-2026-71866/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"orval (npm)"},{"id":"CVE-2026-71485","type":"cve","title":"CVE-2026-71485: Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-71485/","md":"https://erroneo.us/security/cve/CVE-2026-71485/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00609,"verdict":null,"product":"github.com/centrifugal/centrifugo (Go)"},{"id":"CVE-2026-62674","type":"cve","title":"CVE-2026-62674: Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-62674/","md":"https://erroneo.us/security/cve/CVE-2026-62674/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00506,"verdict":null,"product":"omnigent (PyPI)"},{"id":"CVE-2026-59822","type":"cve","title":"CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-59822/","md":"https://erroneo.us/security/cve/CVE-2026-59822/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.00836,"verdict":"patch-this-week","product":"BerriAI LiteLLM"},{"id":"CVE-2026-49869","type":"cve","title":"CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-49869/","md":"https://erroneo.us/security/cve/CVE-2026-49869/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.02095,"verdict":"act-now","product":"Kestra Kestra OSS"},{"id":"CVE-2026-48710","type":"cve","title":"CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability","date":"2026-09-02","url":"https://erroneo.us/security/cve/CVE-2026-48710/","md":"https://erroneo.us/security/cve/CVE-2026-48710/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.07056,"verdict":"patch-this-week","product":"Kludex Starlette"},{"id":"2026-09-02","type":"digest","title":"Security digest for September 2, 2026","date":"2026-09-02","url":"https://erroneo.us/security/2026-09-02/","md":"https://erroneo.us/security/2026-09-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":7,"critical":6}},{"id":"gitspawn-git-fsmonitor-ai-coding-agents","type":"brief","title":"GitSpawn: Repo Git Config Runs Code in AI Coding Agents","date":"2026-09-01","url":"https://erroneo.us/security/briefs/gitspawn-git-fsmonitor-ai-coding-agents/","md":"https://erroneo.us/security/briefs/gitspawn-git-fsmonitor-ai-coding-agents/index.md","severity":"high","kev":false,"epss":0.00858,"verdict":"patch-this-week","cves":["CVE-2026-19592","CVE-2026-19590","CVE-2026-72718","CVE-2026-71963"],"summary":"Update your coding agents this week and never point one at a repository that arrived as files until you have read its .git/config; ordinary clones are not affected, and no attacks have been reported."},{"id":"CVE-2026-79675","type":"cve","title":"CVE-2026-79675: NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)","date":"2026-09-01","url":"https://erroneo.us/security/cve/CVE-2026-79675/","md":"https://erroneo.us/security/cve/CVE-2026-79675/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00775,"verdict":null,"product":"nltk (PyPI)"},{"id":"CVE-2026-19592","type":"cve","title":"CVE-2026-19592: OpenAI Codex CLI vulnerability","date":"2026-09-01","url":"https://erroneo.us/security/cve/CVE-2026-19592/","md":"https://erroneo.us/security/cve/CVE-2026-19592/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00112,"verdict":"patch-this-week","product":"OpenAI Codex CLI"},{"id":"CVE-2026-19590","type":"cve","title":"CVE-2026-19590: OpenAI Codex Desktop vulnerability","date":"2026-09-01","url":"https://erroneo.us/security/cve/CVE-2026-19590/","md":"https://erroneo.us/security/cve/CVE-2026-19590/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00108,"verdict":"patch-this-week","product":"OpenAI Codex Desktop"},{"id":"2026-09-01","type":"digest","title":"Security digest for September 1, 2026","date":"2026-09-01","url":"https://erroneo.us/security/2026-09-01/","md":"https://erroneo.us/security/2026-09-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2026-82078","type":"cve","title":"CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability","date":"2026-08-31","url":"https://erroneo.us/security/cve/CVE-2026-82078/","md":"https://erroneo.us/security/cve/CVE-2026-82078/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.63532,"verdict":"act-now","product":"PaperCut NG/MF"},{"id":"CVE-2026-81578","type":"cve","title":"CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","date":"2026-08-31","url":"https://erroneo.us/security/cve/CVE-2026-81578/","md":"https://erroneo.us/security/cve/CVE-2026-81578/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.85581,"verdict":"act-now","product":"PaperCut NG/MF"},{"id":"2026-08-31","type":"digest","title":"Security digest for August 31, 2026","date":"2026-08-31","url":"https://erroneo.us/security/2026-08-31/","md":"https://erroneo.us/security/2026-08-31/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"jfrog-artifactory-cve-2026-82329-auth-bypass-kev","type":"brief","title":"JFrog Artifactory: Exploited Auth Bypass to Admin (KEV)","date":"2026-08-28","url":"https://erroneo.us/security/briefs/jfrog-artifactory-cve-2026-82329-auth-bypass-kev/","md":"https://erroneo.us/security/briefs/jfrog-artifactory-cve-2026-82329-auth-bypass-kev/index.md","severity":"critical","kev":true,"epss":0.14121,"verdict":"act-now","cves":["CVE-2026-82329","CVE-2026-42018","CVE-2026-42016","CVE-2026-66384"],"summary":"If you run self-hosted Artifactory below the fixed builds, treat it as exploited until shown otherwise: upgrade, then hunt for rogue admins, Groovy plugins and stolen signing keys, because patching does not remove them."},{"id":"CVE-2026-55634","type":"cve","title":"CVE-2026-55634: Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55634/","md":"https://erroneo.us/security/cve/CVE-2026-55634/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0065,"verdict":null,"product":"pimcore/pimcore (Composer (PHP))"},{"id":"CVE-2026-55565","type":"cve","title":"CVE-2026-55565: Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55565/","md":"https://erroneo.us/security/cve/CVE-2026-55565/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0065,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-55559","type":"cve","title":"CVE-2026-55559: Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55559/","md":"https://erroneo.us/security/cve/CVE-2026-55559/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00784,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-55511","type":"cve","title":"CVE-2026-55511: Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55511/","md":"https://erroneo.us/security/cve/CVE-2026-55511/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00677,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-55248","type":"cve","title":"CVE-2026-55248: plone.app.portlets vulnerable to denial of service via RSS feed portlet","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55248/","md":"https://erroneo.us/security/cve/CVE-2026-55248/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00441,"verdict":null,"product":"plone.app.portlets (PyPI)"},{"id":"CVE-2026-55247","type":"cve","title":"CVE-2026-55247: plone.app.event vulnerable to denial of service via iCalendar import","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55247/","md":"https://erroneo.us/security/cve/CVE-2026-55247/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00441,"verdict":null,"product":"plone.app.event (PyPI)"},{"id":"CVE-2026-55220","type":"cve","title":"CVE-2026-55220: Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55220/","md":"https://erroneo.us/security/cve/CVE-2026-55220/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0068,"verdict":null,"product":"pimcore/pimcore (Composer (PHP))"},{"id":"CVE-2026-55068","type":"cve","title":"CVE-2026-55068: free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-55068/","md":"https://erroneo.us/security/cve/CVE-2026-55068/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0059,"verdict":null,"product":"github.com/free5gc/free5gc (Go)"},{"id":"CVE-2026-54755","type":"cve","title":"CVE-2026-54755: Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-54755/","md":"https://erroneo.us/security/cve/CVE-2026-54755/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0056,"verdict":null,"product":"github.com/klever-io/klever-go (Go)"},{"id":"CVE-2026-54754","type":"cve","title":"CVE-2026-54754: Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)","date":"2026-08-28","url":"https://erroneo.us/security/cve/CVE-2026-54754/","md":"https://erroneo.us/security/cve/CVE-2026-54754/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00432,"verdict":null,"product":"github.com/klever-io/klever-go (Go)"},{"id":"2026-08-28","type":"digest","title":"Security digest for August 28, 2026","date":"2026-08-28","url":"https://erroneo.us/security/2026-08-28/","md":"https://erroneo.us/security/2026-08-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":10}},{"id":"papercut-ng-mf-cve-2026-81578-82078-auth-bypass-rce","type":"brief","title":"PaperCut NG/MF: Mass-Exploited Pre-Auth RCE Chain (KEV)","date":"2026-08-27","url":"https://erroneo.us/security/briefs/papercut-ng-mf-cve-2026-81578-82078-auth-bypass-rce/","md":"https://erroneo.us/security/briefs/papercut-ng-mf-cve-2026-81578-82078-auth-bypass-rce/index.md","severity":"critical","kev":true,"epss":0.85581,"verdict":"act-now","cves":["CVE-2026-81578","CVE-2026-82078"],"summary":"If a PaperCut NG/MF server below 24.1.10, 25.0.13 or 26.0.5 was reachable from the internet after late August, assume it was compromised: upgrade, then hunt and rebuild, because this chain gave unauthenticated attackers SYSTEM and was mass-exploited."},{"id":"owncloud-cve-2023-49105-webdav-presigned-url-bypass-kev","type":"brief","title":"ownCloud CVE-2023-49105: 2023 WebDAV Bypass Now in KEV","date":"2026-08-27","url":"https://erroneo.us/security/briefs/owncloud-cve-2023-49105-webdav-presigned-url-bypass-kev/","md":"https://erroneo.us/security/briefs/owncloud-cve-2023-49105-webdav-presigned-url-bypass-kev/index.md","severity":"critical","kev":true,"epss":0.4319,"verdict":"check-exposure","cves":["CVE-2023-49105"],"summary":"Up-to-date ownCloud servers are fine; any ownCloud core 10.6.0 to 10.13.0 still online should be upgraded today and treated as breached, because attackers are using this bug to empty file shares."},{"id":"CVE-2026-66384","type":"cve","title":"CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","date":"2026-08-27","url":"https://erroneo.us/security/cve/CVE-2026-66384/","md":"https://erroneo.us/security/cve/CVE-2026-66384/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.00665,"verdict":"act-now","product":"JFrog Artifactory"},{"id":"CVE-2026-59285","type":"cve","title":"CVE-2026-59285: Spring for GraphQL Unsafe Deserialization in pagination support","date":"2026-08-27","url":"https://erroneo.us/security/cve/CVE-2026-59285/","md":"https://erroneo.us/security/cve/CVE-2026-59285/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.00436,"verdict":"check-exposure","product":"Spring Spring for GraphQL"},{"id":"CVE-2026-53362","type":"cve","title":"CVE-2026-53362: Linux Kernel Unspecified Vulnerability","date":"2026-08-27","url":"https://erroneo.us/security/cve/CVE-2026-53362/","md":"https://erroneo.us/security/cve/CVE-2026-53362/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00709,"verdict":"patch-this-week","product":"Linux Kernel"},{"id":"CVE-2026-37004","type":"cve","title":"CVE-2026-37004: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint","date":"2026-08-27","url":"https://erroneo.us/security/cve/CVE-2026-37004/","md":"https://erroneo.us/security/cve/CVE-2026-37004/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00799,"verdict":null,"product":"litellm (PyPI)"},{"id":"CVE-2023-49105","type":"cve","title":"CVE-2023-49105: ownCloud Improper Authentication Vulnerability","date":"2026-08-27","url":"https://erroneo.us/security/cve/CVE-2023-49105/","md":"https://erroneo.us/security/cve/CVE-2023-49105/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.4319,"verdict":"check-exposure","product":"ownCloud ownCloud"},{"id":"2026-08-27","type":"digest","title":"Security digest for August 27, 2026","date":"2026-08-27","url":"https://erroneo.us/security/2026-08-27/","md":"https://erroneo.us/security/2026-08-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":3,"critical":1}},{"id":"GHSA-93qj-5q5v-3c2h","type":"ghsa","title":"Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)","date":"2026-08-26","url":"https://erroneo.us/security/ghsa/GHSA-93qj-5q5v-3c2h/","md":"https://erroneo.us/security/ghsa/GHSA-93qj-5q5v-3c2h/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"pantheon-agents"},{"id":"CVE-2026-8452","type":"cve","title":"CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-8452/","md":"https://erroneo.us/security/cve/CVE-2026-8452/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.01011,"verdict":"act-now","product":"Citrix NetScaler ADC and NetScaler Gateway"},{"id":"CVE-2026-80521","type":"cve","title":"CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge().","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-80521/","md":"https://erroneo.us/security/cve/CVE-2026-80521/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.0017,"verdict":"patch-this-week","product":"Linux Linux"},{"id":"CVE-2026-54569","type":"cve","title":"CVE-2026-54569: senaite.core Vulnerable to Eval Injection and Missing Authorization","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-54569/","md":"https://erroneo.us/security/cve/CVE-2026-54569/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01156,"verdict":null,"product":"senaite.core (PyPI)"},{"id":"CVE-2026-54523","type":"cve","title":"CVE-2026-54523: Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-54523/","md":"https://erroneo.us/security/cve/CVE-2026-54523/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00466,"verdict":null,"product":"github.com/kyverno/kyverno (Go)"},{"id":"CVE-2026-47892","type":"cve","title":"CVE-2026-47892: Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-47892/","md":"https://erroneo.us/security/cve/CVE-2026-47892/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00529,"verdict":null,"product":"org.springframework:spring-webflux (Maven)"},{"id":"CVE-2026-47890","type":"cve","title":"CVE-2026-47890: Spring Framework Server Sent Event stream corruption while rendering fragments","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-47890/","md":"https://erroneo.us/security/cve/CVE-2026-47890/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00564,"verdict":null,"product":"org.springframework:spring-webflux (Maven)"},{"id":"CVE-2026-47884","type":"cve","title":"CVE-2026-47884: Spring Framework Improper Path Limitation in XsltView","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2026-47884/","md":"https://erroneo.us/security/cve/CVE-2026-47884/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00605,"verdict":null,"product":"org.springframework:spring-webmvc (Maven)"},{"id":"CVE-2022-0995","type":"cve","title":"CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2022-0995/","md":"https://erroneo.us/security/cve/CVE-2022-0995/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.08859,"verdict":"patch-this-week","product":"Linux Kernel"},{"id":"CVE-2021-23758","type":"cve","title":"CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2021-23758/","md":"https://erroneo.us/security/cve/CVE-2021-23758/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.82578,"verdict":"check-exposure","product":"Ajax.NET Professional Ajax.NET Professional"},{"id":"CVE-2019-1068","type":"cve","title":"CVE-2019-1068: Microsoft SQL Server Remote Code Execution Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2019-1068/","md":"https://erroneo.us/security/cve/CVE-2019-1068/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.57273,"verdict":"check-exposure","product":"Microsoft SQL Server"},{"id":"CVE-2015-5287","type":"cve","title":"CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2015-5287/","md":"https://erroneo.us/security/cve/CVE-2015-5287/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.05003,"verdict":"most-can-relax","product":"Red Hat Automatic Bug Reporting Tool"},{"id":"CVE-2015-3246","type":"cve","title":"CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability","date":"2026-08-26","url":"https://erroneo.us/security/cve/CVE-2015-3246/","md":"https://erroneo.us/security/cve/CVE-2015-3246/index.md","severity":"high","cvss":7.4,"kev":true,"epss":0.08503,"verdict":"most-can-relax","product":"Red Hat Libuser"},{"id":"2026-08-26","type":"digest","title":"Security digest for August 26, 2026","date":"2026-08-26","url":"https://erroneo.us/security/2026-08-26/","md":"https://erroneo.us/security/2026-08-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":6}},{"id":"nextjs-windows-avif-next-og-rce","type":"brief","title":"Next.js: Windows, AVIF and next/og RCEs (Aug-Sep 2026)","date":"2026-08-25","url":"https://erroneo.us/security/briefs/nextjs-windows-avif-next-og-rce/","md":"https://erroneo.us/security/briefs/nextjs-windows-avif-next-og-rce/index.md","severity":"critical","kev":false,"epss":0.02105,"verdict":"patch-this-week","cves":["CVE-2026-75604","CVE-2026-84383","CVE-2026-94545"],"summary":"Self-hosted Next.js apps still below 15.5.24 or 16.3.3 should upgrade now, ideally straight to the October releases; Windows hosts and apps optimizing untrusted AVIF images are the urgent cases."},{"id":"apache-tomcat-august-2026-security-constraint-bypasses","type":"brief","title":"Apache Tomcat August 2026: Security Constraint Bypasses","date":"2026-08-25","url":"https://erroneo.us/security/briefs/apache-tomcat-august-2026-security-constraint-bypasses/","md":"https://erroneo.us/security/briefs/apache-tomcat-august-2026-security-constraint-bypasses/index.md","severity":"high","kev":false,"epss":0.00745,"verdict":"patch-this-week","cves":["CVE-2026-65182","CVE-2026-68525","CVE-2026-65905","CVE-2026-68569","CVE-2026-65927","CVE-2026-68763"],"summary":"Upgrade Tomcat, including the copy embedded in Spring Boot apps, this week; the access-control bypasses matter wherever you rely on web.xml security constraints or container authentication, and none is known to be exploited."},{"id":"CVE-2026-68763","type":"cve","title":"CVE-2026-68763: Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-68763/","md":"https://erroneo.us/security/cve/CVE-2026-68763/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00745,"verdict":"patch-this-week","product":"Apache Software Foundation Apache Tomcat"},{"id":"CVE-2026-68569","type":"cve","title":"CVE-2026-68569: Apache Tomcat: Principal lookup can fail open in some cases","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-68569/","md":"https://erroneo.us/security/cve/CVE-2026-68569/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.0046,"verdict":"patch-this-week","product":"Apache Software Foundation Apache Tomcat"},{"id":"CVE-2026-68525","type":"cve","title":"CVE-2026-68525: Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-68525/","md":"https://erroneo.us/security/cve/CVE-2026-68525/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00477,"verdict":"patch-this-week","product":"org.apache.tomcat:tomcat (Maven)"},{"id":"CVE-2026-65927","type":"cve","title":"CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-65927/","md":"https://erroneo.us/security/cve/CVE-2026-65927/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00684,"verdict":"patch-this-week","product":"Apache Software Foundation Apache Tomcat"},{"id":"CVE-2026-65905","type":"cve","title":"CVE-2026-65905: Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-65905/","md":"https://erroneo.us/security/cve/CVE-2026-65905/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00562,"verdict":"patch-this-week","product":"org.apache.tomcat:tomcat (Maven)"},{"id":"CVE-2026-65182","type":"cve","title":"CVE-2026-65182: Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-65182/","md":"https://erroneo.us/security/cve/CVE-2026-65182/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00538,"verdict":"patch-this-week","product":"org.apache.tomcat:tomcat (Maven)"},{"id":"CVE-2026-60004","type":"cve","title":"CVE-2026-60004: Gitea Code Injection Vulnerability","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-60004/","md":"https://erroneo.us/security/cve/CVE-2026-60004/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.23988,"verdict":"act-now","product":"Gitea Gitea"},{"id":"CVE-2026-55640","type":"cve","title":"CVE-2026-55640: nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-55640/","md":"https://erroneo.us/security/cve/CVE-2026-55640/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0073,"verdict":null,"product":"nextcloud-mcp-server (PyPI)"},{"id":"CVE-2026-55546","type":"cve","title":"CVE-2026-55546: qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-55546/","md":"https://erroneo.us/security/cve/CVE-2026-55546/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00726,"verdict":null,"product":"qwed-mcp (PyPI)"},{"id":"CVE-2026-55536","type":"cve","title":"CVE-2026-55536: PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-55536/","md":"https://erroneo.us/security/cve/CVE-2026-55536/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00521,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-49757","type":"cve","title":"CVE-2026-49757: AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-49757/","md":"https://erroneo.us/security/cve/CVE-2026-49757/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00684,"verdict":null,"product":"ash_authentication (Hex (Erlang/Elixir))"},{"id":"CVE-2026-48853","type":"cve","title":"CVE-2026-48853: gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-48853/","md":"https://erroneo.us/security/cve/CVE-2026-48853/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00784,"verdict":null,"product":"grpc (Hex (Erlang/Elixir))"},{"id":"CVE-2026-45018","type":"cve","title":"CVE-2026-45018: Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution","date":"2026-08-25","url":"https://erroneo.us/security/cve/CVE-2026-45018/","md":"https://erroneo.us/security/cve/CVE-2026-45018/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01086,"verdict":null,"product":"chainlit (PyPI)"},{"id":"2026-08-25","type":"digest","title":"Security digest for August 25, 2026","date":"2026-08-25","url":"https://erroneo.us/security/2026-08-25/","md":"https://erroneo.us/security/2026-08-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":1,"critical":9}},{"id":"CVE-2026-78329","type":"cve","title":"CVE-2026-78329: Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured ro","date":"2026-08-24","url":"https://erroneo.us/security/cve/CVE-2026-78329/","md":"https://erroneo.us/security/cve/CVE-2026-78329/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00738,"verdict":null,"product":"org.apache.camel:camel-undertow (Maven)"},{"id":"CVE-2026-71300","type":"cve","title":"CVE-2026-71300: Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel name","date":"2026-08-24","url":"https://erroneo.us/security/cve/CVE-2026-71300/","md":"https://erroneo.us/security/cve/CVE-2026-71300/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00738,"verdict":null,"product":"org.apache.camel:camel-atmosphere-websocket (Maven)"},{"id":"CVE-2026-66906","type":"cve","title":"CVE-2026-66906: Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir","date":"2026-08-24","url":"https://erroneo.us/security/cve/CVE-2026-66906/","md":"https://erroneo.us/security/cve/CVE-2026-66906/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00776,"verdict":null,"product":"org.apache.camel:camel-azure-storage-blob (Maven)"},{"id":"CVE-2026-53710","type":"cve","title":"CVE-2026-53710: mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server","date":"2026-08-24","url":"https://erroneo.us/security/cve/CVE-2026-53710/","md":"https://erroneo.us/security/cve/CVE-2026-53710/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01141,"verdict":null,"product":"mcp-contextforge-gateway (PyPI)"},{"id":"CVE-2026-21962","type":"cve","title":"CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","date":"2026-08-24","url":"https://erroneo.us/security/cve/CVE-2026-21962/","md":"https://erroneo.us/security/cve/CVE-2026-21962/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.73192,"verdict":"act-now","product":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in"},{"id":"2026-08-24","type":"digest","title":"Security digest for August 24, 2026","date":"2026-08-24","url":"https://erroneo.us/security/2026-08-24/","md":"https://erroneo.us/security/2026-08-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"CVE-2026-77415","type":"cve","title":"CVE-2026-77415: JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-77415/","md":"https://erroneo.us/security/cve/CVE-2026-77415/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00892,"verdict":null,"product":"jsonata (npm)"},{"id":"CVE-2026-77414","type":"cve","title":"CVE-2026-77414: JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-77414/","md":"https://erroneo.us/security/cve/CVE-2026-77414/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0057,"verdict":null,"product":"jsonata (npm)"},{"id":"CVE-2026-77413","type":"cve","title":"CVE-2026-77413: JSONata: Arbitrary Code Execution via crafted JSONata expressions","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-77413/","md":"https://erroneo.us/security/cve/CVE-2026-77413/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00719,"verdict":null,"product":"jsonata (npm)"},{"id":"CVE-2026-76904","type":"cve","title":"CVE-2026-76904: GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-76904/","md":"https://erroneo.us/security/cve/CVE-2026-76904/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03976,"verdict":null,"product":"org.geotools.jdbc:gt-jdbc-postgis (Maven)"},{"id":"CVE-2026-73570","type":"cve","title":"CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-73570/","md":"https://erroneo.us/security/cve/CVE-2026-73570/index.md","severity":"high","cvss":8.9,"kev":true,"epss":0.71663,"verdict":"check-exposure","product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2026-61539","type":"cve","title":"CVE-2026-61539: Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-61539/","md":"https://erroneo.us/security/cve/CVE-2026-61539/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01226,"verdict":null,"product":"xinference (PyPI)"},{"id":"CVE-2026-59989","type":"cve","title":"CVE-2026-59989: Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)","date":"2026-08-21","url":"https://erroneo.us/security/cve/CVE-2026-59989/","md":"https://erroneo.us/security/cve/CVE-2026-59989/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00543,"verdict":null,"product":"phalcon/cphalcon (Composer (PHP))"},{"id":"2026-08-21","type":"digest","title":"Security digest for August 21, 2026","date":"2026-08-21","url":"https://erroneo.us/security/2026-08-21/","md":"https://erroneo.us/security/2026-08-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":6}},{"id":"spring-for-graphql-cve-2026-59285-deserialization","type":"brief","title":"Spring for GraphQL CVE-2026-59285: Pagination RCE Risk","date":"2026-08-20","url":"https://erroneo.us/security/briefs/spring-for-graphql-cve-2026-59285-deserialization/","md":"https://erroneo.us/security/briefs/spring-for-graphql-cve-2026-59285-deserialization/index.md","severity":"high","kev":false,"epss":0.00436,"verdict":"check-exposure","cves":["CVE-2026-59285"],"summary":"Only Spring Boot 4 apps on Spring for GraphQL 2.0.0-2.0.4 that use Jackson 2.x and expose paginated Connection fields are at risk; if that is you, take the 2.0.5 upgrade now."},{"id":"arrayref-crates-io-proc-macro1-build-script-malware","type":"brief","title":"arrayref, internment, append-only-vec: Rust Crates Hijacked","date":"2026-08-20","url":"https://erroneo.us/security/briefs/arrayref-crates-io-proc-macro1-build-script-malware/","md":"https://erroneo.us/security/briefs/arrayref-crates-io-proc-macro1-build-script-malware/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Only builds that resolved the three poisoned releases during a roughly two-hour window on August 20, 2026 ran the payload, but any machine that did should be treated as compromised."},{"id":"CVE-2026-72530","type":"cve","title":"CVE-2026-72530: TrueConf Server Code Injection Vulnerability","date":"2026-08-20","url":"https://erroneo.us/security/cve/CVE-2026-72530/","md":"https://erroneo.us/security/cve/CVE-2026-72530/index.md","severity":"critical","cvss":9.5,"kev":true,"epss":0.01686,"verdict":"check-exposure","product":"TrueConf Server"},{"id":"CVE-2026-72529","type":"cve","title":"CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability","date":"2026-08-20","url":"https://erroneo.us/security/cve/CVE-2026-72529/","md":"https://erroneo.us/security/cve/CVE-2026-72529/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.01464,"verdict":"check-exposure","product":"TrueConf Server"},{"id":"CVE-2026-55445","type":"cve","title":"CVE-2026-55445: Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication","date":"2026-08-20","url":"https://erroneo.us/security/cve/CVE-2026-55445/","md":"https://erroneo.us/security/cve/CVE-2026-55445/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00664,"verdict":null,"product":"@whyour/qinglong (npm)"},{"id":"CVE-2026-54061","type":"cve","title":"CVE-2026-54061: Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import","date":"2026-08-20","url":"https://erroneo.us/security/cve/CVE-2026-54061/","md":"https://erroneo.us/security/cve/CVE-2026-54061/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00582,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"2026-08-20","type":"digest","title":"Security digest for August 20, 2026","date":"2026-08-20","url":"https://erroneo.us/security/2026-08-20/","md":"https://erroneo.us/security/2026-08-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":2,"critical":2}},{"id":"citrix-netscaler-cve-2026-19490-gateway-aaa-auth-bypass","type":"brief","title":"NetScaler CVE-2026-19490: Exploited Gateway Auth Bypass","date":"2026-08-19","url":"https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-19490-gateway-aaa-auth-bypass/","md":"https://erroneo.us/security/briefs/citrix-netscaler-cve-2026-19490-gateway-aaa-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.23158,"verdict":"act-now","cves":["CVE-2026-19490"],"summary":"Any customer-managed NetScaler with a Gateway or AAA virtual server on an August-or-older build should be upgraded today, straight to the current builds, because this bypass is being tried in the wild and later exploited NetScaler bugs are fixed in the same upgrade."},{"id":"CVE-2026-64849","type":"cve","title":"CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability","date":"2026-08-19","url":"https://erroneo.us/security/cve/CVE-2026-64849/","md":"https://erroneo.us/security/cve/CVE-2026-64849/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.09839,"verdict":"act-now","product":"MLflow MLflow"},{"id":"2026-08-19","type":"digest","title":"Security digest for August 19, 2026","date":"2026-08-19","url":"https://erroneo.us/security/2026-08-19/","md":"https://erroneo.us/security/2026-08-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"CVE-2026-65400","type":"cve","title":"CVE-2026-65400: Apple macOS Improper Authentication Vulnerability","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-65400/","md":"https://erroneo.us/security/cve/CVE-2026-65400/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.01723,"verdict":"check-exposure","product":"Apple macOS"},{"id":"CVE-2026-62988","type":"cve","title":"CVE-2026-62988: Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-62988/","md":"https://erroneo.us/security/cve/CVE-2026-62988/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00627,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2026-59310","type":"cve","title":"CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-59310/","md":"https://erroneo.us/security/cve/CVE-2026-59310/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.02565,"verdict":"act-now","product":"Broadcom VMware vCenter"},{"id":"CVE-2026-55211","type":"cve","title":"CVE-2026-55211: surfio has an out-of-bounds read","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-55211/","md":"https://erroneo.us/security/cve/CVE-2026-55211/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00744,"verdict":null,"product":"surfio (PyPI)"},{"id":"CVE-2026-55209","type":"cve","title":"CVE-2026-55209: resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-55209/","md":"https://erroneo.us/security/cve/CVE-2026-55209/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0078,"verdict":null,"product":"resdata (PyPI)"},{"id":"CVE-2026-55107","type":"cve","title":"CVE-2026-55107: kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-55107/","md":"https://erroneo.us/security/cve/CVE-2026-55107/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00799,"verdict":null,"product":"kobako (RubyGems)"},{"id":"CVE-2026-55040","type":"cve","title":"CVE-2026-55040: Microsoft SharePoint Weak Authentication Vulnerability","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-55040/","md":"https://erroneo.us/security/cve/CVE-2026-55040/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.69536,"verdict":"act-now","product":"Microsoft SharePoint"},{"id":"CVE-2026-54133","type":"cve","title":"CVE-2026-54133: jmespath.php has CompilerRuntime code injection via unescaped function names","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-54133/","md":"https://erroneo.us/security/cve/CVE-2026-54133/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00564,"verdict":null,"product":"mtdowling/jmespath.php (Composer (PHP))"},{"id":"CVE-2026-33824","type":"cve","title":"CVE-2026-33824: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-33824/","md":"https://erroneo.us/security/cve/CVE-2026-33824/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.01619,"verdict":"check-exposure","product":"Microsoft Internet Key Exchange (IKE) Service Extensions"},{"id":"CVE-2026-18963","type":"cve","title":"CVE-2026-18963: Keycloak: Unauthenticated account takeover via reset-credentials flow bypass","date":"2026-08-18","url":"https://erroneo.us/security/cve/CVE-2026-18963/","md":"https://erroneo.us/security/cve/CVE-2026-18963/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.03177,"verdict":null,"product":"org.keycloak:keycloak-services (Maven)"},{"id":"2026-08-18","type":"digest","title":"Security digest for August 18, 2026","date":"2026-08-18","url":"https://erroneo.us/security/2026-08-18/","md":"https://erroneo.us/security/2026-08-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":6}},{"id":"vm2-sandbox-escape-wave-3-12-2","type":"brief","title":"vm2: 22 Critical Sandbox Escapes, Fixed in 3.12.2","date":"2026-08-17","url":"https://erroneo.us/security/briefs/vm2-sandbox-escape-wave-3-12-2/","md":"https://erroneo.us/security/briefs/vm2-sandbox-escape-wave-3-12-2/index.md","severity":"critical","kev":false,"epss":0.01033,"verdict":"check-exposure","cves":["CVE-2026-47683","CVE-2026-47686","CVE-2026-47698","CVE-2026-92945","CVE-2026-92941","CVE-2026-92944","CVE-2026-92939","CVE-2026-92938","CVE-2026-92937","CVE-2026-92935","CVE-2026-92949","CVE-2026-92957","CVE-2026-92958","CVE-2026-92951","CVE-2026-92940","CVE-2026-92950","CVE-2026-92948","CVE-2026-92952","CVE-2026-92956","CVE-2026-92947","CVE-2026-92946","CVE-2026-92942","CVE-2026-92936","CVE-2026-92933","CVE-2026-92934","CVE-2026-92953","CVE-2026-92954","CVE-2026-92955","CVE-2026-92959","CVE-2026-100723","CVE-2026-100722","CVE-2026-100721","CVE-2026-93605"],"summary":"If anything outside your trust boundary can get code into vm2, upgrade to 3.12.2 today and plan to move that code out of process; if vm2 only runs your own code, upgrade on a normal cycle."},{"id":"GHSA-m5w8-4gq2-6f8x","type":"ghsa","title":"vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)","date":"2026-08-17","url":"https://erroneo.us/security/ghsa/GHSA-m5w8-4gq2-6f8x/","md":"https://erroneo.us/security/ghsa/GHSA-m5w8-4gq2-6f8x/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"vm2"},{"id":"CVE-2026-71479","type":"cve","title":"CVE-2026-71479: New API: Integer overflow in quota billing yields negative charges (self-crediting)","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-71479/","md":"https://erroneo.us/security/cve/CVE-2026-71479/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00647,"verdict":null,"product":"github.com/QuantumNous/new-api (Go)"},{"id":"CVE-2026-64859","type":"cve","title":"CVE-2026-64859: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-64859/","md":"https://erroneo.us/security/cve/CVE-2026-64859/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00626,"verdict":null,"product":"github.com/QuantumNous/new-api (Go)"},{"id":"CVE-2026-55158","type":"cve","title":"CVE-2026-55158: conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-55158/","md":"https://erroneo.us/security/cve/CVE-2026-55158/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00804,"verdict":null,"product":"wktk/conflibot (GitHub Actions)"},{"id":"CVE-2026-47698","type":"cve","title":"CVE-2026-47698: vm2: Sandbox Breakout Using Dangerous Host Proto Mutators","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-47698/","md":"https://erroneo.us/security/cve/CVE-2026-47698/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00971,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-47686","type":"cve","title":"CVE-2026-47686: VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-47686/","md":"https://erroneo.us/security/cve/CVE-2026-47686/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00581,"verdict":"check-exposure","product":"vm2 (npm)"},{"id":"CVE-2026-47683","type":"cve","title":"CVE-2026-47683: vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2026-47683/","md":"https://erroneo.us/security/cve/CVE-2026-47683/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00538,"verdict":"check-exposure","product":"patriksimek vm2"},{"id":"CVE-2025-62593","type":"cve","title":"CVE-2025-62593: Ray-Project Ray Code Injection Vulnerability","date":"2026-08-17","url":"https://erroneo.us/security/cve/CVE-2025-62593/","md":"https://erroneo.us/security/cve/CVE-2025-62593/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.62459,"verdict":"patch-this-week","product":"Ray-Project Ray"},{"id":"2026-08-17","type":"digest","title":"Security digest for August 17, 2026","date":"2026-08-17","url":"https://erroneo.us/security/2026-08-17/","md":"https://erroneo.us/security/2026-08-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":7}},{"id":"windows-afd-sys-cve-2026-68820-zero-day-eop","type":"brief","title":"Windows AFD.sys CVE-2026-68820: Exploited Zero-Day EoP","date":"2026-08-11","url":"https://erroneo.us/security/briefs/windows-afd-sys-cve-2026-68820-zero-day-eop/","md":"https://erroneo.us/security/briefs/windows-afd-sys-cve-2026-68820-zero-day-eop/index.md","severity":"high","kev":true,"epss":0.00332,"verdict":"patch-this-week","cves":["CVE-2026-68820"],"summary":"A local bug, but a real zero-day: North Korea's Lazarus group used it to load a kernel rootkit, so any Windows host still missing the August 2026 or later cumulative update should be patched this week."},{"id":"cisco-asa-ftd-vpn-dos-cve-2026-20349","type":"brief","title":"Cisco ASA/FTD CVE-2026-20349: Exploited VPN Crash Bug","date":"2026-08-11","url":"https://erroneo.us/security/briefs/cisco-asa-ftd-vpn-dos-cve-2026-20349/","md":"https://erroneo.us/security/briefs/cisco-asa-ftd-vpn-dos-cve-2026-20349/index.md","severity":"high","kev":true,"epss":0.0101,"verdict":"patch-this-week","cves":["CVE-2026-20349"],"summary":"If your ASA or FTD terminates remote access VPN, SSL VPN or ZTNA, install the fixed release this week; attackers are using this to knock firewalls offline, but Cisco describes no code execution or data theft."},{"id":"adobe-commerce-magento-cve-2026-71362-account-takeover","type":"brief","title":"Adobe Commerce CVE-2026-71362: Exploited Account Takeover","date":"2026-08-11","url":"https://erroneo.us/security/briefs/adobe-commerce-magento-cve-2026-71362-account-takeover/","md":"https://erroneo.us/security/briefs/adobe-commerce-magento-cve-2026-71362-account-takeover/index.md","severity":"critical","kev":true,"epss":0.87507,"verdict":"act-now","cves":["CVE-2026-71362"],"summary":"Any Magento or Adobe Commerce store without the August 2026 isolated patch is exposed to an exploited, login-free takeover of customer accounts; apply it today."},{"id":"CVE-2026-73080","type":"cve","title":"CVE-2026-73080: SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle","date":"2026-08-11","url":"https://erroneo.us/security/cve/CVE-2026-73080/","md":"https://erroneo.us/security/cve/CVE-2026-73080/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00527,"verdict":null,"product":"github.com/seaweedfs/seaweedfs (Go)"},{"id":"CVE-2026-72898","type":"cve","title":"CVE-2026-72898: Metabase SQL Injection Vulnerability","date":"2026-08-11","url":"https://erroneo.us/security/cve/CVE-2026-72898/","md":"https://erroneo.us/security/cve/CVE-2026-72898/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.97335,"verdict":"act-now","product":"Metabase Metabase"},{"id":"CVE-2026-68820","type":"cve","title":"CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","date":"2026-08-11","url":"https://erroneo.us/security/cve/CVE-2026-68820/","md":"https://erroneo.us/security/cve/CVE-2026-68820/index.md","severity":"high","cvss":7,"kev":true,"epss":0.00332,"verdict":"patch-this-week","product":"Microsoft Windows Ancillary Function Driver for WinSock"},{"id":"CVE-2026-20349","type":"cve","title":"CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","date":"2026-08-11","url":"https://erroneo.us/security/cve/CVE-2026-20349/","md":"https://erroneo.us/security/cve/CVE-2026-20349/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.0101,"verdict":"patch-this-week","product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)"},{"id":"2026-08-11","type":"digest","title":"Security digest for August 11, 2026","date":"2026-08-11","url":"https://erroneo.us/security/2026-08-11/","md":"https://erroneo.us/security/2026-08-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":3,"critical":1}},{"id":"CVE-2026-72718","type":"cve","title":"CVE-2026-72718: goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor","date":"2026-08-10","url":"https://erroneo.us/security/cve/CVE-2026-72718/","md":"https://erroneo.us/security/cve/CVE-2026-72718/index.md","severity":"high","cvss":7,"kev":false,"epss":0.00174,"verdict":"patch-this-week","product":"aaif-goose goose"},{"id":"CVE-2026-28672","type":"cve","title":"CVE-2026-28672: Apache Ranger has a Command Injection vulnerability","date":"2026-08-10","url":"https://erroneo.us/security/cve/CVE-2026-28672/","md":"https://erroneo.us/security/cve/CVE-2026-28672/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02631,"verdict":null,"product":"org.apache.ranger:ranger (Maven)"},{"id":"2026-08-10","type":"digest","title":"Security digest for August 10, 2026","date":"2026-08-10","url":"https://erroneo.us/security/2026-08-10/","md":"https://erroneo.us/security/2026-08-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-wg23-69c2-gjc8","type":"ghsa","title":"Craft CMS: Passkey login accepts replayed WebAuthn assertions","date":"2026-08-07","url":"https://erroneo.us/security/ghsa/GHSA-wg23-69c2-gjc8/","md":"https://erroneo.us/security/ghsa/GHSA-wg23-69c2-gjc8/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"craftcms/cms"},{"id":"CVE-2026-8037","type":"cve","title":"CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability","date":"2026-08-07","url":"https://erroneo.us/security/cve/CVE-2026-8037/","md":"https://erroneo.us/security/cve/CVE-2026-8037/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.77362,"verdict":"check-exposure","product":"Progress LoadMaster"},{"id":"CVE-2026-71851","type":"cve","title":"CVE-2026-71851: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain","date":"2026-08-07","url":"https://erroneo.us/security/cve/CVE-2026-71851/","md":"https://erroneo.us/security/cve/CVE-2026-71851/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0055,"verdict":null,"product":"crypto-js (npm)"},{"id":"CVE-2026-63223","type":"cve","title":"CVE-2026-63223: CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules","date":"2026-08-07","url":"https://erroneo.us/security/cve/CVE-2026-63223/","md":"https://erroneo.us/security/cve/CVE-2026-63223/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.008,"verdict":null,"product":"codeigniter4/framework (Composer (PHP))"},{"id":"CVE-2026-63221","type":"cve","title":"CVE-2026-63221: CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions","date":"2026-08-07","url":"https://erroneo.us/security/cve/CVE-2026-63221/","md":"https://erroneo.us/security/cve/CVE-2026-63221/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00612,"verdict":null,"product":"codeigniter4/framework (Composer (PHP))"},{"id":"2026-08-07","type":"digest","title":"Security digest for August 7, 2026","date":"2026-08-07","url":"https://erroneo.us/security/2026-08-07/","md":"https://erroneo.us/security/2026-08-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"metabase-cve-2026-72898-reset-password-sqli","type":"brief","title":"Metabase CVE-2026-72898: Exploited Pre-Auth SQL Injection","date":"2026-08-06","url":"https://erroneo.us/security/briefs/metabase-cve-2026-72898-reset-password-sqli/","md":"https://erroneo.us/security/briefs/metabase-cve-2026-72898-reset-password-sqli/index.md","severity":"critical","kev":true,"epss":0.97335,"verdict":"act-now","cves":["CVE-2026-72898"],"summary":"Self-hosted Metabase 58 through 63 below the fixed point releases can be taken over without a login and was attacked as a zero-day; upgrade now, and if the reset endpoint was reachable, assume your connected database credentials are burned."},{"id":"macos-screen-sharing-auth-bypass-cve-2026-65400","type":"brief","title":"macOS Screen Sharing CVE-2026-65400: Exploited Auth Bypass","date":"2026-08-06","url":"https://erroneo.us/security/briefs/macos-screen-sharing-auth-bypass-cve-2026-65400/","md":"https://erroneo.us/security/briefs/macos-screen-sharing-auth-bypass-cve-2026-65400/index.md","severity":"critical","kev":true,"epss":0.01723,"verdict":"check-exposure","cves":["CVE-2026-65400"],"summary":"Any Mac with Screen Sharing or Remote Management reachable from an untrusted network needs the update today and a compromise check; Macs with the service off should still update, but they were not reachable by this attack."},{"id":"CVE-2026-65600","type":"cve","title":"CVE-2026-65600: Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware","date":"2026-08-06","url":"https://erroneo.us/security/cve/CVE-2026-65600/","md":"https://erroneo.us/security/cve/CVE-2026-65600/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.00621,"verdict":null,"product":"github.com/traefik/traefik/v2 (Go)"},{"id":"2026-08-06","type":"digest","title":"Security digest for August 6, 2026","date":"2026-08-06","url":"https://erroneo.us/security/2026-08-06/","md":"https://erroneo.us/security/2026-08-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":1}},{"id":"gemini-cli-claude-code-ci-agent-flaws","type":"brief","title":"Gemini CLI and Claude Code Flaws Expose CI Secrets","date":"2026-08-05","url":"https://erroneo.us/security/briefs/gemini-cli-claude-code-ci-agent-flaws/","md":"https://erroneo.us/security/briefs/gemini-cli-claude-code-ci-agent-flaws/index.md","severity":"critical","kev":false,"epss":0.0052,"verdict":"check-exposure","cves":["CVE-2026-12537","CVE-2026-54316"],"summary":"If an AI coding agent runs in your CI on content outsiders can write (issues, PRs, comments), check versions and workflow permissions this week; laptop users on auto-update already have the fixes."},{"id":"CVE-2026-71319","type":"cve","title":"CVE-2026-71319: Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host","date":"2026-08-05","url":"https://erroneo.us/security/cve/CVE-2026-71319/","md":"https://erroneo.us/security/cve/CVE-2026-71319/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00629,"verdict":null,"product":"@nuxt/devtools (npm)"},{"id":"CVE-2026-63077","type":"cve","title":"CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","date":"2026-08-05","url":"https://erroneo.us/security/cve/CVE-2026-63077/","md":"https://erroneo.us/security/cve/CVE-2026-63077/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.8957,"verdict":"act-now","product":"JetBrains TeamCity"},{"id":"2026-08-05","type":"digest","title":"Security digest for August 5, 2026","date":"2026-08-05","url":"https://erroneo.us/security/2026-08-05/","md":"https://erroneo.us/security/2026-08-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"open-vsx-evil-twin-extensions-mangorbit","type":"brief","title":"Open VSX: 77 Evil-Twin Extensions Leak Developer Data","date":"2026-08-04","url":"https://erroneo.us/security/briefs/open-vsx-evil-twin-extensions-mangorbit/","md":"https://erroneo.us/security/briefs/open-vsx-evil-twin-extensions-mangorbit/index.md","severity":"medium","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Check whether any of the 77 extension IDs are installed or recommended in your workspaces and remove them; this was reconnaissance, not credential theft, so blanket secret rotation is not needed."},{"id":"langflow-cve-2026-9198-kev-unauthenticated-rce","type":"brief","title":"Langflow CVE-2026-9198: Exploited Unauthenticated RCE","date":"2026-08-04","url":"https://erroneo.us/security/briefs/langflow-cve-2026-9198-kev-unauthenticated-rce/","md":"https://erroneo.us/security/briefs/langflow-cve-2026-9198-kev-unauthenticated-rce/index.md","severity":"critical","kev":true,"epss":0.92808,"verdict":"act-now","cves":["CVE-2026-9198","CVE-2026-33017","CVE-2026-0770","CVE-2026-55255","CVE-2025-34291"],"summary":"Langflow is now the most repeatedly exploited AI-agent builder on CISA's list; any network-reachable instance below 1.10.1 should be patched today and checked for compromise."},{"id":"chaindrop-keyv-npm-worm","type":"brief","title":"ChainDrop: npm Worm Trojanizes keyv and cacheable Packages","date":"2026-08-04","url":"https://erroneo.us/security/briefs/chaindrop-keyv-npm-worm/","md":"https://erroneo.us/security/briefs/chaindrop-keyv-npm-worm/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"These are deep transitive dependencies of ESLint-style tooling and HTTP stacks, so many projects resolved them without choosing them; if a lockfile picked up a flagged version in August 2026, treat that host as compromised."},{"id":"CVE-2026-9198","type":"cve","title":"CVE-2026-9198: IBM Langflow Code Injection Vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-9198/","md":"https://erroneo.us/security/cve/CVE-2026-9198/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.28658,"verdict":"act-now","product":"IBM Langflow"},{"id":"CVE-2026-70478","type":"cve","title":"CVE-2026-70478: Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-70478/","md":"https://erroneo.us/security/cve/CVE-2026-70478/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00615,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-70477","type":"cve","title":"CVE-2026-70477: Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-70477/","md":"https://erroneo.us/security/cve/CVE-2026-70477/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00814,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-70470","type":"cve","title":"CVE-2026-70470: Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-70470/","md":"https://erroneo.us/security/cve/CVE-2026-70470/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00972,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69264","type":"cve","title":"CVE-2026-69264: Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69264/","md":"https://erroneo.us/security/cve/CVE-2026-69264/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01112,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69259","type":"cve","title":"CVE-2026-69259: Flowise RCE via SQLite Record Manager Node","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69259/","md":"https://erroneo.us/security/cve/CVE-2026-69259/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00821,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69256","type":"cve","title":"CVE-2026-69256: Flowise: Remote Code Execution Vulnerability in CSVAgent","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69256/","md":"https://erroneo.us/security/cve/CVE-2026-69256/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0101,"verdict":null,"product":"flowise-components (npm)"},{"id":"CVE-2026-69255","type":"cve","title":"CVE-2026-69255: Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69255/","md":"https://erroneo.us/security/cve/CVE-2026-69255/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00602,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69254","type":"cve","title":"CVE-2026-69254: Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69254/","md":"https://erroneo.us/security/cve/CVE-2026-69254/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00691,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69253","type":"cve","title":"CVE-2026-69253: Flowise Sandbox Escape to RCE","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69253/","md":"https://erroneo.us/security/cve/CVE-2026-69253/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00664,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-69251","type":"cve","title":"CVE-2026-69251: Flowise RCE via TypeORM DataSource","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-69251/","md":"https://erroneo.us/security/cve/CVE-2026-69251/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.02742,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-58045","type":"cve","title":"CVE-2026-58045: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-58045/","md":"https://erroneo.us/security/cve/CVE-2026-58045/index.md","severity":"medium","cvss":6.2,"kev":false,"epss":0.00167,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-58044","type":"cve","title":"CVE-2026-58044: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-58044/","md":"https://erroneo.us/security/cve/CVE-2026-58044/index.md","severity":"low","cvss":3.7,"kev":false,"epss":0.00271,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-58042","type":"cve","title":"CVE-2026-58042: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-58042/","md":"https://erroneo.us/security/cve/CVE-2026-58042/index.md","severity":"medium","cvss":5.9,"kev":false,"epss":0.00369,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-58041","type":"cve","title":"CVE-2026-58041: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-58041/","md":"https://erroneo.us/security/cve/CVE-2026-58041/index.md","severity":"medium","cvss":5.3,"kev":false,"epss":0.00287,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-56848","type":"cve","title":"CVE-2026-56848: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-56848/","md":"https://erroneo.us/security/cve/CVE-2026-56848/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.0049,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-56846","type":"cve","title":"CVE-2026-56846: nodejs node vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-56846/","md":"https://erroneo.us/security/cve/CVE-2026-56846/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.005,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-34486","type":"cve","title":"CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-34486/","md":"https://erroneo.us/security/cve/CVE-2026-34486/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.06561,"verdict":"check-exposure","product":"Apache Tomcat"},{"id":"CVE-2026-18556","type":"cve","title":"CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-08-04","url":"https://erroneo.us/security/cve/CVE-2026-18556/","md":"https://erroneo.us/security/cve/CVE-2026-18556/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.07882,"verdict":"act-now","product":"N-able N-central"},{"id":"2026-08-04","type":"digest","title":"Security digest for August 4, 2026","date":"2026-08-04","url":"https://erroneo.us/security/2026-08-04/","md":"https://erroneo.us/security/2026-08-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":3,"critical":10}},{"id":"CVE-2026-69240","type":"cve","title":"CVE-2026-69240: Sequelize: SQL Injection (Oracle DB)","date":"2026-08-03","url":"https://erroneo.us/security/cve/CVE-2026-69240/","md":"https://erroneo.us/security/cve/CVE-2026-69240/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0054,"verdict":null,"product":"sequelize (npm)"},{"id":"CVE-2026-18577","type":"cve","title":"CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-08-03","url":"https://erroneo.us/security/cve/CVE-2026-18577/","md":"https://erroneo.us/security/cve/CVE-2026-18577/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.14622,"verdict":"act-now","product":"N-able N-central"},{"id":"2026-08-03","type":"digest","title":"Security digest for August 3, 2026","date":"2026-08-03","url":"https://erroneo.us/security/2026-08-03/","md":"https://erroneo.us/security/2026-08-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"mlflow-cve-2026-64849-webhook-ssrf-cloud-metadata","type":"brief","title":"MLflow CVE-2026-64849: Exploited Unauthenticated SSRF","date":"2026-08-02","url":"https://erroneo.us/security/briefs/mlflow-cve-2026-64849-webhook-ssrf-cloud-metadata/","md":"https://erroneo.us/security/briefs/mlflow-cve-2026-64849-webhook-ssrf-cloud-metadata/index.md","severity":"critical","kev":true,"epss":0.09839,"verdict":"act-now","cves":["CVE-2026-64849"],"summary":"If an MLflow tracking server below 3.15.0 is reachable by anyone you do not fully trust, assume attackers can read your cloud instance credentials through it: upgrade today, then check webhooks and cloud audit logs."},{"id":"CVE-2026-8763","type":"cve","title":"CVE-2026-8763: Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI","date":"2026-08-02","url":"https://erroneo.us/security/cve/CVE-2026-8763/","md":"https://erroneo.us/security/cve/CVE-2026-8763/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0043,"verdict":null,"product":"org.bouncycastle:bc-fips (Maven)"},{"id":"2026-08-02","type":"digest","title":"Security digest for August 2, 2026","date":"2026-08-02","url":"https://erroneo.us/security/2026-08-02/","md":"https://erroneo.us/security/2026-08-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"n-able-n-central-auth-bypass-pre-auth-rce-kev","type":"brief","title":"N-able N-central: Exploited Auth Bypass and Pre-Auth RCE","date":"2026-08-01","url":"https://erroneo.us/security/briefs/n-able-n-central-auth-bypass-pre-auth-rce-kev/","md":"https://erroneo.us/security/briefs/n-able-n-central-auth-bypass-pre-auth-rce-kev/index.md","severity":"critical","kev":true,"epss":0.14622,"verdict":"act-now","cves":["CVE-2026-18556","CVE-2026-18577","CVE-2026-86218"],"summary":"Any self-hosted N-central server below 2026.3.1.14 should be treated as exposed and patched today, and any server that was patched late needs a compromise review, because one stolen RMM console reaches every managed endpoint."},{"id":"2026-08-01","type":"digest","title":"Security digest for August 1, 2026","date":"2026-08-01","url":"https://erroneo.us/security/2026-08-01/","md":"https://erroneo.us/security/2026-08-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2026-68770","type":"cve","title":"CVE-2026-68770: sentence-transformers local model loading bypasses trust_remote_code and executes custom Python","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-68770/","md":"https://erroneo.us/security/cve/CVE-2026-68770/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00909,"verdict":null,"product":"sentence-transformers (PyPI)"},{"id":"CVE-2026-58039","type":"cve","title":"CVE-2026-58039: nodejs node vulnerability","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-58039/","md":"https://erroneo.us/security/cve/CVE-2026-58039/index.md","severity":"low","cvss":3.3,"kev":false,"epss":0.00155,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-54725","type":"cve","title":"CVE-2026-54725: vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-54725/","md":"https://erroneo.us/security/cve/CVE-2026-54725/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00449,"verdict":null,"product":"github.com/bank-vaults/vault-secrets-webhook (Go)"},{"id":"CVE-2026-53609","type":"cve","title":"CVE-2026-53609: Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-53609/","md":"https://erroneo.us/security/cve/CVE-2026-53609/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0038,"verdict":null,"product":"apostrophe (npm)"},{"id":"CVE-2026-52887","type":"cve","title":"CVE-2026-52887: NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-52887/","md":"https://erroneo.us/security/cve/CVE-2026-52887/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00892,"verdict":null,"product":"@nocobase/plugin-notification-in-app-message (npm)"},{"id":"CVE-2026-52855","type":"cve","title":"CVE-2026-52855: Wings exposes node configuration secrets through egg configuration-file templating","date":"2026-07-31","url":"https://erroneo.us/security/cve/CVE-2026-52855/","md":"https://erroneo.us/security/cve/CVE-2026-52855/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00506,"verdict":null,"product":"github.com/pterodactyl/wings (Go)"},{"id":"2026-07-31","type":"digest","title":"Security digest for July 31, 2026","date":"2026-07-31","url":"https://erroneo.us/security/2026-07-31/","md":"https://erroneo.us/security/2026-07-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"anthropic-claude-evals-real-systems-pypi-package","type":"brief","title":"Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer","date":"2026-07-30","url":"https://erroneo.us/security/briefs/anthropic-claude-evals-real-systems-pypi-package/","md":"https://erroneo.us/security/briefs/anthropic-claude-evals-real-systems-pypi-package/index.md","severity":"medium","kev":false,"epss":null,"verdict":"most-can-relax","cves":[],"summary":"Unless Anthropic has contacted you, there is nothing to patch or rotate; the lesson is how one unvetted install of a brand-new package handed a security vendor's credentials to an agent."},{"id":"CVE-2026-67429","type":"cve","title":"CVE-2026-67429: Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-67429/","md":"https://erroneo.us/security/cve/CVE-2026-67429/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0077,"verdict":null,"product":"flyto-core (PyPI)"},{"id":"CVE-2026-67426","type":"cve","title":"CVE-2026-67426: Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-67426/","md":"https://erroneo.us/security/cve/CVE-2026-67426/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00507,"verdict":null,"product":"flyto-core (PyPI)"},{"id":"CVE-2026-66066","type":"cve","title":"CVE-2026-66066: Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-66066/","md":"https://erroneo.us/security/cve/CVE-2026-66066/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.27861,"verdict":null,"product":"activestorage (RubyGems)"},{"id":"CVE-2026-58043","type":"cve","title":"CVE-2026-58043: nodejs node vulnerability","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-58043/","md":"https://erroneo.us/security/cve/CVE-2026-58043/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00152,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-58040","type":"cve","title":"CVE-2026-58040: nodejs node vulnerability","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-58040/","md":"https://erroneo.us/security/cve/CVE-2026-58040/index.md","severity":"medium","cvss":6.3,"kev":false,"epss":0.00278,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-56850","type":"cve","title":"CVE-2026-56850: nodejs node vulnerability","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-56850/","md":"https://erroneo.us/security/cve/CVE-2026-56850/index.md","severity":"medium","cvss":4.1,"kev":false,"epss":0.00084,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2026-56847","type":"cve","title":"CVE-2026-56847: nodejs node vulnerability","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2026-56847/","md":"https://erroneo.us/security/cve/CVE-2026-56847/index.md","severity":"low","cvss":3.3,"kev":false,"epss":0.00158,"verdict":"patch-this-week","product":"nodejs node"},{"id":"CVE-2025-4318","type":"cve","title":"CVE-2025-4318: AWS Amplify Studio UI Component Properties Has an Input Validation Issue","date":"2026-07-30","url":"https://erroneo.us/security/cve/CVE-2025-4318/","md":"https://erroneo.us/security/cve/CVE-2025-4318/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00976,"verdict":null,"product":"@aws-amplify/codegen-ui-react (npm)"},{"id":"2026-07-30","type":"digest","title":"Security digest for July 30, 2026","date":"2026-07-30","url":"https://erroneo.us/security/2026-07-30/","md":"https://erroneo.us/security/2026-07-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":4}},{"id":"vmware-vcenter-syslog-rce-cve-2026-59310","type":"brief","title":"VMware vCenter CVE-2026-59310: Exploited Syslog RCE","date":"2026-07-29","url":"https://erroneo.us/security/briefs/vmware-vcenter-syslog-rce-cve-2026-59310/","md":"https://erroneo.us/security/briefs/vmware-vcenter-syslog-rce-cve-2026-59310/index.md","severity":"critical","kev":true,"epss":0.02565,"verdict":"act-now","cves":["CVE-2026-59310"],"summary":"If you run vCenter and have not installed Broadcom's July 29 fix, patch today and hunt for persistence; this is unauthenticated root code execution with hundreds of victims and ransomware use."},{"id":"nodejs-july-2026-security-releases","type":"brief","title":"Node.js July 2026 Security Releases: HTTP/2 and 11 CVEs","date":"2026-07-29","url":"https://erroneo.us/security/briefs/nodejs-july-2026-security-releases/","md":"https://erroneo.us/security/briefs/nodejs-july-2026-security-releases/index.md","severity":"high","kev":false,"epss":0.005,"verdict":"patch-this-week","cves":["CVE-2026-56846","CVE-2026-56848","CVE-2026-58043","CVE-2026-56850","CVE-2026-58040","CVE-2026-58041","CVE-2026-58042","CVE-2026-58045","CVE-2026-56847","CVE-2026-58039","CVE-2026-58044"],"summary":"Routine but real: upgrade every supported Node.js line this week, sooner if you terminate HTTP/2 in Node or rely on the Permission Model as a sandbox."},{"id":"cisco-fmc-cve-2026-20316-hard-coded-password","type":"brief","title":"Cisco FMC CVE-2026-20316: Exploited Hard-Coded Password","date":"2026-07-29","url":"https://erroneo.us/security/briefs/cisco-fmc-cve-2026-20316-hard-coded-password/","md":"https://erroneo.us/security/briefs/cisco-fmc-cve-2026-20316-hard-coded-password/index.md","severity":"high","kev":true,"epss":0.35096,"verdict":"act-now","cves":["CVE-2026-20316"],"summary":"If you run on-premises Cisco FMC and have not installed the July hot fix or a September hardening release, upgrade now and check for the published indicator; the login needs no guessing and CISA ties the bug to ransomware."},{"id":"CVE-2026-54735","type":"cve","title":"CVE-2026-54735: prebid-server's request forgery vulnerability allows for possible host environment data extraction","date":"2026-07-29","url":"https://erroneo.us/security/cve/CVE-2026-54735/","md":"https://erroneo.us/security/cve/CVE-2026-54735/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00611,"verdict":null,"product":"github.com/prebid/prebid-server/v4 (Go)"},{"id":"CVE-2026-54680","type":"cve","title":"CVE-2026-54680: Logging operator has Fluentd configuration injection that allows remote code execution","date":"2026-07-29","url":"https://erroneo.us/security/cve/CVE-2026-54680/","md":"https://erroneo.us/security/cve/CVE-2026-54680/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00785,"verdict":null,"product":"github.com/kube-logging/logging-operator (Go)"},{"id":"CVE-2026-20316","type":"cve","title":"CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","date":"2026-07-29","url":"https://erroneo.us/security/cve/CVE-2026-20316/","md":"https://erroneo.us/security/cve/CVE-2026-20316/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.35096,"verdict":"act-now","product":"Cisco Secure Firewall Management Center (FMC)"},{"id":"2026-07-29","type":"digest","title":"Security digest for July 29, 2026","date":"2026-07-29","url":"https://erroneo.us/security/2026-07-29/","md":"https://erroneo.us/security/2026-07-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":1,"critical":2}},{"id":"CVE-2026-64863","type":"cve","title":"CVE-2026-64863: goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite","date":"2026-07-28","url":"https://erroneo.us/security/cve/CVE-2026-64863/","md":"https://erroneo.us/security/cve/CVE-2026-64863/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00629,"verdict":null,"product":"goshs.de/goshs/v2 (Go)"},{"id":"CVE-2026-62325","type":"cve","title":"CVE-2026-62325: goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)","date":"2026-07-28","url":"https://erroneo.us/security/cve/CVE-2026-62325/","md":"https://erroneo.us/security/cve/CVE-2026-62325/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00589,"verdict":null,"product":"github.com/patrickhener/goshs/v2 (Go)"},{"id":"CVE-2026-54658","type":"cve","title":"CVE-2026-54658: @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution","date":"2026-07-28","url":"https://erroneo.us/security/cve/CVE-2026-54658/","md":"https://erroneo.us/security/cve/CVE-2026-54658/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00816,"verdict":null,"product":"@hypequery/clickhouse (npm)"},{"id":"CVE-2026-54588","type":"cve","title":"CVE-2026-54588: Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.","date":"2026-07-28","url":"https://erroneo.us/security/cve/CVE-2026-54588/","md":"https://erroneo.us/security/cve/CVE-2026-54588/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00543,"verdict":null,"product":"poweradmin/poweradmin (Composer (PHP))"},{"id":"CVE-2026-46428","type":"cve","title":"CVE-2026-46428: lettre has TLS hostname verification disabled when using Boring TLS backend","date":"2026-07-28","url":"https://erroneo.us/security/cve/CVE-2026-46428/","md":"https://erroneo.us/security/cve/CVE-2026-46428/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00319,"verdict":null,"product":"lettre (crates.io (Rust))"},{"id":"2026-07-28","type":"digest","title":"Security digest for July 28, 2026","date":"2026-07-28","url":"https://erroneo.us/security/2026-07-28/","md":"https://erroneo.us/security/2026-07-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"teamcity-cve-2026-63077-unauthenticated-rce","type":"brief","title":"TeamCity CVE-2026-63077: Unauthenticated RCE, Exploited","date":"2026-07-27","url":"https://erroneo.us/security/briefs/teamcity-cve-2026-63077-unauthenticated-rce/","md":"https://erroneo.us/security/briefs/teamcity-cve-2026-63077-unauthenticated-rce/index.md","severity":"critical","kev":true,"epss":0.8957,"verdict":"act-now","cves":["CVE-2026-63077"],"summary":"Any self-hosted TeamCity server below 2025.11.7 or 2026.1.3 that an attacker can reach over HTTP(S) can be taken over without credentials, and ransomware crews are using it; patch or apply the security patch plugin today, then check for intrusions."},{"id":"gitea-cve-2026-60004-diffpatch-git-hook-rce","type":"brief","title":"Gitea CVE-2026-60004: Exploited RCE via diffpatch API","date":"2026-07-27","url":"https://erroneo.us/security/briefs/gitea-cve-2026-60004-diffpatch-git-hook-rce/","md":"https://erroneo.us/security/briefs/gitea-cve-2026-60004-diffpatch-git-hook-rce/index.md","severity":"critical","kev":true,"epss":0.23988,"verdict":"act-now","cves":["CVE-2026-60004"],"summary":"Upgrade every self-hosted Gitea below 1.27.1 today and close open registration; automated attacks sign up, create a repo and get a shell in seconds, and a proof of concept is public."},{"id":"arista-velocloud-orchestrator-cve-2026-16812-93952-exploited-rce","type":"brief","title":"Arista VeloCloud Orchestrator: Two Exploited CVSS 10 Flaws","date":"2026-07-27","url":"https://erroneo.us/security/briefs/arista-velocloud-orchestrator-cve-2026-16812-93952-exploited-rce/","md":"https://erroneo.us/security/briefs/arista-velocloud-orchestrator-cve-2026-16812-93952-exploited-rce/index.md","severity":"critical","kev":true,"epss":0.01062,"verdict":"act-now","cves":["CVE-2026-16812","CVE-2026-93952"],"summary":"On-prem VCO operators should move to 5.2.3.16 or 6.4.2.8 now, lock the web interface down and hunt for the published backdoor files; both flaws are exploited, and the July fixes do not cover the September bug."},{"id":"CVE-2026-16812","type":"cve","title":"CVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","date":"2026-07-27","url":"https://erroneo.us/security/cve/CVE-2026-16812/","md":"https://erroneo.us/security/cve/CVE-2026-16812/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.01001,"verdict":"act-now","product":"Arista VeloCloud Orchestrator"},{"id":"CVE-2025-68686","type":"cve","title":"CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","date":"2026-07-27","url":"https://erroneo.us/security/cve/CVE-2025-68686/","md":"https://erroneo.us/security/cve/CVE-2025-68686/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.29499,"verdict":"check-exposure","product":"Fortinet FortiOS"},{"id":"2026-07-27","type":"digest","title":"Security digest for July 27, 2026","date":"2026-07-27","url":"https://erroneo.us/security/2026-07-27/","md":"https://erroneo.us/security/2026-07-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":3,"kev":2,"critical":0}},{"id":"GHSA-w28w-gp39-m4p6","type":"ghsa","title":"Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-w28w-gp39-m4p6/","md":"https://erroneo.us/security/ghsa/GHSA-w28w-gp39-m4p6/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"@prompty/core, @prompty/core"},{"id":"GHSA-rjg6-39jm-rgg4","type":"ghsa","title":"@better-auth/scim: account takeover and stale access via SCIM provider-id collision","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-rjg6-39jm-rgg4/","md":"https://erroneo.us/security/ghsa/GHSA-rjg6-39jm-rgg4/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"@better-auth/scim, @better-auth/scim"},{"id":"GHSA-r277-6w6q-xmqw","type":"ghsa","title":"kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-r277-6w6q-xmqw/","md":"https://erroneo.us/security/ghsa/GHSA-r277-6w6q-xmqw/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/getkin/kin-openapi"},{"id":"GHSA-mqhr-6j6h-74p5","type":"ghsa","title":"Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-mqhr-6j6h-74p5/","md":"https://erroneo.us/security/ghsa/GHSA-mqhr-6j6h-74p5/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"@budibase/server"},{"id":"GHSA-f25v-x6vr-962g","type":"ghsa","title":"Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-f25v-x6vr-962g/","md":"https://erroneo.us/security/ghsa/GHSA-f25v-x6vr-962g/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"pheditor/pheditor"},{"id":"GHSA-68r5-9hpg-7qw9","type":"ghsa","title":"OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway","date":"2026-07-24","url":"https://erroneo.us/security/ghsa/GHSA-68r5-9hpg-7qw9/","md":"https://erroneo.us/security/ghsa/GHSA-68r5-9hpg-7qw9/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":null,"verdict":null,"product":"org.openidentityplatform.opendj:opendj-dsml-servlet"},{"id":"CVE-2026-73649","type":"cve","title":"CVE-2026-73649: Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73649/","md":"https://erroneo.us/security/cve/CVE-2026-73649/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00726,"verdict":null,"product":"velocityjs (npm)"},{"id":"CVE-2026-73644","type":"cve","title":"CVE-2026-73644: OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73644/","md":"https://erroneo.us/security/cve/CVE-2026-73644/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00413,"verdict":null,"product":"org.openidentityplatform.opendj:opendj-server-legacy (Maven)"},{"id":"CVE-2026-73567","type":"cve","title":"CVE-2026-73567: sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73567/","md":"https://erroneo.us/security/cve/CVE-2026-73567/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00444,"verdict":null,"product":"sm-crypto (npm)"},{"id":"CVE-2026-73414","type":"cve","title":"CVE-2026-73414: Shescape: Shell injection via unescaped parentheses on Windows with CMD","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73414/","md":"https://erroneo.us/security/cve/CVE-2026-73414/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00889,"verdict":null,"product":"shescape (npm)"},{"id":"CVE-2026-73302","type":"cve","title":"CVE-2026-73302: Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73302/","md":"https://erroneo.us/security/cve/CVE-2026-73302/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00427,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-73300","type":"cve","title":"CVE-2026-73300: Budibase: SQL Injection via `multipleStatements: true`","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-73300/","md":"https://erroneo.us/security/cve/CVE-2026-73300/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00565,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-62379","type":"cve","title":"CVE-2026-62379: OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-62379/","md":"https://erroneo.us/security/cve/CVE-2026-62379/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01066,"verdict":null,"product":"org.openidentityplatform.openam:openam-core (Maven)"},{"id":"CVE-2026-62263","type":"cve","title":"CVE-2026-62263: OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-62263/","md":"https://erroneo.us/security/cve/CVE-2026-62263/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0086,"verdict":null,"product":"org.openidentityplatform.openam:openam-auth-webauthn (Maven)"},{"id":"CVE-2026-59940","type":"cve","title":"CVE-2026-59940: seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-59940/","md":"https://erroneo.us/security/cve/CVE-2026-59940/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00812,"verdict":null,"product":"seroval (npm)"},{"id":"CVE-2026-59865","type":"cve","title":"CVE-2026-59865: Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-59865/","md":"https://erroneo.us/security/cve/CVE-2026-59865/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.04359,"verdict":null,"product":"Microsoft.OpenApi.Kiota (NuGet)"},{"id":"CVE-2026-59864","type":"cve","title":"CVE-2026-59864: Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions","date":"2026-07-24","url":"https://erroneo.us/security/cve/CVE-2026-59864/","md":"https://erroneo.us/security/cve/CVE-2026-59864/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01331,"verdict":null,"product":"Microsoft.OpenApi.Kiota (NuGet)"},{"id":"2026-07-24","type":"digest","title":"Security digest for July 24, 2026","date":"2026-07-24","url":"https://erroneo.us/security/2026-07-24/","md":"https://erroneo.us/security/2026-07-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":17}},{"id":"CVE-2026-73421","type":"cve","title":"CVE-2026-73421: Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)","date":"2026-07-23","url":"https://erroneo.us/security/cve/CVE-2026-73421/","md":"https://erroneo.us/security/cve/CVE-2026-73421/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00643,"verdict":null,"product":"next-auth (npm)"},{"id":"CVE-2026-73420","type":"cve","title":"CVE-2026-73420: Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass","date":"2026-07-23","url":"https://erroneo.us/security/cve/CVE-2026-73420/","md":"https://erroneo.us/security/cve/CVE-2026-73420/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00725,"verdict":null,"product":"@auth/core (npm)"},{"id":"CVE-2026-16723","type":"cve","title":"CVE-2026-16723: fastjson has a remote code execution (RCE) vulnerability","date":"2026-07-23","url":"https://erroneo.us/security/cve/CVE-2026-16723/","md":"https://erroneo.us/security/cve/CVE-2026-16723/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00663,"verdict":null,"product":"com.alibaba:fastjson (Maven)"},{"id":"2026-07-23","type":"digest","title":"Security digest for July 23, 2026","date":"2026-07-23","url":"https://erroneo.us/security/2026-07-23/","md":"https://erroneo.us/security/2026-07-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"check-point-smartconsole-cve-2026-16232-auth-bypass","type":"brief","title":"Check Point CVE-2026-16232: Exploited Management Auth Bypass","date":"2026-07-22","url":"https://erroneo.us/security/briefs/check-point-smartconsole-cve-2026-16232-auth-bypass/","md":"https://erroneo.us/security/briefs/check-point-smartconsole-cve-2026-16232-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.77972,"verdict":"patch-this-week","cves":["CVE-2026-16232"],"summary":"Install the July 2026 Jumbo Hotfix on every Check Point management server this week, and today if the server is reachable from the internet with unrestricted Trusted Clients; that is the setup attackers used to take full admin control."},{"id":"CVE-2026-50522","type":"cve","title":"CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","date":"2026-07-22","url":"https://erroneo.us/security/cve/CVE-2026-50522/","md":"https://erroneo.us/security/cve/CVE-2026-50522/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.03042,"verdict":"act-now","product":"Microsoft SharePoint"},{"id":"CVE-2026-16232","type":"cve","title":"CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability","date":"2026-07-22","url":"https://erroneo.us/security/cve/CVE-2026-16232/","md":"https://erroneo.us/security/cve/CVE-2026-16232/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.77972,"verdict":"patch-this-week","product":"Check Point SmartConsole"},{"id":"2026-07-22","type":"digest","title":"Security digest for July 22, 2026","date":"2026-07-22","url":"https://erroneo.us/security/2026-07-22/","md":"https://erroneo.us/security/2026-07-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":0}},{"id":"CVE-2026-73653","type":"cve","title":"CVE-2026-73653: @vitest/browser: Browser Mode provider commands bypass the file-access permission gate","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-73653/","md":"https://erroneo.us/security/cve/CVE-2026-73653/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0079,"verdict":null,"product":"@vitest/browser (npm)"},{"id":"CVE-2026-64825","type":"cve","title":"CVE-2026-64825: Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-64825/","md":"https://erroneo.us/security/cve/CVE-2026-64825/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0058,"verdict":null,"product":"homeassistant (PyPI)"},{"id":"CVE-2026-63030","type":"cve","title":"CVE-2026-63030: WordPress Core Interpretation Conflict Vulnerability","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-63030/","md":"https://erroneo.us/security/cve/CVE-2026-63030/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.10649,"verdict":"act-now","product":"WordPress Core"},{"id":"CVE-2026-60137","type":"cve","title":"CVE-2026-60137: WordPress Core SQL Injection Vulnerability","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-60137/","md":"https://erroneo.us/security/cve/CVE-2026-60137/index.md","severity":"medium","cvss":5.9,"kev":true,"epss":0.05323,"verdict":"act-now","product":"WordPress Core"},{"id":"CVE-2026-59891","type":"cve","title":"CVE-2026-59891: Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-59891/","md":"https://erroneo.us/security/cve/CVE-2026-59891/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00473,"verdict":null,"product":"@sigstore/oci (npm)"},{"id":"CVE-2026-58443","type":"cve","title":"CVE-2026-58443: Gitea: Public-only repository tokens can update private PR head branches","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-58443/","md":"https://erroneo.us/security/cve/CVE-2026-58443/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00579,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-58426","type":"cve","title":"CVE-2026-58426: Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-58426/","md":"https://erroneo.us/security/cve/CVE-2026-58426/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00301,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-56750","type":"cve","title":"CVE-2026-56750: Gitea Remember-Me Token Theft Not Invalidating Attacker Session","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-56750/","md":"https://erroneo.us/security/cve/CVE-2026-56750/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00479,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-22874","type":"cve","title":"CVE-2026-22874: Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-22874/","md":"https://erroneo.us/security/cve/CVE-2026-22874/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00464,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-20896","type":"cve","title":"CVE-2026-20896: Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-20896/","md":"https://erroneo.us/security/cve/CVE-2026-20896/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02755,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-0770","type":"cve","title":"CVE-2026-0770: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2026-0770/","md":"https://erroneo.us/security/cve/CVE-2026-0770/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.62562,"verdict":"act-now","product":"Langflow Langflow"},{"id":"CVE-2021-27137","type":"cve","title":"CVE-2021-27137: DD-WRT Stack-Based Buffer Overflow Vulnerability","date":"2026-07-21","url":"https://erroneo.us/security/cve/CVE-2021-27137/","md":"https://erroneo.us/security/cve/CVE-2021-27137/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.03995,"verdict":"check-exposure","product":"DD-WRT DD-WRT"},{"id":"2026-07-21","type":"digest","title":"Security digest for July 21, 2026","date":"2026-07-21","url":"https://erroneo.us/security/2026-07-21/","md":"https://erroneo.us/security/2026-07-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":8}},{"id":"zimbra-snmp-command-injection-cve-2026-73570","type":"brief","title":"Zimbra CVE-2026-73570: Exploited SNMP Command Injection","date":"2026-07-20","url":"https://erroneo.us/security/briefs/zimbra-snmp-command-injection-cve-2026-73570/","md":"https://erroneo.us/security/briefs/zimbra-snmp-command-injection-cve-2026-73570/index.md","severity":"high","kev":true,"epss":0.71663,"verdict":"check-exposure","cves":["CVE-2026-73570"],"summary":"If you run Zimbra below 10.1.20, check today whether the optional zimbra-snmp package is installed with SNMP notifications on; if it is, patch and hunt for web shells, because hundreds of such servers have been compromised."},{"id":"CVE-2026-61740","type":"cve","title":"CVE-2026-61740: LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection","date":"2026-07-20","url":"https://erroneo.us/security/cve/CVE-2026-61740/","md":"https://erroneo.us/security/cve/CVE-2026-61740/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00662,"verdict":null,"product":"lightrag-hku (PyPI)"},{"id":"CVE-2026-61736","type":"cve","title":"CVE-2026-61736: LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests","date":"2026-07-20","url":"https://erroneo.us/security/cve/CVE-2026-61736/","md":"https://erroneo.us/security/cve/CVE-2026-61736/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01422,"verdict":null,"product":"lightrag-hku (PyPI)"},{"id":"CVE-2026-59873","type":"cve","title":"CVE-2026-59873: node-tar: Decompression/parse DoS via unlimited input","date":"2026-07-20","url":"https://erroneo.us/security/cve/CVE-2026-59873/","md":"https://erroneo.us/security/cve/CVE-2026-59873/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00582,"verdict":null,"product":"tar (npm)"},{"id":"2026-07-20","type":"digest","title":"Security digest for July 20, 2026","date":"2026-07-20","url":"https://erroneo.us/security/2026-07-20/","md":"https://erroneo.us/security/2026-07-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"wordpress-7-0-2-rest-batch-sqli-rce-cve-2026-63030","type":"brief","title":"WordPress 7.0.2: REST Batch + SQL Injection Chain to RCE","date":"2026-07-17","url":"https://erroneo.us/security/briefs/wordpress-7-0-2-rest-batch-sqli-rce-cve-2026-63030/","md":"https://erroneo.us/security/briefs/wordpress-7-0-2-rest-batch-sqli-rce-cve-2026-63030/index.md","severity":"critical","kev":true,"epss":0.10649,"verdict":"act-now","cves":["CVE-2026-63030","CVE-2026-60137"],"summary":"Core WordPress 6.9 and 7.0 sites were exposed to unauthenticated remote code execution that is now exploited; most sites got a forced update, so your job is to confirm every one actually did."},{"id":"2026-07-17","type":"digest","title":"Security digest for July 17, 2026","date":"2026-07-17","url":"https://erroneo.us/security/2026-07-17/","md":"https://erroneo.us/security/2026-07-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"hugging-face-breach-openai-evaluation-agents","type":"brief","title":"Hugging Face Breached by Escaped OpenAI Evaluation Agents","date":"2026-07-16","url":"https://erroneo.us/security/briefs/hugging-face-breach-openai-evaluation-agents/","md":"https://erroneo.us/security/briefs/hugging-face-breach-openai-evaluation-agents/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Hugging Face found no tampering with public models, datasets, Spaces or packages, so most users only need the token rotation it recommended; anyone who ever exposed a write token publicly should assume it was found and used."},{"id":"CVE-2026-58644","type":"cve","title":"CVE-2026-58644: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-58644/","md":"https://erroneo.us/security/cve/CVE-2026-58644/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.15873,"verdict":"act-now","product":"Microsoft SharePoint"},{"id":"CVE-2026-55579","type":"cve","title":"CVE-2026-55579: Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-55579/","md":"https://erroneo.us/security/cve/CVE-2026-55579/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00792,"verdict":null,"product":"pheditor/pheditor (Composer (PHP))"},{"id":"CVE-2026-53713","type":"cve","title":"CVE-2026-53713: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-53713/","md":"https://erroneo.us/security/cve/CVE-2026-53713/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00433,"verdict":null,"product":"github.com/envoyproxy/gateway (Go)"},{"id":"CVE-2026-39808","type":"cve","title":"CVE-2026-39808: Fortinet FortiSandbox OS Command Injection Vulnerability","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-39808/","md":"https://erroneo.us/security/cve/CVE-2026-39808/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.47362,"verdict":"act-now","product":"Fortinet FortiSandbox"},{"id":"CVE-2026-25089","type":"cve","title":"CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-25089/","md":"https://erroneo.us/security/cve/CVE-2026-25089/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.76112,"verdict":"act-now","product":"Fortinet FortiSandbox"},{"id":"CVE-2026-15925","type":"cve","title":"CVE-2026-15925: Snowflake Connector for Python improperly verifies TLS hostnames","date":"2026-07-16","url":"https://erroneo.us/security/cve/CVE-2026-15925/","md":"https://erroneo.us/security/cve/CVE-2026-15925/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00288,"verdict":null,"product":"snowflake-connector-python (PyPI)"},{"id":"2026-07-16","type":"digest","title":"Security digest for July 16, 2026","date":"2026-07-16","url":"https://erroneo.us/security/2026-07-16/","md":"https://erroneo.us/security/2026-07-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":3}},{"id":"CVE-2026-54466","type":"cve","title":"CVE-2026-54466: websocket-driver: Message corruption via abuse of protocol length headers","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2026-54466/","md":"https://erroneo.us/security/cve/CVE-2026-54466/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0038,"verdict":null,"product":"websocket-driver (npm)"},{"id":"CVE-2026-52881","type":"cve","title":"CVE-2026-52881: MantisBT: Reflected XSS in admin/install.php via unescaped printf","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2026-52881/","md":"https://erroneo.us/security/cve/CVE-2026-52881/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"mantisbt/mantisbt (Composer (PHP))"},{"id":"CVE-2026-52847","type":"cve","title":"CVE-2026-52847: MantisBT: Reflected XSS in admin/install.php","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2026-52847/","md":"https://erroneo.us/security/cve/CVE-2026-52847/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"mantisbt/mantisbt (Composer (PHP))"},{"id":"CVE-2026-47156","type":"cve","title":"CVE-2026-47156: MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2026-47156/","md":"https://erroneo.us/security/cve/CVE-2026-47156/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00686,"verdict":null,"product":"mantisbt/mantisbt (Composer (PHP))"},{"id":"CVE-2026-46817","type":"cve","title":"CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2026-46817/","md":"https://erroneo.us/security/cve/CVE-2026-46817/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.00814,"verdict":"act-now","product":"Oracle E-Business Suite"},{"id":"CVE-2025-65720","type":"cve","title":"CVE-2025-65720: GPT Researcher MCP STDIO configuration allows remote command execution","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2025-65720/","md":"https://erroneo.us/security/cve/CVE-2025-65720/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00722,"verdict":null,"product":"gpt-researcher (PyPI)"},{"id":"CVE-2023-4346","type":"cve","title":"CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","date":"2026-07-15","url":"https://erroneo.us/security/cve/CVE-2023-4346/","md":"https://erroneo.us/security/cve/CVE-2023-4346/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.01294,"verdict":"check-exposure","product":"KNX Association KNX Protocol Connection Authorization Option 1"},{"id":"2026-07-15","type":"digest","title":"Security digest for July 15, 2026","date":"2026-07-15","url":"https://erroneo.us/security/2026-07-15/","md":"https://erroneo.us/security/2026-07-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":5}},{"id":"sonicwall-sma1000-zero-days-cve-2026-15409-83548","type":"brief","title":"SonicWall SMA1000: Two Rounds of Exploited Zero-Days","date":"2026-07-14","url":"https://erroneo.us/security/briefs/sonicwall-sma1000-zero-days-cve-2026-15409-83548/","md":"https://erroneo.us/security/briefs/sonicwall-sma1000-zero-days-cve-2026-15409-83548/index.md","severity":"critical","kev":true,"epss":0.11791,"verdict":"act-now","cves":["CVE-2026-15409","CVE-2026-15410","CVE-2026-83548","CVE-2026-83549"],"summary":"If you run an SMA1000 appliance, install the September hotfix and check it for compromise today; the July fix alone does not cover the second pair of exploited bugs."},{"id":"sharepoint-cve-2026-58644-50522-55040-65660-exploited","type":"brief","title":"SharePoint: Four July-August 2026 Flaws Now Exploited","date":"2026-07-14","url":"https://erroneo.us/security/briefs/sharepoint-cve-2026-58644-50522-55040-65660-exploited/","md":"https://erroneo.us/security/briefs/sharepoint-cve-2026-58644-50522-55040-65660-exploited/index.md","severity":"critical","kev":true,"epss":0.69536,"verdict":"act-now","cves":["CVE-2026-58644","CVE-2026-50522","CVE-2026-55040","CVE-2026-65660"],"summary":"Any on-premises SharePoint farm not yet on the August 2026 builds is exposed to exploited bugs with public exploit code; patch, rotate machine keys and check for compromise now."},{"id":"sharepoint-cve-2026-56164-zero-day","type":"brief","title":"SharePoint CVE-2026-56164: Exploited Unauthenticated 0-Day","date":"2026-07-14","url":"https://erroneo.us/security/briefs/sharepoint-cve-2026-56164-zero-day/","md":"https://erroneo.us/security/briefs/sharepoint-cve-2026-56164-zero-day/index.md","severity":"critical","kev":true,"epss":0.02704,"verdict":"act-now","cves":["CVE-2026-56164","CVE-2026-45659"],"summary":"Ignore the modest vendor score: this was exploited as a zero-day against on-prem SharePoint, so internet-facing farms need the July 2026 updates, a machine-key rotation and a compromise check now."},{"id":"sangoma-switchvox-cve-2026-9586-pre-auth-sqli-rce","type":"brief","title":"Sangoma Switchvox CVE-2026-9586: Pre-Auth SQLi to RCE","date":"2026-07-14","url":"https://erroneo.us/security/briefs/sangoma-switchvox-cve-2026-9586-pre-auth-sqli-rce/","md":"https://erroneo.us/security/briefs/sangoma-switchvox-cve-2026-9586-pre-auth-sqli-rce/index.md","severity":"critical","kev":true,"epss":0.18979,"verdict":"act-now","cves":["CVE-2026-9586"],"summary":"A single unauthenticated request turns an unpatched Switchvox PBX into a shell; if yours is below 8.4.0.2 and reachable from the internet, upgrade today and check it for compromise."},{"id":"microsoft-ad-fs-cve-2026-56155-dkm-acl-privilege-escalation","type":"brief","title":"AD FS CVE-2026-56155: Exploited EoP via Weak DKM Key ACLs","date":"2026-07-14","url":"https://erroneo.us/security/briefs/microsoft-ad-fs-cve-2026-56155-dkm-acl-privilege-escalation/","md":"https://erroneo.us/security/briefs/microsoft-ad-fs-cve-2026-56155-dkm-acl-privilege-escalation/index.md","severity":"high","kev":true,"epss":0.00346,"verdict":"patch-this-week","cves":["CVE-2026-56155"],"summary":"If you run AD FS, install the October 2026 or later Windows update on every farm server this week and confirm the DKM container ACL was fixed; unless you opted in, the July patch only flagged the weak permissions."},{"id":"asyncapi-npm-pwn-request-miasma-rat","type":"brief","title":"AsyncAPI npm Packages Backdoored via pull_request_target","date":"2026-07-14","url":"https://erroneo.us/security/briefs/asyncapi-npm-pwn-request-miasma-rat/","md":"https://erroneo.us/security/briefs/asyncapi-npm-pwn-request-miasma-rat/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"If any build resolved @asyncapi/specs 6.11.2 or the July 14 generator releases, treat that machine as backdoored; everyone else should still fix their own pull_request_target workflows."},{"id":"GHSA-hgjx-r89m-m7v4","type":"ghsa","title":"FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to   RCE","date":"2026-07-14","url":"https://erroneo.us/security/ghsa/GHSA-hgjx-r89m-m7v4/","md":"https://erroneo.us/security/ghsa/GHSA-hgjx-r89m-m7v4/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"facturascripts/facturascripts"},{"id":"GHSA-9hc2-hjx8-q6pv","type":"ghsa","title":"TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution","date":"2026-07-14","url":"https://erroneo.us/security/ghsa/GHSA-9hc2-hjx8-q6pv/","md":"https://erroneo.us/security/ghsa/GHSA-9hc2-hjx8-q6pv/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"tidgi"},{"id":"CVE-2026-56164","type":"cve","title":"CVE-2026-56164: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-56164/","md":"https://erroneo.us/security/cve/CVE-2026-56164/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.01011,"verdict":"act-now","product":"Microsoft SharePoint Server"},{"id":"CVE-2026-56155","type":"cve","title":"CVE-2026-56155: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-56155/","md":"https://erroneo.us/security/cve/CVE-2026-56155/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00346,"verdict":"patch-this-week","product":"Microsoft Active Directory Federation Services"},{"id":"CVE-2026-54052","type":"cve","title":"CVE-2026-54052: n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-54052/","md":"https://erroneo.us/security/cve/CVE-2026-54052/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00388,"verdict":null,"product":"n8n-mcp (npm)"},{"id":"CVE-2026-50006","type":"cve","title":"CVE-2026-50006: Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-50006/","md":"https://erroneo.us/security/cve/CVE-2026-50006/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00973,"verdict":null,"product":"github.com/julien040/anyquery (Go)"},{"id":"CVE-2026-45262","type":"cve","title":"CVE-2026-45262: FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-45262/","md":"https://erroneo.us/security/cve/CVE-2026-45262/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"facturascripts/facturascripts (Composer (PHP))"},{"id":"CVE-2026-15410","type":"cve","title":"CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-15410/","md":"https://erroneo.us/security/cve/CVE-2026-15410/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.11791,"verdict":"act-now","product":"SonicWall SMA1000 Appliances"},{"id":"CVE-2026-15409","type":"cve","title":"CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","date":"2026-07-14","url":"https://erroneo.us/security/cve/CVE-2026-15409/","md":"https://erroneo.us/security/cve/CVE-2026-15409/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.06795,"verdict":"act-now","product":"SonicWall SMA1000 Appliances"},{"id":"2026-07-14","type":"digest","title":"Security digest for July 14, 2026","date":"2026-07-14","url":"https://erroneo.us/security/2026-07-14/","md":"https://erroneo.us/security/2026-07-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":6,"kev":4,"critical":5}},{"id":"servicenow-cve-2026-6875-sandbox-escape-rce","type":"brief","title":"ServiceNow CVE-2026-6875: Pre-Auth Sandbox Escape RCE","date":"2026-07-13","url":"https://erroneo.us/security/briefs/servicenow-cve-2026-6875-sandbox-escape-rce/","md":"https://erroneo.us/security/briefs/servicenow-cve-2026-6875-sandbox-escape-rce/index.md","severity":"critical","kev":false,"epss":0.01426,"verdict":"check-exposure","cves":["CVE-2026-6875"],"summary":"ServiceNow-hosted customers were protected in April; the real risk is self-hosted and partner-hosted instances that have not taken the July 13, 2026 patches."},{"id":"cisco-ios-12-4-csrf-cve-2008-4128-fsb-kev","type":"brief","title":"Cisco IOS CVE-2008-4128: 18-Year-Old CSRF in CISA KEV","date":"2026-07-13","url":"https://erroneo.us/security/briefs/cisco-ios-12-4-csrf-cve-2008-4128-fsb-kev/","md":"https://erroneo.us/security/briefs/cisco-ios-12-4-csrf-cve-2008-4128-fsb-kev/index.md","severity":"high","kev":true,"epss":0.33871,"verdict":"check-exposure","cves":["CVE-2008-4128"],"summary":"Only organizations still running retired IOS 12.4 routers are exposed, but a Russian state unit is using this bug; find those boxes, turn off their web server today and replace them."},{"id":"CVE-2026-6875","type":"cve","title":"CVE-2026-6875: Sandbox Escape in ServiceNow AI Platform","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-6875/","md":"https://erroneo.us/security/cve/CVE-2026-6875/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.01426,"verdict":"check-exposure","product":"ServiceNow ServiceNow AI Platform"},{"id":"CVE-2026-61667","type":"cve","title":"CVE-2026-61667: DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-61667/","md":"https://erroneo.us/security/cve/CVE-2026-61667/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01213,"verdict":null,"product":"DIRAC (PyPI)"},{"id":"CVE-2026-52824","type":"cve","title":"CVE-2026-52824: Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-52824/","md":"https://erroneo.us/security/cve/CVE-2026-52824/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01333,"verdict":null,"product":"kimai/kimai (Composer (PHP))"},{"id":"CVE-2026-47677","type":"cve","title":"CVE-2026-47677: FacturaScripts: Account takeover of any 2FA-enabled user","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-47677/","md":"https://erroneo.us/security/cve/CVE-2026-47677/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"facturascripts/facturascripts (Composer (PHP))"},{"id":"CVE-2026-45579","type":"cve","title":"CVE-2026-45579: DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-45579/","md":"https://erroneo.us/security/cve/CVE-2026-45579/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00864,"verdict":null,"product":"DIRAC (PyPI)"},{"id":"CVE-2026-27690","type":"cve","title":"CVE-2026-27690: SAP Approuter Vulnerable to HTTP Request Smuggling","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2026-27690/","md":"https://erroneo.us/security/cve/CVE-2026-27690/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00682,"verdict":null,"product":"@sap/approuter (npm)"},{"id":"CVE-2008-4128","type":"cve","title":"CVE-2008-4128: Cisco IOS Cross-Site Request Forgery Vulnerability","date":"2026-07-13","url":"https://erroneo.us/security/cve/CVE-2008-4128/","md":"https://erroneo.us/security/cve/CVE-2008-4128/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.33871,"verdict":"check-exposure","product":"Cisco IOS"},{"id":"2026-07-13","type":"digest","title":"Security digest for July 13, 2026","date":"2026-07-13","url":"https://erroneo.us/security/2026-07-13/","md":"https://erroneo.us/security/2026-07-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":1,"critical":5}},{"id":"jscrambler-npm-compromise-infostealer","type":"brief","title":"jscrambler npm Compromise: Infostealer in CLI Releases","date":"2026-07-11","url":"https://erroneo.us/security/briefs/jscrambler-npm-compromise-infostealer/","md":"https://erroneo.us/security/briefs/jscrambler-npm-compromise-infostealer/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Only builds that installed one of the poisoned versions during a roughly three-hour window on July 11 are at risk, but any machine that did should be treated as compromised."},{"id":"2026-07-11","type":"digest","title":"Security digest for July 11, 2026","date":"2026-07-11","url":"https://erroneo.us/security/2026-07-11/","md":"https://erroneo.us/security/2026-07-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"GHSA-g936-7jqj-mwv8","type":"ghsa","title":"TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation","date":"2026-07-10","url":"https://erroneo.us/security/ghsa/GHSA-g936-7jqj-mwv8/","md":"https://erroneo.us/security/ghsa/GHSA-g936-7jqj-mwv8/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/almeidapaulopt/tsdproxy"},{"id":"GHSA-99j7-fhr2-xfj4","type":"ghsa","title":"`exploration` was removed from crates.io for malicious code","date":"2026-07-10","url":"https://erroneo.us/security/ghsa/GHSA-99j7-fhr2-xfj4/","md":"https://erroneo.us/security/ghsa/GHSA-99j7-fhr2-xfj4/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"exploration"},{"id":"CVE-2026-61459","type":"cve","title":"CVE-2026-61459: mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-61459/","md":"https://erroneo.us/security/cve/CVE-2026-61459/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02362,"verdict":null,"product":"mcp-server-kubernetes (PyPI)"},{"id":"CVE-2026-56291","type":"cve","title":"CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-56291/","md":"https://erroneo.us/security/cve/CVE-2026-56291/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.14854,"verdict":"check-exposure","product":"Balbooa Forms"},{"id":"CVE-2026-54159","type":"cve","title":"CVE-2026-54159: prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54159/","md":"https://erroneo.us/security/cve/CVE-2026-54159/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0075,"verdict":null,"product":"prestashop/ps_facetedsearch (Composer (PHP))"},{"id":"CVE-2026-54158","type":"cve","title":"CVE-2026-54158: SiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54158/","md":"https://erroneo.us/security/cve/CVE-2026-54158/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00509,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-54089","type":"cve","title":"CVE-2026-54089: File Browser: Authentication Bypass via Proxy Auth Header Forgery","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54089/","md":"https://erroneo.us/security/cve/CVE-2026-54089/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00612,"verdict":null,"product":"github.com/filebrowser/filebrowser/v2 (Go)"},{"id":"CVE-2026-54088","type":"cve","title":"CVE-2026-54088: File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54088/","md":"https://erroneo.us/security/cve/CVE-2026-54088/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00764,"verdict":null,"product":"github.com/filebrowser/filebrowser/v2 (Go)"},{"id":"CVE-2026-54072","type":"cve","title":"CVE-2026-54072: Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54072/","md":"https://erroneo.us/security/cve/CVE-2026-54072/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00463,"verdict":null,"product":"github.com/authorizerdev/authorizer (Go)"},{"id":"CVE-2026-54069","type":"cve","title":"CVE-2026-54069: SiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54069/","md":"https://erroneo.us/security/cve/CVE-2026-54069/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00579,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-54067","type":"cve","title":"CVE-2026-54067: SiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-54067/","md":"https://erroneo.us/security/cve/CVE-2026-54067/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00541,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-50551","type":"cve","title":"CVE-2026-50551: SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-50551/","md":"https://erroneo.us/security/cve/CVE-2026-50551/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00776,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-48939","type":"cve","title":"CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2026-07-10","url":"https://erroneo.us/security/cve/CVE-2026-48939/","md":"https://erroneo.us/security/cve/CVE-2026-48939/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.20069,"verdict":"check-exposure","product":"iCagenda iCagenda"},{"id":"2026-07-10","type":"digest","title":"Security digest for July 10, 2026","date":"2026-07-10","url":"https://erroneo.us/security/2026-07-10/","md":"https://erroneo.us/security/2026-07-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":11}},{"id":"balbooa-forms-joomla-file-upload-cve-2026-56291","type":"brief","title":"Balbooa Forms CVE-2026-56291: Exploited Joomla Upload RCE","date":"2026-07-09","url":"https://erroneo.us/security/briefs/balbooa-forms-joomla-file-upload-cve-2026-56291/","md":"https://erroneo.us/security/briefs/balbooa-forms-joomla-file-upload-cve-2026-56291/index.md","severity":"critical","kev":true,"epss":0.14854,"verdict":"check-exposure","cves":["CVE-2026-56291"],"summary":"Only Joomla sites running Balbooa Forms are at risk, but for them this is an emergency: an unauthenticated web-shell upload exploited before the patch, followed by more pre-auth bugs, so update to 2.4.3.4 or later and hunt for shells."},{"id":"CVE-2026-52778","type":"cve","title":"CVE-2026-52778: YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service","date":"2026-07-09","url":"https://erroneo.us/security/cve/CVE-2026-52778/","md":"https://erroneo.us/security/cve/CVE-2026-52778/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00798,"verdict":null,"product":"yeswiki/yeswiki (Composer (PHP))"},{"id":"CVE-2026-52777","type":"cve","title":"CVE-2026-52777: YesWiki Vulnerable to Authenticated PHP Object Injection in BazarImportAction via unserialize","date":"2026-07-09","url":"https://erroneo.us/security/cve/CVE-2026-52777/","md":"https://erroneo.us/security/cve/CVE-2026-52777/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00276,"verdict":null,"product":"yeswiki/yeswiki (Composer (PHP))"},{"id":"CVE-2026-52766","type":"cve","title":"CVE-2026-52766: YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action","date":"2026-07-09","url":"https://erroneo.us/security/cve/CVE-2026-52766/","md":"https://erroneo.us/security/cve/CVE-2026-52766/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00579,"verdict":null,"product":"yeswiki/yeswiki (Composer (PHP))"},{"id":"2026-07-09","type":"digest","title":"Security digest for July 9, 2026","date":"2026-07-09","url":"https://erroneo.us/security/2026-07-09/","md":"https://erroneo.us/security/2026-07-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2026-59821","type":"cve","title":"CVE-2026-59821: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","date":"2026-07-08","url":"https://erroneo.us/security/cve/CVE-2026-59821/","md":"https://erroneo.us/security/cve/CVE-2026-59821/index.md","severity":"low","cvss":2.1,"kev":false,"epss":0.00904,"verdict":"patch-this-week","product":"BerriAI litellm"},{"id":"CVE-2026-53649","type":"cve","title":"CVE-2026-53649: Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE","date":"2026-07-08","url":"https://erroneo.us/security/cve/CVE-2026-53649/","md":"https://erroneo.us/security/cve/CVE-2026-53649/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0033,"verdict":null,"product":"github.com/BishopFox/joro (Go)"},{"id":"CVE-2026-52831","type":"cve","title":"CVE-2026-52831: Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE","date":"2026-07-08","url":"https://erroneo.us/security/cve/CVE-2026-52831/","md":"https://erroneo.us/security/cve/CVE-2026-52831/index.md","severity":"high","cvss":8,"kev":false,"epss":0.00534,"verdict":null,"product":"github.com/nuclio/nuclio (Go)"},{"id":"2026-07-08","type":"digest","title":"Security digest for July 8, 2026","date":"2026-07-08","url":"https://erroneo.us/security/2026-07-08/","md":"https://erroneo.us/security/2026-07-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2026-59707","type":"cve","title":"CVE-2026-59707: LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-59707/","md":"https://erroneo.us/security/cve/CVE-2026-59707/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00482,"verdict":null,"product":"github.com/mudler/LocalAI (Go)"},{"id":"CVE-2026-58473","type":"cve","title":"CVE-2026-58473: Cognee allows non-superusers to overwrite global LLM configuration","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-58473/","md":"https://erroneo.us/security/cve/CVE-2026-58473/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00511,"verdict":null,"product":"cognee (PyPI)"},{"id":"CVE-2026-56290","type":"cve","title":"CVE-2026-56290: Joomlack Page Builder Improper Access Control Vulnerability","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-56290/","md":"https://erroneo.us/security/cve/CVE-2026-56290/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.30866,"verdict":"check-exposure","product":"Joomlack Page Builder"},{"id":"CVE-2026-55255","type":"cve","title":"CVE-2026-55255: Langflow Authorization Bypass Through User-Controlled Key Vulnerability","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-55255/","md":"https://erroneo.us/security/cve/CVE-2026-55255/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.00887,"verdict":"act-now","product":"Langflow Langflow"},{"id":"CVE-2026-53552","type":"cve","title":"CVE-2026-53552: Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-53552/","md":"https://erroneo.us/security/cve/CVE-2026-53552/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0035,"verdict":null,"product":"github.com/zhenorzz/goploy (Go)"},{"id":"CVE-2026-53513","type":"cve","title":"CVE-2026-53513: @better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-53513/","md":"https://erroneo.us/security/cve/CVE-2026-53513/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00248,"verdict":null,"product":"@better-auth/sso (npm)"},{"id":"CVE-2026-53512","type":"cve","title":"CVE-2026-53512: Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-53512/","md":"https://erroneo.us/security/cve/CVE-2026-53512/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00275,"verdict":null,"product":"better-auth (npm)"},{"id":"CVE-2026-48908","type":"cve","title":"CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-48908/","md":"https://erroneo.us/security/cve/CVE-2026-48908/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.88512,"verdict":"act-now","product":"JoomShaper SP Page Builder"},{"id":"CVE-2026-48282","type":"cve","title":"CVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-48282/","md":"https://erroneo.us/security/cve/CVE-2026-48282/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.42388,"verdict":"check-exposure","product":"Adobe ColdFusion"},{"id":"CVE-2026-33264","type":"cve","title":"CVE-2026-33264: Apache Airflow allows code execution through unsafe serialized DAG deserialization","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-33264/","md":"https://erroneo.us/security/cve/CVE-2026-33264/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01649,"verdict":null,"product":"apache-airflow (PyPI)"},{"id":"CVE-2026-27823","type":"cve","title":"CVE-2026-27823: EGroupware has a Remote Code Execution Vulnerability","date":"2026-07-07","url":"https://erroneo.us/security/cve/CVE-2026-27823/","md":"https://erroneo.us/security/cve/CVE-2026-27823/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00975,"verdict":null,"product":"egroupware/egroupware (Composer (PHP))"},{"id":"2026-07-07","type":"digest","title":"Security digest for July 7, 2026","date":"2026-07-07","url":"https://erroneo.us/security/2026-07-07/","md":"https://erroneo.us/security/2026-07-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":7}},{"id":"GHSA-vjc7-jrh9-9j86","type":"ghsa","title":"9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats","date":"2026-07-06","url":"https://erroneo.us/security/ghsa/GHSA-vjc7-jrh9-9j86/","md":"https://erroneo.us/security/ghsa/GHSA-vjc7-jrh9-9j86/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"9router"},{"id":"CVE-2026-56140","type":"cve","title":"CVE-2026-56140: Apache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-56140/","md":"https://erroneo.us/security/cve/CVE-2026-56140/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00738,"verdict":null,"product":"org.apache.camel:camel-aws2-sns (Maven)"},{"id":"CVE-2026-55615","type":"cve","title":"CVE-2026-55615: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-55615/","md":"https://erroneo.us/security/cve/CVE-2026-55615/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00461,"verdict":null,"product":"langroid (PyPI)"},{"id":"CVE-2026-55500","type":"cve","title":"CVE-2026-55500: 9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-55500/","md":"https://erroneo.us/security/cve/CVE-2026-55500/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00685,"verdict":null,"product":"9router (npm)"},{"id":"CVE-2026-54769","type":"cve","title":"CVE-2026-54769: Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-54769/","md":"https://erroneo.us/security/cve/CVE-2026-54769/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00912,"verdict":null,"product":"langroid (PyPI)"},{"id":"CVE-2026-54760","type":"cve","title":"CVE-2026-54760: Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-54760/","md":"https://erroneo.us/security/cve/CVE-2026-54760/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00646,"verdict":null,"product":"langroid (PyPI)"},{"id":"CVE-2026-54496","type":"cve","title":"CVE-2026-54496: Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-54496/","md":"https://erroneo.us/security/cve/CVE-2026-54496/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00315,"verdict":null,"product":"zebrad (crates.io (Rust))"},{"id":"CVE-2026-53913","type":"cve","title":"CVE-2026-53913: Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-53913/","md":"https://erroneo.us/security/cve/CVE-2026-53913/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01085,"verdict":null,"product":"org.apache.camel:camel-keycloak (Maven)"},{"id":"CVE-2026-53486","type":"cve","title":"CVE-2026-53486: Decompress: Archive extraction can create files and links outside of the target directory","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-53486/","md":"https://erroneo.us/security/cve/CVE-2026-53486/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00749,"verdict":null,"product":"@xhmikosr/decompress (npm)"},{"id":"CVE-2026-52889","type":"cve","title":"CVE-2026-52889: Formie Hidden field defaults vulnerable to Server-Side Template Injection","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-52889/","md":"https://erroneo.us/security/cve/CVE-2026-52889/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01274,"verdict":null,"product":"verbb/formie (Composer (PHP))"},{"id":"CVE-2026-49445","type":"cve","title":"CVE-2026-49445: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-49445/","md":"https://erroneo.us/security/cve/CVE-2026-49445/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00166,"verdict":null,"product":"github.com/cilium/cilium (Go)"},{"id":"CVE-2026-48205","type":"cve","title":"CVE-2026-48205: Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-48205/","md":"https://erroneo.us/security/cve/CVE-2026-48205/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.006,"verdict":null,"product":"org.apache.camel:camel-dns (Maven)"},{"id":"CVE-2026-48204","type":"cve","title":"CVE-2026-48204: Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered  gridfs.*  HTTP headers","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-48204/","md":"https://erroneo.us/security/cve/CVE-2026-48204/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00732,"verdict":null,"product":"org.apache.camel:camel-mongodb-gridfs (Maven)"},{"id":"CVE-2026-48203","type":"cve","title":"CVE-2026-48203: Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-48203/","md":"https://erroneo.us/security/cve/CVE-2026-48203/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.006,"verdict":null,"product":"org.apache.camel:camel-solr (Maven)"},{"id":"CVE-2026-46456","type":"cve","title":"CVE-2026-46456: Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-46456/","md":"https://erroneo.us/security/cve/CVE-2026-46456/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00791,"verdict":null,"product":"org.apache.camel:camel-aws2-sqs (Maven)"},{"id":"CVE-2026-46455","type":"cve","title":"CVE-2026-46455: Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-46455/","md":"https://erroneo.us/security/cve/CVE-2026-46455/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0069,"verdict":null,"product":"org.apache.camel:camel-keycloak (Maven)"},{"id":"CVE-2026-46454","type":"cve","title":"CVE-2026-46454: Apache Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inject Camel control headers","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-46454/","md":"https://erroneo.us/security/cve/CVE-2026-46454/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00827,"verdict":null,"product":"org.apache.camel:camel-cometd (Maven)"},{"id":"CVE-2026-43867","type":"cve","title":"CVE-2026-43867: Apache Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilter","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-43867/","md":"https://erroneo.us/security/cve/CVE-2026-43867/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00926,"verdict":null,"product":"org.apache.camel:camel-pqc (Maven)"},{"id":"CVE-2026-40047","type":"cve","title":"CVE-2026-40047: Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer","date":"2026-07-06","url":"https://erroneo.us/security/cve/CVE-2026-40047/","md":"https://erroneo.us/security/cve/CVE-2026-40047/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02429,"verdict":null,"product":"org.apache.camel:camel-docling (Maven)"},{"id":"2026-07-06","type":"digest","title":"Security digest for July 6, 2026","date":"2026-07-06","url":"https://erroneo.us/security/2026-07-06/","md":"https://erroneo.us/security/2026-07-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":19}},{"id":"CVE-2026-27780","type":"cve","title":"CVE-2026-27780: Gitea pre-receive hook scanner errors allow branch-protection bypass","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-27780/","md":"https://erroneo.us/security/cve/CVE-2026-27780/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00638,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-26292","type":"cve","title":"CVE-2026-26292: Gitea LFS mirror operations bypass migration HTTP transport protections","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-26292/","md":"https://erroneo.us/security/cve/CVE-2026-26292/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00652,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-26247","type":"cve","title":"CVE-2026-26247: Gitea OAuth2 PKCE S256 verifier bypass","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-26247/","md":"https://erroneo.us/security/cve/CVE-2026-26247/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00495,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-26232","type":"cve","title":"CVE-2026-26232: Gitea OAuth2 authorization codes can be reused after expiry","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-26232/","md":"https://erroneo.us/security/cve/CVE-2026-26232/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00495,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-25718","type":"cve","title":"CVE-2026-25718: Gitea template repository generation follows unsafe filesystem paths","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-25718/","md":"https://erroneo.us/security/cve/CVE-2026-25718/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00562,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2026-22547","type":"cve","title":"CVE-2026-22547: Gitea repository creation accepts insufficiently validated fields","date":"2026-07-03","url":"https://erroneo.us/security/cve/CVE-2026-22547/","md":"https://erroneo.us/security/cve/CVE-2026-22547/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00522,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"2026-07-03","type":"digest","title":"Security digest for July 3, 2026","date":"2026-07-03","url":"https://erroneo.us/security/2026-07-03/","md":"https://erroneo.us/security/2026-07-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"GHSA-w4v6-g3wm-w36c","type":"ghsa","title":"OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy","date":"2026-07-02","url":"https://erroneo.us/security/ghsa/GHSA-w4v6-g3wm-w36c/","md":"https://erroneo.us/security/ghsa/GHSA-w4v6-g3wm-w36c/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"openclaw"},{"id":"CVE-2026-9559","type":"cve","title":"CVE-2026-9559: Mautic vulnerable to Path Traversal via Campaign Import","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-9559/","md":"https://erroneo.us/security/cve/CVE-2026-9559/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00927,"verdict":null,"product":"mautic/core (Composer (PHP))"},{"id":"CVE-2026-9558","type":"cve","title":"CVE-2026-9558: Mautic has Server-Side Template Injection (SSTI) in Theme Templates","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-9558/","md":"https://erroneo.us/security/cve/CVE-2026-9558/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00789,"verdict":null,"product":"mautic/core (Composer (PHP))"},{"id":"CVE-2026-59800","type":"cve","title":"CVE-2026-59800: 9router: Missing Authorization and OS Command Injection","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-59800/","md":"https://erroneo.us/security/cve/CVE-2026-59800/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02043,"verdict":null,"product":"9router (npm)"},{"id":"CVE-2026-54617","type":"cve","title":"CVE-2026-54617: LaunchServer FileServerHandler has an unauthenticated path traversal issue","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-54617/","md":"https://erroneo.us/security/cve/CVE-2026-54617/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02883,"verdict":null,"product":"pro.gravit.launcher:launchserver-api (Maven)"},{"id":"CVE-2026-52830","type":"cve","title":"CVE-2026-52830: fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-52830/","md":"https://erroneo.us/security/cve/CVE-2026-52830/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00648,"verdict":null,"product":"fast-mcp-telegram (PyPI)"},{"id":"CVE-2026-52735","type":"cve","title":"CVE-2026-52735: zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-52735/","md":"https://erroneo.us/security/cve/CVE-2026-52735/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00507,"verdict":null,"product":"zebra-script (crates.io (Rust))"},{"id":"CVE-2026-50027","type":"cve","title":"CVE-2026-50027: mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-50027/","md":"https://erroneo.us/security/cve/CVE-2026-50027/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00959,"verdict":null,"product":"mcp-memory-service (PyPI)"},{"id":"CVE-2026-49352","type":"cve","title":"CVE-2026-49352: 9router's Hardcoded Default fallback JWT Secret  Allows Authentication Bypass","date":"2026-07-02","url":"https://erroneo.us/security/cve/CVE-2026-49352/","md":"https://erroneo.us/security/cve/CVE-2026-49352/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00601,"verdict":null,"product":"9router (npm)"},{"id":"2026-07-02","type":"digest","title":"Security digest for July 2, 2026","date":"2026-07-02","url":"https://erroneo.us/security/2026-07-02/","md":"https://erroneo.us/security/2026-07-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":9}},{"id":"CVE-2026-53943","type":"cve","title":"CVE-2026-53943: Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-53943/","md":"https://erroneo.us/security/cve/CVE-2026-53943/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00446,"verdict":null,"product":"ghost (npm)"},{"id":"CVE-2026-49457","type":"cve","title":"CVE-2026-49457: QUIC has Broken TLS verification","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-49457/","md":"https://erroneo.us/security/cve/CVE-2026-49457/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00249,"verdict":null,"product":"quic (Hex (Erlang/Elixir))"},{"id":"CVE-2026-45659","type":"cve","title":"CVE-2026-45659: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-45659/","md":"https://erroneo.us/security/cve/CVE-2026-45659/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.02704,"verdict":"act-now","product":"Microsoft SharePoint Server"},{"id":"CVE-2026-44939","type":"cve","title":"CVE-2026-44939: Rancher vulnerable to command injection through unsanitized YAML parameter","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-44939/","md":"https://erroneo.us/security/cve/CVE-2026-44939/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01313,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"CVE-2026-44935","type":"cve","title":"CVE-2026-44935: Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-44935/","md":"https://erroneo.us/security/cve/CVE-2026-44935/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0049,"verdict":null,"product":"github.com/rancher/fleet (Go)"},{"id":"CVE-2026-41052","type":"cve","title":"CVE-2026-41052: Rancher has Privilege Escalation from Project Owner to Host","date":"2026-07-01","url":"https://erroneo.us/security/cve/CVE-2026-41052/","md":"https://erroneo.us/security/cve/CVE-2026-41052/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00423,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"2026-07-01","type":"digest","title":"Security digest for July 1, 2026","date":"2026-07-01","url":"https://erroneo.us/security/2026-07-01/","md":"https://erroneo.us/security/2026-07-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":5}},{"id":"netscaler-gateway-saml-rce-cve-2026-8452","type":"brief","title":"NetScaler CVE-2026-8452: DoS Bug Exploited as Pre-Auth RCE","date":"2026-06-30","url":"https://erroneo.us/security/briefs/netscaler-gateway-saml-rce-cve-2026-8452/","md":"https://erroneo.us/security/briefs/netscaler-gateway-saml-rce-cve-2026-8452/index.md","severity":"critical","kev":true,"epss":0.01011,"verdict":"act-now","cves":["CVE-2026-8452"],"summary":"Any NetScaler configured as a Gateway or AAA server that is still below the June 30 builds needs patching today and a check for web shells; the bug the vendor called DoS is a public pre-auth RCE under attack."},{"id":"adobe-coldfusion-cve-2026-48282-rds-path-traversal","type":"brief","title":"ColdFusion CVE-2026-48282: Exploited RDS Path Traversal","date":"2026-06-30","url":"https://erroneo.us/security/briefs/adobe-coldfusion-cve-2026-48282-rds-path-traversal/","md":"https://erroneo.us/security/briefs/adobe-coldfusion-cve-2026-48282-rds-path-traversal/index.md","severity":"critical","kev":true,"epss":0.42388,"verdict":"check-exposure","cves":["CVE-2026-48282","CVE-2026-48313"],"summary":"Every ColdFusion 2023/2025 server should already be on the June updates; if RDS was enabled without authentication and reachable, assume the box may be compromised and hunt."},{"id":"CVE-2026-50566","type":"cve","title":"CVE-2026-50566: Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation","date":"2026-06-30","url":"https://erroneo.us/security/cve/CVE-2026-50566/","md":"https://erroneo.us/security/cve/CVE-2026-50566/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00506,"verdict":null,"product":"github.com/fission/fission (Go)"},{"id":"CVE-2026-50564","type":"cve","title":"CVE-2026-50564: Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape","date":"2026-06-30","url":"https://erroneo.us/security/cve/CVE-2026-50564/","md":"https://erroneo.us/security/cve/CVE-2026-50564/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00506,"verdict":null,"product":"github.com/fission/fission (Go)"},{"id":"CVE-2026-50563","type":"cve","title":"CVE-2026-50563: Fission Container Executor Function PodSpec Injection Leading to Node Escape","date":"2026-06-30","url":"https://erroneo.us/security/cve/CVE-2026-50563/","md":"https://erroneo.us/security/cve/CVE-2026-50563/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00506,"verdict":null,"product":"github.com/fission/fission (Go)"},{"id":"CVE-2026-50545","type":"cve","title":"CVE-2026-50545: Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover","date":"2026-06-30","url":"https://erroneo.us/security/cve/CVE-2026-50545/","md":"https://erroneo.us/security/cve/CVE-2026-50545/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00523,"verdict":null,"product":"github.com/fission/fission (Go)"},{"id":"CVE-2026-48313","type":"cve","title":"CVE-2026-48313: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)","date":"2026-06-30","url":"https://erroneo.us/security/cve/CVE-2026-48313/","md":"https://erroneo.us/security/cve/CVE-2026-48313/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02954,"verdict":"check-exposure","product":"Adobe ColdFusion 2025"},{"id":"2026-06-30","type":"digest","title":"Security digest for June 30, 2026","date":"2026-06-30","url":"https://erroneo.us/security/2026-06-30/","md":"https://erroneo.us/security/2026-06-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":4}},{"id":"CVE-2026-48558","type":"cve","title":"CVE-2026-48558: SimpleHelp Authentication Bypass Vulnerability","date":"2026-06-29","url":"https://erroneo.us/security/cve/CVE-2026-48558/","md":"https://erroneo.us/security/cve/CVE-2026-48558/index.md","severity":"critical","cvss":9.5,"kev":true,"epss":0.05719,"verdict":null,"product":"SimpleHelp  SimpleHelp"},{"id":"CVE-2026-11720","type":"cve","title":"CVE-2026-11720: MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints","date":"2026-06-29","url":"https://erroneo.us/security/cve/CVE-2026-11720/","md":"https://erroneo.us/security/cve/CVE-2026-11720/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00533,"verdict":null,"product":"github.com/googleapis/mcp-toolbox (Go)"},{"id":"2026-06-29","type":"digest","title":"Security digest for June 29, 2026","date":"2026-06-29","url":"https://erroneo.us/security/2026-06-29/","md":"https://erroneo.us/security/2026-06-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"joomlack-page-builder-ck-cve-2026-56290-file-upload-rce","type":"brief","title":"Page Builder CK CVE-2026-56290: Exploited Joomla Upload RCE","date":"2026-06-27","url":"https://erroneo.us/security/briefs/joomlack-page-builder-ck-cve-2026-56290-file-upload-rce/","md":"https://erroneo.us/security/briefs/joomlack-page-builder-ck-cve-2026-56290-file-upload-rce/index.md","severity":"critical","kev":true,"epss":0.30866,"verdict":"check-exposure","cves":["CVE-2026-56290"],"summary":"Only Joomla sites running Page Builder CK are at risk, but for them this is an emergency: an unauthenticated web-shell upload exploited within hours of the patch, with an incomplete first fix, so update to 3.6.5 or later and hunt for shells."},{"id":"2026-06-27","type":"digest","title":"Security digest for June 27, 2026","date":"2026-06-27","url":"https://erroneo.us/security/2026-06-27/","md":"https://erroneo.us/security/2026-06-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"GHSA-q6xx-5vr8-p898","type":"ghsa","title":"Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check","date":"2026-06-26","url":"https://erroneo.us/security/ghsa/GHSA-q6xx-5vr8-p898/","md":"https://erroneo.us/security/ghsa/GHSA-q6xx-5vr8-p898/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"github.com/nezhahq/nezha, github.com/nezhahq/nezha"},{"id":"GHSA-98x5-vq43-vc5p","type":"ghsa","title":"semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin","date":"2026-06-26","url":"https://erroneo.us/security/ghsa/GHSA-98x5-vq43-vc5p/","md":"https://erroneo.us/security/ghsa/GHSA-98x5-vq43-vc5p/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"semantic-router"},{"id":"CVE-2026-53519","type":"cve","title":"CVE-2026-53519: Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-53519/","md":"https://erroneo.us/security/cve/CVE-2026-53519/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02286,"verdict":null,"product":"github.com/nezhahq/nezha (Go)"},{"id":"CVE-2026-49454","type":"cve","title":"CVE-2026-49454: Relyra SAML SignatureValue not cryptographically verified -> authentication bypass","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-49454/","md":"https://erroneo.us/security/cve/CVE-2026-49454/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00226,"verdict":null,"product":"relyra (Hex (Erlang/Elixir))"},{"id":"CVE-2026-49257","type":"cve","title":"CVE-2026-49257: mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-49257/","md":"https://erroneo.us/security/cve/CVE-2026-49257/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0093,"verdict":null,"product":"mcp-pinot-server (PyPI)"},{"id":"CVE-2026-49252","type":"cve","title":"CVE-2026-49252: deepstream is vulnerable to prototype pollution","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-49252/","md":"https://erroneo.us/security/cve/CVE-2026-49252/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0047,"verdict":null,"product":"@deepstream/server (npm)"},{"id":"CVE-2026-48797","type":"cve","title":"CVE-2026-48797: Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48797/","md":"https://erroneo.us/security/cve/CVE-2026-48797/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00567,"verdict":null,"product":"backpropagate (PyPI)"},{"id":"CVE-2026-48769","type":"cve","title":"CVE-2026-48769: Incus has an arbitrary file write on its client due to trusted image hash","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48769/","md":"https://erroneo.us/security/cve/CVE-2026-48769/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48755","type":"cve","title":"CVE-2026-48755: Incus has an argument injection in backup compression algorithm leading to AFW and ACE","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48755/","md":"https://erroneo.us/security/cve/CVE-2026-48755/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48753","type":"cve","title":"CVE-2026-48753: Incus has an arbitrary file write via path traversal in S3 multipart upload","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48753/","md":"https://erroneo.us/security/cve/CVE-2026-48753/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48752","type":"cve","title":"CVE-2026-48752: Incus has arbitrary file read+write on host via templates/ symlink in malicious image","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48752/","md":"https://erroneo.us/security/cve/CVE-2026-48752/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48751","type":"cve","title":"CVE-2026-48751: Incus has a restricted project bypass leading to arbitrary command execution","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48751/","md":"https://erroneo.us/security/cve/CVE-2026-48751/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00637,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48750","type":"cve","title":"CVE-2026-48750: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48750/","md":"https://erroneo.us/security/cve/CVE-2026-48750/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-48749","type":"cve","title":"CVE-2026-48749: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-48749/","md":"https://erroneo.us/security/cve/CVE-2026-48749/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00731,"verdict":null,"product":"github.com/lxc/incus/v7/cmd/incusd (Go)"},{"id":"CVE-2026-44024","type":"cve","title":"CVE-2026-44024: Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder","date":"2026-06-26","url":"https://erroneo.us/security/cve/CVE-2026-44024/","md":"https://erroneo.us/security/cve/CVE-2026-44024/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01085,"verdict":null,"product":"fluentd (RubyGems)"},{"id":"2026-06-26","type":"digest","title":"Security digest for June 26, 2026","date":"2026-06-26","url":"https://erroneo.us/security/2026-06-26/","md":"https://erroneo.us/security/2026-06-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":15}},{"id":"CVE-2026-55166","type":"cve","title":"CVE-2026-55166: Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-55166/","md":"https://erroneo.us/security/cve/CVE-2026-55166/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00287,"verdict":null,"product":"lemur (PyPI)"},{"id":"CVE-2026-48714","type":"cve","title":"CVE-2026-48714: i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-48714/","md":"https://erroneo.us/security/cve/CVE-2026-48714/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00657,"verdict":null,"product":"i18next-http-middleware (npm)"},{"id":"CVE-2026-48713","type":"cve","title":"CVE-2026-48713: i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-48713/","md":"https://erroneo.us/security/cve/CVE-2026-48713/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00657,"verdict":null,"product":"i18next-fs-backend (npm)"},{"id":"CVE-2026-46595","type":"cve","title":"CVE-2026-46595: golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-46595/","md":"https://erroneo.us/security/cve/CVE-2026-46595/index.md","severity":"high","cvss":7.1,"kev":false,"epss":0.00503,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-42508","type":"cve","title":"CVE-2026-42508: golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-42508/","md":"https://erroneo.us/security/cve/CVE-2026-42508/index.md","severity":"high","cvss":7.4,"kev":false,"epss":0.00654,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-39834","type":"cve","title":"CVE-2026-39834: golang.org/x/crypto vulnerable to infinite loop on large channel writes","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-39834/","md":"https://erroneo.us/security/cve/CVE-2026-39834/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00637,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-39833","type":"cve","title":"CVE-2026-39833: golang.org/x/crypto doesn't enforce invoking key constraints","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-39833/","md":"https://erroneo.us/security/cve/CVE-2026-39833/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00487,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-39832","type":"cve","title":"CVE-2026-39832: golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-39832/","md":"https://erroneo.us/security/cve/CVE-2026-39832/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00716,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-39831","type":"cve","title":"CVE-2026-39831: golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-39831/","md":"https://erroneo.us/security/cve/CVE-2026-39831/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00487,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-39830","type":"cve","title":"CVE-2026-39830: golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-39830/","md":"https://erroneo.us/security/cve/CVE-2026-39830/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00621,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"CVE-2026-20230","type":"cve","title":"CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-20230/","md":"https://erroneo.us/security/cve/CVE-2026-20230/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.882,"verdict":null,"product":"Cisco Unified Communications Manager"},{"id":"CVE-2026-12569","type":"cve","title":"CVE-2026-12569: PTC Windchill and FlexPLM Improper Input Validation Vulnerability","date":"2026-06-25","url":"https://erroneo.us/security/cve/CVE-2026-12569/","md":"https://erroneo.us/security/cve/CVE-2026-12569/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.46049,"verdict":null,"product":"PTC Windchill and FlexPLM"},{"id":"2026-06-25","type":"digest","title":"Security digest for June 25, 2026","date":"2026-06-25","url":"https://erroneo.us/security/2026-06-25/","md":"https://erroneo.us/security/2026-06-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":10}},{"id":"CVE-2026-45052","type":"cve","title":"CVE-2026-45052: OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints","date":"2026-06-24","url":"https://erroneo.us/security/cve/CVE-2026-45052/","md":"https://erroneo.us/security/cve/CVE-2026-45052/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00765,"verdict":null,"product":"org.openidentityplatform.openam:openam-federation-library (Maven)"},{"id":"CVE-2026-45051","type":"cve","title":"CVE-2026-45051: OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage","date":"2026-06-24","url":"https://erroneo.us/security/cve/CVE-2026-45051/","md":"https://erroneo.us/security/cve/CVE-2026-45051/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00688,"verdict":null,"product":"org.openidentityplatform.openam:openam-auth-webauthn (Maven)"},{"id":"2026-06-24","type":"digest","title":"Security digest for June 24, 2026","date":"2026-06-24","url":"https://erroneo.us/security/2026-06-24/","md":"https://erroneo.us/security/2026-06-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-qxvg-h7q2-hcxh","type":"ghsa","title":"motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)","date":"2026-06-23","url":"https://erroneo.us/security/ghsa/GHSA-qxvg-h7q2-hcxh/","md":"https://erroneo.us/security/ghsa/GHSA-qxvg-h7q2-hcxh/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"motioneye"},{"id":"GHSA-phv5-334h-mxcw","type":"ghsa","title":"motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal","date":"2026-06-23","url":"https://erroneo.us/security/ghsa/GHSA-phv5-334h-mxcw/","md":"https://erroneo.us/security/ghsa/GHSA-phv5-334h-mxcw/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"motioneye"},{"id":"CVE-2026-54350","type":"cve","title":"CVE-2026-54350: Budibase has nonymous NoSQL operator injection via published-app query templates","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-54350/","md":"https://erroneo.us/security/cve/CVE-2026-54350/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00538,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-54316","type":"cve","title":"CVE-2026-54316: Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-54316/","md":"https://erroneo.us/security/cve/CVE-2026-54316/index.md","severity":"medium","cvss":6,"kev":false,"epss":0.0052,"verdict":"check-exposure","product":"anthropics claude-code"},{"id":"CVE-2026-52813","type":"cve","title":"CVE-2026-52813: Gogs has Path Traversal in organization name that results in RCE through Git hooks","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-52813/","md":"https://erroneo.us/security/cve/CVE-2026-52813/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01107,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2026-52811","type":"cve","title":"CVE-2026-52811: Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-52811/","md":"https://erroneo.us/security/cve/CVE-2026-52811/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00474,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2026-52806","type":"cve","title":"CVE-2026-52806: Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-52806/","md":"https://erroneo.us/security/cve/CVE-2026-52806/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.07934,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2026-34910","type":"cve","title":"CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-34910/","md":"https://erroneo.us/security/cve/CVE-2026-34910/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.45768,"verdict":null,"product":"Ubiquiti UniFi OS"},{"id":"CVE-2026-34909","type":"cve","title":"CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-34909/","md":"https://erroneo.us/security/cve/CVE-2026-34909/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.01793,"verdict":null,"product":"Ubiquiti UniFi OS"},{"id":"CVE-2026-34908","type":"cve","title":"CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2026-34908/","md":"https://erroneo.us/security/cve/CVE-2026-34908/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.15207,"verdict":null,"product":"Ubiquiti UniFi OS"},{"id":"CVE-2025-67038","type":"cve","title":"CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability","date":"2026-06-23","url":"https://erroneo.us/security/cve/CVE-2025-67038/","md":"https://erroneo.us/security/cve/CVE-2025-67038/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.19956,"verdict":null,"product":"Lantronix EDS5000"},{"id":"2026-06-23","type":"digest","title":"Security digest for June 23, 2026","date":"2026-06-23","url":"https://erroneo.us/security/2026-06-23/","md":"https://erroneo.us/security/2026-06-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":6}},{"id":"CVE-2026-56104","type":"cve","title":"CVE-2026-56104: Chainlit contains a session hijacking vulnerability","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-56104/","md":"https://erroneo.us/security/cve/CVE-2026-56104/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00417,"verdict":null,"product":"chainlit (PyPI)"},{"id":"CVE-2026-54352","type":"cve","title":"CVE-2026-54352: Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-54352/","md":"https://erroneo.us/security/cve/CVE-2026-54352/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00494,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-48170","type":"cve","title":"CVE-2026-48170: scimPatch vulnerable to prototype pollution via unfiltered keys in patch","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-48170/","md":"https://erroneo.us/security/cve/CVE-2026-48170/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00403,"verdict":null,"product":"scim-patch (npm)"},{"id":"CVE-2026-46495","type":"cve","title":"CVE-2026-46495: OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-46495/","md":"https://erroneo.us/security/cve/CVE-2026-46495/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01131,"verdict":null,"product":"org.openidentityplatform.opendj:opendj-server-legacy (Maven)"},{"id":"CVE-2026-46488","type":"cve","title":"CVE-2026-46488: motionEye: Authentication possible via password hash","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-46488/","md":"https://erroneo.us/security/cve/CVE-2026-46488/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00464,"verdict":null,"product":"motioneye (PyPI)"},{"id":"CVE-2026-44203","type":"cve","title":"CVE-2026-44203: OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-44203/","md":"https://erroneo.us/security/cve/CVE-2026-44203/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.00593,"verdict":null,"product":"org.openidentityplatform.openam:openam-oauth2 (Maven)"},{"id":"CVE-2026-44179","type":"cve","title":"CVE-2026-44179: xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-44179/","md":"https://erroneo.us/security/cve/CVE-2026-44179/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"com.xwiki.pro:xwiki-pro-macros (Maven)"},{"id":"CVE-2026-33646","type":"cve","title":"CVE-2026-33646: Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-33646/","md":"https://erroneo.us/security/cve/CVE-2026-33646/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00685,"verdict":null,"product":"mise (crates.io (Rust))"},{"id":"CVE-2026-12866","type":"cve","title":"CVE-2026-12866: expr-eval vulnerable to Code Execution","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-12866/","md":"https://erroneo.us/security/cve/CVE-2026-12866/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00866,"verdict":null,"product":"expr-eval (npm)"},{"id":"CVE-2026-12249","type":"cve","title":"CVE-2026-12249: Canonical ADSys Uses a Less Trusted Source","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2026-12249/","md":"https://erroneo.us/security/cve/CVE-2026-12249/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00143,"verdict":null,"product":"github.com/ubuntu/adsys (Go)"},{"id":"CVE-2025-58048","type":"cve","title":"CVE-2025-58048: Paymenter vulnerable to Remote Code Execution via public file uploads","date":"2026-06-22","url":"https://erroneo.us/security/cve/CVE-2025-58048/","md":"https://erroneo.us/security/cve/CVE-2025-58048/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00414,"verdict":null,"product":"paymenter/paymenter (Composer (PHP))"},{"id":"2026-06-22","type":"digest","title":"Security digest for June 22, 2026","date":"2026-06-22","url":"https://erroneo.us/security/2026-06-22/","md":"https://erroneo.us/security/2026-06-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":11}},{"id":"CVE-2026-56265","type":"cve","title":"CVE-2026-56265: Crawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server","date":"2026-06-21","url":"https://erroneo.us/security/cve/CVE-2026-56265/","md":"https://erroneo.us/security/cve/CVE-2026-56265/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02639,"verdict":null,"product":"crawl4ai (PyPI)"},{"id":"2026-06-21","type":"digest","title":"Security digest for June 21, 2026","date":"2026-06-21","url":"https://erroneo.us/security/2026-06-21/","md":"https://erroneo.us/security/2026-06-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-wfqx-gjrf-g28r","type":"ghsa","title":"Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag","date":"2026-06-19","url":"https://erroneo.us/security/ghsa/GHSA-wfqx-gjrf-g28r/","md":"https://erroneo.us/security/ghsa/GHSA-wfqx-gjrf-g28r/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/crossplane/crossplane/v2, github.com/crossplane/crossplane/v2"},{"id":"GHSA-c8qj-jx8j-fg2w","type":"ghsa","title":"DotVVM: Missing authorization in AuthorizeActionFilter","date":"2026-06-19","url":"https://erroneo.us/security/ghsa/GHSA-c8qj-jx8j-fg2w/","md":"https://erroneo.us/security/ghsa/GHSA-c8qj-jx8j-fg2w/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"DotVVM, DotVVM"},{"id":"CVE-2026-56120","type":"cve","title":"CVE-2026-56120: OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-56120/","md":"https://erroneo.us/security/cve/CVE-2026-56120/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"io.openremote:openremote-manager (Maven)"},{"id":"CVE-2026-55884","type":"cve","title":"CVE-2026-55884: Tilt: Missing authentication on the network-exposed Tilt HUD server","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-55884/","md":"https://erroneo.us/security/cve/CVE-2026-55884/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00496,"verdict":null,"product":"github.com/tilt-dev/tilt (Go)"},{"id":"CVE-2026-55791","type":"cve","title":"CVE-2026-55791: Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-55791/","md":"https://erroneo.us/security/cve/CVE-2026-55791/index.md","severity":"medium","cvss":6.9,"kev":false,"epss":0.00464,"verdict":null,"product":"craftcms/cms (Composer (PHP))"},{"id":"CVE-2026-55447","type":"cve","title":"CVE-2026-55447: Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-55447/","md":"https://erroneo.us/security/cve/CVE-2026-55447/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00662,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-54782","type":"cve","title":"CVE-2026-54782: CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-54782/","md":"https://erroneo.us/security/cve/CVE-2026-54782/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00414,"verdict":null,"product":"CoreWCF.Primitives (NuGet)"},{"id":"CVE-2026-54051","type":"cve","title":"CVE-2026-54051: Network-AI: Improper Neutralization of Special Elements used in an OS Command","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-54051/","md":"https://erroneo.us/security/cve/CVE-2026-54051/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00666,"verdict":null,"product":"network-ai (npm)"},{"id":"CVE-2026-48814","type":"cve","title":"CVE-2026-48814: Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests","date":"2026-06-19","url":"https://erroneo.us/security/cve/CVE-2026-48814/","md":"https://erroneo.us/security/cve/CVE-2026-48814/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00521,"verdict":null,"product":"network-ai (npm)"},{"id":"2026-06-19","type":"digest","title":"Security digest for June 19, 2026","date":"2026-06-19","url":"https://erroneo.us/security/2026-06-19/","md":"https://erroneo.us/security/2026-06-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":9}},{"id":"trueconf-server-cve-2026-72529-72530-head-mare","type":"brief","title":"TrueConf Server: Exploited Pre-Auth RCE Chain on Port 4307","date":"2026-06-18","url":"https://erroneo.us/security/briefs/trueconf-server-cve-2026-72529-72530-head-mare/","md":"https://erroneo.us/security/briefs/trueconf-server-cve-2026-72529-72530-head-mare/index.md","severity":"critical","kev":true,"epss":0.01686,"verdict":"check-exposure","cves":["CVE-2026-72529","CVE-2026-72530"],"summary":"Only organizations that run TrueConf Server, or whose staff join meetings on other companies' TrueConf servers, are exposed; for them an unpatched, reachable server should be treated as compromised, because the chain is unauthenticated, yields SYSTEM and was used to infect the server's own users."},{"id":"GHSA-r253-r9jw-qg44","type":"ghsa","title":"Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args","date":"2026-06-18","url":"https://erroneo.us/security/ghsa/GHSA-r253-r9jw-qg44/","md":"https://erroneo.us/security/ghsa/GHSA-r253-r9jw-qg44/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"crawl4ai"},{"id":"GHSA-2jq4-q6vv-4cp3","type":"ghsa","title":"Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE","date":"2026-06-18","url":"https://erroneo.us/security/ghsa/GHSA-2jq4-q6vv-4cp3/","md":"https://erroneo.us/security/ghsa/GHSA-2jq4-q6vv-4cp3/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"crawl4ai"},{"id":"CVE-2026-58399","type":"cve","title":"CVE-2026-58399: @acastellon/auth: Authentication bypass via spoofable headers in validateToken()","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-58399/","md":"https://erroneo.us/security/cve/CVE-2026-58399/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00973,"verdict":null,"product":"@acastellon/auth (npm)"},{"id":"CVE-2026-57496","type":"cve","title":"CVE-2026-57496: netlicensing-mcp: REST Path Traversal Bypasses Token Redaction","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57496/","md":"https://erroneo.us/security/cve/CVE-2026-57496/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00353,"verdict":null,"product":"netlicensing-mcp (PyPI)"},{"id":"CVE-2026-57148","type":"cve","title":"CVE-2026-57148: praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57148/","md":"https://erroneo.us/security/cve/CVE-2026-57148/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00641,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-57147","type":"cve","title":"CVE-2026-57147: praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57147/","md":"https://erroneo.us/security/cve/CVE-2026-57147/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00772,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-57145","type":"cve","title":"CVE-2026-57145: PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57145/","md":"https://erroneo.us/security/cve/CVE-2026-57145/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00544,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-57141","type":"cve","title":"CVE-2026-57141: PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57141/","md":"https://erroneo.us/security/cve/CVE-2026-57141/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00745,"verdict":null,"product":"praisonai (npm)"},{"id":"CVE-2026-57140","type":"cve","title":"CVE-2026-57140: npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57140/","md":"https://erroneo.us/security/cve/CVE-2026-57140/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00642,"verdict":null,"product":"praisonai (npm)"},{"id":"CVE-2026-57139","type":"cve","title":"CVE-2026-57139: npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57139/","md":"https://erroneo.us/security/cve/CVE-2026-57139/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00754,"verdict":null,"product":"praisonai (npm)"},{"id":"CVE-2026-57138","type":"cve","title":"CVE-2026-57138: npm PraisonAI codeMode sandbox escape via Function constructor","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57138/","md":"https://erroneo.us/security/cve/CVE-2026-57138/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00726,"verdict":null,"product":"praisonai (npm)"},{"id":"CVE-2026-57131","type":"cve","title":"CVE-2026-57131: PraisonAI: Jobs API exposes agent-execution endpoints with no authentication","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57131/","md":"https://erroneo.us/security/cve/CVE-2026-57131/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00972,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-57127","type":"cve","title":"CVE-2026-57127: praisonai: recipe serve auth middleware silently disables itself when no secret is set","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57127/","md":"https://erroneo.us/security/cve/CVE-2026-57127/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.009,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-57125","type":"cve","title":"CVE-2026-57125: PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57125/","md":"https://erroneo.us/security/cve/CVE-2026-57125/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00601,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-57124","type":"cve","title":"CVE-2026-57124: PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57124/","md":"https://erroneo.us/security/cve/CVE-2026-57124/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01035,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-57123","type":"cve","title":"CVE-2026-57123: PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57123/","md":"https://erroneo.us/security/cve/CVE-2026-57123/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00904,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-57118","type":"cve","title":"CVE-2026-57118: PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57118/","md":"https://erroneo.us/security/cve/CVE-2026-57118/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00325,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-57116","type":"cve","title":"CVE-2026-57116: PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-57116/","md":"https://erroneo.us/security/cve/CVE-2026-57116/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-55742","type":"cve","title":"CVE-2026-55742: Cotonti: Cross-Site Request Forgery in the administration rights handler","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-55742/","md":"https://erroneo.us/security/cve/CVE-2026-55742/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00208,"verdict":null,"product":"cotonti/cotonti (Composer (PHP))"},{"id":"CVE-2026-54003","type":"cve","title":"CVE-2026-54003: Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-54003/","md":"https://erroneo.us/security/cve/CVE-2026-54003/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00743,"verdict":null,"product":"getkirby/cms (Composer (PHP))"},{"id":"CVE-2026-47103","type":"cve","title":"CVE-2026-47103: python-statemachine SCXML <data expr> Eval Injection","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-47103/","md":"https://erroneo.us/security/cve/CVE-2026-47103/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0137,"verdict":null,"product":"python-statemachine (PyPI)"},{"id":"CVE-2026-44727","type":"cve","title":"CVE-2026-44727: Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-44727/","md":"https://erroneo.us/security/cve/CVE-2026-44727/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00438,"verdict":null,"product":"jupyter-server (PyPI)"},{"id":"CVE-2026-20253","type":"cve","title":"CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerability","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-20253/","md":"https://erroneo.us/security/cve/CVE-2026-20253/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.96939,"verdict":null,"product":"Splunk Enterprise"},{"id":"CVE-2026-11718","type":"cve","title":"CVE-2026-11718: googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-11718/","md":"https://erroneo.us/security/cve/CVE-2026-11718/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00185,"verdict":null,"product":"github.com/googleapis/mcp-toolbox (Go)"},{"id":"CVE-2026-11717","type":"cve","title":"CVE-2026-11717: googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-11717/","md":"https://erroneo.us/security/cve/CVE-2026-11717/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00176,"verdict":null,"product":"github.com/googleapis/mcp-toolbox (Go)"},{"id":"CVE-2026-0755","type":"cve","title":"CVE-2026-0755: gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)","date":"2026-06-18","url":"https://erroneo.us/security/cve/CVE-2026-0755/","md":"https://erroneo.us/security/cve/CVE-2026-0755/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0342,"verdict":null,"product":"gemini-mcp-tool (npm)"},{"id":"2026-06-18","type":"digest","title":"Security digest for June 18, 2026","date":"2026-06-18","url":"https://erroneo.us/security/2026-06-18/","md":"https://erroneo.us/security/2026-06-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":25}},{"id":"CVE-2026-55518","type":"cve","title":"CVE-2026-55518: Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-55518/","md":"https://erroneo.us/security/cve/CVE-2026-55518/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00448,"verdict":null,"product":"avo (RubyGems)"},{"id":"CVE-2026-55471","type":"cve","title":"CVE-2026-55471: HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-55471/","md":"https://erroneo.us/security/cve/CVE-2026-55471/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00569,"verdict":null,"product":"ca.uhn.hapi.fhir:org.hl7.fhir.utilities (Maven)"},{"id":"CVE-2026-55450","type":"cve","title":"CVE-2026-55450: Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-55450/","md":"https://erroneo.us/security/cve/CVE-2026-55450/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0119,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-50203","type":"cve","title":"CVE-2026-50203: Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-50203/","md":"https://erroneo.us/security/cve/CVE-2026-50203/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00879,"verdict":null,"product":"apache-airflow-providers-sftp (PyPI)"},{"id":"CVE-2026-32967","type":"cve","title":"CVE-2026-32967: Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-32967/","md":"https://erroneo.us/security/cve/CVE-2026-32967/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.00547,"verdict":null,"product":"org.apache.dolphinscheduler:dolphinscheduler-api (Maven)"},{"id":"CVE-2026-32966","type":"cve","title":"CVE-2026-32966: Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure","date":"2026-06-17","url":"https://erroneo.us/security/cve/CVE-2026-32966/","md":"https://erroneo.us/security/cve/CVE-2026-32966/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00655,"verdict":null,"product":"org.apache.dolphinscheduler:dolphinscheduler-api (Maven)"},{"id":"2026-06-17","type":"digest","title":"Security digest for June 17, 2026","date":"2026-06-17","url":"https://erroneo.us/security/2026-06-17/","md":"https://erroneo.us/security/2026-06-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"zyxel-gs1900-cve-2026-7273-cgi-buffer-overflow","type":"brief","title":"Zyxel GS1900 Switches: Exploited CGI Overflow (KEV)","date":"2026-06-16","url":"https://erroneo.us/security/briefs/zyxel-gs1900-cve-2026-7273-cgi-buffer-overflow/","md":"https://erroneo.us/security/briefs/zyxel-gs1900-cve-2026-7273-cgi-buffer-overflow/index.md","severity":"high","kev":true,"epss":0.02501,"verdict":"check-exposure","cves":["CVE-2026-7273"],"summary":"Patch every GS1900 to the June firmware, but the urgency depends on reach: if the switch's web interface is exposed to the internet, a guest network or a flat LAN, treat it as compromised until checked; if only a locked-down admin VLAN can reach it, patch on a normal cycle this month."},{"id":"CVE-2026-56266","type":"cve","title":"CVE-2026-56266: Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-56266/","md":"https://erroneo.us/security/cve/CVE-2026-56266/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00476,"verdict":null,"product":"crawl4ai (PyPI)"},{"id":"CVE-2026-54157","type":"cve","title":"CVE-2026-54157: LobeHub: Unauthenticated SSRF in `/webapi/proxy`","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-54157/","md":"https://erroneo.us/security/cve/CVE-2026-54157/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0183,"verdict":null,"product":"@lobehub/lobehub (npm)"},{"id":"CVE-2026-53753","type":"cve","title":"CVE-2026-53753: Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-53753/","md":"https://erroneo.us/security/cve/CVE-2026-53753/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.029,"verdict":null,"product":"crawl4ai (PyPI)"},{"id":"CVE-2026-49980","type":"cve","title":"CVE-2026-49980: Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-49980/","md":"https://erroneo.us/security/cve/CVE-2026-49980/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00781,"verdict":null,"product":"github.com/rclone/rclone (Go)"},{"id":"CVE-2026-49468","type":"cve","title":"CVE-2026-49468: LiteLLM: Authentication Bypass via Host Header Injection","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-49468/","md":"https://erroneo.us/security/cve/CVE-2026-49468/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.03033,"verdict":null,"product":"litellm (PyPI)"},{"id":"CVE-2026-48907","type":"cve","title":"CVE-2026-48907: Widget Factory Joomla Content Editor Improper Access Control Vulnerability","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-48907/","md":"https://erroneo.us/security/cve/CVE-2026-48907/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.1619,"verdict":null,"product":"Widget Factory Joomla Content Editor"},{"id":"CVE-2026-48746","type":"cve","title":"CVE-2026-48746: vLLM: OpenAI auth bypass","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-48746/","md":"https://erroneo.us/security/cve/CVE-2026-48746/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01152,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2026-48519","type":"cve","title":"CVE-2026-48519: Langflow: Unauthenticated RCE in Shareable Playgrounds","date":"2026-06-16","url":"https://erroneo.us/security/cve/CVE-2026-48519/","md":"https://erroneo.us/security/cve/CVE-2026-48519/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00783,"verdict":null,"product":"langflow (PyPI)"},{"id":"2026-06-16","type":"digest","title":"Security digest for June 16, 2026","date":"2026-06-16","url":"https://erroneo.us/security/2026-06-16/","md":"https://erroneo.us/security/2026-06-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":7}},{"id":"sp-page-builder-cve-2026-48908-unauthenticated-upload-rce","type":"brief","title":"SP Page Builder CVE-2026-48908: Exploited Joomla RCE","date":"2026-06-15","url":"https://erroneo.us/security/briefs/sp-page-builder-cve-2026-48908-unauthenticated-upload-rce/","md":"https://erroneo.us/security/briefs/sp-page-builder-cve-2026-48908-unauthenticated-upload-rce/index.md","severity":"critical","kev":true,"epss":0.88512,"verdict":"act-now","cves":["CVE-2026-48908"],"summary":"Any Joomla site still on SP Page Builder 6.6.1 or older should be updated today and treated as compromised, because automated attacks have been planting web shells and admin accounts since June."},{"id":"icagenda-joomla-cve-2026-48939-file-upload-rce","type":"brief","title":"iCagenda CVE-2026-48939: Exploited Joomla Upload-to-RCE","date":"2026-06-15","url":"https://erroneo.us/security/briefs/icagenda-joomla-cve-2026-48939-file-upload-rce/","md":"https://erroneo.us/security/briefs/icagenda-joomla-cve-2026-48939-file-upload-rce/index.md","severity":"critical","kev":true,"epss":0.20069,"verdict":"check-exposure","cves":["CVE-2026-48939"],"summary":"Only Joomla 6.0.0-6.1.1 sites running iCagenda before 4.0.8 were open to web shells; those sites need a web-shell hunt, while everyone else on iCagenda simply updates."},{"id":"CVE-2026-54420","type":"cve","title":"CVE-2026-54420: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-54420/","md":"https://erroneo.us/security/cve/CVE-2026-54420/index.md","severity":"high","cvss":8.5,"kev":true,"epss":0.00806,"verdict":null,"product":"LiteSpeed cPanel Plugin"},{"id":"CVE-2026-54257","type":"cve","title":"CVE-2026-54257: Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-54257/","md":"https://erroneo.us/security/cve/CVE-2026-54257/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00428,"verdict":null,"product":"electron (npm)"},{"id":"CVE-2026-53633","type":"cve","title":"CVE-2026-53633: Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-53633/","md":"https://erroneo.us/security/cve/CVE-2026-53633/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00896,"verdict":null,"product":"@vitest/browser (npm)"},{"id":"CVE-2026-50887","type":"cve","title":"CVE-2026-50887: shlink has a Server-Side Request Forgery issue","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-50887/","md":"https://erroneo.us/security/cve/CVE-2026-50887/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00404,"verdict":null,"product":"shlinkio/shlink (Composer (PHP))"},{"id":"CVE-2026-50886","type":"cve","title":"CVE-2026-50886: Project Firefly III has incorrect access control in the webhook management component","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-50886/","md":"https://erroneo.us/security/cve/CVE-2026-50886/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0044,"verdict":null,"product":"grumpydictator/firefly-iii (Composer (PHP))"},{"id":"CVE-2026-50880","type":"cve","title":"CVE-2026-50880: YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-50880/","md":"https://erroneo.us/security/cve/CVE-2026-50880/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00695,"verdict":null,"product":"youtransfer (npm)"},{"id":"CVE-2026-39006","type":"cve","title":"CVE-2026-39006: SNMP4J-Agent allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath component","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-39006/","md":"https://erroneo.us/security/cve/CVE-2026-39006/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00751,"verdict":null,"product":"org.snmp4j:snmp4j-agent (Maven)"},{"id":"CVE-2026-30121","type":"cve","title":"CVE-2026-30121: Remotion: arbitrary file write vulnerability","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-30121/","md":"https://erroneo.us/security/cve/CVE-2026-30121/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00478,"verdict":null,"product":"remotion (npm)"},{"id":"CVE-2026-30120","type":"cve","title":"CVE-2026-30120: Remotion: remote code execution (RCE) vulnerability","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-30120/","md":"https://erroneo.us/security/cve/CVE-2026-30120/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00869,"verdict":null,"product":"remotion (npm)"},{"id":"CVE-2026-20262","type":"cve","title":"CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","date":"2026-06-15","url":"https://erroneo.us/security/cve/CVE-2026-20262/","md":"https://erroneo.us/security/cve/CVE-2026-20262/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.28171,"verdict":null,"product":"Cisco Catalyst SD-WAN Manager"},{"id":"2026-06-15","type":"digest","title":"Security digest for June 15, 2026","date":"2026-06-15","url":"https://erroneo.us/security/2026-06-15/","md":"https://erroneo.us/security/2026-06-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":2,"critical":8}},{"id":"CVE-2026-11624","type":"cve","title":"CVE-2026-11624: MCP Toolbox for Databases has an Origin Validation Error","date":"2026-06-13","url":"https://erroneo.us/security/cve/CVE-2026-11624/","md":"https://erroneo.us/security/cve/CVE-2026-11624/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00219,"verdict":null,"product":"github.com/googleapis/mcp-toolbox (Go)"},{"id":"2026-06-13","type":"digest","title":"Security digest for June 13, 2026","date":"2026-06-13","url":"https://erroneo.us/security/2026-06-13/","md":"https://erroneo.us/security/2026-06-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2026-50633","type":"cve","title":"CVE-2026-50633: Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-50633/","md":"https://erroneo.us/security/cve/CVE-2026-50633/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.01271,"verdict":null,"product":"org.apache.cxf:cxf-integration-jca (Maven)"},{"id":"CVE-2026-50632","type":"cve","title":"CVE-2026-50632: Apache CXF has JNDI Injection Vulnerability in JMSConfigFactory","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-50632/","md":"https://erroneo.us/security/cve/CVE-2026-50632/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.01116,"verdict":null,"product":"org.apache.cxf:cxf-rt-transports-jms (Maven)"},{"id":"CVE-2026-50628","type":"cve","title":"CVE-2026-50628: Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-50628/","md":"https://erroneo.us/security/cve/CVE-2026-50628/index.md","severity":"high","cvss":7.4,"kev":false,"epss":0.01022,"verdict":null,"product":"org.apache.cxf:cxf-rt-rs-security-oauth2 (Maven)"},{"id":"CVE-2026-50627","type":"cve","title":"CVE-2026-50627: Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-50627/","md":"https://erroneo.us/security/cve/CVE-2026-50627/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.00776,"verdict":null,"product":"org.apache.cxf:cxf-rt-rs-security-oauth2 (Maven)"},{"id":"CVE-2026-49875","type":"cve","title":"CVE-2026-49875: Apache CXF has Improper Restriction of XML External Entity Reference","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-49875/","md":"https://erroneo.us/security/cve/CVE-2026-49875/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00807,"verdict":null,"product":"org.apache.cxf:cxf-core (Maven)"},{"id":"CVE-2026-48150","type":"cve","title":"CVE-2026-48150: Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-48150/","md":"https://erroneo.us/security/cve/CVE-2026-48150/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00471,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-45833","type":"cve","title":"CVE-2026-45833: ChromaDB has a code injection vulnerability","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-45833/","md":"https://erroneo.us/security/cve/CVE-2026-45833/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00626,"verdict":null,"product":"chromadb (PyPI)"},{"id":"CVE-2026-35273","type":"cve","title":"CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","date":"2026-06-12","url":"https://erroneo.us/security/cve/CVE-2026-35273/","md":"https://erroneo.us/security/cve/CVE-2026-35273/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.96678,"verdict":"act-now","product":"Oracle  PeopleSoft Enterprise PeopleTools"},{"id":"2026-06-12","type":"digest","title":"Security digest for June 12, 2026","date":"2026-06-12","url":"https://erroneo.us/security/2026-06-12/","md":"https://erroneo.us/security/2026-06-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":7}},{"id":"CVE-2026-48062","type":"cve","title":"CVE-2026-48062: CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule","date":"2026-06-11","url":"https://erroneo.us/security/cve/CVE-2026-48062/","md":"https://erroneo.us/security/cve/CVE-2026-48062/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00775,"verdict":null,"product":"codeigniter4/framework (Composer (PHP))"},{"id":"CVE-2026-48039","type":"cve","title":"CVE-2026-48039: Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token","date":"2026-06-11","url":"https://erroneo.us/security/cve/CVE-2026-48039/","md":"https://erroneo.us/security/cve/CVE-2026-48039/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00589,"verdict":null,"product":"meta-ads-mcp (PyPI)"},{"id":"CVE-2026-10520","type":"cve","title":"CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability","date":"2026-06-11","url":"https://erroneo.us/security/cve/CVE-2026-10520/","md":"https://erroneo.us/security/cve/CVE-2026-10520/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99915,"verdict":null,"product":"Ivanti Sentry"},{"id":"2026-06-11","type":"digest","title":"Security digest for June 11, 2026","date":"2026-06-11","url":"https://erroneo.us/security/2026-06-11/","md":"https://erroneo.us/security/2026-06-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"oracle-peoplesoft-cve-2026-35273-shinyhunters","type":"brief","title":"Oracle PeopleSoft CVE-2026-35273: ShinyHunters Zero-Day","date":"2026-06-10","url":"https://erroneo.us/security/briefs/oracle-peoplesoft-cve-2026-35273-shinyhunters/","md":"https://erroneo.us/security/briefs/oracle-peoplesoft-cve-2026-35273-shinyhunters/index.md","severity":"critical","kev":true,"epss":0.96678,"verdict":"act-now","cves":["CVE-2026-35273"],"summary":"If you run PeopleTools 8.61 or 8.62 with PIA reachable from the internet, apply Oracle's fix and lock down the EMHub/PSIGW paths today, then hunt back to May 27, 2026."},{"id":"CVE-2026-53476","type":"cve","title":"CVE-2026-53476: Assisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote code execution","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53476/","md":"https://erroneo.us/security/cve/CVE-2026-53476/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00427,"verdict":null,"product":"github.com/kubev2v/assisted-migration-agent (Go)"},{"id":"CVE-2026-53475","type":"cve","title":"CVE-2026-53475: Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53475/","md":"https://erroneo.us/security/cve/CVE-2026-53475/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00503,"verdict":null,"product":"github.com/kubev2v/assisted-migration-agent (Go)"},{"id":"CVE-2026-53474","type":"cve","title":"CVE-2026-53474: Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53474/","md":"https://erroneo.us/security/cve/CVE-2026-53474/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00514,"verdict":null,"product":"github.com/kubev2v/migration-planner (Go)"},{"id":"CVE-2026-53471","type":"cve","title":"CVE-2026-53471: Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53471/","md":"https://erroneo.us/security/cve/CVE-2026-53471/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00514,"verdict":null,"product":"github.com/kubev2v/migration-planner (Go)"},{"id":"CVE-2026-53470","type":"cve","title":"CVE-2026-53470: Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53470/","md":"https://erroneo.us/security/cve/CVE-2026-53470/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00479,"verdict":null,"product":"github.com/kubev2v/migration-planner (Go)"},{"id":"CVE-2026-53469","type":"cve","title":"CVE-2026-53469: Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-53469/","md":"https://erroneo.us/security/cve/CVE-2026-53469/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00509,"verdict":null,"product":"github.com/kubev2v/migration-planner (Go)"},{"id":"CVE-2026-48063","type":"cve","title":"CVE-2026-48063: Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-48063/","md":"https://erroneo.us/security/cve/CVE-2026-48063/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00223,"verdict":null,"product":"baileys (npm)"},{"id":"CVE-2026-48031","type":"cve","title":"CVE-2026-48031: Go Restful API Boilerplate: Hardcoded JWT Secret \"random\" Allows Token Forgery","date":"2026-06-10","url":"https://erroneo.us/security/cve/CVE-2026-48031/","md":"https://erroneo.us/security/cve/CVE-2026-48031/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00626,"verdict":null,"product":"github.com/dhax/go-base (Go)"},{"id":"2026-06-10","type":"digest","title":"Security digest for June 10, 2026","date":"2026-06-10","url":"https://erroneo.us/security/2026-06-10/","md":"https://erroneo.us/security/2026-06-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":8}},{"id":"CVE-2026-9277","type":"cve","title":"CVE-2026-9277: shell-quote quote() does not escape newlines in object .op values","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-9277/","md":"https://erroneo.us/security/cve/CVE-2026-9277/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00824,"verdict":null,"product":"shell-quote (npm)"},{"id":"CVE-2026-8467","type":"cve","title":"CVE-2026-8467: PhoenixStorybook: Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-8467/","md":"https://erroneo.us/security/cve/CVE-2026-8467/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.02059,"verdict":null,"product":"phoenix_storybook (Hex (Erlang/Elixir))"},{"id":"CVE-2026-7473","type":"cve","title":"CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-7473/","md":"https://erroneo.us/security/cve/CVE-2026-7473/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.00649,"verdict":null,"product":"Arista Extensible Operating System"},{"id":"CVE-2026-48030","type":"cve","title":"CVE-2026-48030: Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-48030/","md":"https://erroneo.us/security/cve/CVE-2026-48030/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.07548,"verdict":null,"product":"pheditor/pheditor (Composer (PHP))"},{"id":"CVE-2026-20245","type":"cve","title":"CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-20245/","md":"https://erroneo.us/security/cve/CVE-2026-20245/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.25323,"verdict":null,"product":"Cisco Catalyst SD-WAN Manager"},{"id":"CVE-2026-11645","type":"cve","title":"CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date":"2026-06-09","url":"https://erroneo.us/security/cve/CVE-2026-11645/","md":"https://erroneo.us/security/cve/CVE-2026-11645/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.0244,"verdict":null,"product":"Google Chromium V8"},{"id":"2026-06-09","type":"digest","title":"Security digest for June 9, 2026","date":"2026-06-09","url":"https://erroneo.us/security/2026-06-09/","md":"https://erroneo.us/security/2026-06-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":3}},{"id":"CVE-2026-50751","type":"cve","title":"CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-50751/","md":"https://erroneo.us/security/cve/CVE-2026-50751/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.85338,"verdict":null,"product":"Check Point Security Gateway"},{"id":"CVE-2026-47724","type":"cve","title":"CVE-2026-47724: nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-47724/","md":"https://erroneo.us/security/cve/CVE-2026-47724/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00481,"verdict":null,"product":"github.com/juev/nebula-mesh (Go)"},{"id":"CVE-2026-47430","type":"cve","title":"CVE-2026-47430: Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews.","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-47430/","md":"https://erroneo.us/security/cve/CVE-2026-47430/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00774,"verdict":null,"product":"cordova-plugin-inappbrowser (npm)"},{"id":"CVE-2026-47252","type":"cve","title":"CVE-2026-47252: Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-47252/","md":"https://erroneo.us/security/cve/CVE-2026-47252/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00705,"verdict":null,"product":"github.com/julien040/anyquery/plugins/chrome (Go)"},{"id":"CVE-2026-45034","type":"cve","title":"CVE-2026-45034: PHPSpreadsheet has a patch bypass for CVE-2026-34084","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-45034/","md":"https://erroneo.us/security/cve/CVE-2026-45034/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00462,"verdict":null,"product":"phpoffice/phpspreadsheet (Composer (PHP))"},{"id":"CVE-2026-42271","type":"cve","title":"CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerability","date":"2026-06-08","url":"https://erroneo.us/security/cve/CVE-2026-42271/","md":"https://erroneo.us/security/cve/CVE-2026-42271/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.9257,"verdict":"patch-this-week","product":"BerriAI LiteLLM"},{"id":"2026-06-08","type":"digest","title":"Security digest for June 8, 2026","date":"2026-06-08","url":"https://erroneo.us/security/2026-06-08/","md":"https://erroneo.us/security/2026-06-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":4}},{"id":"CVE-2026-47744","type":"cve","title":"CVE-2026-47744: Shopper: Authorization bypass and RBAC privilege escalation in team settings","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-47744/","md":"https://erroneo.us/security/cve/CVE-2026-47744/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00417,"verdict":null,"product":"shopper/framework (Composer (PHP))"},{"id":"CVE-2026-47731","type":"cve","title":"CVE-2026-47731: NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-47731/","md":"https://erroneo.us/security/cve/CVE-2026-47731/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00863,"verdict":null,"product":"ait-core (PyPI)"},{"id":"CVE-2026-47670","type":"cve","title":"CVE-2026-47670: Authenticated Remote Code Execution via loadReader functionName code injection in DbGate","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-47670/","md":"https://erroneo.us/security/cve/CVE-2026-47670/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01757,"verdict":null,"product":"dbgate-api (npm)"},{"id":"CVE-2026-47669","type":"cve","title":"CVE-2026-47669: DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-47669/","md":"https://erroneo.us/security/cve/CVE-2026-47669/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00515,"verdict":null,"product":"dbgate (npm)"},{"id":"CVE-2026-47668","type":"cve","title":"CVE-2026-47668: DbGate: Unauthenticated Remote Code Execution via JSON Script Runner","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-47668/","md":"https://erroneo.us/security/cve/CVE-2026-47668/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.03882,"verdict":null,"product":"dbgate-serve (npm)"},{"id":"CVE-2026-28318","type":"cve","title":"CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","date":"2026-06-05","url":"https://erroneo.us/security/cve/CVE-2026-28318/","md":"https://erroneo.us/security/cve/CVE-2026-28318/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.01942,"verdict":null,"product":"SolarWinds Serv-U"},{"id":"2026-06-05","type":"digest","title":"Security digest for June 5, 2026","date":"2026-06-05","url":"https://erroneo.us/security/2026-06-05/","md":"https://erroneo.us/security/2026-06-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":5}},{"id":"progress-loadmaster-cve-2026-8037-pre-auth-rce","type":"brief","title":"Progress LoadMaster CVE-2026-8037: Exploited Pre-Auth RCE","date":"2026-06-04","url":"https://erroneo.us/security/briefs/progress-loadmaster-cve-2026-8037-pre-auth-rce/","md":"https://erroneo.us/security/briefs/progress-loadmaster-cve-2026-8037-pre-auth-rce/index.md","severity":"critical","kev":true,"epss":0.77362,"verdict":"check-exposure","cves":["CVE-2026-8037"],"summary":"Only LoadMaster-based appliances with the API enabled are exposed, but for those this is unauthenticated root RCE with a public exploit; if that's you and you're below 7.2.63.2 or 7.2.54.18, patch today."},{"id":"GHSA-jpvj-wpmj-h7rv","type":"ghsa","title":"Supply chain compromise via malicious @cap-js/openapi","date":"2026-06-04","url":"https://erroneo.us/security/ghsa/GHSA-jpvj-wpmj-h7rv/","md":"https://erroneo.us/security/ghsa/GHSA-jpvj-wpmj-h7rv/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"@cap-js/openapi"},{"id":"CVE-2026-54458","type":"cve","title":"CVE-2026-54458: WWBN AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin","date":"2026-06-04","url":"https://erroneo.us/security/cve/CVE-2026-54458/","md":"https://erroneo.us/security/cve/CVE-2026-54458/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00508,"verdict":null,"product":"WWBN/AVideo (Composer (PHP))"},{"id":"CVE-2026-50076","type":"cve","title":"CVE-2026-50076: Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path","date":"2026-06-04","url":"https://erroneo.us/security/cve/CVE-2026-50076/","md":"https://erroneo.us/security/cve/CVE-2026-50076/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00742,"verdict":null,"product":"org.apache.fory:fory-core (Maven)"},{"id":"CVE-2026-47708","type":"cve","title":"CVE-2026-47708: MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper","date":"2026-06-04","url":"https://erroneo.us/security/cve/CVE-2026-47708/","md":"https://erroneo.us/security/cve/CVE-2026-47708/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00525,"verdict":null,"product":"stata-mcp (PyPI)"},{"id":"2026-06-04","type":"digest","title":"Security digest for June 4, 2026","date":"2026-06-04","url":"https://erroneo.us/security/2026-06-04/","md":"https://erroneo.us/security/2026-06-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":4}},{"id":"kestra-cve-2026-49869-auth-bypass-rce","type":"brief","title":"Kestra CVE-2026-49869: Exploited Unauthenticated RCE","date":"2026-06-03","url":"https://erroneo.us/security/briefs/kestra-cve-2026-49869-auth-bypass-rce/","md":"https://erroneo.us/security/briefs/kestra-cve-2026-49869-auth-bypass-rce/index.md","severity":"critical","kev":true,"epss":0.02095,"verdict":"act-now","cves":["CVE-2026-49869"],"summary":"If you run Kestra OSS below 1.0.45 or 1.3.21 and anyone untrusted can reach its API, assume it is compromised: upgrade, then rotate every secret the workers could see."},{"id":"CVE-2026-47065","type":"cve","title":"CVE-2026-47065: Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-47065/","md":"https://erroneo.us/security/cve/CVE-2026-47065/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00504,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"CVE-2026-45247","type":"cve","title":"CVE-2026-45247: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-45247/","md":"https://erroneo.us/security/cve/CVE-2026-45247/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.02085,"verdict":null,"product":"Mirasvit Mirasvit Full Page Cache Warmer"},{"id":"CVE-2026-44182","type":"cve","title":"CVE-2026-44182: Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-44182/","md":"https://erroneo.us/security/cve/CVE-2026-44182/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00632,"verdict":null,"product":"jupyter_enterprise_gateway (PyPI)"},{"id":"CVE-2026-44181","type":"cve","title":"CVE-2026-44181: Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-44181/","md":"https://erroneo.us/security/cve/CVE-2026-44181/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00767,"verdict":null,"product":"jupyter_enterprise_gateway (PyPI)"},{"id":"CVE-2026-44180","type":"cve","title":"CVE-2026-44180: Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-44180/","md":"https://erroneo.us/security/cve/CVE-2026-44180/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00715,"verdict":null,"product":"jupyter_enterprise_gateway (PyPI)"},{"id":"CVE-2026-41283","type":"cve","title":"CVE-2026-41283: OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-41283/","md":"https://erroneo.us/security/cve/CVE-2026-41283/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00915,"verdict":null,"product":"mistral (PyPI)"},{"id":"CVE-2026-4035","type":"cve","title":"CVE-2026-4035: MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration","date":"2026-06-03","url":"https://erroneo.us/security/cve/CVE-2026-4035/","md":"https://erroneo.us/security/cve/CVE-2026-4035/index.md","severity":"high","cvss":7.7,"kev":false,"epss":0.0066,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2026-06-03","type":"digest","title":"Security digest for June 3, 2026","date":"2026-06-03","url":"https://erroneo.us/security/2026-06-03/","md":"https://erroneo.us/security/2026-06-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":6}},{"id":"CVE-2026-47117","type":"cve","title":"CVE-2026-47117: OpenMed vulnerable to remote code injection through privacy-filter model loading path","date":"2026-06-02","url":"https://erroneo.us/security/cve/CVE-2026-47117/","md":"https://erroneo.us/security/cve/CVE-2026-47117/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01288,"verdict":null,"product":"openmed (PyPI)"},{"id":"CVE-2025-48595","type":"cve","title":"CVE-2025-48595: Android Framework Integer Overflow Vulnerability","date":"2026-06-02","url":"https://erroneo.us/security/cve/CVE-2025-48595/","md":"https://erroneo.us/security/cve/CVE-2025-48595/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.01714,"verdict":null,"product":"Android Framework"},{"id":"CVE-2022-0492","type":"cve","title":"CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability","date":"2026-06-02","url":"https://erroneo.us/security/cve/CVE-2022-0492/","md":"https://erroneo.us/security/cve/CVE-2022-0492/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.05528,"verdict":null,"product":"Linux Kernel"},{"id":"2026-06-02","type":"digest","title":"Security digest for June 2, 2026","date":"2026-06-02","url":"https://erroneo.us/security/2026-06-02/","md":"https://erroneo.us/security/2026-06-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2026-47429","type":"cve","title":"CVE-2026-47429: When Vitest UI server is listening, arbitrary file can be read and executed","date":"2026-06-01","url":"https://erroneo.us/security/cve/CVE-2026-47429/","md":"https://erroneo.us/security/cve/CVE-2026-47429/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00876,"verdict":null,"product":"vitest (npm)"},{"id":"CVE-2026-47428","type":"cve","title":"CVE-2026-47428: Vitest browser mode serves unsanitized otelCarrier query parameter as inline script","date":"2026-06-01","url":"https://erroneo.us/security/cve/CVE-2026-47428/","md":"https://erroneo.us/security/cve/CVE-2026-47428/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00613,"verdict":null,"product":"@vitest/browser (npm)"},{"id":"CVE-2026-47413","type":"cve","title":"CVE-2026-47413: praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members","date":"2026-06-01","url":"https://erroneo.us/security/cve/CVE-2026-47413/","md":"https://erroneo.us/security/cve/CVE-2026-47413/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00363,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-42252","type":"cve","title":"CVE-2026-42252: Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine","date":"2026-06-01","url":"https://erroneo.us/security/cve/CVE-2026-42252/","md":"https://erroneo.us/security/cve/CVE-2026-42252/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00592,"verdict":null,"product":"apache-airflow (PyPI)"},{"id":"CVE-2024-21182","type":"cve","title":"CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability","date":"2026-06-01","url":"https://erroneo.us/security/cve/CVE-2024-21182/","md":"https://erroneo.us/security/cve/CVE-2024-21182/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.74162,"verdict":null,"product":"Oracle WebLogic Server"},{"id":"2026-06-01","type":"digest","title":"Security digest for June 1, 2026","date":"2026-06-01","url":"https://erroneo.us/security/2026-06-01/","md":"https://erroneo.us/security/2026-06-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"GHSA-jmfc-hfjq-pxcp","type":"ghsa","title":"stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation","date":"2026-05-29","url":"https://erroneo.us/security/ghsa/GHSA-jmfc-hfjq-pxcp/","md":"https://erroneo.us/security/ghsa/GHSA-jmfc-hfjq-pxcp/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"stigmem-node"},{"id":"GHSA-fp6w-8wpg-74g5","type":"ghsa","title":"stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback","date":"2026-05-29","url":"https://erroneo.us/security/ghsa/GHSA-fp6w-8wpg-74g5/","md":"https://erroneo.us/security/ghsa/GHSA-fp6w-8wpg-74g5/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"stigmem-node"},{"id":"GHSA-9vp8-3hmv-8fgh","type":"ghsa","title":"stigmem-node's federation peer registration lacked explicit out-of-band approval","date":"2026-05-29","url":"https://erroneo.us/security/ghsa/GHSA-9vp8-3hmv-8fgh/","md":"https://erroneo.us/security/ghsa/GHSA-9vp8-3hmv-8fgh/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"stigmem-node"},{"id":"CVE-2026-8838","type":"cve","title":"CVE-2026-8838: amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-8838/","md":"https://erroneo.us/security/cve/CVE-2026-8838/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00803,"verdict":null,"product":"redshift-connector (PyPI)"},{"id":"CVE-2026-47416","type":"cve","title":"CVE-2026-47416: praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47416/","md":"https://erroneo.us/security/cve/CVE-2026-47416/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00363,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-47410","type":"cve","title":"CVE-2026-47410: praisonai-platform: JWT signing key defaults to hardcoded \"dev-secret-change-me\", allowing token forgery for any user when PLATFORM_ENV is unset","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47410/","md":"https://erroneo.us/security/cve/CVE-2026-47410/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00638,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-47407","type":"cve","title":"CVE-2026-47407: PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47407/","md":"https://erroneo.us/security/cve/CVE-2026-47407/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00414,"verdict":null,"product":"praisonai-platform (PyPI)"},{"id":"CVE-2026-47396","type":"cve","title":"CVE-2026-47396: PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47396/","md":"https://erroneo.us/security/cve/CVE-2026-47396/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00642,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-47393","type":"cve","title":"CVE-2026-47393: PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47393/","md":"https://erroneo.us/security/cve/CVE-2026-47393/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00779,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-47392","type":"cve","title":"CVE-2026-47392: PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47392/","md":"https://erroneo.us/security/cve/CVE-2026-47392/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00884,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-47391","type":"cve","title":"CVE-2026-47391: PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47391/","md":"https://erroneo.us/security/cve/CVE-2026-47391/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01165,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-47210","type":"cve","title":"CVE-2026-47210: vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47210/","md":"https://erroneo.us/security/cve/CVE-2026-47210/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00823,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-47208","type":"cve","title":"CVE-2026-47208: vm2 is Vulnerable to Sandbox Breakout Through Promise Species","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47208/","md":"https://erroneo.us/security/cve/CVE-2026-47208/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00825,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-47140","type":"cve","title":"CVE-2026-47140: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47140/","md":"https://erroneo.us/security/cve/CVE-2026-47140/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00823,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-47137","type":"cve","title":"CVE-2026-47137: vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47137/","md":"https://erroneo.us/security/cve/CVE-2026-47137/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00705,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-47131","type":"cve","title":"CVE-2026-47131: vm2 has a Sandbox Escape issue","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-47131/","md":"https://erroneo.us/security/cve/CVE-2026-47131/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00649,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-0257","type":"cve","title":"CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","date":"2026-05-29","url":"https://erroneo.us/security/cve/CVE-2026-0257/","md":"https://erroneo.us/security/cve/CVE-2026-0257/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.96895,"verdict":null,"product":"Palo Alto Networks PAN-OS"},{"id":"2026-05-29","type":"digest","title":"Security digest for May 29, 2026","date":"2026-05-29","url":"https://erroneo.us/security/2026-05-29/","md":"https://erroneo.us/security/2026-05-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":16}},{"id":"oracle-ebs-payments-cve-2026-46817-kev","type":"brief","title":"Oracle EBS Payments CVE-2026-46817: Exploited Takeover","date":"2026-05-28","url":"https://erroneo.us/security/briefs/oracle-ebs-payments-cve-2026-46817-kev/","md":"https://erroneo.us/security/briefs/oracle-ebs-payments-cve-2026-46817-kev/index.md","severity":"critical","kev":true,"epss":0.00814,"verdict":"act-now","cves":["CVE-2026-46817"],"summary":"If you run Oracle E-Business Suite 12.2 without the May 2026 Critical Security Patch Update, patch now; this is an unauthenticated, low-complexity takeover of the payments module and it has been exploited since late June."},{"id":"CVE-2026-9098","type":"cve","title":"CVE-2026-9098: Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest","date":"2026-05-28","url":"https://erroneo.us/security/cve/CVE-2026-9098/","md":"https://erroneo.us/security/cve/CVE-2026-9098/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00211,"verdict":null,"product":"github.com/casdoor/casdoor (Go)"},{"id":"CVE-2026-9097","type":"cve","title":"CVE-2026-9097: Casdoor doesn't verify that a JWT used for token exchange is still active","date":"2026-05-28","url":"https://erroneo.us/security/cve/CVE-2026-9097/","md":"https://erroneo.us/security/cve/CVE-2026-9097/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00483,"verdict":null,"product":"github.com/casdoor/casdoor (Go)"},{"id":"CVE-2026-9094","type":"cve","title":"CVE-2026-9094: Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check","date":"2026-05-28","url":"https://erroneo.us/security/cve/CVE-2026-9094/","md":"https://erroneo.us/security/cve/CVE-2026-9094/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00483,"verdict":null,"product":"github.com/casdoor/casdoor (Go)"},{"id":"CVE-2026-9093","type":"cve","title":"CVE-2026-9093: Casdoor  does not validate the AudienceRestriction element in SAML assertions","date":"2026-05-28","url":"https://erroneo.us/security/cve/CVE-2026-9093/","md":"https://erroneo.us/security/cve/CVE-2026-9093/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00483,"verdict":null,"product":"github.com/casdoor/casdoor (Go)"},{"id":"CVE-2026-9090","type":"cve","title":"CVE-2026-9090: Casdoor has an authentication bypass","date":"2026-05-28","url":"https://erroneo.us/security/cve/CVE-2026-9090/","md":"https://erroneo.us/security/cve/CVE-2026-9090/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00201,"verdict":null,"product":"github.com/casdoor/casdoor (Go)"},{"id":"2026-05-28","type":"digest","title":"Security digest for May 28, 2026","date":"2026-05-28","url":"https://erroneo.us/security/2026-05-28/","md":"https://erroneo.us/security/2026-05-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":5}},{"id":"CVE-2026-9739","type":"cve","title":"CVE-2026-9739: MCP Toolbox for Databases vulnerable to DNS rebinding attacks","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-9739/","md":"https://erroneo.us/security/cve/CVE-2026-9739/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00237,"verdict":null,"product":"github.com/googleapis/mcp-toolbox (Go)"},{"id":"CVE-2026-8398","type":"cve","title":"CVE-2026-8398: Daemon Tools Lite Embedded Malicious Code Vulnerability","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-8398/","md":"https://erroneo.us/security/cve/CVE-2026-8398/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.00963,"verdict":null,"product":"Daemon Daemon Tools Lite"},{"id":"CVE-2026-48027","type":"cve","title":"CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-48027/","md":"https://erroneo.us/security/cve/CVE-2026-48027/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.01336,"verdict":null,"product":"Nx Nx Console"},{"id":"CVE-2026-46621","type":"cve","title":"CVE-2026-46621: Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-46621/","md":"https://erroneo.us/security/cve/CVE-2026-46621/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01116,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-46562","type":"cve","title":"CVE-2026-46562: Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-46562/","md":"https://erroneo.us/security/cve/CVE-2026-46562/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00976,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-45618","type":"cve","title":"CVE-2026-45618: LiquidJS is Vulnerable to Remote Code Execution","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-45618/","md":"https://erroneo.us/security/cve/CVE-2026-45618/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00818,"verdict":null,"product":"liquidjs (npm)"},{"id":"CVE-2026-45321","type":"cve","title":"CVE-2026-45321: TanStack Unspecified Vulnerability","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-45321/","md":"https://erroneo.us/security/cve/CVE-2026-45321/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.01054,"verdict":"check-exposure","product":"TanStack TanStack"},{"id":"CVE-2026-25879","type":"cve","title":"CVE-2026-25879: Langroid has Prompt to SQL Injection, Leading to RCE","date":"2026-05-27","url":"https://erroneo.us/security/cve/CVE-2026-25879/","md":"https://erroneo.us/security/cve/CVE-2026-25879/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00695,"verdict":null,"product":"langroid (PyPI)"},{"id":"2026-05-27","type":"digest","title":"Security digest for May 27, 2026","date":"2026-05-27","url":"https://erroneo.us/security/2026-05-27/","md":"https://erroneo.us/security/2026-05-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":5}},{"id":"CVE-2026-7374","type":"cve","title":"CVE-2026-7374: KubeVirt has a Link Following vulnerability","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-7374/","md":"https://erroneo.us/security/cve/CVE-2026-7374/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00829,"verdict":null,"product":"kubevirt.io/kubevirt (Go)"},{"id":"CVE-2026-48172","type":"cve","title":"CVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-48172/","md":"https://erroneo.us/security/cve/CVE-2026-48172/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.01011,"verdict":null,"product":"LiteSpeed cPanel Plugin"},{"id":"CVE-2026-44930","type":"cve","title":"CVE-2026-44930: Apache CXF has an LDAP injection vulnerability","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-44930/","md":"https://erroneo.us/security/cve/CVE-2026-44930/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00507,"verdict":null,"product":"org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap (Maven)"},{"id":"CVE-2026-44632","type":"cve","title":"CVE-2026-44632: Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-44632/","md":"https://erroneo.us/security/cve/CVE-2026-44632/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01116,"verdict":null,"product":"org.yamcs:yamcs-core (Maven)"},{"id":"CVE-2026-33137","type":"cve","title":"CVE-2026-33137: XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-33137/","md":"https://erroneo.us/security/cve/CVE-2026-33137/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00879,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-rest-server (Maven)"},{"id":"CVE-2026-2651","type":"cve","title":"CVE-2026-2651: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-2651/","md":"https://erroneo.us/security/cve/CVE-2026-2651/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00536,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2026-23734","type":"cve","title":"CVE-2026-23734: XWiki Platform has path traversal via resources parameter in ssx and jsx endpoints when using leading slash","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2026-23734/","md":"https://erroneo.us/security/cve/CVE-2026-23734/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.18528,"verdict":null,"product":"org.xwiki.commons:xwiki-commons-classloader-api (Maven)"},{"id":"CVE-2018-25357","type":"cve","title":"CVE-2018-25357: Dolibarr ERP CRM contains a remote code evaluation vulnerability","date":"2026-05-26","url":"https://erroneo.us/security/cve/CVE-2018-25357/","md":"https://erroneo.us/security/cve/CVE-2018-25357/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01701,"verdict":null,"product":"dolibarr/dolibarr (Composer (PHP))"},{"id":"2026-05-26","type":"digest","title":"Security digest for May 26, 2026","date":"2026-05-26","url":"https://erroneo.us/security/2026-05-26/","md":"https://erroneo.us/security/2026-05-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":7}},{"id":"CVE-2026-9082","type":"cve","title":"CVE-2026-9082: Drupal Core SQL Injection Vulnerability","date":"2026-05-22","url":"https://erroneo.us/security/cve/CVE-2026-9082/","md":"https://erroneo.us/security/cve/CVE-2026-9082/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.15701,"verdict":null,"product":"Drupal Core"},{"id":"CVE-2026-48777","type":"cve","title":"CVE-2026-48777: FileBrowser Quantum: Path traversal in public share PATCH allows file ops outside shared directory","date":"2026-05-22","url":"https://erroneo.us/security/cve/CVE-2026-48777/","md":"https://erroneo.us/security/cve/CVE-2026-48777/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00522,"verdict":null,"product":"github.com/gtsteffaniak/filebrowser/backend (Go)"},{"id":"CVE-2026-46716","type":"cve","title":"CVE-2026-46716: Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron","date":"2026-05-22","url":"https://erroneo.us/security/cve/CVE-2026-46716/","md":"https://erroneo.us/security/cve/CVE-2026-46716/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00491,"verdict":null,"product":"github.com/nezhahq/nezha (Go)"},{"id":"CVE-2026-46670","type":"cve","title":"CVE-2026-46670: YesWiki: Unauthenticated SQL Injection","date":"2026-05-22","url":"https://erroneo.us/security/cve/CVE-2026-46670/","md":"https://erroneo.us/security/cve/CVE-2026-46670/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01992,"verdict":null,"product":"yeswiki/yeswiki (Composer (PHP))"},{"id":"2026-05-22","type":"digest","title":"Security digest for May 22, 2026","date":"2026-05-22","url":"https://erroneo.us/security/2026-05-22/","md":"https://erroneo.us/security/2026-05-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"starlette-badhost-host-header-bypass-cve-2026-48710","type":"brief","title":"Starlette BadHost: Host Header Auth Bypass in CISA KEV","date":"2026-05-21","url":"https://erroneo.us/security/briefs/starlette-badhost-host-header-bypass-cve-2026-48710/","md":"https://erroneo.us/security/briefs/starlette-badhost-host-header-bypass-cve-2026-48710/index.md","severity":"high","kev":true,"epss":0.07056,"verdict":"patch-this-week","cves":["CVE-2026-48710"],"summary":"Bump starlette to 1.0.1 or later in every Python service this week; it is urgent where an ASGI server faces untrusted clients directly and middleware makes security decisions from request.url."},{"id":"GHSA-q2f7-m237-v562","type":"ghsa","title":"@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators","date":"2026-05-21","url":"https://erroneo.us/security/ghsa/GHSA-q2f7-m237-v562/","md":"https://erroneo.us/security/ghsa/GHSA-q2f7-m237-v562/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"@hulumi/policies"},{"id":"CVE-2026-8134","type":"cve","title":"CVE-2026-8134: Concrete CMS Vulnerable to Relative Path Traversal","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-8134/","md":"https://erroneo.us/security/cve/CVE-2026-8134/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01113,"verdict":null,"product":"concrete5/concrete5 (Composer (PHP))"},{"id":"CVE-2026-48207","type":"cve","title":"CVE-2026-48207: Apache Fory PyFory Deserialization of Untrusted Data","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-48207/","md":"https://erroneo.us/security/cve/CVE-2026-48207/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00817,"verdict":null,"product":"pyfory (PyPI)"},{"id":"CVE-2026-46703","type":"cve","title":"CVE-2026-46703: Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-46703/","md":"https://erroneo.us/security/cve/CVE-2026-46703/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00777,"verdict":null,"product":"boxlite (PyPI)"},{"id":"CVE-2026-46695","type":"cve","title":"CVE-2026-46695: BoxLite: Permission Bypass Allows Modification of Read-Only Files","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-46695/","md":"https://erroneo.us/security/cve/CVE-2026-46695/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00479,"verdict":null,"product":"boxlite (PyPI)"},{"id":"CVE-2026-46633","type":"cve","title":"CVE-2026-46633: Twig: PHP code injection via `{% use %}` template name","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-46633/","md":"https://erroneo.us/security/cve/CVE-2026-46633/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00688,"verdict":null,"product":"twig/twig (Composer (PHP))"},{"id":"CVE-2026-46614","type":"cve","title":"CVE-2026-46614: Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-46614/","md":"https://erroneo.us/security/cve/CVE-2026-46614/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00652,"verdict":null,"product":"github.com/fission/fission (Go)"},{"id":"CVE-2026-34926","type":"cve","title":"CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2026-34926/","md":"https://erroneo.us/security/cve/CVE-2026-34926/index.md","severity":"medium","cvss":6.7,"kev":true,"epss":0.00538,"verdict":null,"product":"Trend Micro Apex One"},{"id":"CVE-2025-34291","type":"cve","title":"CVE-2025-34291: Langflow Origin Validation Error Vulnerability","date":"2026-05-21","url":"https://erroneo.us/security/cve/CVE-2025-34291/","md":"https://erroneo.us/security/cve/CVE-2025-34291/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.92808,"verdict":"act-now","product":"Langflow Langflow"},{"id":"2026-05-21","type":"digest","title":"Security digest for May 21, 2026","date":"2026-05-21","url":"https://erroneo.us/security/2026-05-21/","md":"https://erroneo.us/security/2026-05-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":7}},{"id":"CVE-2026-46421","type":"cve","title":"CVE-2026-46421: Supply chain compromise via malicious package versions (@cap-js/sqlite,  @cap-js/postgres, @cap-js/db-service)","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2026-46421/","md":"https://erroneo.us/security/cve/CVE-2026-46421/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00524,"verdict":null,"product":"@cap-js/sqlite (npm)"},{"id":"CVE-2026-45498","type":"cve","title":"CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2026-45498/","md":"https://erroneo.us/security/cve/CVE-2026-45498/index.md","severity":"medium","cvss":4,"kev":true,"epss":0.01267,"verdict":null,"product":"Microsoft Defender"},{"id":"CVE-2026-41091","type":"cve","title":"CVE-2026-41091: Microsoft Defender Link Following Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2026-41091/","md":"https://erroneo.us/security/cve/CVE-2026-41091/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00443,"verdict":null,"product":"Microsoft Defender"},{"id":"CVE-2010-0806","type":"cve","title":"CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2010-0806/","md":"https://erroneo.us/security/cve/CVE-2010-0806/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.82241,"verdict":null,"product":"Microsoft Internet Explorer"},{"id":"CVE-2010-0249","type":"cve","title":"CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2010-0249/","md":"https://erroneo.us/security/cve/CVE-2010-0249/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.91939,"verdict":null,"product":"Microsoft Internet Explorer"},{"id":"CVE-2009-3459","type":"cve","title":"CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2009-3459/","md":"https://erroneo.us/security/cve/CVE-2009-3459/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.86646,"verdict":null,"product":"Adobe Acrobat and Reader"},{"id":"CVE-2009-1537","type":"cve","title":"CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2009-1537/","md":"https://erroneo.us/security/cve/CVE-2009-1537/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.51362,"verdict":null,"product":"Microsoft DirectX"},{"id":"CVE-2008-4250","type":"cve","title":"CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability","date":"2026-05-20","url":"https://erroneo.us/security/cve/CVE-2008-4250/","md":"https://erroneo.us/security/cve/CVE-2008-4250/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98751,"verdict":null,"product":"Microsoft Windows"},{"id":"2026-05-20","type":"digest","title":"Security digest for May 20, 2026","date":"2026-05-20","url":"https://erroneo.us/security/2026-05-20/","md":"https://erroneo.us/security/2026-05-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":7,"critical":2}},{"id":"GHSA-g53w-w6mj-hrpp","type":"ghsa","title":"MCP Gateway: Authority-injection and JWT/session bypass via the unauthenticated router hair-pin \"router-key\" / \"mcp-init-host\" path","date":"2026-05-19","url":"https://erroneo.us/security/ghsa/GHSA-g53w-w6mj-hrpp/","md":"https://erroneo.us/security/ghsa/GHSA-g53w-w6mj-hrpp/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/Kuadrant/mcp-gateway"},{"id":"GHSA-27f5-xjrr-q9ff","type":"ghsa","title":"Malware in @opensearch-project/opensearch","date":"2026-05-19","url":"https://erroneo.us/security/ghsa/GHSA-27f5-xjrr-q9ff/","md":"https://erroneo.us/security/ghsa/GHSA-27f5-xjrr-q9ff/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"@opensearch-project/opensearch, @opensearch-project/opensearch"},{"id":"CVE-2026-47323","type":"cve","title":"CVE-2026-47323: Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-47323/","md":"https://erroneo.us/security/cve/CVE-2026-47323/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01605,"verdict":null,"product":"org.apache.camel:camel-cxf-rest (Maven)"},{"id":"CVE-2026-46725","type":"cve","title":"CVE-2026-46725: TYPO3 Remote Code Execution in extension \"Content Element Selector\" (ceselector)","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-46725/","md":"https://erroneo.us/security/cve/CVE-2026-46725/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01859,"verdict":null,"product":"mmc/ceselector (Composer (PHP))"},{"id":"CVE-2026-46412","type":"cve","title":"CVE-2026-46412: Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-46412/","md":"https://erroneo.us/security/cve/CVE-2026-46412/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00765,"verdict":null,"product":"@beproduct/nestjs-auth (npm)"},{"id":"CVE-2026-46395","type":"cve","title":"CVE-2026-46395: HAXcms: Private Key Disclosure via Broken HMAC Implementation","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-46395/","md":"https://erroneo.us/security/cve/CVE-2026-46395/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00287,"verdict":null,"product":"@haxtheweb/haxcms-nodejs (npm)"},{"id":"CVE-2026-46354","type":"cve","title":"CVE-2026-46354: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-46354/","md":"https://erroneo.us/security/cve/CVE-2026-46354/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00318,"verdict":null,"product":"github.com/coder/coder/v2 (Go)"},{"id":"CVE-2026-46339","type":"cve","title":"CVE-2026-46339: 9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-46339/","md":"https://erroneo.us/security/cve/CVE-2026-46339/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.03352,"verdict":null,"product":"9router (npm)"},{"id":"CVE-2026-45758","type":"cve","title":"CVE-2026-45758: Malicious code in guardrails-ai 0.10.1 (supply chain compromise)","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-45758/","md":"https://erroneo.us/security/cve/CVE-2026-45758/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0049,"verdict":null,"product":"guardrails-ai (PyPI)"},{"id":"CVE-2026-45721","type":"cve","title":"CVE-2026-45721: Algernon: handler.lua discovery walks parent directories above the server root","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-45721/","md":"https://erroneo.us/security/cve/CVE-2026-45721/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00744,"verdict":null,"product":"github.com/xyproto/algernon (Go)"},{"id":"CVE-2026-45695","type":"cve","title":"CVE-2026-45695: Kopia: RCE via SSH ProxyCommand Injection","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-45695/","md":"https://erroneo.us/security/cve/CVE-2026-45695/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0161,"verdict":null,"product":"github.com/kopia/kopia (Go)"},{"id":"CVE-2026-45568","type":"cve","title":"CVE-2026-45568: rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-45568/","md":"https://erroneo.us/security/cve/CVE-2026-45568/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00544,"verdict":null,"product":"zrok (PyPI)"},{"id":"CVE-2026-31072","type":"cve","title":"CVE-2026-31072: APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-31072/","md":"https://erroneo.us/security/cve/CVE-2026-31072/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.01007,"verdict":null,"product":"apscheduler (PyPI)"},{"id":"CVE-2026-2611","type":"cve","title":"CVE-2026-2611: MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-2611/","md":"https://erroneo.us/security/cve/CVE-2026-2611/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00414,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2026-2587","type":"cve","title":"CVE-2026-2587: GlassFish's gadget handler is vulnerable to RCE","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-2587/","md":"https://erroneo.us/security/cve/CVE-2026-2587/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00668,"verdict":null,"product":"org.glassfish.main.admingui:admingui (Maven)"},{"id":"CVE-2026-2586","type":"cve","title":"CVE-2026-2586: GlassFish's Administration Console is Vulnerable to RCE","date":"2026-05-19","url":"https://erroneo.us/security/cve/CVE-2026-2586/","md":"https://erroneo.us/security/cve/CVE-2026-2586/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00825,"verdict":null,"product":"org.glassfish.main.admingui:console-common (Maven)"},{"id":"2026-05-19","type":"digest","title":"Security digest for May 19, 2026","date":"2026-05-19","url":"https://erroneo.us/security/2026-05-19/","md":"https://erroneo.us/security/2026-05-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":16}},{"id":"GHSA-wx9m-wx4f-4cmg","type":"ghsa","title":"Malicious dropper in mistralai 2.4.6 PyPI package","date":"2026-05-18","url":"https://erroneo.us/security/ghsa/GHSA-wx9m-wx4f-4cmg/","md":"https://erroneo.us/security/ghsa/GHSA-wx9m-wx4f-4cmg/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"mistralai"},{"id":"CVE-2026-7304","type":"cve","title":"CVE-2026-7304: SGLang: Unauthenticated RCE via --enable-custom-logit-processor","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-7304/","md":"https://erroneo.us/security/cve/CVE-2026-7304/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00875,"verdict":null,"product":"sglang (PyPI)"},{"id":"CVE-2026-7302","type":"cve","title":"CVE-2026-7302: SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-7302/","md":"https://erroneo.us/security/cve/CVE-2026-7302/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00581,"verdict":null,"product":"sglang (PyPI)"},{"id":"CVE-2026-7301","type":"cve","title":"CVE-2026-7301: SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-7301/","md":"https://erroneo.us/security/cve/CVE-2026-7301/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00597,"verdict":null,"product":"sglang (PyPI)"},{"id":"CVE-2026-45829","type":"cve","title":"CVE-2026-45829: ChromaDB Python project has a pre-authentication code injection vulnerability","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-45829/","md":"https://erroneo.us/security/cve/CVE-2026-45829/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01411,"verdict":null,"product":"chromadb (PyPI)"},{"id":"CVE-2026-45697","type":"cve","title":"CVE-2026-45697: Formie: Pre-authenticated server-side template injection in Hidden fields","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-45697/","md":"https://erroneo.us/security/cve/CVE-2026-45697/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00813,"verdict":null,"product":"verbb/formie (Composer (PHP))"},{"id":"CVE-2026-45625","type":"cve","title":"CVE-2026-45625: Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs","date":"2026-05-18","url":"https://erroneo.us/security/cve/CVE-2026-45625/","md":"https://erroneo.us/security/cve/CVE-2026-45625/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00524,"verdict":null,"product":"github.com/getarcaneapp/arcane/backend (Go)"},{"id":"2026-05-18","type":"digest","title":"Security digest for May 18, 2026","date":"2026-05-18","url":"https://erroneo.us/security/2026-05-18/","md":"https://erroneo.us/security/2026-05-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":7}},{"id":"CVE-2026-42897","type":"cve","title":"CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability","date":"2026-05-15","url":"https://erroneo.us/security/cve/CVE-2026-42897/","md":"https://erroneo.us/security/cve/CVE-2026-42897/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.00519,"verdict":null,"product":"Microsoft Microsoft"},{"id":"2026-05-15","type":"digest","title":"Security digest for May 15, 2026","date":"2026-05-15","url":"https://erroneo.us/security/2026-05-15/","md":"https://erroneo.us/security/2026-05-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-wf8q-wvv8-p8jf","type":"ghsa","title":"@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation","date":"2026-05-14","url":"https://erroneo.us/security/ghsa/GHSA-wf8q-wvv8-p8jf/","md":"https://erroneo.us/security/ghsa/GHSA-wf8q-wvv8-p8jf/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"@samanhappy/mcphub"},{"id":"CVE-2026-8634","type":"cve","title":"CVE-2026-8634: Crabbox: environment variable exposure vulnerability","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-8634/","md":"https://erroneo.us/security/cve/CVE-2026-8634/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01037,"verdict":null,"product":"github.com/openclaw/crabbox (Go)"},{"id":"CVE-2026-8178","type":"cve","title":"CVE-2026-8178: Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-8178/","md":"https://erroneo.us/security/cve/CVE-2026-8178/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00711,"verdict":null,"product":"com.amazon.redshift:redshift-jdbc42 (Maven)"},{"id":"CVE-2026-46442","type":"cve","title":"CVE-2026-46442: FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-46442/","md":"https://erroneo.us/security/cve/CVE-2026-46442/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.03414,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-45411","type":"cve","title":"CVE-2026-45411: vm2 Has a Sandbox Breakout Using Async Generator","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45411/","md":"https://erroneo.us/security/cve/CVE-2026-45411/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00901,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-45374","type":"cve","title":"CVE-2026-45374: DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45374/","md":"https://erroneo.us/security/cve/CVE-2026-45374/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00466,"verdict":null,"product":"deepseek-tui (crates.io (Rust))"},{"id":"CVE-2026-45369","type":"cve","title":"CVE-2026-45369: utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45369/","md":"https://erroneo.us/security/cve/CVE-2026-45369/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.00352,"verdict":null,"product":"utcp-cli (PyPI)"},{"id":"CVE-2026-45353","type":"cve","title":"CVE-2026-45353: Electerm Local code through electerm's single-instance socket","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45353/","md":"https://erroneo.us/security/cve/CVE-2026-45353/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00168,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-45311","type":"cve","title":"CVE-2026-45311: DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45311/","md":"https://erroneo.us/security/cve/CVE-2026-45311/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00685,"verdict":null,"product":"deepseek-tui (crates.io (Rust))"},{"id":"CVE-2026-45288","type":"cve","title":"CVE-2026-45288: Marten has an injection vulnerability in its full-text search regConfig parameter","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45288/","md":"https://erroneo.us/security/cve/CVE-2026-45288/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0054,"verdict":null,"product":"Marten (NuGet)"},{"id":"CVE-2026-45058","type":"cve","title":"CVE-2026-45058: Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-45058/","md":"https://erroneo.us/security/cve/CVE-2026-45058/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00298,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-44990","type":"cve","title":"CVE-2026-44990: Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44990/","md":"https://erroneo.us/security/cve/CVE-2026-44990/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00695,"verdict":null,"product":"sanitize-html (npm)"},{"id":"CVE-2026-44849","type":"cve","title":"CVE-2026-44849: Portainer has an endpoint security bypass via Swarm service create/update","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44849/","md":"https://erroneo.us/security/cve/CVE-2026-44849/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00446,"verdict":null,"product":"github.com/portainer/portainer (Go)"},{"id":"CVE-2026-44848","type":"cve","title":"CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints, which allows host RCE","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44848/","md":"https://erroneo.us/security/cve/CVE-2026-44848/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00446,"verdict":null,"product":"github.com/portainer/portainer (Go)"},{"id":"CVE-2026-44791","type":"cve","title":"CVE-2026-44791: n8n Has an XML Node Prototype Pollution Patch Bypass","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44791/","md":"https://erroneo.us/security/cve/CVE-2026-44791/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00537,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-44790","type":"cve","title":"CVE-2026-44790: n8n Has an Arbitrary File Read via Git Node","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44790/","md":"https://erroneo.us/security/cve/CVE-2026-44790/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0053,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-44789","type":"cve","title":"CVE-2026-44789: n8n: HTTP Request Node Pagination Prototype Pollution to RCE","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-44789/","md":"https://erroneo.us/security/cve/CVE-2026-44789/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00529,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-27886","type":"cve","title":"CVE-2026-27886: Strapi may leak sensitive data via relational filtering due to lack of query sanitization","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-27886/","md":"https://erroneo.us/security/cve/CVE-2026-27886/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02519,"verdict":null,"product":"@strapi/strapi (npm)"},{"id":"CVE-2026-20182","type":"cve","title":"CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","date":"2026-05-14","url":"https://erroneo.us/security/cve/CVE-2026-20182/","md":"https://erroneo.us/security/cve/CVE-2026-20182/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.91817,"verdict":"act-now","product":"Cisco Catalyst SD-WAN"},{"id":"2026-05-14","type":"digest","title":"Security digest for May 14, 2026","date":"2026-05-14","url":"https://erroneo.us/security/2026-05-14/","md":"https://erroneo.us/security/2026-05-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":18}},{"id":"GHSA-vw82-7fv8-r6gp","type":"ghsa","title":"Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server","date":"2026-05-13","url":"https://erroneo.us/security/ghsa/GHSA-vw82-7fv8-r6gp/","md":"https://erroneo.us/security/ghsa/GHSA-vw82-7fv8-r6gp/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"github.com/obot-platform/obot"},{"id":"CVE-2026-45375","type":"cve","title":"CVE-2026-45375: SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution","date":"2026-05-13","url":"https://erroneo.us/security/cve/CVE-2026-45375/","md":"https://erroneo.us/security/cve/CVE-2026-45375/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00413,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-45083","type":"cve","title":"CVE-2026-45083: Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy","date":"2026-05-13","url":"https://erroneo.us/security/cve/CVE-2026-45083/","md":"https://erroneo.us/security/cve/CVE-2026-45083/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00653,"verdict":null,"product":"io.goobi.viewer:viewer-core (Maven)"},{"id":"CVE-2026-22599","type":"cve","title":"CVE-2026-22599: Strapi Vulnerable to SQL Injection in Content Type Builder","date":"2026-05-13","url":"https://erroneo.us/security/cve/CVE-2026-22599/","md":"https://erroneo.us/security/cve/CVE-2026-22599/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01178,"verdict":null,"product":"@strapi/content-type-builder (npm)"},{"id":"2026-05-13","type":"digest","title":"Security digest for May 13, 2026","date":"2026-05-13","url":"https://erroneo.us/security/2026-05-13/","md":"https://erroneo.us/security/2026-05-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2026-45091","type":"cve","title":"CVE-2026-45091: sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-45091/","md":"https://erroneo.us/security/cve/CVE-2026-45091/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00404,"verdict":null,"product":"sealed-env (npm)"},{"id":"CVE-2026-45087","type":"cve","title":"CVE-2026-45087: Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-45087/","md":"https://erroneo.us/security/cve/CVE-2026-45087/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01386,"verdict":null,"product":"github.com/hahwul/dalfox/v2 (Go)"},{"id":"CVE-2026-44672","type":"cve","title":"CVE-2026-44672: Mapfish Print: Remote Code Injection (RCE) in Dynamic table","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-44672/","md":"https://erroneo.us/security/cve/CVE-2026-44672/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00551,"verdict":null,"product":"org.mapfish.print:print-lib (Maven)"},{"id":"CVE-2026-44650","type":"cve","title":"CVE-2026-44650: SillyTavern has a Path Traversal issue","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-44650/","md":"https://erroneo.us/security/cve/CVE-2026-44650/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00835,"verdict":null,"product":"sillytavern (npm)"},{"id":"CVE-2026-44649","type":"cve","title":"CVE-2026-44649: SillyTavern has Authentication Bypass via SSO Header Injection","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-44649/","md":"https://erroneo.us/security/cve/CVE-2026-44649/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00295,"verdict":null,"product":"sillytavern (npm)"},{"id":"CVE-2026-43515","type":"cve","title":"CVE-2026-43515: Apache Tomcat - Security constraints not correctly applied","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-43515/","md":"https://erroneo.us/security/cve/CVE-2026-43515/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01221,"verdict":null,"product":"org.apache.tomcat.embed:tomcat-embed-core (Maven)"},{"id":"CVE-2026-43512","type":"cve","title":"CVE-2026-43512: Apache Tomcat - Digest authenticator will authenticate any unknown user","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-43512/","md":"https://erroneo.us/security/cve/CVE-2026-43512/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01326,"verdict":null,"product":"org.apache.tomcat.embed:tomcat-embed-core (Maven)"},{"id":"CVE-2026-42074","type":"cve","title":"CVE-2026-42074: OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-42074/","md":"https://erroneo.us/security/cve/CVE-2026-42074/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00722,"verdict":null,"product":"openclaude (npm)"},{"id":"CVE-2026-41293","type":"cve","title":"CVE-2026-41293: Apache Tomcat - HTTP/2 request headers not validated","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-41293/","md":"https://erroneo.us/security/cve/CVE-2026-41293/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0168,"verdict":null,"product":"org.apache.tomcat.embed:tomcat-embed-core (Maven)"},{"id":"CVE-2026-33117","type":"cve","title":"CVE-2026-33117: Security feature bypass vulnerability in Azure Key Vault Keys library for Java","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-33117/","md":"https://erroneo.us/security/cve/CVE-2026-33117/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00496,"verdict":null,"product":"com.azure:azure-security-keyvault-keys (Maven)"},{"id":"CVE-2026-31239","type":"cve","title":"CVE-2026-31239: mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31239/","md":"https://erroneo.us/security/cve/CVE-2026-31239/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00597,"verdict":null,"product":"mamba-ssm (PyPI)"},{"id":"CVE-2026-31238","type":"cve","title":"CVE-2026-31238: Ludwig framework is vulnerable to insecure deserialization in its model serving component","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31238/","md":"https://erroneo.us/security/cve/CVE-2026-31238/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00725,"verdict":null,"product":"ludwig (PyPI)"},{"id":"CVE-2026-31237","type":"cve","title":"CVE-2026-31237: Ludwig framework is vulnerable to insecure deserialization through its predict() method.","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31237/","md":"https://erroneo.us/security/cve/CVE-2026-31237/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00875,"verdict":null,"product":"ludwig (PyPI)"},{"id":"CVE-2026-31236","type":"cve","title":"CVE-2026-31236: llm CLI tool contains a code injection vulnerability via `--functions` command-line argument","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31236/","md":"https://erroneo.us/security/cve/CVE-2026-31236/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00462,"verdict":null,"product":"llm (PyPI)"},{"id":"CVE-2026-31235","type":"cve","title":"CVE-2026-31235: imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31235/","md":"https://erroneo.us/security/cve/CVE-2026-31235/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00689,"verdict":null,"product":"imgaug (PyPI)"},{"id":"CVE-2026-31234","type":"cve","title":"CVE-2026-31234: Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31234/","md":"https://erroneo.us/security/cve/CVE-2026-31234/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01031,"verdict":null,"product":"horovod (PyPI)"},{"id":"CVE-2026-31233","type":"cve","title":"CVE-2026-31233: Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31233/","md":"https://erroneo.us/security/cve/CVE-2026-31233/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00926,"verdict":null,"product":"guardrails-ai (PyPI)"},{"id":"CVE-2026-31220","type":"cve","title":"CVE-2026-31220: PySyft server-side arbitrary Python execution after code approval","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2026-31220/","md":"https://erroneo.us/security/cve/CVE-2026-31220/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01198,"verdict":null,"product":"syft (PyPI)"},{"id":"CVE-2025-65719","type":"cve","title":"CVE-2025-65719: Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page","date":"2026-05-12","url":"https://erroneo.us/security/cve/CVE-2025-65719/","md":"https://erroneo.us/security/cve/CVE-2025-65719/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00578,"verdict":null,"product":"kubectl-mcp-server (npm)"},{"id":"2026-05-12","type":"digest","title":"Security digest for May 12, 2026","date":"2026-05-12","url":"https://erroneo.us/security/2026-05-12/","md":"https://erroneo.us/security/2026-05-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":19}},{"id":"mini-shai-hulud-tanstack-npm-worm","type":"brief","title":"Mini Shai-Hulud: TanStack npm Worm With Valid Provenance","date":"2026-05-11","url":"https://erroneo.us/security/briefs/mini-shai-hulud-tanstack-npm-worm/","md":"https://erroneo.us/security/briefs/mini-shai-hulud-tanstack-npm-worm/index.md","severity":"critical","kev":true,"epss":0.01054,"verdict":"check-exposure","cves":["CVE-2026-45321"],"summary":"If a lockfile picked up one of the bad TanStack Router/Start, Mistral or OpenSearch versions in mid-May 2026, treat that host as fully compromised and disable the dead-man's switch before rotating anything; everyone else can confirm and move on."},{"id":"GHSA-h29g-c9cx-c73q","type":"ghsa","title":"torrentpier has PHP Serialize Injections","date":"2026-05-11","url":"https://erroneo.us/security/ghsa/GHSA-h29g-c9cx-c73q/","md":"https://erroneo.us/security/ghsa/GHSA-h29g-c9cx-c73q/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"torrentpier/torrentpier"},{"id":"CVE-2026-7813","type":"cve","title":"CVE-2026-7813: pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-7813/","md":"https://erroneo.us/security/cve/CVE-2026-7813/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00651,"verdict":null,"product":"pgadmin4 (PyPI)"},{"id":"CVE-2026-44643","type":"cve","title":"CVE-2026-44643: Angular Expressions - Remote Code Execution using filters","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-44643/","md":"https://erroneo.us/security/cve/CVE-2026-44643/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00695,"verdict":null,"product":"angular-expressions (npm)"},{"id":"CVE-2026-44477","type":"cve","title":"CVE-2026-44477: CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-44477/","md":"https://erroneo.us/security/cve/CVE-2026-44477/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00515,"verdict":null,"product":"github.com/cloudnative-pg/cloudnative-pg (Go)"},{"id":"CVE-2026-44336","type":"cve","title":"CVE-2026-44336: PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-44336/","md":"https://erroneo.us/security/cve/CVE-2026-44336/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00674,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-43898","type":"cve","title":"CVE-2026-43898: SandboxJS has a sandbox escape via Function.caller leakage of internal call op","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-43898/","md":"https://erroneo.us/security/cve/CVE-2026-43898/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00632,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-27478","type":"cve","title":"CVE-2026-27478: Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-27478/","md":"https://erroneo.us/security/cve/CVE-2026-27478/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00239,"verdict":null,"product":"io.unitycatalog:unitycatalog-server (Maven)"},{"id":"CVE-2026-25244","type":"cve","title":"CVE-2026-25244: WebdriverIO BrowserStack Service has a Command Injection issue","date":"2026-05-11","url":"https://erroneo.us/security/cve/CVE-2026-25244/","md":"https://erroneo.us/security/cve/CVE-2026-25244/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03308,"verdict":null,"product":"@wdio/browserstack-service (npm)"},{"id":"2026-05-11","type":"digest","title":"Security digest for May 11, 2026","date":"2026-05-11","url":"https://erroneo.us/security/2026-05-11/","md":"https://erroneo.us/security/2026-05-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":9}},{"id":"GHSA-v6wj-c83f-v46x","type":"ghsa","title":"@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module","date":"2026-05-08","url":"https://erroneo.us/security/ghsa/GHSA-v6wj-c83f-v46x/","md":"https://erroneo.us/security/ghsa/GHSA-v6wj-c83f-v46x/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"@profullstack/mcp-server"},{"id":"GHSA-pvmv-cwg8-v6c8","type":"ghsa","title":"Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output","date":"2026-05-08","url":"https://erroneo.us/security/ghsa/GHSA-pvmv-cwg8-v6c8/","md":"https://erroneo.us/security/ghsa/GHSA-pvmv-cwg8-v6c8/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"zebrad, zebra-script"},{"id":"CVE-2026-44670","type":"cve","title":"CVE-2026-44670: SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44670/","md":"https://erroneo.us/security/cve/CVE-2026-44670/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00551,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-44588","type":"cve","title":"CVE-2026-44588: SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585)","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44588/","md":"https://erroneo.us/security/cve/CVE-2026-44588/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00551,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-44551","type":"cve","title":"CVE-2026-44551: Open WebUI has an LDAP Empty Password Authentication Bypass","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44551/","md":"https://erroneo.us/security/cve/CVE-2026-44551/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01634,"verdict":null,"product":"open-webui (PyPI)"},{"id":"CVE-2026-44330","type":"cve","title":"CVE-2026-44330: free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44330/","md":"https://erroneo.us/security/cve/CVE-2026-44330/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00428,"verdict":null,"product":"github.com/free5gc/nef (Go)"},{"id":"CVE-2026-44329","type":"cve","title":"CVE-2026-44329: free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44329/","md":"https://erroneo.us/security/cve/CVE-2026-44329/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00563,"verdict":null,"product":"github.com/free5gc/smf (Go)"},{"id":"CVE-2026-44327","type":"cve","title":"CVE-2026-44327: free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44327/","md":"https://erroneo.us/security/cve/CVE-2026-44327/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0053,"verdict":null,"product":"github.com/free5gc/nef (Go)"},{"id":"CVE-2026-44326","type":"cve","title":"CVE-2026-44326: free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44326/","md":"https://erroneo.us/security/cve/CVE-2026-44326/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0053,"verdict":null,"product":"github.com/free5gc/nef (Go)"},{"id":"CVE-2026-44315","type":"cve","title":"CVE-2026-44315: free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44315/","md":"https://erroneo.us/security/cve/CVE-2026-44315/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0053,"verdict":null,"product":"github.com/free5gc/nef (Go)"},{"id":"CVE-2026-44212","type":"cve","title":"CVE-2026-44212: PrestaShop has a stored XSS executable in customer service view","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44212/","md":"https://erroneo.us/security/cve/CVE-2026-44212/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00418,"verdict":null,"product":"prestashop/prestashop (Composer (PHP))"},{"id":"CVE-2026-44211","type":"cve","title":"CVE-2026-44211: Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44211/","md":"https://erroneo.us/security/cve/CVE-2026-44211/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00207,"verdict":null,"product":"cline (npm)"},{"id":"CVE-2026-44009","type":"cve","title":"CVE-2026-44009: vm2 has Sandbox Breakout Through Null Proto Exception","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44009/","md":"https://erroneo.us/security/cve/CVE-2026-44009/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00709,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-44008","type":"cve","title":"CVE-2026-44008: vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-44008/","md":"https://erroneo.us/security/cve/CVE-2026-44008/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00901,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-43944","type":"cve","title":"CVE-2026-43944: Electerm users can run dangrous code through link or command line","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-43944/","md":"https://erroneo.us/security/cve/CVE-2026-43944/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00645,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-43940","type":"cve","title":"CVE-2026-43940: Electerm runWidget has a path traversal that leads to arbitrary code execution","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-43940/","md":"https://erroneo.us/security/cve/CVE-2026-43940/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.00223,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-42208","type":"cve","title":"CVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerability","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-42208/","md":"https://erroneo.us/security/cve/CVE-2026-42208/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.05772,"verdict":"patch-this-week","product":"BerriAI LiteLLM"},{"id":"CVE-2026-38360","type":"cve","title":"CVE-2026-38360: dash-uploader has a directory traversal vulnerability","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-38360/","md":"https://erroneo.us/security/cve/CVE-2026-38360/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.06142,"verdict":null,"product":"dash-uploader (PyPI)"},{"id":"CVE-2026-37709","type":"cve","title":"CVE-2026-37709: Snipe-IT has insecure permissions in file uploads","date":"2026-05-08","url":"https://erroneo.us/security/cve/CVE-2026-37709/","md":"https://erroneo.us/security/cve/CVE-2026-37709/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00792,"verdict":null,"product":"snipe/snipe-it (Composer (PHP))"},{"id":"2026-05-08","type":"digest","title":"Security digest for May 8, 2026","date":"2026-05-08","url":"https://erroneo.us/security/2026-05-08/","md":"https://erroneo.us/security/2026-05-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":18}},{"id":"GHSA-gr3r-crp5-qrrm","type":"ghsa","title":"Compromised tag of intercom-php published via GitHub","date":"2026-05-07","url":"https://erroneo.us/security/ghsa/GHSA-gr3r-crp5-qrrm/","md":"https://erroneo.us/security/ghsa/GHSA-gr3r-crp5-qrrm/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"intercom/intercom-php"},{"id":"GHSA-cwfq-rfcr-8hmp","type":"ghsa","title":"Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs","date":"2026-05-07","url":"https://erroneo.us/security/ghsa/GHSA-cwfq-rfcr-8hmp/","md":"https://erroneo.us/security/ghsa/GHSA-cwfq-rfcr-8hmp/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"zebrad"},{"id":"GHSA-54pg-9963-v8vg","type":"ghsa","title":"Compromised version of intercom-client published to npm","date":"2026-05-07","url":"https://erroneo.us/security/ghsa/GHSA-54pg-9963-v8vg/","md":"https://erroneo.us/security/ghsa/GHSA-54pg-9963-v8vg/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"intercom-client"},{"id":"CVE-2026-6973","type":"cve","title":"CVE-2026-6973: Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2026-6973/","md":"https://erroneo.us/security/cve/CVE-2026-6973/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.02537,"verdict":null,"product":"Ivanti Endpoint Manager Mobile (EPMM)"},{"id":"CVE-2026-44523","type":"cve","title":"CVE-2026-44523: Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2026-44523/","md":"https://erroneo.us/security/cve/CVE-2026-44523/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00163,"verdict":null,"product":"github.com/enchant97/note-mark/backend (Go)"},{"id":"CVE-2026-44498","type":"cve","title":"CVE-2026-44498: Zebra's Block Validator Undercounts Coinbase and P2SH Sigops","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2026-44498/","md":"https://erroneo.us/security/cve/CVE-2026-44498/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0038,"verdict":null,"product":"zebrad (crates.io (Rust))"},{"id":"CVE-2026-44497","type":"cve","title":"CVE-2026-44497: Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2026-44497/","md":"https://erroneo.us/security/cve/CVE-2026-44497/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00297,"verdict":null,"product":"zebra-script (crates.io (Rust))"},{"id":"CVE-2025-63706","type":"cve","title":"CVE-2025-63706: next-npm-version is vulnerable to Command injection","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2025-63706/","md":"https://erroneo.us/security/cve/CVE-2025-63706/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01523,"verdict":null,"product":"@jswork/next-npm-version (npm)"},{"id":"CVE-2025-63704","type":"cve","title":"CVE-2025-63704: query-parser-string is vulnerable to Prototype Pollution","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2025-63704/","md":"https://erroneo.us/security/cve/CVE-2025-63704/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00476,"verdict":null,"product":"query-string-parser (npm)"},{"id":"CVE-2025-63703","type":"cve","title":"CVE-2025-63703: parse-ini is vulnerable to Prototype Pollution in index.js()","date":"2026-05-07","url":"https://erroneo.us/security/cve/CVE-2025-63703/","md":"https://erroneo.us/security/cve/CVE-2025-63703/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00416,"verdict":null,"product":"parse-ini (npm)"},{"id":"2026-05-07","type":"digest","title":"Security digest for May 7, 2026","date":"2026-05-07","url":"https://erroneo.us/security/2026-05-07/","md":"https://erroneo.us/security/2026-05-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":9}},{"id":"GHSA-9h64-2846-7x7f","type":"ghsa","title":"Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening","date":"2026-05-06","url":"https://erroneo.us/security/ghsa/GHSA-9h64-2846-7x7f/","md":"https://erroneo.us/security/ghsa/GHSA-9h64-2846-7x7f/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/getaxonflow/axonflow"},{"id":"CVE-2026-46364","type":"cve","title":"CVE-2026-46364: phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-46364/","md":"https://erroneo.us/security/cve/CVE-2026-46364/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0212,"verdict":null,"product":"thorsten/phpmyfaq (Composer (PHP))"},{"id":"CVE-2026-45010","type":"cve","title":"CVE-2026-45010: phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-45010/","md":"https://erroneo.us/security/cve/CVE-2026-45010/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00567,"verdict":null,"product":"thorsten/phpmyfaq (Composer (PHP))"},{"id":"CVE-2026-44542","type":"cve","title":"CVE-2026-44542: FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44542/","md":"https://erroneo.us/security/cve/CVE-2026-44542/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00605,"verdict":null,"product":"github.com/gtsteffaniak/filebrowser (Go)"},{"id":"CVE-2026-44484","type":"cve","title":"CVE-2026-44484: Compromise of PyTorch Lightning PyPi Package Versions","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44484/","md":"https://erroneo.us/security/cve/CVE-2026-44484/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00671,"verdict":null,"product":"pytorch-lightning (PyPI)"},{"id":"CVE-2026-44364","type":"cve","title":"CVE-2026-44364: misp-modules website - Missing CSRF protection in the website home blueprint","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44364/","md":"https://erroneo.us/security/cve/CVE-2026-44364/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00207,"verdict":null,"product":"misp-modules (PyPI)"},{"id":"CVE-2026-44351","type":"cve","title":"CVE-2026-44351: fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44351/","md":"https://erroneo.us/security/cve/CVE-2026-44351/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00334,"verdict":null,"product":"fast-jwt (npm)"},{"id":"CVE-2026-44262","type":"cve","title":"CVE-2026-44262: Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44262/","md":"https://erroneo.us/security/cve/CVE-2026-44262/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.03872,"verdict":null,"product":"dedoc/scramble (Composer (PHP))"},{"id":"CVE-2026-44007","type":"cve","title":"CVE-2026-44007: vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44007/","md":"https://erroneo.us/security/cve/CVE-2026-44007/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00612,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-44006","type":"cve","title":"CVE-2026-44006: vm2 has a Sandbox Escape Vulnerability","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44006/","md":"https://erroneo.us/security/cve/CVE-2026-44006/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00767,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-44005","type":"cve","title":"CVE-2026-44005: vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-44005/","md":"https://erroneo.us/security/cve/CVE-2026-44005/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00828,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-43999","type":"cve","title":"CVE-2026-43999: vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-43999/","md":"https://erroneo.us/security/cve/CVE-2026-43999/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0097,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-43997","type":"cve","title":"CVE-2026-43997: vm2 Access to Host Object Enables Sandbox Escape","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-43997/","md":"https://erroneo.us/security/cve/CVE-2026-43997/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00767,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-43948","type":"cve","title":"CVE-2026-43948: wger: cross-tenant password reset and plaintext disclosure via gym=None bypass","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-43948/","md":"https://erroneo.us/security/cve/CVE-2026-43948/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00443,"verdict":null,"product":"wger (PyPI)"},{"id":"CVE-2026-42880","type":"cve","title":"CVE-2026-42880: ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-42880/","md":"https://erroneo.us/security/cve/CVE-2026-42880/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00564,"verdict":null,"product":"github.com/argoproj/argo-cd/v3 (Go)"},{"id":"CVE-2026-42596","type":"cve","title":"CVE-2026-42596: Gotenberg vulnerable to unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-42596/","md":"https://erroneo.us/security/cve/CVE-2026-42596/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01773,"verdict":null,"product":"github.com/gotenberg/gotenberg/v8 (Go)"},{"id":"CVE-2026-42589","type":"cve","title":"CVE-2026-42589: Gotenberg has Unauthenticated RCE via ExifTool Metadata Key Injection","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-42589/","md":"https://erroneo.us/security/cve/CVE-2026-42589/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03675,"verdict":null,"product":"github.com/gotenberg/gotenberg/v8 (Go)"},{"id":"CVE-2026-42555","type":"cve","title":"CVE-2026-42555: Valtimo has SpEL injection via StandardEvaluationContext that allows Remote Code Execution by admin users","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-42555/","md":"https://erroneo.us/security/cve/CVE-2026-42555/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00822,"verdict":null,"product":"com.ritense.valtimo:document (Maven)"},{"id":"CVE-2026-42238","type":"cve","title":"CVE-2026-42238: Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-42238/","md":"https://erroneo.us/security/cve/CVE-2026-42238/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00832,"verdict":null,"product":"github.com/0xJacky/nginx-ui (Go)"},{"id":"CVE-2026-41050","type":"cve","title":"CVE-2026-41050: Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-41050/","md":"https://erroneo.us/security/cve/CVE-2026-41050/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00442,"verdict":null,"product":"github.com/rancher/fleet (Go)"},{"id":"CVE-2026-40982","type":"cve","title":"CVE-2026-40982: Spring Cloud Config vulnerable to Path Traversal","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-40982/","md":"https://erroneo.us/security/cve/CVE-2026-40982/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00819,"verdict":null,"product":"org.springframework.cloud:spring-cloud-config-server (Maven)"},{"id":"CVE-2026-40010","type":"cve","title":"CVE-2026-40010: Apache Wicket has a Session Fixation issue","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-40010/","md":"https://erroneo.us/security/cve/CVE-2026-40010/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00615,"verdict":null,"product":"org.apache.wicket:wicket-auth-roles (Maven)"},{"id":"CVE-2026-29090","type":"cve","title":"CVE-2026-29090: Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-29090/","md":"https://erroneo.us/security/cve/CVE-2026-29090/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00542,"verdict":null,"product":"rucio (PyPI)"},{"id":"CVE-2026-29080","type":"cve","title":"CVE-2026-29080: Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-29080/","md":"https://erroneo.us/security/cve/CVE-2026-29080/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00522,"verdict":null,"product":"rucio (PyPI)"},{"id":"CVE-2026-0300","type":"cve","title":"CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","date":"2026-05-06","url":"https://erroneo.us/security/cve/CVE-2026-0300/","md":"https://erroneo.us/security/cve/CVE-2026-0300/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.31725,"verdict":null,"product":"Palo Alto Networks PAN-OS"},{"id":"2026-05-06","type":"digest","title":"Security digest for May 6, 2026","date":"2026-05-06","url":"https://erroneo.us/security/2026-05-06/","md":"https://erroneo.us/security/2026-05-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":24}},{"id":"GHSA-vj3m-2g9h-vm4p","type":"ghsa","title":"Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass","date":"2026-05-05","url":"https://erroneo.us/security/ghsa/GHSA-vj3m-2g9h-vm4p/","md":"https://erroneo.us/security/ghsa/GHSA-vj3m-2g9h-vm4p/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"getgrav/grav"},{"id":"CVE-2026-7411","type":"cve","title":"CVE-2026-7411: Eclipse BaSyx Java Server SDK vulnerable to Path Traversal","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-7411/","md":"https://erroneo.us/security/cve/CVE-2026-7411/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0152,"verdict":null,"product":"org.eclipse.basyx:basyx.sdk (Maven)"},{"id":"CVE-2026-44221","type":"cve","title":"CVE-2026-44221: ArcadeDB vulnerable to cross-database authorization bypass and unsecured newly-created databases","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-44221/","md":"https://erroneo.us/security/cve/CVE-2026-44221/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00429,"verdict":null,"product":"com.arcadedb:arcadedb-server (Maven)"},{"id":"CVE-2026-42882","type":"cve","title":"CVE-2026-42882: S3-Proxy has Security Issues in its Resource Path Matching Implementation","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42882/","md":"https://erroneo.us/security/cve/CVE-2026-42882/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00719,"verdict":null,"product":"github.com/oxyno-zeta/s3-proxy (Go)"},{"id":"CVE-2026-42864","type":"cve","title":"CVE-2026-42864: FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42864/","md":"https://erroneo.us/security/cve/CVE-2026-42864/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0045,"verdict":null,"product":"firefighter-incident (PyPI)"},{"id":"CVE-2026-42613","type":"cve","title":"CVE-2026-42613: Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42613/","md":"https://erroneo.us/security/cve/CVE-2026-42613/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00558,"verdict":null,"product":"getgrav/grav (Composer (PHP))"},{"id":"CVE-2026-42607","type":"cve","title":"CVE-2026-42607: Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42607/","md":"https://erroneo.us/security/cve/CVE-2026-42607/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02251,"verdict":null,"product":"getgrav/grav (Composer (PHP))"},{"id":"CVE-2026-42300","type":"cve","title":"CVE-2026-42300: DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42300/","md":"https://erroneo.us/security/cve/CVE-2026-42300/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00435,"verdict":null,"product":"github.com/l3montree-dev/devguard (Go)"},{"id":"CVE-2026-42281","type":"cve","title":"CVE-2026-42281: MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42281/","md":"https://erroneo.us/security/cve/CVE-2026-42281/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01676,"verdict":null,"product":"magicmirror (npm)"},{"id":"CVE-2026-42196","type":"cve","title":"CVE-2026-42196: django-s3file is vulnerable to relative path traversal","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42196/","md":"https://erroneo.us/security/cve/CVE-2026-42196/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0059,"verdict":null,"product":"django-s3file (PyPI)"},{"id":"CVE-2026-42155","type":"cve","title":"CVE-2026-42155: Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42155/","md":"https://erroneo.us/security/cve/CVE-2026-42155/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00486,"verdict":null,"product":"openmage/magento-lts (Composer (PHP))"},{"id":"CVE-2026-42048","type":"cve","title":"CVE-2026-42048: Langflow Knowledge Bases API is Vulnerable to Path Traversal","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-42048/","md":"https://erroneo.us/security/cve/CVE-2026-42048/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00601,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-26956","type":"cve","title":"CVE-2026-26956: VM2 Has a WASM Sandbox Escape","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-26956/","md":"https://erroneo.us/security/cve/CVE-2026-26956/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00921,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-26332","type":"cve","title":"CVE-2026-26332: VM2 Has a Sandbox Escape Issue via SuppressedError","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-26332/","md":"https://erroneo.us/security/cve/CVE-2026-26332/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00741,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-25660","type":"cve","title":"CVE-2026-25660: Codechecker has an authentication bypass for certain API calls","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-25660/","md":"https://erroneo.us/security/cve/CVE-2026-25660/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00611,"verdict":null,"product":"codechecker (PyPI)"},{"id":"CVE-2026-24781","type":"cve","title":"CVE-2026-24781: VM2 Has Sandbox Breakout Through Inspect Function","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-24781/","md":"https://erroneo.us/security/cve/CVE-2026-24781/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01186,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-24120","type":"cve","title":"CVE-2026-24120: VM2 Has Sandbox Breakout Through Promise Species","date":"2026-05-05","url":"https://erroneo.us/security/cve/CVE-2026-24120/","md":"https://erroneo.us/security/cve/CVE-2026-24120/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00896,"verdict":null,"product":"vm2 (npm)"},{"id":"2026-05-05","type":"digest","title":"Security digest for May 5, 2026","date":"2026-05-05","url":"https://erroneo.us/security/2026-05-05/","md":"https://erroneo.us/security/2026-05-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":17}},{"id":"GHSA-qprh-m6p3-hwxc","type":"ghsa","title":"`sui-execution-cut` was removed from crates.io for malicious code","date":"2026-05-04","url":"https://erroneo.us/security/ghsa/GHSA-qprh-m6p3-hwxc/","md":"https://erroneo.us/security/ghsa/GHSA-qprh-m6p3-hwxc/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"sui-execution-cut"},{"id":"GHSA-g38r-8gmr-ghrf","type":"ghsa","title":"`mysten-metrics` was removed from crates.io for malicious code","date":"2026-05-04","url":"https://erroneo.us/security/ghsa/GHSA-g38r-8gmr-ghrf/","md":"https://erroneo.us/security/ghsa/GHSA-g38r-8gmr-ghrf/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"mysten-metrics"},{"id":"CVE-2026-7482","type":"cve","title":"CVE-2026-7482: Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-7482/","md":"https://erroneo.us/security/cve/CVE-2026-7482/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00713,"verdict":"check-exposure","product":"ollama ollama"},{"id":"CVE-2026-42812","type":"cve","title":"CVE-2026-42812: Apache Polaris has an Improper Input Validation issue","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42812/","md":"https://erroneo.us/security/cve/CVE-2026-42812/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00591,"verdict":null,"product":"org.apache.polaris:polaris-runtime-service (Maven)"},{"id":"CVE-2026-42811","type":"cve","title":"CVE-2026-42811: Apache Polaris has an Improper Input Validation issue","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42811/","md":"https://erroneo.us/security/cve/CVE-2026-42811/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00723,"verdict":null,"product":"org.apache.polaris:polaris-core (Maven)"},{"id":"CVE-2026-42810","type":"cve","title":"CVE-2026-42810: Apache Polaris has an Improper Input Validation Issue","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42810/","md":"https://erroneo.us/security/cve/CVE-2026-42810/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00688,"verdict":null,"product":"org.apache.polaris:polaris-core (Maven)"},{"id":"CVE-2026-42809","type":"cve","title":"CVE-2026-42809: Apache Polaris has an Improper Input Validation Issue","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42809/","md":"https://erroneo.us/security/cve/CVE-2026-42809/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00576,"verdict":null,"product":"org.apache.polaris:polaris-runtime-service (Maven)"},{"id":"CVE-2026-42601","type":"cve","title":"CVE-2026-42601: ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42601/","md":"https://erroneo.us/security/cve/CVE-2026-42601/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00596,"verdict":null,"product":"archivebox (PyPI)"},{"id":"CVE-2026-42571","type":"cve","title":"CVE-2026-42571: Pelican Web UI Affected by a Privilege Escalation Attack","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42571/","md":"https://erroneo.us/security/cve/CVE-2026-42571/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00396,"verdict":null,"product":"github.com/pelicanplatform/pelican (Go)"},{"id":"CVE-2026-42569","type":"cve","title":"CVE-2026-42569: phpVMS has an /importer authorization bypass causing full database wipe","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42569/","md":"https://erroneo.us/security/cve/CVE-2026-42569/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01323,"verdict":null,"product":"nabeel/phpvms (Composer (PHP))"},{"id":"CVE-2026-42027","type":"cve","title":"CVE-2026-42027: Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-42027/","md":"https://erroneo.us/security/cve/CVE-2026-42027/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.01271,"verdict":null,"product":"org.apache.opennlp:opennlp-tools (Maven)"},{"id":"CVE-2026-41901","type":"cve","title":"CVE-2026-41901: Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-41901/","md":"https://erroneo.us/security/cve/CVE-2026-41901/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00544,"verdict":null,"product":"org.thymeleaf:thymeleaf (Maven)"},{"id":"CVE-2026-41258","type":"cve","title":"CVE-2026-41258: OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-41258/","md":"https://erroneo.us/security/cve/CVE-2026-41258/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0054,"verdict":null,"product":"org.openmrs.api:openmrs-api (Maven)"},{"id":"CVE-2026-40682","type":"cve","title":"CVE-2026-40682: Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-40682/","md":"https://erroneo.us/security/cve/CVE-2026-40682/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00844,"verdict":null,"product":"org.apache.opennlp:opennlp-tools (Maven)"},{"id":"CVE-2026-40076","type":"cve","title":"CVE-2026-40076: OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-40076/","md":"https://erroneo.us/security/cve/CVE-2026-40076/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00902,"verdict":null,"product":"org.openmrs.web:openmrs-web (Maven)"},{"id":"CVE-2026-24118","type":"cve","title":"CVE-2026-24118: VM2 Sandbox Breakout Through __lookupGetter__","date":"2026-05-04","url":"https://erroneo.us/security/cve/CVE-2026-24118/","md":"https://erroneo.us/security/cve/CVE-2026-24118/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00905,"verdict":null,"product":"vm2 (npm)"},{"id":"2026-05-04","type":"digest","title":"Security digest for May 4, 2026","date":"2026-05-04","url":"https://erroneo.us/security/2026-05-04/","md":"https://erroneo.us/security/2026-05-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":15}},{"id":"wso2-api-manager-cve-2026-5430-jwt-auth-bypass","type":"brief","title":"WSO2 API Manager CVE-2026-5430: Exploited JWT Auth Bypass","date":"2026-05-03","url":"https://erroneo.us/security/briefs/wso2-api-manager-cve-2026-5430-jwt-auth-bypass/","md":"https://erroneo.us/security/briefs/wso2-api-manager-cve-2026-5430-jwt-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.00588,"verdict":"act-now","cves":["CVE-2026-5430"],"summary":"Any self-managed WSO2 API Manager 4.1-4.6, API Control Plane, Traffic Manager or Universal Gateway below the fixed update level should be patched now and checked for forged-token use; attackers have been sending forged admin JWTs since mid-September."},{"id":"2026-05-03","type":"digest","title":"Security digest for May 3, 2026","date":"2026-05-03","url":"https://erroneo.us/security/2026-05-03/","md":"https://erroneo.us/security/2026-05-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"bleeding-llama-ollama-memory-leak-cve-2026-7482","type":"brief","title":"Bleeding Llama: Unauthenticated Memory Leak in Ollama","date":"2026-05-02","url":"https://erroneo.us/security/briefs/bleeding-llama-ollama-memory-leak-cve-2026-7482/","md":"https://erroneo.us/security/briefs/bleeding-llama-ollama-memory-leak-cve-2026-7482/index.md","severity":"critical","kev":false,"epss":0.00713,"verdict":"check-exposure","cves":["CVE-2026-7482"],"summary":"A laptop running Ollama on its default localhost binding is not reachable; a server you exposed with OLLAMA_HOST=0.0.0.0 or a published Docker port is, and it should be updated and its secrets rotated."},{"id":"2026-05-02","type":"digest","title":"Security digest for May 2, 2026","date":"2026-05-02","url":"https://erroneo.us/security/2026-05-02/","md":"https://erroneo.us/security/2026-05-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2026-42779","type":"cve","title":"CVE-2026-42779: Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)","date":"2026-05-01","url":"https://erroneo.us/security/cve/CVE-2026-42779/","md":"https://erroneo.us/security/cve/CVE-2026-42779/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00763,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"CVE-2026-42778","type":"cve","title":"CVE-2026-42778: Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)","date":"2026-05-01","url":"https://erroneo.us/security/cve/CVE-2026-42778/","md":"https://erroneo.us/security/cve/CVE-2026-42778/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00752,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"CVE-2026-31431","type":"cve","title":"CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","date":"2026-05-01","url":"https://erroneo.us/security/cve/CVE-2026-31431/","md":"https://erroneo.us/security/cve/CVE-2026-31431/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.03437,"verdict":"act-now","product":"Linux Kernel"},{"id":"2026-05-01","type":"digest","title":"Security digest for May 1, 2026","date":"2026-05-01","url":"https://erroneo.us/security/2026-05-01/","md":"https://erroneo.us/security/2026-05-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2026-42560","type":"cve","title":"CVE-2026-42560: auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation","date":"2026-04-30","url":"https://erroneo.us/security/cve/CVE-2026-42560/","md":"https://erroneo.us/security/cve/CVE-2026-42560/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00579,"verdict":null,"product":"github.com/go-pkgz/auth (Go)"},{"id":"CVE-2026-42354","type":"cve","title":"CVE-2026-42354: Sentry's improper authentication on SAML SSO process allows user identity linking","date":"2026-04-30","url":"https://erroneo.us/security/cve/CVE-2026-42354/","md":"https://erroneo.us/security/cve/CVE-2026-42354/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00729,"verdict":null,"product":"sentry (PyPI)"},{"id":"CVE-2026-41940","type":"cve","title":"CVE-2026-41940: WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","date":"2026-04-30","url":"https://erroneo.us/security/cve/CVE-2026-41940/","md":"https://erroneo.us/security/cve/CVE-2026-41940/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.98527,"verdict":null,"product":"WebPros cPanel & WHM and WP2 (WordPress Squared)"},{"id":"CVE-2026-40281","type":"cve","title":"CVE-2026-40281: Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)","date":"2026-04-30","url":"https://erroneo.us/security/cve/CVE-2026-40281/","md":"https://erroneo.us/security/cve/CVE-2026-40281/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02094,"verdict":null,"product":"github.com/gotenberg/gotenberg/v8 (Go)"},{"id":"CVE-2026-36767","type":"cve","title":"CVE-2026-36767: Shopizer has a path traversal issue","date":"2026-04-30","url":"https://erroneo.us/security/cve/CVE-2026-36767/","md":"https://erroneo.us/security/cve/CVE-2026-36767/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00641,"verdict":null,"product":"com.shopizer:shopizer (Maven)"},{"id":"2026-04-30","type":"digest","title":"Security digest for April 30, 2026","date":"2026-04-30","url":"https://erroneo.us/security/2026-04-30/","md":"https://erroneo.us/security/2026-04-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"copy-fail-linux-kernel-lpe-cve-2026-31431","type":"brief","title":"Copy Fail: Exploited Linux Kernel Root Exploit Since 2017","date":"2026-04-29","url":"https://erroneo.us/security/briefs/copy-fail-linux-kernel-lpe-cve-2026-31431/","md":"https://erroneo.us/security/briefs/copy-fail-linux-kernel-lpe-cve-2026-31431/index.md","severity":"high","kev":true,"epss":0.03437,"verdict":"act-now","cves":["CVE-2026-31431"],"summary":"Any Linux box that runs code from more than one trust level (CI runners, container hosts, shared servers) needs a patched kernel and reboot now; single-user machines can patch on a short cycle."},{"id":"CVE-2026-42523","type":"cve","title":"CVE-2026-42523: Jenkins GitHub Plugin has an XSS vulnerability","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-42523/","md":"https://erroneo.us/security/cve/CVE-2026-42523/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00495,"verdict":null,"product":"com.coravy.hudson.plugins.github:github (Maven)"},{"id":"CVE-2026-42232","type":"cve","title":"CVE-2026-42232: n8n has XML Node Prototype Pollution that to RCE","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-42232/","md":"https://erroneo.us/security/cve/CVE-2026-42232/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00529,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-42231","type":"cve","title":"CVE-2026-42231: n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-42231/","md":"https://erroneo.us/security/cve/CVE-2026-42231/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00762,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-41586","type":"cve","title":"CVE-2026-41586: fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-41586/","md":"https://erroneo.us/security/cve/CVE-2026-41586/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00631,"verdict":null,"product":"org.hyperledger.fabric-sdk-java:fabric-sdk-java (Maven)"},{"id":"CVE-2026-38992","type":"cve","title":"CVE-2026-38992: Cockpit is vulnerable to arbitrary code execution","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-38992/","md":"https://erroneo.us/security/cve/CVE-2026-38992/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00726,"verdict":null,"product":"cockpit-hq/cockpit (Composer (PHP))"},{"id":"CVE-2026-34084","type":"cve","title":"CVE-2026-34084: PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled","date":"2026-04-29","url":"https://erroneo.us/security/cve/CVE-2026-34084/","md":"https://erroneo.us/security/cve/CVE-2026-34084/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00782,"verdict":null,"product":"phpoffice/phpspreadsheet (Composer (PHP))"},{"id":"2026-04-29","type":"digest","title":"Security digest for April 29, 2026","date":"2026-04-29","url":"https://erroneo.us/security/2026-04-29/","md":"https://erroneo.us/security/2026-04-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":6}},{"id":"CVE-2026-38651","type":"cve","title":"CVE-2026-38651: Netmaker does not verify JWT signatures for host tokens","date":"2026-04-28","url":"https://erroneo.us/security/cve/CVE-2026-38651/","md":"https://erroneo.us/security/cve/CVE-2026-38651/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0044,"verdict":null,"product":"github.com/gravitl/netmaker (Go)"},{"id":"CVE-2026-32202","type":"cve","title":"CVE-2026-32202: Microsoft Windows Protection Mechanism Failure Vulnerability","date":"2026-04-28","url":"https://erroneo.us/security/cve/CVE-2026-32202/","md":"https://erroneo.us/security/cve/CVE-2026-32202/index.md","severity":"medium","cvss":4.3,"kev":true,"epss":0.04902,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-24178","type":"cve","title":"CVE-2026-24178: NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system","date":"2026-04-28","url":"https://erroneo.us/security/cve/CVE-2026-24178/","md":"https://erroneo.us/security/cve/CVE-2026-24178/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00573,"verdict":null,"product":"nvflare (PyPI)"},{"id":"CVE-2024-1708","type":"cve","title":"CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability","date":"2026-04-28","url":"https://erroneo.us/security/cve/CVE-2024-1708/","md":"https://erroneo.us/security/cve/CVE-2024-1708/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.95436,"verdict":"act-now","product":"ConnectWise ScreenConnect"},{"id":"2026-04-28","type":"digest","title":"Security digest for April 28, 2026","date":"2026-04-28","url":"https://erroneo.us/security/2026-04-28/","md":"https://erroneo.us/security/2026-04-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2026-41635","type":"cve","title":"CVE-2026-41635: Apache MINA vulnerable to Deserialization of Untrusted Data","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-41635/","md":"https://erroneo.us/security/cve/CVE-2026-41635/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00817,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"CVE-2026-41409","type":"cve","title":"CVE-2026-41409: Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-41409/","md":"https://erroneo.us/security/cve/CVE-2026-41409/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00752,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"CVE-2026-40976","type":"cve","title":"CVE-2026-40976: Spring Boot's default security filter chain has no authorization rule with Actuator but without Health","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-40976/","md":"https://erroneo.us/security/cve/CVE-2026-40976/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00538,"verdict":null,"product":"org.springframework.boot:spring-boot (Maven)"},{"id":"CVE-2026-40860","type":"cve","title":"CVE-2026-40860: Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-40860/","md":"https://erroneo.us/security/cve/CVE-2026-40860/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.01534,"verdict":null,"product":"org.apache.camel:camel-jms (Maven)"},{"id":"CVE-2026-40453","type":"cve","title":"CVE-2026-40453: Apache Camel has an incomplete fix for CVE-2025-27636","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-40453/","md":"https://erroneo.us/security/cve/CVE-2026-40453/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01889,"verdict":null,"product":"org.apache.camel:camel-coap (Maven)"},{"id":"CVE-2026-33454","type":"cve","title":"CVE-2026-33454: Apache Camel's Camel-Mail component is vulnerable to Camel message header injection","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-33454/","md":"https://erroneo.us/security/cve/CVE-2026-33454/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01034,"verdict":null,"product":"org.apache.camel:camel-mail (Maven)"},{"id":"CVE-2026-33453","type":"cve","title":"CVE-2026-33453: Apache camel-coap allows header injection that can lead to remote code execution","date":"2026-04-27","url":"https://erroneo.us/security/cve/CVE-2026-33453/","md":"https://erroneo.us/security/cve/CVE-2026-33453/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.07164,"verdict":null,"product":"org.apache.camel:camel-coap (Maven)"},{"id":"2026-04-27","type":"digest","title":"Security digest for April 27, 2026","date":"2026-04-27","url":"https://erroneo.us/security/2026-04-27/","md":"https://erroneo.us/security/2026-04-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":7}},{"id":"CVE-2026-41571","type":"cve","title":"CVE-2026-41571: Note Mark: OIDC-registered users authenticated by submitting password \"null\"","date":"2026-04-25","url":"https://erroneo.us/security/cve/CVE-2026-41571/","md":"https://erroneo.us/security/cve/CVE-2026-41571/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00477,"verdict":null,"product":"github.com/enchant97/note-mark/backend (Go)"},{"id":"2026-04-25","type":"digest","title":"Security digest for April 25, 2026","date":"2026-04-25","url":"https://erroneo.us/security/2026-04-25/","md":"https://erroneo.us/security/2026-04-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-xhj4-g6w8-2xjw","type":"ghsa","title":"go-zserio has Unbounded Memory Allocation for All Platforms","date":"2026-04-24","url":"https://erroneo.us/security/ghsa/GHSA-xhj4-g6w8-2xjw/","md":"https://erroneo.us/security/ghsa/GHSA-xhj4-g6w8-2xjw/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"github.com/woven-planet/go-zserio"},{"id":"CVE-2026-41501","type":"cve","title":"CVE-2026-41501: electerm has Command Injection via runLinux funtion","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2026-41501/","md":"https://erroneo.us/security/cve/CVE-2026-41501/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02491,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-41492","type":"cve","title":"CVE-2026-41492: Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2026-41492/","md":"https://erroneo.us/security/cve/CVE-2026-41492/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02463,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"CVE-2026-41328","type":"cve","title":"CVE-2026-41328: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2026-41328/","md":"https://erroneo.us/security/cve/CVE-2026-41328/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0048,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"CVE-2026-41327","type":"cve","title":"CVE-2026-41327: Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2026-41327/","md":"https://erroneo.us/security/cve/CVE-2026-41327/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00475,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"CVE-2026-12537","type":"cve","title":"CVE-2026-12537: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2026-12537/","md":"https://erroneo.us/security/cve/CVE-2026-12537/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00212,"verdict":"check-exposure","product":"@google/gemini-cli (npm)"},{"id":"CVE-2025-29635","type":"cve","title":"CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2025-29635/","md":"https://erroneo.us/security/cve/CVE-2025-29635/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.87944,"verdict":null,"product":"D-Link DIR-823X"},{"id":"CVE-2024-7399","type":"cve","title":"CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2024-7399/","md":"https://erroneo.us/security/cve/CVE-2024-7399/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.91941,"verdict":null,"product":"Samsung MagicINFO 9 Server"},{"id":"CVE-2024-57728","type":"cve","title":"CVE-2024-57728: SimpleHelp Path Traversal Vulnerability","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2024-57728/","md":"https://erroneo.us/security/cve/CVE-2024-57728/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.64664,"verdict":null,"product":"SimpleHelp  SimpleHelp"},{"id":"CVE-2024-57726","type":"cve","title":"CVE-2024-57726: SimpleHelp Missing Authorization Vulnerability","date":"2026-04-24","url":"https://erroneo.us/security/cve/CVE-2024-57726/","md":"https://erroneo.us/security/cve/CVE-2024-57726/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.66601,"verdict":null,"product":"SimpleHelp  SimpleHelp"},{"id":"2026-04-24","type":"digest","title":"Security digest for April 24, 2026","date":"2026-04-24","url":"https://erroneo.us/security/2026-04-24/","md":"https://erroneo.us/security/2026-04-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":7}},{"id":"GHSA-2wvh-87g2-89hr","type":"ghsa","title":"OpenC3 COSMOS: Permissions Bypass Provides User Access to Unassigned Administrative Actions via Script Runner Tool","date":"2026-04-23","url":"https://erroneo.us/security/ghsa/GHSA-2wvh-87g2-89hr/","md":"https://erroneo.us/security/ghsa/GHSA-2wvh-87g2-89hr/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"openc3"},{"id":"CVE-2026-42087","type":"cve","title":"CVE-2026-42087: OpenC3 COSMOS has SQL Injection in QuestDB Time-Series Database","date":"2026-04-23","url":"https://erroneo.us/security/cve/CVE-2026-42087/","md":"https://erroneo.us/security/cve/CVE-2026-42087/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00445,"verdict":null,"product":"openc3 (RubyGems)"},{"id":"CVE-2026-40372","type":"cve","title":"CVE-2026-40372: Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege","date":"2026-04-23","url":"https://erroneo.us/security/cve/CVE-2026-40372/","md":"https://erroneo.us/security/cve/CVE-2026-40372/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00824,"verdict":null,"product":"Microsoft.AspNetCore.DataProtection (NuGet)"},{"id":"CVE-2026-39987","type":"cve","title":"CVE-2026-39987: Marimo Remote Code Execution Vulnerability","date":"2026-04-23","url":"https://erroneo.us/security/cve/CVE-2026-39987/","md":"https://erroneo.us/security/cve/CVE-2026-39987/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.37865,"verdict":null,"product":"Marimo Marimo"},{"id":"CVE-2026-39087","type":"cve","title":"CVE-2026-39087: ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function","date":"2026-04-23","url":"https://erroneo.us/security/cve/CVE-2026-39087/","md":"https://erroneo.us/security/cve/CVE-2026-39087/index.md","severity":"medium","cvss":6.4,"kev":false,"epss":0.00482,"verdict":null,"product":"heckel.io/ntfy/v2 (Go)"},{"id":"CVE-2025-62373","type":"cve","title":"CVE-2025-62373: Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer","date":"2026-04-23","url":"https://erroneo.us/security/cve/CVE-2025-62373/","md":"https://erroneo.us/security/cve/CVE-2025-62373/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00701,"verdict":null,"product":"pipecat-ai (PyPI)"},{"id":"2026-04-23","type":"digest","title":"Security digest for April 23, 2026","date":"2026-04-23","url":"https://erroneo.us/security/2026-04-23/","md":"https://erroneo.us/security/2026-04-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":5}},{"id":"CVE-2026-42076","type":"cve","title":"CVE-2026-42076: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-42076/","md":"https://erroneo.us/security/cve/CVE-2026-42076/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02563,"verdict":null,"product":"@evomap/evolver (npm)"},{"id":"CVE-2026-42072","type":"cve","title":"CVE-2026-42072: NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-42072/","md":"https://erroneo.us/security/cve/CVE-2026-42072/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00601,"verdict":null,"product":"github.com/orneryd/nornicdb (Go)"},{"id":"CVE-2026-41203","type":"cve","title":"CVE-2026-41203: CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-41203/","md":"https://erroneo.us/security/cve/CVE-2026-41203/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00724,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-41202","type":"cve","title":"CVE-2026-41202: CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-41202/","md":"https://erroneo.us/security/cve/CVE-2026-41202/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00724,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-41179","type":"cve","title":"CVE-2026-41179: RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-41179/","md":"https://erroneo.us/security/cve/CVE-2026-41179/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.05299,"verdict":null,"product":"github.com/rclone/rclone (Go)"},{"id":"CVE-2026-41176","type":"cve","title":"CVE-2026-41176: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-41176/","md":"https://erroneo.us/security/cve/CVE-2026-41176/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.03216,"verdict":null,"product":"github.com/rclone/rclone (Go)"},{"id":"CVE-2026-41070","type":"cve","title":"CVE-2026-41070: openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-41070/","md":"https://erroneo.us/security/cve/CVE-2026-41070/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00578,"verdict":null,"product":"github.com/jkroepke/openvpn-auth-oauth2 (Go)"},{"id":"CVE-2026-33825","type":"cve","title":"CVE-2026-33825: Microsoft Defender Insufficient Granularity of Access Control Vulnerability","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-33825/","md":"https://erroneo.us/security/cve/CVE-2026-33825/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00399,"verdict":null,"product":"Microsoft Defender"},{"id":"CVE-2026-33471","type":"cve","title":"CVE-2026-33471: nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation","date":"2026-04-22","url":"https://erroneo.us/security/cve/CVE-2026-33471/","md":"https://erroneo.us/security/cve/CVE-2026-33471/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00291,"verdict":null,"product":"nimiq-block (crates.io (Rust))"},{"id":"2026-04-22","type":"digest","title":"Security digest for April 22, 2026","date":"2026-04-22","url":"https://erroneo.us/security/2026-04-22/","md":"https://erroneo.us/security/2026-04-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":8}},{"id":"CVE-2026-41264","type":"cve","title":"CVE-2026-41264: Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability","date":"2026-04-21","url":"https://erroneo.us/security/cve/CVE-2026-41264/","md":"https://erroneo.us/security/cve/CVE-2026-41264/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01439,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-41197","type":"cve","title":"CVE-2026-41197: Brillig: Heap corruption in foreign call results with nested tuple arrays","date":"2026-04-21","url":"https://erroneo.us/security/cve/CVE-2026-41197/","md":"https://erroneo.us/security/cve/CVE-2026-41197/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00494,"verdict":null,"product":"brillig (crates.io (Rust))"},{"id":"CVE-2026-32613","type":"cve","title":"CVE-2026-32613: Spinnaker: RCE via expression parsing due to unrestricted context handling","date":"2026-04-21","url":"https://erroneo.us/security/cve/CVE-2026-32613/","md":"https://erroneo.us/security/cve/CVE-2026-32613/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00664,"verdict":null,"product":"io.spinnaker.echo:echo-pipelinetriggers (Maven)"},{"id":"CVE-2026-32604","type":"cve","title":"CVE-2026-32604: Spinnaker: RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths","date":"2026-04-21","url":"https://erroneo.us/security/cve/CVE-2026-32604/","md":"https://erroneo.us/security/cve/CVE-2026-32604/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00767,"verdict":null,"product":"io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo (Maven)"},{"id":"2026-04-21","type":"digest","title":"Security digest for April 21, 2026","date":"2026-04-21","url":"https://erroneo.us/security/2026-04-21/","md":"https://erroneo.us/security/2026-04-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2026-33557","type":"cve","title":"CVE-2026-33557: Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2026-33557/","md":"https://erroneo.us/security/cve/CVE-2026-33557/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.00933,"verdict":null,"product":"org.apache.kafka:kafka-clients (Maven)"},{"id":"CVE-2026-20133","type":"cve","title":"CVE-2026-20133: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2026-20133/","md":"https://erroneo.us/security/cve/CVE-2026-20133/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.32432,"verdict":null,"product":"Cisco Catalyst SD-WAN Manager"},{"id":"CVE-2026-20128","type":"cve","title":"CVE-2026-20128: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2026-20128/","md":"https://erroneo.us/security/cve/CVE-2026-20128/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.07217,"verdict":null,"product":"Cisco Catalyst SD-WAN Manager"},{"id":"CVE-2026-20122","type":"cve","title":"CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2026-20122/","md":"https://erroneo.us/security/cve/CVE-2026-20122/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.25476,"verdict":null,"product":"Cisco Catalyst SD-WAN Manger"},{"id":"CVE-2025-48700","type":"cve","title":"CVE-2025-48700: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2025-48700/","md":"https://erroneo.us/security/cve/CVE-2025-48700/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.01713,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2025-32975","type":"cve","title":"CVE-2025-32975: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2025-32975/","md":"https://erroneo.us/security/cve/CVE-2025-32975/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.02487,"verdict":null,"product":"Quest KACE Systems Management Appliance (SMA)"},{"id":"CVE-2025-2749","type":"cve","title":"CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2025-2749/","md":"https://erroneo.us/security/cve/CVE-2025-2749/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.04021,"verdict":null,"product":"Kentico Kentico Xperience"},{"id":"CVE-2024-27199","type":"cve","title":"CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2024-27199/","md":"https://erroneo.us/security/cve/CVE-2024-27199/index.md","severity":"high","cvss":7.3,"kev":true,"epss":0.99991,"verdict":null,"product":"JetBrains TeamCity"},{"id":"CVE-2023-27351","type":"cve","title":"CVE-2023-27351: PaperCut NG/MF Improper Authentication Vulnerability","date":"2026-04-20","url":"https://erroneo.us/security/cve/CVE-2023-27351/","md":"https://erroneo.us/security/cve/CVE-2023-27351/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.78052,"verdict":null,"product":"PaperCut NG/MF"},{"id":"2026-04-20","type":"digest","title":"Security digest for April 20, 2026","date":"2026-04-20","url":"https://erroneo.us/security/2026-04-20/","md":"https://erroneo.us/security/2026-04-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":8,"critical":1}},{"id":"CVE-2026-44109","type":"cve","title":"CVE-2026-44109: OpenClaw: Feishu webhook and card-action validation now fail closed","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-44109/","md":"https://erroneo.us/security/cve/CVE-2026-44109/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01089,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-43585","type":"cve","title":"CVE-2026-43585: OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-43585/","md":"https://erroneo.us/security/cve/CVE-2026-43585/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00797,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-41589","type":"cve","title":"CVE-2026-41589: Wish has SCP Path Traversal that allows arbitrary file read/write","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41589/","md":"https://erroneo.us/security/cve/CVE-2026-41589/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00513,"verdict":null,"product":"charm.land/wish/v2 (Go)"},{"id":"CVE-2026-41584","type":"cve","title":"CVE-2026-41584: Zebra has rk Identity Point Panic in Transaction Verification","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41584/","md":"https://erroneo.us/security/cve/CVE-2026-41584/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0046,"verdict":null,"product":"zebrad (crates.io (Rust))"},{"id":"CVE-2026-41583","type":"cve","title":"CVE-2026-41583: Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41583/","md":"https://erroneo.us/security/cve/CVE-2026-41583/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00473,"verdict":null,"product":"zebrad (crates.io (Rust))"},{"id":"CVE-2026-41574","type":"cve","title":"CVE-2026-41574: Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41574/","md":"https://erroneo.us/security/cve/CVE-2026-41574/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00905,"verdict":null,"product":"github.com/nhost/nhost (Go)"},{"id":"CVE-2026-41507","type":"cve","title":"CVE-2026-41507: Remote Code Execution (RCE) via String Literal Injection into math-codegen","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41507/","md":"https://erroneo.us/security/cve/CVE-2026-41507/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00672,"verdict":null,"product":"math-codegen (npm)"},{"id":"CVE-2026-41497","type":"cve","title":"CVE-2026-41497: PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41497/","md":"https://erroneo.us/security/cve/CVE-2026-41497/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00767,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-41265","type":"cve","title":"CVE-2026-41265: Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-41265/","md":"https://erroneo.us/security/cve/CVE-2026-41265/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00555,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-40525","type":"cve","title":"CVE-2026-40525: OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-40525/","md":"https://erroneo.us/security/cve/CVE-2026-40525/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00762,"verdict":null,"product":"openviking (PyPI)"},{"id":"CVE-2026-27197","type":"cve","title":"CVE-2026-27197: Sentry: Improper authentication on SAML SSO process allows user identity linking","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-27197/","md":"https://erroneo.us/security/cve/CVE-2026-27197/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00651,"verdict":null,"product":"sentry (PyPI)"},{"id":"CVE-2026-23500","type":"cve","title":"CVE-2026-23500: Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2026-23500/","md":"https://erroneo.us/security/cve/CVE-2026-23500/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00922,"verdict":null,"product":"dolibarr/dolibarr (Composer (PHP))"},{"id":"CVE-2025-14813","type":"cve","title":"CVE-2025-14813: Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks","date":"2026-04-17","url":"https://erroneo.us/security/cve/CVE-2025-14813/","md":"https://erroneo.us/security/cve/CVE-2025-14813/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0032,"verdict":null,"product":"org.bouncycastle:bcprov-jdk14 (Maven)"},{"id":"2026-04-17","type":"digest","title":"Security digest for April 17, 2026","date":"2026-04-17","url":"https://erroneo.us/security/2026-04-17/","md":"https://erroneo.us/security/2026-04-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":13}},{"id":"GHSA-vr7g-88fq-vhq3","type":"ghsa","title":"Paperclip: OS Command Injection via Execution Workspace cleanupCommand","date":"2026-04-16","url":"https://erroneo.us/security/ghsa/GHSA-vr7g-88fq-vhq3/","md":"https://erroneo.us/security/ghsa/GHSA-vr7g-88fq-vhq3/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"@paperclipai/server"},{"id":"GHSA-47wq-cj9q-wpmp","type":"ghsa","title":"Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys","date":"2026-04-16","url":"https://erroneo.us/security/ghsa/GHSA-47wq-cj9q-wpmp/","md":"https://erroneo.us/security/ghsa/GHSA-47wq-cj9q-wpmp/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"@paperclipai/server"},{"id":"GHSA-3xx2-mqjm-hg9x","type":"ghsa","title":"Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise","date":"2026-04-16","url":"https://erroneo.us/security/ghsa/GHSA-3xx2-mqjm-hg9x/","md":"https://erroneo.us/security/ghsa/GHSA-3xx2-mqjm-hg9x/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"@paperclipai/server"},{"id":"CVE-2026-6270","type":"cve","title":"CVE-2026-6270: @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-6270/","md":"https://erroneo.us/security/cve/CVE-2026-6270/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00608,"verdict":null,"product":"@fastify/middie (npm)"},{"id":"CVE-2026-41500","type":"cve","title":"CVE-2026-41500: electerm: electerm_install_script_CommandInjection Vulnerability Report","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41500/","md":"https://erroneo.us/security/cve/CVE-2026-41500/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02491,"verdict":null,"product":"electerm (npm)"},{"id":"CVE-2026-41478","type":"cve","title":"CVE-2026-41478: Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41478/","md":"https://erroneo.us/security/cve/CVE-2026-41478/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00439,"verdict":null,"product":"@saltcorn/server (npm)"},{"id":"CVE-2026-41428","type":"cve","title":"CVE-2026-41428: Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41428/","md":"https://erroneo.us/security/cve/CVE-2026-41428/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00628,"verdict":null,"product":"@budibase/backend-core (npm)"},{"id":"CVE-2026-41248","type":"cve","title":"CVE-2026-41248: Official Clerk JavaScript SDKs: Middleware-based route protection bypass","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41248/","md":"https://erroneo.us/security/cve/CVE-2026-41248/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00529,"verdict":null,"product":"@clerk/nextjs (npm)"},{"id":"CVE-2026-41242","type":"cve","title":"CVE-2026-41242: Arbitrary code execution in protobufjs","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41242/","md":"https://erroneo.us/security/cve/CVE-2026-41242/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0099,"verdict":null,"product":"protobufjs (npm)"},{"id":"CVE-2026-41137","type":"cve","title":"CVE-2026-41137: Flowise: Code Injection in CSVAgent leads to Authenticated RCE","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-41137/","md":"https://erroneo.us/security/cve/CVE-2026-41137/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.02051,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-40933","type":"cve","title":"CVE-2026-40933: Flowise: Authenticated RCE Via MCP Adapters","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-40933/","md":"https://erroneo.us/security/cve/CVE-2026-40933/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01283,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2026-40324","type":"cve","title":"CVE-2026-40324: ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-40324/","md":"https://erroneo.us/security/cve/CVE-2026-40324/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01048,"verdict":null,"product":"HotChocolate.Language (NuGet)"},{"id":"CVE-2026-40173","type":"cve","title":"CVE-2026-40173: Dgraph: Unauthenticated /debug/pprof/cmdline discloses admin auth token, enabling unauthorized access to protected Alpha admin endpoints","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-40173/","md":"https://erroneo.us/security/cve/CVE-2026-40173/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00597,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"CVE-2026-34197","type":"cve","title":"CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-34197/","md":"https://erroneo.us/security/cve/CVE-2026-34197/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.15492,"verdict":null,"product":"Apache ActiveMQ"},{"id":"CVE-2026-31843","type":"cve","title":"CVE-2026-31843: goodoneuz/pay-uz: the /payment/api/editable/update endpoint overwrites existing PHP payment hook files","date":"2026-04-16","url":"https://erroneo.us/security/cve/CVE-2026-31843/","md":"https://erroneo.us/security/cve/CVE-2026-31843/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01165,"verdict":null,"product":"goodoneuz/pay-uz (Composer (PHP))"},{"id":"2026-04-16","type":"digest","title":"Security digest for April 16, 2026","date":"2026-04-16","url":"https://erroneo.us/security/2026-04-16/","md":"https://erroneo.us/security/2026-04-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":14}},{"id":"CVE-2026-6290","type":"cve","title":"CVE-2026-6290: Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-6290/","md":"https://erroneo.us/security/cve/CVE-2026-6290/index.md","severity":"high","cvss":8,"kev":false,"epss":0.00394,"verdict":null,"product":"www.velocidex.com/golang/velociraptor (Go)"},{"id":"CVE-2026-54334","type":"cve","title":"CVE-2026-54334: UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-54334/","md":"https://erroneo.us/security/cve/CVE-2026-54334/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00801,"verdict":null,"product":"uefi-firmware (PyPI)"},{"id":"CVE-2026-54333","type":"cve","title":"CVE-2026-54333: UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-54333/","md":"https://erroneo.us/security/cve/CVE-2026-54333/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00801,"verdict":null,"product":"uefi-firmware (PyPI)"},{"id":"CVE-2026-41229","type":"cve","title":"CVE-2026-41229: Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-41229/","md":"https://erroneo.us/security/cve/CVE-2026-41229/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00692,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2026-41228","type":"cve","title":"CVE-2026-41228: Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-41228/","md":"https://erroneo.us/security/cve/CVE-2026-41228/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00749,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2026-40575","type":"cve","title":"CVE-2026-40575: OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-40575/","md":"https://erroneo.us/security/cve/CVE-2026-40575/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00732,"verdict":null,"product":"github.com/oauth2-proxy/oauth2-proxy/v7 (Go)"},{"id":"CVE-2026-40478","type":"cve","title":"CVE-2026-40478: Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-40478/","md":"https://erroneo.us/security/cve/CVE-2026-40478/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01204,"verdict":null,"product":"org.thymeleaf:thymeleaf (Maven)"},{"id":"CVE-2026-40477","type":"cve","title":"CVE-2026-40477: Improper restriction of the scope of accessible objects in Thymeleaf expressions","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-40477/","md":"https://erroneo.us/security/cve/CVE-2026-40477/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00944,"verdict":null,"product":"org.thymeleaf:thymeleaf (Maven)"},{"id":"CVE-2026-33808","type":"cve","title":"CVE-2026-33808: @fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-33808/","md":"https://erroneo.us/security/cve/CVE-2026-33808/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00551,"verdict":null,"product":"@fastify/express (npm)"},{"id":"CVE-2026-33807","type":"cve","title":"CVE-2026-33807: @fastify/express's middleware path doubling causes authentication bypass in child plugin scopes","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-33807/","md":"https://erroneo.us/security/cve/CVE-2026-33807/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00534,"verdict":null,"product":"@fastify/express (npm)"},{"id":"CVE-2026-33805","type":"cve","title":"CVE-2026-33805: Fastify's connection header abuse enables stripping of proxy-added headers","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-33805/","md":"https://erroneo.us/security/cve/CVE-2026-33805/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0056,"verdict":null,"product":"@fastify/reply-from (npm)"},{"id":"CVE-2026-32179","type":"cve","title":"CVE-2026-32179: MsQuic has a Remote Elevation of Privilege Vulnerability","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-32179/","md":"https://erroneo.us/security/cve/CVE-2026-32179/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet)"},{"id":"CVE-2026-30625","type":"cve","title":"CVE-2026-30625: Upsonic: remote code execution vulnerability in its MCP server/task creation functionality","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2026-30625/","md":"https://erroneo.us/security/cve/CVE-2026-30625/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01198,"verdict":null,"product":"upsonic (PyPI)"},{"id":"CVE-2025-41118","type":"cve","title":"CVE-2025-41118: Pyroscope Exposes Storage Secret","date":"2026-04-15","url":"https://erroneo.us/security/cve/CVE-2025-41118/","md":"https://erroneo.us/security/cve/CVE-2025-41118/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00407,"verdict":null,"product":"github.com/grafana/pyroscope (Go)"},{"id":"2026-04-15","type":"digest","title":"Security digest for April 15, 2026","date":"2026-04-15","url":"https://erroneo.us/security/2026-04-15/","md":"https://erroneo.us/security/2026-04-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":14}},{"id":"windows-ike-cve-2026-33824-pre-auth-rce","type":"brief","title":"Windows IKE CVE-2026-33824: Exploited Pre-Auth RCE","date":"2026-04-14","url":"https://erroneo.us/security/briefs/windows-ike-cve-2026-33824-pre-auth-rce/","md":"https://erroneo.us/security/briefs/windows-ike-cve-2026-33824-pre-auth-rce/index.md","severity":"critical","kev":true,"epss":0.01619,"verdict":"check-exposure","cves":["CVE-2026-33824"],"summary":"The fix shipped in April, so most fleets are already covered; the real risk is any unpatched Windows host that answers IKE on UDP 500 or 4500 from untrusted networks, and those need patching or blocking today."},{"id":"fortinet-fortisandbox-cve-2026-39808-25089-unauth-command-injection","type":"brief","title":"FortiSandbox: Two Exploited Pre-Auth Command Injections","date":"2026-04-14","url":"https://erroneo.us/security/briefs/fortinet-fortisandbox-cve-2026-39808-25089-unauth-command-injection/","md":"https://erroneo.us/security/briefs/fortinet-fortisandbox-cve-2026-39808-25089-unauth-command-injection/index.md","severity":"critical","kev":true,"epss":0.76112,"verdict":"act-now","cves":["CVE-2026-39808","CVE-2026-25089"],"summary":"If any FortiSandbox runs 4.2, 4.4 below 4.4.9 or 5.0 below 5.0.6, upgrade now and check it for compromise: both bugs need no login, one has a public exploit, and attacks began in June."},{"id":"CVE-2026-40946","type":"cve","title":"CVE-2026-40946: Oxia has an OIDC token audience validation bypass via SkipClientIDCheck","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-40946/","md":"https://erroneo.us/security/cve/CVE-2026-40946/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00408,"verdict":null,"product":"github.com/oxia-db/oxia (Go)"},{"id":"CVE-2026-40911","type":"cve","title":"CVE-2026-40911: WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-40911/","md":"https://erroneo.us/security/cve/CVE-2026-40911/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00859,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-40887","type":"cve","title":"CVE-2026-40887: @vendure/core has a SQL Injection vulnerability","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-40887/","md":"https://erroneo.us/security/cve/CVE-2026-40887/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02202,"verdict":null,"product":"@vendure/core (npm)"},{"id":"CVE-2026-40884","type":"cve","title":"CVE-2026-40884: goshs has an empty-username SFTP password authentication bypass","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-40884/","md":"https://erroneo.us/security/cve/CVE-2026-40884/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00645,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2026-39842","type":"cve","title":"CVE-2026-39842: Expression Injection in OpenRemote","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-39842/","md":"https://erroneo.us/security/cve/CVE-2026-39842/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00912,"verdict":null,"product":"io.openremote:openremote-manager (Maven)"},{"id":"CVE-2026-34457","type":"cve","title":"CVE-2026-34457: OAuth2 Proxy's Health Check User-Agent Matching Bypasses Authentication in auth_request Mode","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-34457/","md":"https://erroneo.us/security/cve/CVE-2026-34457/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00656,"verdict":null,"product":"github.com/oauth2-proxy/oauth2-proxy/v7 (Go)"},{"id":"CVE-2026-32201","type":"cve","title":"CVE-2026-32201: Microsoft SharePoint Server Improper Input Validation Vulnerability","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2026-32201/","md":"https://erroneo.us/security/cve/CVE-2026-32201/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.43378,"verdict":null,"product":"Microsoft SharePoint Server"},{"id":"CVE-2025-61260","type":"cve","title":"CVE-2025-61260: OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2025-61260/","md":"https://erroneo.us/security/cve/CVE-2025-61260/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.06583,"verdict":null,"product":"@openai/codex (npm)"},{"id":"CVE-2009-0238","type":"cve","title":"CVE-2009-0238: Microsoft Office Remote Code Execution","date":"2026-04-14","url":"https://erroneo.us/security/cve/CVE-2009-0238/","md":"https://erroneo.us/security/cve/CVE-2009-0238/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.42941,"verdict":null,"product":"Microsoft Office"},{"id":"2026-04-14","type":"digest","title":"Security digest for April 14, 2026","date":"2026-04-14","url":"https://erroneo.us/security/2026-04-14/","md":"https://erroneo.us/security/2026-04-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":2,"critical":7}},{"id":"CVE-2026-4810","type":"cve","title":"CVE-2026-4810: Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2026-4810/","md":"https://erroneo.us/security/cve/CVE-2026-4810/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02211,"verdict":null,"product":"google-adk (PyPI)"},{"id":"CVE-2026-40576","type":"cve","title":"CVE-2026-40576: excel-mcp-server has a Path Traversal issue","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2026-40576/","md":"https://erroneo.us/security/cve/CVE-2026-40576/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00642,"verdict":null,"product":"excel-mcp-server (PyPI)"},{"id":"CVE-2026-34621","type":"cve","title":"CVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2026-34621/","md":"https://erroneo.us/security/cve/CVE-2026-34621/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.02183,"verdict":null,"product":"Adobe Acrobat and Reader"},{"id":"CVE-2026-23891","type":"cve","title":"CVE-2026-23891: Decidim has a cross-site scripting (XSS) in user name","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2026-23891/","md":"https://erroneo.us/security/cve/CVE-2026-23891/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00356,"verdict":null,"product":"decidim-core (RubyGems)"},{"id":"CVE-2026-21643","type":"cve","title":"CVE-2026-21643: Fortinet FortiClient EMS SQL Injection Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2026-21643/","md":"https://erroneo.us/security/cve/CVE-2026-21643/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.93871,"verdict":null,"product":"Fortinet FortiClient EMS"},{"id":"CVE-2025-60710","type":"cve","title":"CVE-2025-60710: Microsoft Windows Link Following Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2025-60710/","md":"https://erroneo.us/security/cve/CVE-2025-60710/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.04614,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2023-36424","type":"cve","title":"CVE-2023-36424: Microsoft Windows Out-of-Bounds Read Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2023-36424/","md":"https://erroneo.us/security/cve/CVE-2023-36424/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.12087,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2023-21529","type":"cve","title":"CVE-2023-21529: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2023-21529/","md":"https://erroneo.us/security/cve/CVE-2023-21529/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.59294,"verdict":null,"product":"Microsoft Exchange Server"},{"id":"CVE-2020-9715","type":"cve","title":"CVE-2020-9715: Adobe Acrobat Use-After-Free Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2020-9715/","md":"https://erroneo.us/security/cve/CVE-2020-9715/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.33491,"verdict":null,"product":"Adobe Acrobat"},{"id":"CVE-2012-1854","type":"cve","title":"CVE-2012-1854: Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","date":"2026-04-13","url":"https://erroneo.us/security/cve/CVE-2012-1854/","md":"https://erroneo.us/security/cve/CVE-2012-1854/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.20867,"verdict":null,"product":"Microsoft Visual Basic for Applications (VBA)"},{"id":"2026-04-13","type":"digest","title":"Security digest for April 13, 2026","date":"2026-04-13","url":"https://erroneo.us/security/2026-04-13/","md":"https://erroneo.us/security/2026-04-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":7,"critical":3}},{"id":"GHSA-9cp7-j3f8-p5jx","type":"ghsa","title":"Daptin has Unauthenticated Path Traversal and Zip Slip","date":"2026-04-10","url":"https://erroneo.us/security/ghsa/GHSA-9cp7-j3f8-p5jx/","md":"https://erroneo.us/security/ghsa/GHSA-9cp7-j3f8-p5jx/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/daptin/daptin"},{"id":"CVE-2026-5412","type":"cve","title":"CVE-2026-5412: Juju: CloudSpec method leaking cloud credentials","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-5412/","md":"https://erroneo.us/security/cve/CVE-2026-5412/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00484,"verdict":null,"product":"github.com/juju/juju (Go)"},{"id":"CVE-2026-5059","type":"cve","title":"CVE-2026-5059: aws-mcp has a Command Injection Remote Code Execution Vulnerability","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-5059/","md":"https://erroneo.us/security/cve/CVE-2026-5059/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02319,"verdict":null,"product":"aws-mcp (PyPI)"},{"id":"CVE-2026-41679","type":"cve","title":"CVE-2026-41679: paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-41679/","md":"https://erroneo.us/security/cve/CVE-2026-41679/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.07365,"verdict":null,"product":"paperclipai (npm)"},{"id":"CVE-2026-40289","type":"cve","title":"CVE-2026-40289: PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40289/","md":"https://erroneo.us/security/cve/CVE-2026-40289/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00521,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-40288","type":"cve","title":"CVE-2026-40288: PraisonAI has critical RCE via `type: job` workflow YAML","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40288/","md":"https://erroneo.us/security/cve/CVE-2026-40288/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00925,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-40258","type":"cve","title":"CVE-2026-40258: gramps-webapi: Zip Slip Path Traversal in Media Archive Import","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40258/","md":"https://erroneo.us/security/cve/CVE-2026-40258/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00611,"verdict":null,"product":"gramps-webapi (PyPI)"},{"id":"CVE-2026-40189","type":"cve","title":"CVE-2026-40189: goshs has a file-based ACL authorization bypass in goshs state-changing routes","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40189/","md":"https://erroneo.us/security/cve/CVE-2026-40189/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0066,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2026-40177","type":"cve","title":"CVE-2026-40177: ajenti.plugin.core has password bypass when 2FA is activated","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40177/","md":"https://erroneo.us/security/cve/CVE-2026-40177/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00447,"verdict":null,"product":"ajenti.plugin.core (PyPI)"},{"id":"CVE-2026-40157","type":"cve","title":"CVE-2026-40157: PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40157/","md":"https://erroneo.us/security/cve/CVE-2026-40157/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00527,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-40154","type":"cve","title":"CVE-2026-40154: PraisonAI Vulnerable Untrusted Remote Template Code Execution","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40154/","md":"https://erroneo.us/security/cve/CVE-2026-40154/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00457,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-40111","type":"cve","title":"CVE-2026-40111: PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40111/","md":"https://erroneo.us/security/cve/CVE-2026-40111/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0034,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-40093","type":"cve","title":"CVE-2026-40093: nimiq-blockchain is missing a wall-clock upper bound on block timestamps","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-40093/","md":"https://erroneo.us/security/cve/CVE-2026-40093/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.00434,"verdict":null,"product":"nimiq-blockchain (crates.io (Rust))"},{"id":"CVE-2026-34987","type":"cve","title":"CVE-2026-34987: Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-34987/","md":"https://erroneo.us/security/cve/CVE-2026-34987/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0049,"verdict":null,"product":"wasmtime (crates.io (Rust))"},{"id":"CVE-2026-34179","type":"cve","title":"CVE-2026-34179: LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-34179/","md":"https://erroneo.us/security/cve/CVE-2026-34179/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00419,"verdict":null,"product":"github.com/canonical/lxd (Go)"},{"id":"CVE-2026-34178","type":"cve","title":"CVE-2026-34178: LXD: Importing a crafted backup leads to project restriction bypass","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-34178/","md":"https://erroneo.us/security/cve/CVE-2026-34178/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00675,"verdict":null,"product":"github.com/canonical/lxd (Go)"},{"id":"CVE-2026-34177","type":"cve","title":"CVE-2026-34177: LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-34177/","md":"https://erroneo.us/security/cve/CVE-2026-34177/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00611,"verdict":null,"product":"github.com/canonical/lxd (Go)"},{"id":"CVE-2026-1115","type":"cve","title":"CVE-2026-1115: parisneo/lollms vulnerable to stored XSS in the social feature","date":"2026-04-10","url":"https://erroneo.us/security/cve/CVE-2026-1115/","md":"https://erroneo.us/security/cve/CVE-2026-1115/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01261,"verdict":null,"product":"lollms (PyPI)"},{"id":"2026-04-10","type":"digest","title":"Security digest for April 10, 2026","date":"2026-04-10","url":"https://erroneo.us/security/2026-04-10/","md":"https://erroneo.us/security/2026-04-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":18}},{"id":"apache-tomcat-cve-2026-34486-encryptinterceptor-bypass","type":"brief","title":"Tomcat CVE-2026-34486: Cluster EncryptInterceptor Bypass","date":"2026-04-09","url":"https://erroneo.us/security/briefs/apache-tomcat-cve-2026-34486-encryptinterceptor-bypass/","md":"https://erroneo.us/security/briefs/apache-tomcat-cve-2026-34486-encryptinterceptor-bypass/index.md","severity":"high","kev":true,"epss":0.06561,"verdict":"check-exposure","cves":["CVE-2026-34486"],"summary":"Exploited, but only against three specific Tomcat releases running session-replication clustering with the EncryptInterceptor and a reachable cluster port; check those three things today, and most Tomcat users will find they are not exposed."},{"id":"CVE-2026-34971","type":"cve","title":"CVE-2026-34971: Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift","date":"2026-04-09","url":"https://erroneo.us/security/cve/CVE-2026-34971/","md":"https://erroneo.us/security/cve/CVE-2026-34971/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00388,"verdict":null,"product":"wasmtime (crates.io (Rust))"},{"id":"CVE-2026-29145","type":"cve","title":"CVE-2026-29145: Apache Tomcat: CLIENT_CERT authentication does not fail as expected","date":"2026-04-09","url":"https://erroneo.us/security/cve/CVE-2026-29145/","md":"https://erroneo.us/security/cve/CVE-2026-29145/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00715,"verdict":null,"product":"org.apache.tomcat:tomcat (Maven)"},{"id":"CVE-2025-57735","type":"cve","title":"CVE-2025-57735: Apache Airflow: JWT token still valid after logout","date":"2026-04-09","url":"https://erroneo.us/security/cve/CVE-2025-57735/","md":"https://erroneo.us/security/cve/CVE-2025-57735/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00667,"verdict":null,"product":"apache-airflow (PyPI)"},{"id":"2026-04-09","type":"digest","title":"Security digest for April 9, 2026","date":"2026-04-09","url":"https://erroneo.us/security/2026-04-09/","md":"https://erroneo.us/security/2026-04-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2026-40088","type":"cve","title":"CVE-2026-40088: PraisonAI Vulnerable to OS Command Injection","date":"2026-04-08","url":"https://erroneo.us/security/cve/CVE-2026-40088/","md":"https://erroneo.us/security/cve/CVE-2026-40088/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00597,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-39890","type":"cve","title":"CVE-2026-39890: PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading","date":"2026-04-08","url":"https://erroneo.us/security/cve/CVE-2026-39890/","md":"https://erroneo.us/security/cve/CVE-2026-39890/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00812,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-39888","type":"cve","title":"CVE-2026-39888: PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)","date":"2026-04-08","url":"https://erroneo.us/security/cve/CVE-2026-39888/","md":"https://erroneo.us/security/cve/CVE-2026-39888/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00609,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-39846","type":"cve","title":"CVE-2026-39846: SiYuan: Remote Code Execution in the Electron desktop client via stored XSS in synced table captions","date":"2026-04-08","url":"https://erroneo.us/security/cve/CVE-2026-39846/","md":"https://erroneo.us/security/cve/CVE-2026-39846/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00651,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-1340","type":"cve","title":"CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","date":"2026-04-08","url":"https://erroneo.us/security/cve/CVE-2026-1340/","md":"https://erroneo.us/security/cve/CVE-2026-1340/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98639,"verdict":"act-now","product":"Ivanti Endpoint Manager Mobile (EPMM)"},{"id":"2026-04-08","type":"digest","title":"Security digest for April 8, 2026","date":"2026-04-08","url":"https://erroneo.us/security/2026-04-08/","md":"https://erroneo.us/security/2026-04-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":5}},{"id":"CVE-2026-39397","type":"cve","title":"CVE-2026-39397: @delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-39397/","md":"https://erroneo.us/security/cve/CVE-2026-39397/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00612,"verdict":null,"product":"@delmaredigital/payload-puck (npm)"},{"id":"CVE-2026-39324","type":"cve","title":"CVE-2026-39324: Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-39324/","md":"https://erroneo.us/security/cve/CVE-2026-39324/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0027,"verdict":null,"product":"rack-session (RubyGems)"},{"id":"CVE-2026-35580","type":"cve","title":"CVE-2026-35580: Emissary has GitHub Actions Shell Injection via Workflow Inputs","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-35580/","md":"https://erroneo.us/security/cve/CVE-2026-35580/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00692,"verdict":null,"product":"gov.nsa.emissary:emissary (Maven)"},{"id":"CVE-2026-33816","type":"cve","title":"CVE-2026-33816: Memory-safety vulnerability in github.com/jackc/pgx/v5.","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-33816/","md":"https://erroneo.us/security/cve/CVE-2026-33816/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.00858,"verdict":null,"product":"github.com/jackc/pgx/v5 (Go)"},{"id":"CVE-2026-33815","type":"cve","title":"CVE-2026-33815: pgx contains memory-safety vulnerability","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-33815/","md":"https://erroneo.us/security/cve/CVE-2026-33815/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.00858,"verdict":null,"product":"github.com/jackc/pgx/v5 (Go)"},{"id":"CVE-2026-33439","type":"cve","title":"CVE-2026-33439: OpenIdentityPlatform OpenAM: Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAM","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-33439/","md":"https://erroneo.us/security/cve/CVE-2026-33439/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.08428,"verdict":null,"product":"org.openidentityplatform.openam:openam (Maven)"},{"id":"CVE-2026-1114","type":"cve","title":"CVE-2026-1114: LoLLMs is vulnerable to Improper Access Control through weak secret key","date":"2026-04-07","url":"https://erroneo.us/security/cve/CVE-2026-1114/","md":"https://erroneo.us/security/cve/CVE-2026-1114/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0054,"verdict":null,"product":"lollms (PyPI)"},{"id":"2026-04-07","type":"digest","title":"Security digest for April 7, 2026","date":"2026-04-07","url":"https://erroneo.us/security/2026-04-07/","md":"https://erroneo.us/security/2026-04-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":7}},{"id":"CVE-2026-39305","type":"cve","title":"CVE-2026-39305: PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator","date":"2026-04-06","url":"https://erroneo.us/security/cve/CVE-2026-39305/","md":"https://erroneo.us/security/cve/CVE-2026-39305/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00427,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-35616","type":"cve","title":"CVE-2026-35616: Fortinet FortiClient EMS Improper Access Control Vulnerability","date":"2026-04-06","url":"https://erroneo.us/security/cve/CVE-2026-35616/","md":"https://erroneo.us/security/cve/CVE-2026-35616/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.93983,"verdict":null,"product":"Fortinet FortiClient EMS"},{"id":"CVE-2026-35615","type":"cve","title":"CVE-2026-35615: PraisonAI Has Path Traversal in FileTools","date":"2026-04-06","url":"https://erroneo.us/security/cve/CVE-2026-35615/","md":"https://erroneo.us/security/cve/CVE-2026-35615/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0054,"verdict":null,"product":"PraisonAI (PyPI)"},{"id":"CVE-2026-35490","type":"cve","title":"CVE-2026-35490: changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering","date":"2026-04-06","url":"https://erroneo.us/security/cve/CVE-2026-35490/","md":"https://erroneo.us/security/cve/CVE-2026-35490/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00644,"verdict":null,"product":"changedetection.io (PyPI)"},{"id":"CVE-2026-35035","type":"cve","title":"CVE-2026-35035: CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM X","date":"2026-04-06","url":"https://erroneo.us/security/cve/CVE-2026-35035/","md":"https://erroneo.us/security/cve/CVE-2026-35035/index.md","severity":"high","cvss":7.2,"kev":false,"epss":0.00558,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"2026-04-06","type":"digest","title":"Security digest for April 6, 2026","date":"2026-04-06","url":"https://erroneo.us/security/2026-04-06/","md":"https://erroneo.us/security/2026-04-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"CVE-2026-35471","type":"cve","title":"CVE-2026-35471: goshs: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-35471/","md":"https://erroneo.us/security/cve/CVE-2026-35471/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00685,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2026-35459","type":"cve","title":"CVE-2026-35459: pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-35459/","md":"https://erroneo.us/security/cve/CVE-2026-35459/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00382,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2026-35216","type":"cve","title":"CVE-2026-35216: Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-35216/","md":"https://erroneo.us/security/cve/CVE-2026-35216/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01168,"verdict":null,"product":"@budibase/server (npm)"},{"id":"CVE-2026-35030","type":"cve","title":"CVE-2026-35030: LiteLLM: Authentication bypass via OIDC userinfo cache key collision","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-35030/","md":"https://erroneo.us/security/cve/CVE-2026-35030/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00879,"verdict":null,"product":"litellm (PyPI)"},{"id":"CVE-2026-34208","type":"cve","title":"CVE-2026-34208: SandboxJS: Sandbox integrity escape","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-34208/","md":"https://erroneo.us/security/cve/CVE-2026-34208/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00604,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-33950","type":"cve","title":"CVE-2026-33950: Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-33950/","md":"https://erroneo.us/security/cve/CVE-2026-33950/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00479,"verdict":null,"product":"signalk-server (npm)"},{"id":"CVE-2026-31818","type":"cve","title":"CVE-2026-31818: Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-31818/","md":"https://erroneo.us/security/cve/CVE-2026-31818/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00434,"verdict":null,"product":"@budibase/backend-core (npm)"},{"id":"CVE-2026-0545","type":"cve","title":"CVE-2026-0545: mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization","date":"2026-04-03","url":"https://erroneo.us/security/cve/CVE-2026-0545/","md":"https://erroneo.us/security/cve/CVE-2026-0545/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.04392,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2026-04-03","type":"digest","title":"Security digest for April 3, 2026","date":"2026-04-03","url":"https://erroneo.us/security/2026-04-03/","md":"https://erroneo.us/security/2026-04-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":8}},{"id":"GHSA-xg6x-h9c9-2m83","type":"ghsa","title":"Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache)","date":"2026-04-02","url":"https://erroneo.us/security/ghsa/GHSA-xg6x-h9c9-2m83/","md":"https://erroneo.us/security/ghsa/GHSA-xg6x-h9c9-2m83/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"better-auth"},{"id":"GHSA-3hfp-gqgh-xc5g","type":"ghsa","title":"Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions","date":"2026-04-02","url":"https://erroneo.us/security/ghsa/GHSA-3hfp-gqgh-xc5g/","md":"https://erroneo.us/security/ghsa/GHSA-3hfp-gqgh-xc5g/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"@lightdash/cli"},{"id":"CVE-2026-5463","type":"cve","title":"CVE-2026-5463: pymetasploit3 vulnerable to command injection in console.run_module_with_output()","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-5463/","md":"https://erroneo.us/security/cve/CVE-2026-5463/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.03351,"verdict":null,"product":"pymetasploit3 (PyPI)"},{"id":"CVE-2026-41329","type":"cve","title":"CVE-2026-41329: OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-41329/","md":"https://erroneo.us/security/cve/CVE-2026-41329/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00516,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-41296","type":"cve","title":"CVE-2026-41296: OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-41296/","md":"https://erroneo.us/security/cve/CVE-2026-41296/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00326,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-35393","type":"cve","title":"CVE-2026-35393: goshs: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart upload","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-35393/","md":"https://erroneo.us/security/cve/CVE-2026-35393/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00685,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2026-35392","type":"cve","title":"CVE-2026-35392: goshs: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT Upload","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-35392/","md":"https://erroneo.us/security/cve/CVE-2026-35392/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00685,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2026-35171","type":"cve","title":"CVE-2026-35171: Kedro has Arbitrary Code Execution via Malicious Logging Configuration","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-35171/","md":"https://erroneo.us/security/cve/CVE-2026-35171/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00878,"verdict":null,"product":"kedro (PyPI)"},{"id":"CVE-2026-35039","type":"cve","title":"CVE-2026-35039: fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-35039/","md":"https://erroneo.us/security/cve/CVE-2026-35039/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00219,"verdict":null,"product":"fast-jwt (npm)"},{"id":"CVE-2026-3502","type":"cve","title":"CVE-2026-3502: TrueConf Client Download of Code Without Integrity Check Vulnerability","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-3502/","md":"https://erroneo.us/security/cve/CVE-2026-3502/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00329,"verdict":null,"product":"TrueConf Client"},{"id":"CVE-2026-35002","type":"cve","title":"CVE-2026-35002: Agno is vulnerable to Eval Injection","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-35002/","md":"https://erroneo.us/security/cve/CVE-2026-35002/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0115,"verdict":null,"product":"agno (PyPI)"},{"id":"CVE-2026-34989","type":"cve","title":"CVE-2026-34989: CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-34989/","md":"https://erroneo.us/security/cve/CVE-2026-34989/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00447,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34976","type":"cve","title":"CVE-2026-34976: Dgraph: Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-34976/","md":"https://erroneo.us/security/cve/CVE-2026-34976/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01655,"verdict":null,"product":"github.com/dgraph-io/dgraph/v25 (Go)"},{"id":"CVE-2026-34950","type":"cve","title":"CVE-2026-34950: fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-34950/","md":"https://erroneo.us/security/cve/CVE-2026-34950/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00274,"verdict":null,"product":"fast-jwt (npm)"},{"id":"CVE-2026-34841","type":"cve","title":"CVE-2026-34841: Axios npm Supply Chain Incident Impacting @usebruno/cli","date":"2026-04-02","url":"https://erroneo.us/security/cve/CVE-2026-34841/","md":"https://erroneo.us/security/cve/CVE-2026-34841/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00321,"verdict":null,"product":"@usebruno/cli (npm)"},{"id":"2026-04-02","type":"digest","title":"Security digest for April 2, 2026","date":"2026-04-02","url":"https://erroneo.us/security/2026-04-02/","md":"https://erroneo.us/security/2026-04-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":14}},{"id":"CVE-2026-5281","type":"cve","title":"CVE-2026-5281: Google Dawn Use-After-Free Vulnerability","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-5281/","md":"https://erroneo.us/security/cve/CVE-2026-5281/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.00703,"verdict":null,"product":"Google Dawn"},{"id":"CVE-2026-4370","type":"cve","title":"CVE-2026-4370: Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-4370/","md":"https://erroneo.us/security/cve/CVE-2026-4370/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00413,"verdict":null,"product":"github.com/juju/juju (Go)"},{"id":"CVE-2026-34953","type":"cve","title":"CVE-2026-34953: PraisonAI Has Authentication Bypass via OAuthManager.validate_token()","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34953/","md":"https://erroneo.us/security/cve/CVE-2026-34953/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00418,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-34952","type":"cve","title":"CVE-2026-34952: PraisonAI Has Missing Authentication in WebSocket Gateway","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34952/","md":"https://erroneo.us/security/cve/CVE-2026-34952/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00517,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-34938","type":"cve","title":"CVE-2026-34938: PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34938/","md":"https://erroneo.us/security/cve/CVE-2026-34938/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00842,"verdict":null,"product":"praisonaiagents (PyPI)"},{"id":"CVE-2026-34935","type":"cve","title":"CVE-2026-34935: PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34935/","md":"https://erroneo.us/security/cve/CVE-2026-34935/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00992,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-34934","type":"cve","title":"CVE-2026-34934: PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34934/","md":"https://erroneo.us/security/cve/CVE-2026-34934/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00596,"verdict":null,"product":"praisonai (PyPI)"},{"id":"CVE-2026-34751","type":"cve","title":"CVE-2026-34751: Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34751/","md":"https://erroneo.us/security/cve/CVE-2026-34751/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00434,"verdict":null,"product":"payload (npm)"},{"id":"CVE-2026-34571","type":"cve","title":"CVE-2026-34571: CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34571/","md":"https://erroneo.us/security/cve/CVE-2026-34571/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00561,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34569","type":"cve","title":"CVE-2026-34569: CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34569/","md":"https://erroneo.us/security/cve/CVE-2026-34569/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00462,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34568","type":"cve","title":"CVE-2026-34568: CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34568/","md":"https://erroneo.us/security/cve/CVE-2026-34568/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34567","type":"cve","title":"CVE-2026-34567: CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34567/","md":"https://erroneo.us/security/cve/CVE-2026-34567/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34566","type":"cve","title":"CVE-2026-34566: CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34566/","md":"https://erroneo.us/security/cve/CVE-2026-34566/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34565","type":"cve","title":"CVE-2026-34565: CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34565/","md":"https://erroneo.us/security/cve/CVE-2026-34565/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34564","type":"cve","title":"CVE-2026-34564: CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34564/","md":"https://erroneo.us/security/cve/CVE-2026-34564/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34563","type":"cve","title":"CVE-2026-34563: CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34563/","md":"https://erroneo.us/security/cve/CVE-2026-34563/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34561","type":"cve","title":"CVE-2026-34561: CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34561/","md":"https://erroneo.us/security/cve/CVE-2026-34561/index.md","severity":"medium","cvss":4.7,"kev":false,"epss":0.0035,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34560","type":"cve","title":"CVE-2026-34560: CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34560/","md":"https://erroneo.us/security/cve/CVE-2026-34560/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00462,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34559","type":"cve","title":"CVE-2026-34559: CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-04-01","url":"https://erroneo.us/security/cve/CVE-2026-34559/","md":"https://erroneo.us/security/cve/CVE-2026-34559/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00394,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"2026-04-01","type":"digest","title":"Security digest for April 1, 2026","date":"2026-04-01","url":"https://erroneo.us/security/2026-04-01/","md":"https://erroneo.us/security/2026-04-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":18}},{"id":"axios-npm-compromise-plain-crypto-js-rat","type":"brief","title":"axios 1.14.1 and 0.30.4: npm Hijack Drops North Korean RAT","date":"2026-03-31","url":"https://erroneo.us/security/briefs/axios-npm-compromise-plain-crypto-js-rat/","md":"https://erroneo.us/security/briefs/axios-npm-compromise-plain-crypto-js-rat/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"axios is everywhere, but the bad versions lived only about three hours on March 31, 2026; if nothing resolved a fresh axios in that window you are fine, and if something did, that machine ran a remote-access trojan."},{"id":"GHSA-h45m-mgcp-q388","type":"ghsa","title":"openssl-encrypt: TOTP rate limiter is in-memory only — not shared across workers, lost on restart","date":"2026-03-31","url":"https://erroneo.us/security/ghsa/GHSA-h45m-mgcp-q388/","md":"https://erroneo.us/security/ghsa/GHSA-h45m-mgcp-q388/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"openssl-encrypt"},{"id":"CVE-2026-41294","type":"cve","title":"CVE-2026-41294: OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-41294/","md":"https://erroneo.us/security/cve/CVE-2026-41294/index.md","severity":"high","cvss":8.5,"kev":false,"epss":0.00189,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-34558","type":"cve","title":"CVE-2026-34558: CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-34558/","md":"https://erroneo.us/security/cve/CVE-2026-34558/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0038,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34557","type":"cve","title":"CVE-2026-34557: CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-34557/","md":"https://erroneo.us/security/cve/CVE-2026-34557/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0038,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-34532","type":"cve","title":"CVE-2026-34532: parse-server has cloud function validator bypass via prototype chain traversal","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-34532/","md":"https://erroneo.us/security/cve/CVE-2026-34532/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00486,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-34449","type":"cve","title":"CVE-2026-34449: SiYuan is Vulnerable to Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-34449/","md":"https://erroneo.us/security/cve/CVE-2026-34449/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00803,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-34448","type":"cve","title":"CVE-2026-34448: SiYuan: Stored XSS in Attribute View Gallery/Kanban Cover Rendering Allows Arbitrary Command Execution in Desktop Client","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-34448/","md":"https://erroneo.us/security/cve/CVE-2026-34448/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00726,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-33579","type":"cve","title":"CVE-2026-33579: OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-33579/","md":"https://erroneo.us/security/cve/CVE-2026-33579/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00512,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-32871","type":"cve","title":"CVE-2026-32871: FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-32871/","md":"https://erroneo.us/security/cve/CVE-2026-32871/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01369,"verdict":null,"product":"fastmcp (PyPI)"},{"id":"CVE-2026-32714","type":"cve","title":"CVE-2026-32714: SciTokens is vulnerable to SQL Injection in KeyCache","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-32714/","md":"https://erroneo.us/security/cve/CVE-2026-32714/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00571,"verdict":null,"product":"scitokens (PyPI)"},{"id":"CVE-2026-30880","type":"cve","title":"CVE-2026-30880: baserCMS has OS command injection vulnerability in installer","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-30880/","md":"https://erroneo.us/security/cve/CVE-2026-30880/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02248,"verdict":null,"product":"baserproject/basercms (Composer (PHP))"},{"id":"CVE-2026-30877","type":"cve","title":"CVE-2026-30877: baserCMS Update Functionality Vulnerable to OS Command Injection","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-30877/","md":"https://erroneo.us/security/cve/CVE-2026-30877/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02058,"verdict":null,"product":"baserproject/basercms (Composer (PHP))"},{"id":"CVE-2026-21861","type":"cve","title":"CVE-2026-21861: baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-21861/","md":"https://erroneo.us/security/cve/CVE-2026-21861/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02282,"verdict":null,"product":"baserproject/basercms (Composer (PHP))"},{"id":"CVE-2026-0596","type":"cve","title":"CVE-2026-0596: Mlflow: Command Injection when serving models with enable_mlserver=True","date":"2026-03-31","url":"https://erroneo.us/security/cve/CVE-2026-0596/","md":"https://erroneo.us/security/cve/CVE-2026-0596/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01328,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2026-03-31","type":"digest","title":"Security digest for March 31, 2026","date":"2026-03-31","url":"https://erroneo.us/security/2026-03-31/","md":"https://erroneo.us/security/2026-03-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":14}},{"id":"GHSA-955r-262c-33jc","type":"ghsa","title":"Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2","date":"2026-03-30","url":"https://erroneo.us/security/ghsa/GHSA-955r-262c-33jc/","md":"https://erroneo.us/security/ghsa/GHSA-955r-262c-33jc/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"telnyx"},{"id":"CVE-2026-34361","type":"cve","title":"CVE-2026-34361: FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-34361/","md":"https://erroneo.us/security/cve/CVE-2026-34361/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00422,"verdict":null,"product":"ca.uhn.hapi.fhir:org.hl7.fhir.validation (Maven)"},{"id":"CVE-2026-34156","type":"cve","title":"CVE-2026-34156: NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-34156/","md":"https://erroneo.us/security/cve/CVE-2026-34156/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.06793,"verdict":null,"product":"@nocobase/plugin-workflow-javascript (npm)"},{"id":"CVE-2026-33032","type":"cve","title":"CVE-2026-33032: nginx-ui's Unauthenticated MCP Endpoint Allows Remote Nginx Takeover","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-33032/","md":"https://erroneo.us/security/cve/CVE-2026-33032/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02523,"verdict":null,"product":"github.com/0xJacky/Nginx-UI (Go)"},{"id":"CVE-2026-33026","type":"cve","title":"CVE-2026-33026: nginx-ui Backup Restore Allows Tampering with Encrypted Backups","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-33026/","md":"https://erroneo.us/security/cve/CVE-2026-33026/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00211,"verdict":null,"product":"github.com/0xJacky/Nginx-UI (Go)"},{"id":"CVE-2026-3055","type":"cve","title":"CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read Vulnerability","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-3055/","md":"https://erroneo.us/security/cve/CVE-2026-3055/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.04042,"verdict":null,"product":"Citrix NetScaler"},{"id":"CVE-2026-27599","type":"cve","title":"CVE-2026-27599: ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2026-27599/","md":"https://erroneo.us/security/cve/CVE-2026-27599/index.md","severity":"medium","cvss":4.7,"kev":false,"epss":0.00423,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2025-15379","type":"cve","title":"CVE-2025-15379: MLflow Command Injection vulnerability","date":"2026-03-30","url":"https://erroneo.us/security/cve/CVE-2025-15379/","md":"https://erroneo.us/security/cve/CVE-2025-15379/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.02359,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2026-03-30","type":"digest","title":"Security digest for March 30, 2026","date":"2026-03-30","url":"https://erroneo.us/security/2026-03-30/","md":"https://erroneo.us/security/2026-03-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":7}},{"id":"GHSA-fxc9-7j2w-vx54","type":"ghsa","title":"mpp has multiple payment bypass and griefing vulnerabilities","date":"2026-03-29","url":"https://erroneo.us/security/ghsa/GHSA-fxc9-7j2w-vx54/","md":"https://erroneo.us/security/ghsa/GHSA-fxc9-7j2w-vx54/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"mpp"},{"id":"GHSA-8x4m-qw58-3pcx","type":"ghsa","title":"mppx has multiple payment bypass and griefing vulnerabilities","date":"2026-03-29","url":"https://erroneo.us/security/ghsa/GHSA-8x4m-qw58-3pcx/","md":"https://erroneo.us/security/ghsa/GHSA-8x4m-qw58-3pcx/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"mppx"},{"id":"CVE-2026-34243","type":"cve","title":"CVE-2026-34243: wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`","date":"2026-03-29","url":"https://erroneo.us/security/cve/CVE-2026-34243/","md":"https://erroneo.us/security/cve/CVE-2026-34243/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02778,"verdict":null,"product":"njzjz/wenxian (GitHub Actions)"},{"id":"CVE-2026-34220","type":"cve","title":"CVE-2026-34220: MikroORM is vulnerable to SQL Injection via specially crafted object","date":"2026-03-29","url":"https://erroneo.us/security/cve/CVE-2026-34220/","md":"https://erroneo.us/security/cve/CVE-2026-34220/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00468,"verdict":null,"product":"@mikro-orm/core (npm)"},{"id":"CVE-2025-15036","type":"cve","title":"CVE-2025-15036: MLFlow path traversal vulnerability","date":"2026-03-29","url":"https://erroneo.us/security/cve/CVE-2025-15036/","md":"https://erroneo.us/security/cve/CVE-2025-15036/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00579,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2026-03-29","type":"digest","title":"Security digest for March 29, 2026","date":"2026-03-29","url":"https://erroneo.us/security/2026-03-29/","md":"https://erroneo.us/security/2026-03-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"GHSA-fqw4-mph7-2vr8","type":"ghsa","title":"OpenClaw: Silent privilege escalation via gateway shared-auth reconnect","date":"2026-03-27","url":"https://erroneo.us/security/ghsa/GHSA-fqw4-mph7-2vr8/","md":"https://erroneo.us/security/ghsa/GHSA-fqw4-mph7-2vr8/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":null,"verdict":null,"product":"openclaw"},{"id":"CVE-2026-35663","type":"cve","title":"CVE-2026-35663: OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-35663/","md":"https://erroneo.us/security/cve/CVE-2026-35663/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00516,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-34202","type":"cve","title":"CVE-2026-34202: Zebra node crash — V5 transaction hash panic (P2P reachable)","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-34202/","md":"https://erroneo.us/security/cve/CVE-2026-34202/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00929,"verdict":null,"product":"zebrad (crates.io (Rust))"},{"id":"CVE-2026-33992","type":"cve","title":"CVE-2026-33992: pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-33992/","md":"https://erroneo.us/security/cve/CVE-2026-33992/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0045,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2026-33945","type":"cve","title":"CVE-2026-33945: Incus has an abitrary file write through its systemd-creds options","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-33945/","md":"https://erroneo.us/security/cve/CVE-2026-33945/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00526,"verdict":null,"product":"github.com/lxc/incus/v6 (Go)"},{"id":"CVE-2026-33937","type":"cve","title":"CVE-2026-33937: Handlebars.js has JavaScript Injection via AST Type Confusion","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-33937/","md":"https://erroneo.us/security/cve/CVE-2026-33937/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01736,"verdict":null,"product":"handlebars (npm)"},{"id":"CVE-2026-33897","type":"cve","title":"CVE-2026-33897: Incus vulnerable to arbitrary file read and write through pongo templates","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2026-33897/","md":"https://erroneo.us/security/cve/CVE-2026-33897/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0053,"verdict":null,"product":"github.com/lxc/incus/v6 (Go)"},{"id":"CVE-2025-53521","type":"cve","title":"CVE-2025-53521: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","date":"2026-03-27","url":"https://erroneo.us/security/cve/CVE-2025-53521/","md":"https://erroneo.us/security/cve/CVE-2025-53521/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.02295,"verdict":"patch-this-week","product":"F5 BIG-IP"},{"id":"2026-03-27","type":"digest","title":"Security digest for March 27, 2026","date":"2026-03-27","url":"https://erroneo.us/security/2026-03-27/","md":"https://erroneo.us/security/2026-03-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":7}},{"id":"GHSA-h8w2-rv57-vc6f","type":"ghsa","title":"splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution","date":"2026-03-26","url":"https://erroneo.us/security/ghsa/GHSA-h8w2-rv57-vc6f/","md":"https://erroneo.us/security/ghsa/GHSA-h8w2-rv57-vc6f/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"com.splunk:splunk-otel-javaagent"},{"id":"GHSA-2pv8-4c52-mf8j","type":"ghsa","title":"Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR","date":"2026-03-26","url":"https://erroneo.us/security/ghsa/GHSA-2pv8-4c52-mf8j/","md":"https://erroneo.us/security/ghsa/GHSA-2pv8-4c52-mf8j/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"code.vikunja.io/api"},{"id":"CVE-2026-35639","type":"cve","title":"CVE-2026-35639: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-35639/","md":"https://erroneo.us/security/cve/CVE-2026-35639/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00838,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-33873","type":"cve","title":"CVE-2026-33873: Langflow has Authenticated Code Execution in Agentic Assistant Validation","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33873/","md":"https://erroneo.us/security/cve/CVE-2026-33873/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01816,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-33867","type":"cve","title":"CVE-2026-33867: AVideo has Plaintext Video Password Storage","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33867/","md":"https://erroneo.us/security/cve/CVE-2026-33867/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00161,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33864","type":"cve","title":"CVE-2026-33864: Convict has Prototype Pollution via startsWith() function","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33864/","md":"https://erroneo.us/security/cve/CVE-2026-33864/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":null,"verdict":null,"product":"convict (npm)"},{"id":"CVE-2026-33863","type":"cve","title":"CVE-2026-33863: Convict has prototype pollution via load(), loadFile(), and schema initialization","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33863/","md":"https://erroneo.us/security/cve/CVE-2026-33863/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":null,"verdict":null,"product":"convict (npm)"},{"id":"CVE-2026-33758","type":"cve","title":"CVE-2026-33758: OpenBao has Reflected XSS in its OIDC authentication error message","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33758/","md":"https://erroneo.us/security/cve/CVE-2026-33758/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00449,"verdict":null,"product":"github.com/openbao/openbao (Go)"},{"id":"CVE-2026-33757","type":"cve","title":"CVE-2026-33757: OpenBao lacks user confirmation for OIDC direct callback mode","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33757/","md":"https://erroneo.us/security/cve/CVE-2026-33757/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00606,"verdict":null,"product":"github.com/openbao/openbao (Go)"},{"id":"CVE-2026-33728","type":"cve","title":"CVE-2026-33728: dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33728/","md":"https://erroneo.us/security/cve/CVE-2026-33728/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00987,"verdict":null,"product":"com.datadoghq:dd-java-agent (Maven)"},{"id":"CVE-2026-33696","type":"cve","title":"CVE-2026-33696: n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33696/","md":"https://erroneo.us/security/cve/CVE-2026-33696/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00784,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-33634","type":"cve","title":"CVE-2026-33634: Aquasecurity Trivy Embedded Malicious Code Vulnerability","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-33634/","md":"https://erroneo.us/security/cve/CVE-2026-33634/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.01748,"verdict":"check-exposure","product":"Aquasecurity Trivy"},{"id":"CVE-2026-22738","type":"cve","title":"CVE-2026-22738: Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key","date":"2026-03-26","url":"https://erroneo.us/security/cve/CVE-2026-22738/","md":"https://erroneo.us/security/cve/CVE-2026-22738/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01087,"verdict":null,"product":"org.springframework.ai:spring-ai-vector-store (Maven)"},{"id":"2026-03-26","type":"digest","title":"Security digest for March 26, 2026","date":"2026-03-26","url":"https://erroneo.us/security/2026-03-26/","md":"https://erroneo.us/security/2026-03-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":12}},{"id":"GHSA-5mg7-485q-xm76","type":"ghsa","title":"Two LiteLLM versions published containing credential harvesting malware","date":"2026-03-25","url":"https://erroneo.us/security/ghsa/GHSA-5mg7-485q-xm76/","md":"https://erroneo.us/security/ghsa/GHSA-5mg7-485q-xm76/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"litellm"},{"id":"CVE-2026-33716","type":"cve","title":"CVE-2026-33716: AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33716/","md":"https://erroneo.us/security/cve/CVE-2026-33716/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00597,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33701","type":"cve","title":"CVE-2026-33701: OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33701/","md":"https://erroneo.us/security/cve/CVE-2026-33701/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01108,"verdict":null,"product":"io.opentelemetry.javaagent:opentelemetry-javaagent (Maven)"},{"id":"CVE-2026-33670","type":"cve","title":"CVE-2026-33670: SiYuan has directory traversal within its publishing service","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33670/","md":"https://erroneo.us/security/cve/CVE-2026-33670/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00624,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-33669","type":"cve","title":"CVE-2026-33669: SiYuan has Arbitrary Document Reading within the Publishing Service","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33669/","md":"https://erroneo.us/security/cve/CVE-2026-33669/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00516,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-33660","type":"cve","title":"CVE-2026-33660: n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33660/","md":"https://erroneo.us/security/cve/CVE-2026-33660/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00875,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-33017","type":"cve","title":"CVE-2026-33017: Langflow Code Injection Vulnerability","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-33017/","md":"https://erroneo.us/security/cve/CVE-2026-33017/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.24755,"verdict":"act-now","product":"Langflow Langflow"},{"id":"CVE-2026-26833","type":"cve","title":"CVE-2026-26833: thumbler allows OS Command Injection","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-26833/","md":"https://erroneo.us/security/cve/CVE-2026-26833/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03305,"verdict":null,"product":"thumbler (npm)"},{"id":"CVE-2026-26832","type":"cve","title":"CVE-2026-26832: node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-26832/","md":"https://erroneo.us/security/cve/CVE-2026-26832/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02603,"verdict":null,"product":"node-tesseract-ocr (npm)"},{"id":"CVE-2026-26831","type":"cve","title":"CVE-2026-26831: textract is vulnerable to OS Command Injection","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-26831/","md":"https://erroneo.us/security/cve/CVE-2026-26831/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03551,"verdict":null,"product":"textract (npm)"},{"id":"CVE-2026-26830","type":"cve","title":"CVE-2026-26830: pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter","date":"2026-03-25","url":"https://erroneo.us/security/cve/CVE-2026-26830/","md":"https://erroneo.us/security/cve/CVE-2026-26830/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03234,"verdict":null,"product":"pdf-image (npm)"},{"id":"2026-03-25","type":"digest","title":"Security digest for March 25, 2026","date":"2026-03-25","url":"https://erroneo.us/security/2026-03-25/","md":"https://erroneo.us/security/2026-03-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":10}},{"id":"GHSA-5wr9-m6jw-xx44","type":"ghsa","title":"Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse","date":"2026-03-24","url":"https://erroneo.us/security/ghsa/GHSA-5wr9-m6jw-xx44/","md":"https://erroneo.us/security/ghsa/GHSA-5wr9-m6jw-xx44/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"scriban, Scriban.Signed"},{"id":"2026-03-24","type":"digest","title":"Security digest for March 24, 2026","date":"2026-03-24","url":"https://erroneo.us/security/2026-03-24/","md":"https://erroneo.us/security/2026-03-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2026-4404","type":"cve","title":"CVE-2026-4404: Harbor allows the use of the default password for web UI login","date":"2026-03-23","url":"https://erroneo.us/security/cve/CVE-2026-4404/","md":"https://erroneo.us/security/cve/CVE-2026-4404/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00595,"verdict":null,"product":"github.com/goharbor/harbor (Go)"},{"id":"CVE-2026-30849","type":"cve","title":"CVE-2026-30849: MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL","date":"2026-03-23","url":"https://erroneo.us/security/cve/CVE-2026-30849/","md":"https://erroneo.us/security/cve/CVE-2026-30849/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02351,"verdict":null,"product":"mantisbt/mantisbt (Composer (PHP))"},{"id":"2026-03-23","type":"digest","title":"Security digest for March 23, 2026","date":"2026-03-23","url":"https://erroneo.us/security/2026-03-23/","md":"https://erroneo.us/security/2026-03-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2026-4599","type":"cve","title":"CVE-2026-4599: jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation","date":"2026-03-22","url":"https://erroneo.us/security/cve/CVE-2026-4599/","md":"https://erroneo.us/security/cve/CVE-2026-4599/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0081,"verdict":null,"product":"jsrsasign (npm)"},{"id":"2026-03-22","type":"digest","title":"Security digest for March 22, 2026","date":"2026-03-22","url":"https://erroneo.us/security/2026-03-22/","md":"https://erroneo.us/security/2026-03-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-f67f-hcr6-94mf","type":"ghsa","title":"Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow","date":"2026-03-20","url":"https://erroneo.us/security/ghsa/GHSA-f67f-hcr6-94mf/","md":"https://erroneo.us/security/ghsa/GHSA-f67f-hcr6-94mf/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"SHAdd0WTAka/Zen-Ai-Pentest"},{"id":"CVE-2026-33502","type":"cve","title":"CVE-2026-33502: AVideo has Unauthenticated SSRF via plugin/Live/test.php","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2026-33502/","md":"https://erroneo.us/security/cve/CVE-2026-33502/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00449,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33494","type":"cve","title":"CVE-2026-33494: Ory Oathkeeper has a path traversal authorization bypass","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2026-33494/","md":"https://erroneo.us/security/cve/CVE-2026-33494/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00641,"verdict":null,"product":"github.com/ory/oathkeeper (Go)"},{"id":"CVE-2026-33478","type":"cve","title":"CVE-2026-33478: AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2026-33478/","md":"https://erroneo.us/security/cve/CVE-2026-33478/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.11235,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33419","type":"cve","title":"CVE-2026-33419: MinIO LDAP login brute-force via user enumeration and missing rate limit","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2026-33419/","md":"https://erroneo.us/security/cve/CVE-2026-33419/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00562,"verdict":null,"product":"github.com/minio/minio (Go)"},{"id":"CVE-2026-33286","type":"cve","title":"CVE-2026-33286: Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2026-33286/","md":"https://erroneo.us/security/cve/CVE-2026-33286/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00921,"verdict":null,"product":"graphiti (RubyGems)"},{"id":"CVE-2025-54068","type":"cve","title":"CVE-2025-54068: Laravel Livewire Code Injection Vulnerability","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2025-54068/","md":"https://erroneo.us/security/cve/CVE-2025-54068/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.96284,"verdict":null,"product":"Laravel Livewire"},{"id":"CVE-2025-43520","type":"cve","title":"CVE-2025-43520: Apple Multiple Products Classic Buffer Overflow Vulnerability","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2025-43520/","md":"https://erroneo.us/security/cve/CVE-2025-43520/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.00425,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-43510","type":"cve","title":"CVE-2025-43510: Apple Multiple Products Improper Locking Vulnerability","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2025-43510/","md":"https://erroneo.us/security/cve/CVE-2025-43510/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00355,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-32432","type":"cve","title":"CVE-2025-32432: Craft CMS Code Injection Vulnerability","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2025-32432/","md":"https://erroneo.us/security/cve/CVE-2025-32432/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99792,"verdict":null,"product":"Craft CMS Craft CMS"},{"id":"CVE-2025-31277","type":"cve","title":"CVE-2025-31277: Apple Multiple Products Buffer Overflow Vulnerability","date":"2026-03-20","url":"https://erroneo.us/security/cve/CVE-2025-31277/","md":"https://erroneo.us/security/cve/CVE-2025-31277/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.01658,"verdict":null,"product":"Apple Multiple Products"},{"id":"2026-03-20","type":"digest","title":"Security digest for March 20, 2026","date":"2026-03-20","url":"https://erroneo.us/security/2026-03-20/","md":"https://erroneo.us/security/2026-03-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":6}},{"id":"trivy-action-teampcp-supply-chain-compromise","type":"brief","title":"Trivy Supply-Chain Hijack: trivy-action Steals CI Secrets","date":"2026-03-19","url":"https://erroneo.us/security/briefs/trivy-action-teampcp-supply-chain-compromise/","md":"https://erroneo.us/security/briefs/trivy-action-teampcp-supply-chain-compromise/index.md","severity":"critical","kev":true,"epss":0.01748,"verdict":"check-exposure","cves":["CVE-2026-33634"],"summary":"If any pipeline ran trivy-action by tag, setup-trivy, or Trivy 0.69.4 to 0.69.6 during the March 19-23, 2026 windows, every secret that job could see is burned; if you pinned SHAs, digests or 0.69.3, you were fine."},{"id":"GHSA-wvr4-3wq4-gpc5","type":"ghsa","title":"MCP Connect has unauthenticated remote OS command execution via /bridge endpoint","date":"2026-03-19","url":"https://erroneo.us/security/ghsa/GHSA-wvr4-3wq4-gpc5/","md":"https://erroneo.us/security/ghsa/GHSA-wvr4-3wq4-gpc5/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"mcp-bridge"},{"id":"CVE-2026-33352","type":"cve","title":"CVE-2026-33352: AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass)","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-33352/","md":"https://erroneo.us/security/cve/CVE-2026-33352/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00549,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33351","type":"cve","title":"CVE-2026-33351: AVideo has Unauthenticated SSRF via `webSiteRootURL` Parameter in saveDVR.json.php, Chaining to Verification Bypass","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-33351/","md":"https://erroneo.us/security/cve/CVE-2026-33351/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00558,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-33322","type":"cve","title":"CVE-2026-33322: MinIO has JWT Algorithm Confusion in OIDC Authentication","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-33322/","md":"https://erroneo.us/security/cve/CVE-2026-33322/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00629,"verdict":null,"product":"github.com/minio/minio (Go)"},{"id":"CVE-2026-33309","type":"cve","title":"CVE-2026-33309: Langflow has an Arbitrary File Write (RCE) via v2 API","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-33309/","md":"https://erroneo.us/security/cve/CVE-2026-33309/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01089,"verdict":null,"product":"langflow (PyPI)"},{"id":"CVE-2026-30924","type":"cve","title":"CVE-2026-30924: qui CORS Misconfiguration: Arbitrary Origins Trusted","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-30924/","md":"https://erroneo.us/security/cve/CVE-2026-30924/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00462,"verdict":null,"product":"github.com/autobrr/qui (Go)"},{"id":"CVE-2026-30836","type":"cve","title":"CVE-2026-30836: step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-30836/","md":"https://erroneo.us/security/cve/CVE-2026-30836/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0032,"verdict":null,"product":"github.com/smallstep/certificates (Go)"},{"id":"CVE-2026-22732","type":"cve","title":"CVE-2026-22732: Spring Security HTTP Headers Are not Written Under Some Conditions","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-22732/","md":"https://erroneo.us/security/cve/CVE-2026-22732/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00489,"verdict":null,"product":"org.springframework.security:spring-security-web (Maven)"},{"id":"CVE-2026-20131","type":"cve","title":"CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","date":"2026-03-19","url":"https://erroneo.us/security/cve/CVE-2026-20131/","md":"https://erroneo.us/security/cve/CVE-2026-20131/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.43166,"verdict":null,"product":"Cisco Secure Firewall Management Center (FMC)"},{"id":"2026-03-19","type":"digest","title":"Security digest for March 19, 2026","date":"2026-03-19","url":"https://erroneo.us/security/2026-03-19/","md":"https://erroneo.us/security/2026-03-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":8}},{"id":"CVE-2026-33211","type":"cve","title":"CVE-2026-33211: Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-33211/","md":"https://erroneo.us/security/cve/CVE-2026-33211/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00729,"verdict":null,"product":"github.com/tektoncd/pipeline (Go)"},{"id":"CVE-2026-33186","type":"cve","title":"CVE-2026-33186: gRPC-Go has an authorization bypass via missing leading slash in :path","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-33186/","md":"https://erroneo.us/security/cve/CVE-2026-33186/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01688,"verdict":null,"product":"google.golang.org/grpc (Go)"},{"id":"CVE-2026-33180","type":"cve","title":"CVE-2026-33180: HAPI FHIR HTTP authentication leak in redirects","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-33180/","md":"https://erroneo.us/security/cve/CVE-2026-33180/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00491,"verdict":null,"product":"ca.uhn.hapi.fhir:org.hl7.fhir.utilities (Maven)"},{"id":"CVE-2026-33057","type":"cve","title":"CVE-2026-33057: Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-33057/","md":"https://erroneo.us/security/cve/CVE-2026-33057/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.04111,"verdict":null,"product":"mesop (PyPI)"},{"id":"CVE-2026-33054","type":"cve","title":"CVE-2026-33054: Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-33054/","md":"https://erroneo.us/security/cve/CVE-2026-33054/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00729,"verdict":null,"product":"mesop (PyPI)"},{"id":"CVE-2026-32731","type":"cve","title":"CVE-2026-32731: ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-32731/","md":"https://erroneo.us/security/cve/CVE-2026-32731/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00615,"verdict":null,"product":"@apostrophecms/import-export (npm)"},{"id":"CVE-2026-20963","type":"cve","title":"CVE-2026-20963: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2026-20963/","md":"https://erroneo.us/security/cve/CVE-2026-20963/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.29201,"verdict":null,"product":"Microsoft SharePoint"},{"id":"CVE-2025-66376","type":"cve","title":"CVE-2025-66376: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","date":"2026-03-18","url":"https://erroneo.us/security/cve/CVE-2025-66376/","md":"https://erroneo.us/security/cve/CVE-2025-66376/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.20227,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"2026-03-18","type":"digest","title":"Security digest for March 18, 2026","date":"2026-03-18","url":"https://erroneo.us/security/2026-03-18/","md":"https://erroneo.us/security/2026-03-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":6}},{"id":"CVE-2026-32940","type":"cve","title":"CVE-2026-32940: SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)","date":"2026-03-17","url":"https://erroneo.us/security/cve/CVE-2026-32940/","md":"https://erroneo.us/security/cve/CVE-2026-32940/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00476,"verdict":null,"product":"github.com/siyuan-note/siyuan (Go)"},{"id":"CVE-2026-32938","type":"cve","title":"CVE-2026-32938: SiYuan Vulnerable to Arbitrary File Read in Desktop Publish Service","date":"2026-03-17","url":"https://erroneo.us/security/cve/CVE-2026-32938/","md":"https://erroneo.us/security/cve/CVE-2026-32938/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00578,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-31938","type":"cve","title":"CVE-2026-31938: jsPDF has HTML Injection in New Window paths","date":"2026-03-17","url":"https://erroneo.us/security/cve/CVE-2026-31938/","md":"https://erroneo.us/security/cve/CVE-2026-31938/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0042,"verdict":null,"product":"jspdf (npm)"},{"id":"2026-03-17","type":"digest","title":"Security digest for March 17, 2026","date":"2026-03-17","url":"https://erroneo.us/security/2026-03-17/","md":"https://erroneo.us/security/2026-03-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2026-32817","type":"cve","title":"CVE-2026-32817: Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-32817/","md":"https://erroneo.us/security/cve/CVE-2026-32817/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00495,"verdict":null,"product":"admidio/admidio (Composer (PHP))"},{"id":"CVE-2026-32767","type":"cve","title":"CVE-2026-32767: SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-32767/","md":"https://erroneo.us/security/cve/CVE-2026-32767/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00723,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-32760","type":"cve","title":"CVE-2026-32760: File Browser Signup Grants Admin When Default Permissions Include Admin","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-32760/","md":"https://erroneo.us/security/cve/CVE-2026-32760/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00717,"verdict":null,"product":"github.com/filebrowser/filebrowser/v2 (Go)"},{"id":"CVE-2026-32633","type":"cve","title":"CVE-2026-32633: Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-32633/","md":"https://erroneo.us/security/cve/CVE-2026-32633/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00636,"verdict":null,"product":"Glances (PyPI)"},{"id":"CVE-2026-27962","type":"cve","title":"CVE-2026-27962: Authlib JWS JWK Header Injection: Signature Verification Bypass","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-27962/","md":"https://erroneo.us/security/cve/CVE-2026-27962/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00537,"verdict":null,"product":"authlib (PyPI)"},{"id":"CVE-2026-25534","type":"cve","title":"CVE-2026-25534: Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2026-25534/","md":"https://erroneo.us/security/cve/CVE-2026-25534/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00421,"verdict":null,"product":"io.spinnaker.clouddriver:clouddriver-artifacts (Maven)"},{"id":"CVE-2025-47813","type":"cve","title":"CVE-2025-47813: Wing FTP Server Information Disclosure Vulnerability","date":"2026-03-16","url":"https://erroneo.us/security/cve/CVE-2025-47813/","md":"https://erroneo.us/security/cve/CVE-2025-47813/index.md","severity":"medium","cvss":4.3,"kev":true,"epss":0.62512,"verdict":null,"product":"Wing FTP Server Wing FTP Server"},{"id":"2026-03-16","type":"digest","title":"Security digest for March 16, 2026","date":"2026-03-16","url":"https://erroneo.us/security/2026-03-16/","md":"https://erroneo.us/security/2026-03-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":6}},{"id":"GHSA-4jpw-hj22-2xmc","type":"ghsa","title":"OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE","date":"2026-03-13","url":"https://erroneo.us/security/ghsa/GHSA-4jpw-hj22-2xmc/","md":"https://erroneo.us/security/ghsa/GHSA-4jpw-hj22-2xmc/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"openclaw"},{"id":"CVE-2026-3910","type":"cve","title":"CVE-2026-3910: Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-3910/","md":"https://erroneo.us/security/cve/CVE-2026-3910/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.01066,"verdict":null,"product":"Google Chromium V8"},{"id":"CVE-2026-3909","type":"cve","title":"CVE-2026-3909: Google Skia Out-of-Bounds Write Vulnerability","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-3909/","md":"https://erroneo.us/security/cve/CVE-2026-3909/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.02342,"verdict":null,"product":"Google Skia"},{"id":"CVE-2026-32916","type":"cve","title":"CVE-2026-32916: OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32916/","md":"https://erroneo.us/security/cve/CVE-2026-32916/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00633,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-32621","type":"cve","title":"CVE-2026-32621: Apollo Federation vulnerable to prototype pollution via incomplete key sanitization","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32621/","md":"https://erroneo.us/security/cve/CVE-2026-32621/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00621,"verdict":null,"product":"@apollo/federation-internals (npm)"},{"id":"CVE-2026-32614","type":"cve","title":"CVE-2026-32614: SM9 Infinity-Point Ciphertext Forgery Vulnerability","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32614/","md":"https://erroneo.us/security/cve/CVE-2026-32614/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00239,"verdict":null,"product":"github.com/emmansun/gmsm (Go)"},{"id":"CVE-2026-32306","type":"cve","title":"CVE-2026-32306: OneUptime ClickHouse SQL Injection via Aggregate Query Parameters","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32306/","md":"https://erroneo.us/security/cve/CVE-2026-32306/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00659,"verdict":null,"product":"oneuptime (npm)"},{"id":"CVE-2026-32304","type":"cve","title":"CVE-2026-32304: Locutus vulnerable to RCE via unsanitized input in create_function()","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32304/","md":"https://erroneo.us/security/cve/CVE-2026-32304/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00856,"verdict":null,"product":"locutus (npm)"},{"id":"CVE-2026-32301","type":"cve","title":"CVE-2026-32301: Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-32301/","md":"https://erroneo.us/security/cve/CVE-2026-32301/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00372,"verdict":null,"product":"github.com/centrifugal/centrifugo/v6 (Go)"},{"id":"CVE-2026-31886","type":"cve","title":"CVE-2026-31886: Dagu: Path Traversal via `dagRunId` in Inline DAG Execution","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-31886/","md":"https://erroneo.us/security/cve/CVE-2026-31886/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00498,"verdict":null,"product":"github.com/dagu-org/dagu (Go)"},{"id":"CVE-2026-26954","type":"cve","title":"CVE-2026-26954: SandboxJS affected by a Sandbox Escape","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-26954/","md":"https://erroneo.us/security/cve/CVE-2026-26954/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00619,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-22172","type":"cve","title":"CVE-2026-22172: OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes","date":"2026-03-13","url":"https://erroneo.us/security/cve/CVE-2026-22172/","md":"https://erroneo.us/security/cve/CVE-2026-22172/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00571,"verdict":null,"product":"openclaw (npm)"},{"id":"2026-03-13","type":"digest","title":"Security digest for March 13, 2026","date":"2026-03-13","url":"https://erroneo.us/security/2026-03-13/","md":"https://erroneo.us/security/2026-03-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":10}},{"id":"CVE-2026-32248","type":"cve","title":"CVE-2026-32248: Parse Server: Account takeover via operator injection in authentication data identifier","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-32248/","md":"https://erroneo.us/security/cve/CVE-2026-32248/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00952,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-32242","type":"cve","title":"CVE-2026-32242: Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-32242/","md":"https://erroneo.us/security/cve/CVE-2026-32242/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00399,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-32136","type":"cve","title":"CVE-2026-32136: AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-32136/","md":"https://erroneo.us/security/cve/CVE-2026-32136/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00813,"verdict":null,"product":"github.com/AdguardTeam/AdGuardHome (Go)"},{"id":"CVE-2026-3060","type":"cve","title":"CVE-2026-3060: SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-3060/","md":"https://erroneo.us/security/cve/CVE-2026-3060/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01501,"verdict":null,"product":"sglang (PyPI)"},{"id":"CVE-2026-3059","type":"cve","title":"CVE-2026-3059: SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-3059/","md":"https://erroneo.us/security/cve/CVE-2026-3059/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01501,"verdict":null,"product":"sglang (PyPI)"},{"id":"CVE-2026-28792","type":"cve","title":"CVE-2026-28792: TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-28792/","md":"https://erroneo.us/security/cve/CVE-2026-28792/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00652,"verdict":null,"product":"@tinacms/cli (npm)"},{"id":"CVE-2026-27591","type":"cve","title":"CVE-2026-27591: Winter vulnerable to privilege escalation by authenticated backend users","date":"2026-03-12","url":"https://erroneo.us/security/cve/CVE-2026-27591/","md":"https://erroneo.us/security/cve/CVE-2026-27591/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0086,"verdict":null,"product":"winter/wn-backend-module (Composer (PHP))"},{"id":"2026-03-12","type":"digest","title":"Security digest for March 12, 2026","date":"2026-03-12","url":"https://erroneo.us/security/2026-03-12/","md":"https://erroneo.us/security/2026-03-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":7}},{"id":"GHSA-54gx-3cgr-7mfm","type":"ghsa","title":"Cosmos EVM: incorrect state handling during nested EVM execution paths","date":"2026-03-11","url":"https://erroneo.us/security/ghsa/GHSA-54gx-3cgr-7mfm/","md":"https://erroneo.us/security/ghsa/GHSA-54gx-3cgr-7mfm/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/cosmos/evm"},{"id":"CVE-2026-31976","type":"cve","title":"CVE-2026-31976: xygeni-action v5 tag poisoned with C2 backdoor","date":"2026-03-11","url":"https://erroneo.us/security/cve/CVE-2026-31976/","md":"https://erroneo.us/security/cve/CVE-2026-31976/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0086,"verdict":null,"product":"xygeni/xygeni-action (GitHub Actions)"},{"id":"CVE-2025-68613","type":"cve","title":"CVE-2025-68613: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","date":"2026-03-11","url":"https://erroneo.us/security/cve/CVE-2025-68613/","md":"https://erroneo.us/security/cve/CVE-2025-68613/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.98994,"verdict":"act-now","product":"n8n n8n"},{"id":"2026-03-11","type":"digest","title":"Security digest for March 11, 2026","date":"2026-03-11","url":"https://erroneo.us/security/2026-03-11/","md":"https://erroneo.us/security/2026-03-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"GHSA-j443-wcqq-xprh","type":"ghsa","title":"Terraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go","date":"2026-03-10","url":"https://erroneo.us/security/ghsa/GHSA-j443-wcqq-xprh/","md":"https://erroneo.us/security/ghsa/GHSA-j443-wcqq-xprh/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/arslanbekov/terraform-provider-sendgrid"},{"id":"CVE-2026-31871","type":"cve","title":"CVE-2026-31871: Parse Server vulnerable to SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-31871/","md":"https://erroneo.us/security/cve/CVE-2026-31871/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00566,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-31862","type":"cve","title":"CVE-2026-31862: @siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-31862/","md":"https://erroneo.us/security/cve/CVE-2026-31862/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00592,"verdict":null,"product":"@siteboon/claudecodeui (npm)"},{"id":"CVE-2026-31856","type":"cve","title":"CVE-2026-31856: Parse Server vulnerable to SQL injection via `Increment` operation on nested object field in PostgreSQL","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-31856/","md":"https://erroneo.us/security/cve/CVE-2026-31856/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00566,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-31840","type":"cve","title":"CVE-2026-31840: Parse Server: SQL injection via dot-notation field name in PostgreSQL","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-31840/","md":"https://erroneo.us/security/cve/CVE-2026-31840/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00729,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-30966","type":"cve","title":"CVE-2026-30966: Parse Server has role escalation and CLP bypass via direct `_Join` table write","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-30966/","md":"https://erroneo.us/security/cve/CVE-2026-30966/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00536,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-30965","type":"cve","title":"CVE-2026-30965: Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-30965/","md":"https://erroneo.us/security/cve/CVE-2026-30965/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01555,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-29793","type":"cve","title":"CVE-2026-29793: Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-29793/","md":"https://erroneo.us/security/cve/CVE-2026-29793/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00586,"verdict":null,"product":"@feathersjs/mongodb (npm)"},{"id":"CVE-2026-29792","type":"cve","title":"CVE-2026-29792: Feathers has an OAuth Callback Account Takeover issue","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-29792/","md":"https://erroneo.us/security/cve/CVE-2026-29792/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00653,"verdict":null,"product":"@feathersjs/authentication-oauth (npm)"},{"id":"CVE-2026-28292","type":"cve","title":"CVE-2026-28292: simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-28292/","md":"https://erroneo.us/security/cve/CVE-2026-28292/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01345,"verdict":null,"product":"simple-git (npm)"},{"id":"CVE-2026-27825","type":"cve","title":"CVE-2026-27825: MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment","date":"2026-03-10","url":"https://erroneo.us/security/cve/CVE-2026-27825/","md":"https://erroneo.us/security/cve/CVE-2026-27825/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01529,"verdict":null,"product":"mcp-atlassian (PyPI)"},{"id":"2026-03-10","type":"digest","title":"Security digest for March 10, 2026","date":"2026-03-10","url":"https://erroneo.us/security/2026-03-10/","md":"https://erroneo.us/security/2026-03-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":11}},{"id":"GHSA-xv8g-fj9h-6gmv","type":"ghsa","title":"Linkdave Missing Authentication on REST and WebSocket endpoints","date":"2026-03-09","url":"https://erroneo.us/security/ghsa/GHSA-xv8g-fj9h-6gmv/","md":"https://erroneo.us/security/ghsa/GHSA-xv8g-fj9h-6gmv/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/shi-gg/linkdave"},{"id":"CVE-2026-30960","type":"cve","title":"CVE-2026-30960: RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-30960/","md":"https://erroneo.us/security/cve/CVE-2026-30960/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00203,"verdict":null,"product":"rssn (crates.io (Rust))"},{"id":"CVE-2026-30957","type":"cve","title":"CVE-2026-30957: OneUptime has Synthetic Monitor RCE via exposed Playwright browser object","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-30957/","md":"https://erroneo.us/security/cve/CVE-2026-30957/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01198,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-30956","type":"cve","title":"CVE-2026-30956: OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data exposure and account takeover","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-30956/","md":"https://erroneo.us/security/cve/CVE-2026-30956/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00503,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-30863","type":"cve","title":"CVE-2026-30863: Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-30863/","md":"https://erroneo.us/security/cve/CVE-2026-30863/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00715,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-24713","type":"cve","title":"CVE-2026-24713: Apache IoTDB has an Improper Input Validation vulnerability","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-24713/","md":"https://erroneo.us/security/cve/CVE-2026-24713/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00674,"verdict":null,"product":"org.apache.iotdb:iotdb-core (Maven)"},{"id":"CVE-2026-24015","type":"cve","title":"CVE-2026-24015: Apache IoTDB has an Insecure Default Configuration Vulnerability","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-24015/","md":"https://erroneo.us/security/cve/CVE-2026-24015/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00594,"verdict":null,"product":"org.apache.iotdb:iotdb-core (Maven)"},{"id":"CVE-2026-1603","type":"cve","title":"CVE-2026-1603: Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2026-1603/","md":"https://erroneo.us/security/cve/CVE-2026-1603/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.88335,"verdict":null,"product":"Ivanti  Endpoint Manager (EPM)"},{"id":"CVE-2025-26399","type":"cve","title":"CVE-2025-26399: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2025-26399/","md":"https://erroneo.us/security/cve/CVE-2025-26399/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9012,"verdict":null,"product":"SolarWinds Web Help Desk"},{"id":"CVE-2021-22054","type":"cve","title":"CVE-2021-22054: Omnissa Workspace ONE Server-Side Request Forgery","date":"2026-03-09","url":"https://erroneo.us/security/cve/CVE-2021-22054/","md":"https://erroneo.us/security/cve/CVE-2021-22054/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.99677,"verdict":null,"product":"Omnissa Workspace One UEM"},{"id":"2026-03-09","type":"digest","title":"Security digest for March 9, 2026","date":"2026-03-09","url":"https://erroneo.us/security/2026-03-09/","md":"https://erroneo.us/security/2026-03-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":7}},{"id":"CVE-2026-30921","type":"cve","title":"CVE-2026-30921: OneUptime: Synthetic Monitor RCE via exposed Playwright browser object","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30921/","md":"https://erroneo.us/security/cve/CVE-2026-30921/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00538,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-30887","type":"cve","title":"CVE-2026-30887: OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30887/","md":"https://erroneo.us/security/cve/CVE-2026-30887/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00586,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-30869","type":"cve","title":"CVE-2026-30869: SiYuan Vulnerable to Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30869/","md":"https://erroneo.us/security/cve/CVE-2026-30869/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01174,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-30861","type":"cve","title":"CVE-2026-30861: WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30861/","md":"https://erroneo.us/security/cve/CVE-2026-30861/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02561,"verdict":null,"product":"github.com/Tencent/WeKnora (Go)"},{"id":"CVE-2026-30860","type":"cve","title":"CVE-2026-30860: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30860/","md":"https://erroneo.us/security/cve/CVE-2026-30860/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00765,"verdict":null,"product":"github.com/Tencent/WeKnora (Go)"},{"id":"CVE-2026-30855","type":"cve","title":"CVE-2026-30855: WeKnora Vulnerable to Broken Access Control in Tenant Management","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30855/","md":"https://erroneo.us/security/cve/CVE-2026-30855/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.00477,"verdict":null,"product":"github.com/Tencent/WeKnora (Go)"},{"id":"CVE-2026-30832","type":"cve","title":"CVE-2026-30832: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import","date":"2026-03-06","url":"https://erroneo.us/security/cve/CVE-2026-30832/","md":"https://erroneo.us/security/cve/CVE-2026-30832/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00409,"verdict":null,"product":"github.com/charmbracelet/soft-serve (Go)"},{"id":"2026-03-06","type":"digest","title":"Security digest for March 6, 2026","date":"2026-03-06","url":"https://erroneo.us/security/2026-03-06/","md":"https://erroneo.us/security/2026-03-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":7}},{"id":"GHSA-mh23-rw7f-v5pq","type":"ghsa","title":"`time-sync` was removed from crates.io due to malicious code","date":"2026-03-05","url":"https://erroneo.us/security/ghsa/GHSA-mh23-rw7f-v5pq/","md":"https://erroneo.us/security/ghsa/GHSA-mh23-rw7f-v5pq/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"time-sync"},{"id":"CVE-2026-2835","type":"cve","title":"CVE-2026-2835: Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2026-2835/","md":"https://erroneo.us/security/cve/CVE-2026-2835/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00596,"verdict":null,"product":"pingora-core (crates.io (Rust))"},{"id":"CVE-2026-2833","type":"cve","title":"CVE-2026-2833: Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2026-2833/","md":"https://erroneo.us/security/cve/CVE-2026-2833/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00534,"verdict":null,"product":"pingora-core (crates.io (Rust))"},{"id":"CVE-2026-27944","type":"cve","title":"CVE-2026-27944: Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2026-27944/","md":"https://erroneo.us/security/cve/CVE-2026-27944/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01014,"verdict":null,"product":"github.com/0xJacky/Nginx-UI (Go)"},{"id":"CVE-2026-25921","type":"cve","title":"CVE-2026-25921: Gogs: Cross-repository LFS object overwrite via missing content hash verification","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2026-25921/","md":"https://erroneo.us/security/cve/CVE-2026-25921/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00285,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2023-43000","type":"cve","title":"CVE-2023-43000: Apple Multiple products Use-After-Free Vulnerability","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2023-43000/","md":"https://erroneo.us/security/cve/CVE-2023-43000/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.04042,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2023-41974","type":"cve","title":"CVE-2023-41974: Apple iOS and iPadOS Use-After-Free Vulnerability","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2023-41974/","md":"https://erroneo.us/security/cve/CVE-2023-41974/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01955,"verdict":null,"product":"Apple iOS and iPadOS"},{"id":"CVE-2021-30952","type":"cve","title":"CVE-2021-30952: Apple Multiple Products Integer Overflow or Wraparound Vulnerability","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2021-30952/","md":"https://erroneo.us/security/cve/CVE-2021-30952/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.06964,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2021-22681","type":"cve","title":"CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2021-22681/","md":"https://erroneo.us/security/cve/CVE-2021-22681/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.6363,"verdict":null,"product":"Rockwell Multiple Products"},{"id":"CVE-2017-7921","type":"cve","title":"CVE-2017-7921: Hikvision Multiple Products Improper Authentication Vulnerability","date":"2026-03-05","url":"https://erroneo.us/security/cve/CVE-2017-7921/","md":"https://erroneo.us/security/cve/CVE-2017-7921/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99998,"verdict":null,"product":"Hikvision Multiple Products"},{"id":"2026-03-05","type":"digest","title":"Security digest for March 5, 2026","date":"2026-03-05","url":"https://erroneo.us/security/2026-03-05/","md":"https://erroneo.us/security/2026-03-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":5}},{"id":"cisco-fmc-cve-2026-20079-auth-bypass-root","type":"brief","title":"Cisco FMC CVE-2026-20079: Exploited Pre-Auth Root Bypass","date":"2026-03-04","url":"https://erroneo.us/security/briefs/cisco-fmc-cve-2026-20079-auth-bypass-root/","md":"https://erroneo.us/security/briefs/cisco-fmc-cve-2026-20079-auth-bypass-root/index.md","severity":"critical","kev":true,"epss":0.88472,"verdict":"act-now","cves":["CVE-2026-20079"],"summary":"If you run an on-prem Cisco Secure FMC that is not on a September 2026 hardening release, upgrade now and check it for compromise; state and ransomware actors are using this bug to take root on the box that controls your firewalls."},{"id":"GHSA-xhw7-jhmp-j62j","type":"ghsa","title":"`dnp3times` was removed from crates.io due to malicious code","date":"2026-03-04","url":"https://erroneo.us/security/ghsa/GHSA-xhw7-jhmp-j62j/","md":"https://erroneo.us/security/ghsa/GHSA-xhw7-jhmp-j62j/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"dnp3times"},{"id":"GHSA-wf45-3gpw-vrqv","type":"ghsa","title":"`time_calibrators` was removed from crates.io due to malicious code","date":"2026-03-04","url":"https://erroneo.us/security/ghsa/GHSA-wf45-3gpw-vrqv/","md":"https://erroneo.us/security/ghsa/GHSA-wf45-3gpw-vrqv/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"time_calibrators"},{"id":"GHSA-77xj-rrh3-wx3v","type":"ghsa","title":"`time_calibrator` was removed from crates.io due to malicious code","date":"2026-03-04","url":"https://erroneo.us/security/ghsa/GHSA-77xj-rrh3-wx3v/","md":"https://erroneo.us/security/ghsa/GHSA-77xj-rrh3-wx3v/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"time_calibrator"},{"id":"GHSA-5wp8-q9mx-8jx8","type":"ghsa","title":"zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards","date":"2026-03-04","url":"https://erroneo.us/security/ghsa/GHSA-5wp8-q9mx-8jx8/","md":"https://erroneo.us/security/ghsa/GHSA-5wp8-q9mx-8jx8/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"zeptoclaw"},{"id":"CVE-2026-29191","type":"cve","title":"CVE-2026-29191: ZITADEL has 1-Click Account Takeover via XSS in /saml-post Endpoint","date":"2026-03-04","url":"https://erroneo.us/security/cve/CVE-2026-29191/","md":"https://erroneo.us/security/cve/CVE-2026-29191/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00399,"verdict":null,"product":"github.com/zitadel/zitadel (Go)"},{"id":"CVE-2026-29188","type":"cve","title":"CVE-2026-29188: File Browser's TUS Delete Endpoint Bypasses Delete Permission Check","date":"2026-03-04","url":"https://erroneo.us/security/cve/CVE-2026-29188/","md":"https://erroneo.us/security/cve/CVE-2026-29188/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00608,"verdict":null,"product":"github.com/filebrowser/filebrowser/v2 (Go)"},{"id":"CVE-2026-29183","type":"cve","title":"CVE-2026-29183: SiYuan: Unauthenticated Reflected XSS via SVG Injection in /api/icon/getDynamicIcon Endpoint","date":"2026-03-04","url":"https://erroneo.us/security/cve/CVE-2026-29183/","md":"https://erroneo.us/security/cve/CVE-2026-29183/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00694,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-29000","type":"cve","title":"CVE-2026-29000: pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT","date":"2026-03-04","url":"https://erroneo.us/security/cve/CVE-2026-29000/","md":"https://erroneo.us/security/cve/CVE-2026-29000/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00513,"verdict":null,"product":"org.pac4j:pac4j-jwt (Maven)"},{"id":"CVE-2026-27446","type":"cve","title":"CVE-2026-27446: Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions","date":"2026-03-04","url":"https://erroneo.us/security/cve/CVE-2026-27446/","md":"https://erroneo.us/security/cve/CVE-2026-27446/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01179,"verdict":null,"product":"org.apache.activemq:artemis-server (Maven)"},{"id":"2026-03-04","type":"digest","title":"Security digest for March 4, 2026","date":"2026-03-04","url":"https://erroneo.us/security/2026-03-04/","md":"https://erroneo.us/security/2026-03-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":9}},{"id":"CVE-2026-56315","type":"cve","title":"CVE-2026-56315: PickleScan has multiple stdlib modules with direct RCE not in blocklist","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-56315/","md":"https://erroneo.us/security/cve/CVE-2026-56315/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01147,"verdict":null,"product":"picklescan (PyPI)"},{"id":"CVE-2026-53873","type":"cve","title":"CVE-2026-53873: PickleScan's profile.run blocklist mismatch allows exec() bypass","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-53873/","md":"https://erroneo.us/security/cve/CVE-2026-53873/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00671,"verdict":null,"product":"picklescan (PyPI)"},{"id":"CVE-2026-3490","type":"cve","title":"CVE-2026-3490: PickleScan's pkgutil.resolve_name has a universal blocklist bypass","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-3490/","md":"https://erroneo.us/security/cve/CVE-2026-3490/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00909,"verdict":null,"product":"picklescan (PyPI)"},{"id":"CVE-2026-29058","type":"cve","title":"CVE-2026-29058: WWBN AVideo is vulnerable to unauthenticated OS Command Injection via base64Url in objects/getImage.php","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-29058/","md":"https://erroneo.us/security/cve/CVE-2026-29058/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.06773,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-28697","type":"cve","title":"CVE-2026-28697: Craft CMS Vulnerable to Authenticated RCE via \"craft.app.fs.write()\" in Twig Templates","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-28697/","md":"https://erroneo.us/security/cve/CVE-2026-28697/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01162,"verdict":null,"product":"craftcms/cms (Composer (PHP))"},{"id":"CVE-2026-27012","type":"cve","title":"CVE-2026-27012: OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-27012/","md":"https://erroneo.us/security/cve/CVE-2026-27012/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00685,"verdict":null,"product":"devcode-it/openstamanager (Composer (PHP))"},{"id":"CVE-2026-26279","type":"cve","title":"CVE-2026-26279: Froxlor has Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-26279/","md":"https://erroneo.us/security/cve/CVE-2026-26279/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01172,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2026-22719","type":"cve","title":"CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-22719/","md":"https://erroneo.us/security/cve/CVE-2026-22719/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.18081,"verdict":null,"product":"Broadcom VMware Aria Operations"},{"id":"CVE-2026-21385","type":"cve","title":"CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2026-21385/","md":"https://erroneo.us/security/cve/CVE-2026-21385/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01293,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2025-59059","type":"cve","title":"CVE-2025-59059: Apache Ranger has a Code Injection vulnerability","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2025-59059/","md":"https://erroneo.us/security/cve/CVE-2025-59059/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01266,"verdict":null,"product":"org.apache.ranger:ranger-plugins-common (Maven)"},{"id":"CVE-2022-31247","type":"cve","title":"CVE-2022-31247: Rancher has downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2022-31247/","md":"https://erroneo.us/security/cve/CVE-2022-31247/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00978,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"CVE-2021-36783","type":"cve","title":"CVE-2021-36783: Rancher doesn't properly sanitize credentials in cluster template answers","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2021-36783/","md":"https://erroneo.us/security/cve/CVE-2021-36783/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00779,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"CVE-2021-25320","type":"cve","title":"CVE-2021-25320: Rancher cloud credentials can be used through proxy API by users without access","date":"2026-03-03","url":"https://erroneo.us/security/cve/CVE-2021-25320/","md":"https://erroneo.us/security/cve/CVE-2021-25320/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00855,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"2026-03-03","type":"digest","title":"Security digest for March 3, 2026","date":"2026-03-03","url":"https://erroneo.us/security/2026-03-03/","md":"https://erroneo.us/security/2026-03-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":11}},{"id":"GHSA-5pmp-jpcf-pwx6","type":"ghsa","title":"`tracing-check` was removed from crates.io for malicious code","date":"2026-03-02","url":"https://erroneo.us/security/ghsa/GHSA-5pmp-jpcf-pwx6/","md":"https://erroneo.us/security/ghsa/GHSA-5pmp-jpcf-pwx6/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"tracing-check"},{"id":"CVE-2026-32013","type":"cve","title":"CVE-2026-32013: OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-32013/","md":"https://erroneo.us/security/cve/CVE-2026-32013/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00752,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-31999","type":"cve","title":"CVE-2026-31999: CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-31999/","md":"https://erroneo.us/security/cve/CVE-2026-31999/index.md","severity":"medium","cvss":5.8,"kev":false,"epss":0.00388,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-28794","type":"cve","title":"CVE-2026-28794: `@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-28794/","md":"https://erroneo.us/security/cve/CVE-2026-28794/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01252,"verdict":null,"product":"@orpc/client (npm)"},{"id":"CVE-2026-28508","type":"cve","title":"CVE-2026-28508: Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-28508/","md":"https://erroneo.us/security/cve/CVE-2026-28508/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00749,"verdict":null,"product":"idno/known (Composer (PHP))"},{"id":"CVE-2026-28502","type":"cve","title":"CVE-2026-28502: AVideo has Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-28502/","md":"https://erroneo.us/security/cve/CVE-2026-28502/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01036,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-28501","type":"cve","title":"CVE-2026-28501: AVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-28501/","md":"https://erroneo.us/security/cve/CVE-2026-28501/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01417,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2026-28466","type":"cve","title":"CVE-2026-28466: OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-28466/","md":"https://erroneo.us/security/cve/CVE-2026-28466/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00696,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-27971","type":"cve","title":"CVE-2026-27971: Qwik vulnerable to Unauthenticated RCE via server$ Deserialization","date":"2026-03-02","url":"https://erroneo.us/security/cve/CVE-2026-27971/","md":"https://erroneo.us/security/cve/CVE-2026-27971/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02948,"verdict":null,"product":"@builder.io/qwik (npm)"},{"id":"2026-03-02","type":"digest","title":"Security digest for March 2, 2026","date":"2026-03-02","url":"https://erroneo.us/security/2026-03-02/","md":"https://erroneo.us/security/2026-03-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":9}},{"id":"CVE-2026-28268","type":"cve","title":"CVE-2026-28268: Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse","date":"2026-02-27","url":"https://erroneo.us/security/cve/CVE-2026-28268/","md":"https://erroneo.us/security/cve/CVE-2026-28268/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00914,"verdict":null,"product":"code.vikunja.io/api (Go)"},{"id":"CVE-2026-27969","type":"cve","title":"CVE-2026-27969: Vitess users with backup storage access can write to arbitrary file paths on restore","date":"2026-02-27","url":"https://erroneo.us/security/cve/CVE-2026-27969/","md":"https://erroneo.us/security/cve/CVE-2026-27969/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00619,"verdict":null,"product":"vitess.io/vitess (Go)"},{"id":"CVE-2026-27966","type":"cve","title":"CVE-2026-27966: Langflow has Remote Code Execution in CSV Agent","date":"2026-02-27","url":"https://erroneo.us/security/cve/CVE-2026-27966/","md":"https://erroneo.us/security/cve/CVE-2026-27966/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02547,"verdict":null,"product":"langflow (PyPI)"},{"id":"2026-02-27","type":"digest","title":"Security digest for February 27, 2026","date":"2026-02-27","url":"https://erroneo.us/security/2026-02-27/","md":"https://erroneo.us/security/2026-02-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2026-28370","type":"cve","title":"CVE-2026-28370: OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection","date":"2026-02-26","url":"https://erroneo.us/security/cve/CVE-2026-28370/","md":"https://erroneo.us/security/cve/CVE-2026-28370/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00836,"verdict":null,"product":"vitrage (PyPI)"},{"id":"CVE-2026-28363","type":"cve","title":"CVE-2026-28363: OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode","date":"2026-02-26","url":"https://erroneo.us/security/cve/CVE-2026-28363/","md":"https://erroneo.us/security/cve/CVE-2026-28363/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00646,"verdict":null,"product":"openclaw (npm)"},{"id":"2026-02-26","type":"digest","title":"Security digest for February 26, 2026","date":"2026-02-26","url":"https://erroneo.us/security/2026-02-26/","md":"https://erroneo.us/security/2026-02-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"cisco-catalyst-sd-wan-cve-2026-20127-auth-bypass","type":"brief","title":"Cisco SD-WAN CVE-2026-20127: CVSS 10 Bypass, ED 26-03","date":"2026-02-25","url":"https://erroneo.us/security/briefs/cisco-catalyst-sd-wan-cve-2026-20127-auth-bypass/","md":"https://erroneo.us/security/briefs/cisco-catalyst-sd-wan-cve-2026-20127-auth-bypass/index.md","severity":"critical","kev":true,"epss":0.91817,"verdict":"act-now","cves":["CVE-2026-20127","CVE-2022-20775","CVE-2026-20182"],"summary":"If you run on-prem Catalyst SD-WAN control components, upgrade and hunt now: a sophisticated actor has used this bypass for years, and the follow-on SD-WAN bugs CISA keeps adding to KEV show the platform is still being targeted."},{"id":"CVE-2026-27822","type":"cve","title":"CVE-2026-27822: Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27822/","md":"https://erroneo.us/security/cve/CVE-2026-27822/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0038,"verdict":null,"product":"rustfs (crates.io (Rust))"},{"id":"CVE-2026-27804","type":"cve","title":"CVE-2026-27804: Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27804/","md":"https://erroneo.us/security/cve/CVE-2026-27804/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00237,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2026-27739","type":"cve","title":"CVE-2026-27739: Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27739/","md":"https://erroneo.us/security/cve/CVE-2026-27739/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00527,"verdict":null,"product":"@angular/ssr (npm)"},{"id":"CVE-2026-27728","type":"cve","title":"CVE-2026-27728: OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27728/","md":"https://erroneo.us/security/cve/CVE-2026-27728/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02604,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-27702","type":"cve","title":"CVE-2026-27702: Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27702/","md":"https://erroneo.us/security/cve/CVE-2026-27702/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00572,"verdict":null,"product":"budibase (npm)"},{"id":"CVE-2026-27699","type":"cve","title":"CVE-2026-27699: Basic FTP has Path Traversal Vulnerability in its downloadToDir() method","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27699/","md":"https://erroneo.us/security/cve/CVE-2026-27699/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01029,"verdict":null,"product":"basic-ftp (npm)"},{"id":"CVE-2026-27641","type":"cve","title":"CVE-2026-27641: Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27641/","md":"https://erroneo.us/security/cve/CVE-2026-27641/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01266,"verdict":null,"product":"flask-reuploaded (PyPI)"},{"id":"CVE-2026-27626","type":"cve","title":"CVE-2026-27626: OliveTin: OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27626/","md":"https://erroneo.us/security/cve/CVE-2026-27626/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00666,"verdict":null,"product":"github.com/OliveTin/OliveTin (Go)"},{"id":"CVE-2026-27614","type":"cve","title":"CVE-2026-27614: Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27614/","md":"https://erroneo.us/security/cve/CVE-2026-27614/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0044,"verdict":null,"product":"bugsink (PyPI)"},{"id":"CVE-2026-27608","type":"cve","title":"CVE-2026-27608: Parse Dashboard is Missing Authorization for its Agent Endpoint","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27608/","md":"https://erroneo.us/security/cve/CVE-2026-27608/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00386,"verdict":null,"product":"parse-dashboard (npm)"},{"id":"CVE-2026-27597","type":"cve","title":"CVE-2026-27597: @enclave-vm/core is vulnerable to Sandbox Escape","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27597/","md":"https://erroneo.us/security/cve/CVE-2026-27597/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01024,"verdict":null,"product":"@enclave-vm/core (npm)"},{"id":"CVE-2026-27595","type":"cve","title":"CVE-2026-27595: Parse Dashboard has incomplete authentication on AI Agent endpoint","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27595/","md":"https://erroneo.us/security/cve/CVE-2026-27595/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0065,"verdict":null,"product":"parse-dashboard (npm)"},{"id":"CVE-2026-27577","type":"cve","title":"CVE-2026-27577: n8n: Expression Sandbox Escape Leads to RCE","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27577/","md":"https://erroneo.us/security/cve/CVE-2026-27577/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01036,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-27575","type":"cve","title":"CVE-2026-27575: Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27575/","md":"https://erroneo.us/security/cve/CVE-2026-27575/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00461,"verdict":null,"product":"code.vikunja.io/api (Go)"},{"id":"CVE-2026-27498","type":"cve","title":"CVE-2026-27498: n8n has Arbitrary Command Execution via File Write and Git Operations","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27498/","md":"https://erroneo.us/security/cve/CVE-2026-27498/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.01375,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-27497","type":"cve","title":"CVE-2026-27497: n8n has Potential Remote Code Execution via Merge Node","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27497/","md":"https://erroneo.us/security/cve/CVE-2026-27497/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01109,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-27495","type":"cve","title":"CVE-2026-27495: n8n has a Sandbox Escape in its JavaScript Task Runner","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27495/","md":"https://erroneo.us/security/cve/CVE-2026-27495/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00842,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-27493","type":"cve","title":"CVE-2026-27493: n8n has Unauthenticated Expression Evaluation via Form Node","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-27493/","md":"https://erroneo.us/security/cve/CVE-2026-27493/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.01608,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-20127","type":"cve","title":"CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2026-20127/","md":"https://erroneo.us/security/cve/CVE-2026-20127/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.88476,"verdict":"act-now","product":"Cisco Catalyst SD-WAN Controller and Manager"},{"id":"CVE-2022-20775","type":"cve","title":"CVE-2022-20775: Cisco SD-WAN Path Traversal Vulnerability","date":"2026-02-25","url":"https://erroneo.us/security/cve/CVE-2022-20775/","md":"https://erroneo.us/security/cve/CVE-2022-20775/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.12475,"verdict":"act-now","product":"Cisco SD-WAN"},{"id":"2026-02-25","type":"digest","title":"Security digest for February 25, 2026","date":"2026-02-25","url":"https://erroneo.us/security/2026-02-25/","md":"https://erroneo.us/security/2026-02-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":18}},{"id":"CVE-2026-27593","type":"cve","title":"CVE-2026-27593: Statamic is vulnerable to account takeover via password reset link injection","date":"2026-02-24","url":"https://erroneo.us/security/cve/CVE-2026-27593/","md":"https://erroneo.us/security/cve/CVE-2026-27593/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00565,"verdict":null,"product":"statamic/cms (Composer (PHP))"},{"id":"CVE-2026-27584","type":"cve","title":"CVE-2026-27584: ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints","date":"2026-02-24","url":"https://erroneo.us/security/cve/CVE-2026-27584/","md":"https://erroneo.us/security/cve/CVE-2026-27584/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0057,"verdict":null,"product":"@actual-app/sync-server (npm)"},{"id":"CVE-2026-27574","type":"cve","title":"CVE-2026-27574: OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE","date":"2026-02-24","url":"https://erroneo.us/security/cve/CVE-2026-27574/","md":"https://erroneo.us/security/cve/CVE-2026-27574/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00689,"verdict":null,"product":"@oneuptime/common (npm)"},{"id":"CVE-2026-25108","type":"cve","title":"CVE-2026-25108: Soliton Systems K.K FileZen OS Command Injection Vulnerability","date":"2026-02-24","url":"https://erroneo.us/security/cve/CVE-2026-25108/","md":"https://erroneo.us/security/cve/CVE-2026-25108/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.05249,"verdict":null,"product":"Soliton Systems K.K FileZen"},{"id":"CVE-2025-69985","type":"cve","title":"CVE-2025-69985: FUXA has JWT Authentication Bypass via HTTP Referer header spoofing","date":"2026-02-24","url":"https://erroneo.us/security/cve/CVE-2025-69985/","md":"https://erroneo.us/security/cve/CVE-2025-69985/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.05731,"verdict":null,"product":"@frangoteam/fuxa (npm)"},{"id":"2026-02-24","type":"digest","title":"Security digest for February 24, 2026","date":"2026-02-24","url":"https://erroneo.us/security/2026-02-24/","md":"https://erroneo.us/security/2026-02-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"CVE-2026-26198","type":"cve","title":"CVE-2026-26198: ormar is vulnerable to SQL Injection through aggregate functions min() and max()","date":"2026-02-23","url":"https://erroneo.us/security/cve/CVE-2026-26198/","md":"https://erroneo.us/security/cve/CVE-2026-26198/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00711,"verdict":null,"product":"ormar (PyPI)"},{"id":"CVE-2026-23552","type":"cve","title":"CVE-2026-23552: Apache Camel: KeycloakSecurityPolicy does not validate issuer of JWT tokens against configured realm","date":"2026-02-23","url":"https://erroneo.us/security/cve/CVE-2026-23552/","md":"https://erroneo.us/security/cve/CVE-2026-23552/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00607,"verdict":null,"product":"org.apache.camel:camel-keycloak (Maven)"},{"id":"2026-02-23","type":"digest","title":"Security digest for February 23, 2026","date":"2026-02-23","url":"https://erroneo.us/security/2026-02-23/","md":"https://erroneo.us/security/2026-02-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2026-2635","type":"cve","title":"CVE-2026-2635: MLflow Use of Default Password Authentication Bypass Vulnerability","date":"2026-02-20","url":"https://erroneo.us/security/cve/CVE-2026-2635/","md":"https://erroneo.us/security/cve/CVE-2026-2635/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.01358,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2026-25896","type":"cve","title":"CVE-2026-25896: fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names","date":"2026-02-20","url":"https://erroneo.us/security/cve/CVE-2026-25896/","md":"https://erroneo.us/security/cve/CVE-2026-25896/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00571,"verdict":null,"product":"fast-xml-parser (npm)"},{"id":"CVE-2025-68461","type":"cve","title":"CVE-2025-68461: RoundCube Webmail Cross-site Scripting Vulnerability","date":"2026-02-20","url":"https://erroneo.us/security/cve/CVE-2025-68461/","md":"https://erroneo.us/security/cve/CVE-2025-68461/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.26842,"verdict":null,"product":"Roundcube Webmail"},{"id":"CVE-2025-49113","type":"cve","title":"CVE-2025-49113: RoundCube Webmail Deserialization of Untrusted Data Vulnerability","date":"2026-02-20","url":"https://erroneo.us/security/cve/CVE-2025-49113/","md":"https://erroneo.us/security/cve/CVE-2025-49113/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.98972,"verdict":null,"product":"Roundcube Webmail"},{"id":"2026-02-20","type":"digest","title":"Security digest for February 20, 2026","date":"2026-02-20","url":"https://erroneo.us/security/2026-02-20/","md":"https://erroneo.us/security/2026-02-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"GHSA-6qr9-g2xw-cw92","type":"ghsa","title":"Dagu affected by unauthenticated RCE via inline DAG spec in default configuration","date":"2026-02-19","url":"https://erroneo.us/security/ghsa/GHSA-6qr9-g2xw-cw92/","md":"https://erroneo.us/security/ghsa/GHSA-6qr9-g2xw-cw92/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"github.com/dagu-org/dagu"},{"id":"CVE-2026-27212","type":"cve","title":"CVE-2026-27212: Prototype pollution in swiper","date":"2026-02-19","url":"https://erroneo.us/security/cve/CVE-2026-27212/","md":"https://erroneo.us/security/cve/CVE-2026-27212/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0057,"verdict":null,"product":"swiper (npm)"},{"id":"CVE-2026-27112","type":"cve","title":"CVE-2026-27112: Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints","date":"2026-02-19","url":"https://erroneo.us/security/cve/CVE-2026-27112/","md":"https://erroneo.us/security/cve/CVE-2026-27112/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00883,"verdict":null,"product":"github.com/akuity/kargo (Go)"},{"id":"CVE-2026-26030","type":"cve","title":"CVE-2026-26030: Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution","date":"2026-02-19","url":"https://erroneo.us/security/cve/CVE-2026-26030/","md":"https://erroneo.us/security/cve/CVE-2026-26030/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.04134,"verdict":null,"product":"semantic-kernel (PyPI)"},{"id":"CVE-2025-13590","type":"cve","title":"CVE-2025-13590: carbon-apimgt does not properly restrict uploaded files","date":"2026-02-19","url":"https://erroneo.us/security/cve/CVE-2025-13590/","md":"https://erroneo.us/security/cve/CVE-2025-13590/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00768,"verdict":null,"product":"org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1 (Maven)"},{"id":"2026-02-19","type":"digest","title":"Security digest for February 19, 2026","date":"2026-02-19","url":"https://erroneo.us/security/2026-02-19/","md":"https://erroneo.us/security/2026-02-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"CVE-2026-26980","type":"cve","title":"CVE-2026-26980: Ghost has a SQL injection in Content API","date":"2026-02-18","url":"https://erroneo.us/security/cve/CVE-2026-26980/","md":"https://erroneo.us/security/cve/CVE-2026-26980/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.05573,"verdict":null,"product":"ghost (npm)"},{"id":"CVE-2026-22769","type":"cve","title":"CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","date":"2026-02-18","url":"https://erroneo.us/security/cve/CVE-2026-22769/","md":"https://erroneo.us/security/cve/CVE-2026-22769/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.13525,"verdict":null,"product":"Dell RecoverPoint for Virtual Machines (RP4VMs)"},{"id":"CVE-2025-14009","type":"cve","title":"CVE-2025-14009: NLTK has a Zip Slip Vulnerability","date":"2026-02-18","url":"https://erroneo.us/security/cve/CVE-2025-14009/","md":"https://erroneo.us/security/cve/CVE-2025-14009/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.01036,"verdict":null,"product":"nltk (PyPI)"},{"id":"CVE-2021-22175","type":"cve","title":"CVE-2021-22175: GitLab Server-Side Request Forgery (SSRF) Vulnerability","date":"2026-02-18","url":"https://erroneo.us/security/cve/CVE-2021-22175/","md":"https://erroneo.us/security/cve/CVE-2021-22175/index.md","severity":"medium","cvss":6.8,"kev":true,"epss":0.53372,"verdict":null,"product":"GitLab GitLab"},{"id":"2026-02-18","type":"digest","title":"Security digest for February 18, 2026","date":"2026-02-18","url":"https://erroneo.us/security/2026-02-18/","md":"https://erroneo.us/security/2026-02-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2026-28474","type":"cve","title":"CVE-2026-28474: Nextcloud Talk allowlist bypass via actor.name display name spoofing","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-28474/","md":"https://erroneo.us/security/cve/CVE-2026-28474/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00878,"verdict":null,"product":"@openclaw/nextcloud-talk (npm)"},{"id":"CVE-2026-28472","type":"cve","title":"CVE-2026-28472: OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-28472/","md":"https://erroneo.us/security/cve/CVE-2026-28472/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00654,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-28454","type":"cve","title":"CVE-2026-28454: OpenClaw has a potential access-group authorization bypass if channel type lookup fails","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-28454/","md":"https://erroneo.us/security/cve/CVE-2026-28454/index.md","severity":"high","cvss":8.2,"kev":false,"epss":0.00407,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-28446","type":"cve","title":"CVE-2026-28446: OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching)","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-28446/","md":"https://erroneo.us/security/cve/CVE-2026-28446/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01024,"verdict":null,"product":"openclaw (npm)"},{"id":"CVE-2026-26016","type":"cve","title":"CVE-2026-26016: Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-26016/","md":"https://erroneo.us/security/cve/CVE-2026-26016/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0052,"verdict":null,"product":"pterodactyl/panel (Composer (PHP))"},{"id":"CVE-2026-2441","type":"cve","title":"CVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerability","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2026-2441/","md":"https://erroneo.us/security/cve/CVE-2026-2441/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.54957,"verdict":null,"product":"Google Chromium"},{"id":"CVE-2024-7694","type":"cve","title":"CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2024-7694/","md":"https://erroneo.us/security/cve/CVE-2024-7694/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.01792,"verdict":null,"product":"TeamT5 ThreatSonar Anti-Ransomware"},{"id":"CVE-2020-7796","type":"cve","title":"CVE-2020-7796: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2020-7796/","md":"https://erroneo.us/security/cve/CVE-2020-7796/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.84418,"verdict":null,"product":"Synacor Zimbra Collaboration Suite"},{"id":"CVE-2008-0015","type":"cve","title":"CVE-2008-0015:  Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","date":"2026-02-17","url":"https://erroneo.us/security/cve/CVE-2008-0015/","md":"https://erroneo.us/security/cve/CVE-2008-0015/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.76576,"verdict":null,"product":"Microsoft Windows"},{"id":"2026-02-17","type":"digest","title":"Security digest for February 17, 2026","date":"2026-02-17","url":"https://erroneo.us/security/2026-02-17/","md":"https://erroneo.us/security/2026-02-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":5}},{"id":"GHSA-p5vf-5754-x7p3","type":"ghsa","title":"`polymarket-client-sdks` was removed from crates.io for malicious code","date":"2026-02-13","url":"https://erroneo.us/security/ghsa/GHSA-p5vf-5754-x7p3/","md":"https://erroneo.us/security/ghsa/GHSA-p5vf-5754-x7p3/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"polymarket-client-sdks"},{"id":"CVE-2026-26273","type":"cve","title":"CVE-2026-26273: Known affected by Account Takeover via Password Reset Token Leakage","date":"2026-02-13","url":"https://erroneo.us/security/cve/CVE-2026-26273/","md":"https://erroneo.us/security/cve/CVE-2026-26273/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01297,"verdict":null,"product":"idno/known (Composer (PHP))"},{"id":"CVE-2026-1731","type":"cve","title":"CVE-2026-1731: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","date":"2026-02-13","url":"https://erroneo.us/security/cve/CVE-2026-1731/","md":"https://erroneo.us/security/cve/CVE-2026-1731/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.92463,"verdict":null,"product":"BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)"},{"id":"2026-02-13","type":"digest","title":"Security digest for February 13, 2026","date":"2026-02-13","url":"https://erroneo.us/security/2026-02-13/","md":"https://erroneo.us/security/2026-02-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"GHSA-xp79-9mxw-878j","type":"ghsa","title":"`finch-rst` was removed from crates.io for malicious code","date":"2026-02-12","url":"https://erroneo.us/security/ghsa/GHSA-xp79-9mxw-878j/","md":"https://erroneo.us/security/ghsa/GHSA-xp79-9mxw-878j/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"finch-rst"},{"id":"GHSA-vgr2-r5hm-f6gf","type":"ghsa","title":"`sha-rst` was removed from crates.io for malicious code","date":"2026-02-12","url":"https://erroneo.us/security/ghsa/GHSA-vgr2-r5hm-f6gf/","md":"https://erroneo.us/security/ghsa/GHSA-vgr2-r5hm-f6gf/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"sha-rst"},{"id":"GHSA-6v2j-vr4h-f632","type":"ghsa","title":"`finch_cli_rust` was removed from crates.io for malicious code","date":"2026-02-12","url":"https://erroneo.us/security/ghsa/GHSA-6v2j-vr4h-f632/","md":"https://erroneo.us/security/ghsa/GHSA-6v2j-vr4h-f632/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"finch_cli_rust"},{"id":"CVE-2026-20700","type":"cve","title":"CVE-2026-20700: Apple Multiple Buffer Overflow Vulnerability","date":"2026-02-12","url":"https://erroneo.us/security/cve/CVE-2026-20700/","md":"https://erroneo.us/security/cve/CVE-2026-20700/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01392,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-40536","type":"cve","title":"CVE-2025-40536: SolarWinds Web Help Desk Security Control Bypass Vulnerability","date":"2026-02-12","url":"https://erroneo.us/security/cve/CVE-2025-40536/","md":"https://erroneo.us/security/cve/CVE-2025-40536/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.73562,"verdict":null,"product":"SolarWinds Web Help Desk"},{"id":"CVE-2025-15556","type":"cve","title":"CVE-2025-15556: Notepad++ Download of Code Without Integrity Check Vulnerability","date":"2026-02-12","url":"https://erroneo.us/security/cve/CVE-2025-15556/","md":"https://erroneo.us/security/cve/CVE-2025-15556/index.md","severity":"high","cvss":7.7,"kev":true,"epss":0.01772,"verdict":"check-exposure","product":"Notepad++ Notepad++"},{"id":"CVE-2024-43468","type":"cve","title":"CVE-2024-43468: Microsoft Configuration Manager SQL Injection Vulnerability","date":"2026-02-12","url":"https://erroneo.us/security/cve/CVE-2024-43468/","md":"https://erroneo.us/security/cve/CVE-2024-43468/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.81043,"verdict":null,"product":"Microsoft Configuration Manager"},{"id":"2026-02-12","type":"digest","title":"Security digest for February 12, 2026","date":"2026-02-12","url":"https://erroneo.us/security/2026-02-12/","md":"https://erroneo.us/security/2026-02-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":3}},{"id":"CVE-2026-26190","type":"cve","title":"CVE-2026-26190: Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise","date":"2026-02-11","url":"https://erroneo.us/security/cve/CVE-2026-26190/","md":"https://erroneo.us/security/cve/CVE-2026-26190/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0456,"verdict":null,"product":"github.com/milvus-io/milvus (Go)"},{"id":"CVE-2026-26021","type":"cve","title":"CVE-2026-26021: set-in Affected by Prototype Pollution","date":"2026-02-11","url":"https://erroneo.us/security/cve/CVE-2026-26021/","md":"https://erroneo.us/security/cve/CVE-2026-26021/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00562,"verdict":null,"product":"set-in (npm)"},{"id":"2026-02-11","type":"digest","title":"Security digest for February 11, 2026","date":"2026-02-11","url":"https://erroneo.us/security/2026-02-11/","md":"https://erroneo.us/security/2026-02-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"fortios-ssl-vpn-symlink-patch-bypass-cve-2025-68686","type":"brief","title":"FortiOS CVE-2025-68686: SSL-VPN Symlink Patch Bypass in KEV","date":"2026-02-10","url":"https://erroneo.us/security/briefs/fortios-ssl-vpn-symlink-patch-bypass-cve-2025-68686/","md":"https://erroneo.us/security/briefs/fortios-ssl-vpn-symlink-patch-bypass-cve-2025-68686/index.md","severity":"medium","kev":true,"epss":0.29499,"verdict":"check-exposure","cves":["CVE-2025-68686"],"summary":"This is not a way in, only a way to stay in on FortiGates that ran SSL-VPN and were already breached; the real problem is that FortiOS 7.2, 7.0 and 6.4 will never get a fix, so plan the move to 7.4.7+ or 7.6.2+."},{"id":"CVE-2026-23906","type":"cve","title":"CVE-2026-23906: Apache Druid Vulnerable to Authentication Bypass","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-23906/","md":"https://erroneo.us/security/cve/CVE-2026-23906/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01134,"verdict":null,"product":"org.apache.druid.extensions:druid-basic-security (Maven)"},{"id":"CVE-2026-21533","type":"cve","title":"CVE-2026-21533: Microsoft Windows Improper Privilege Management Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21533/","md":"https://erroneo.us/security/cve/CVE-2026-21533/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.04148,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-21531","type":"cve","title":"CVE-2026-21531: Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21531/","md":"https://erroneo.us/security/cve/CVE-2026-21531/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0258,"verdict":null,"product":"azure-ai-language-conversations-authoring (PyPI)"},{"id":"CVE-2026-21525","type":"cve","title":"CVE-2026-21525: Microsoft Windows NULL Pointer Dereference Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21525/","md":"https://erroneo.us/security/cve/CVE-2026-21525/index.md","severity":"medium","cvss":6.2,"kev":true,"epss":0.04825,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-21519","type":"cve","title":"CVE-2026-21519: Microsoft Windows Type Confusion Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21519/","md":"https://erroneo.us/security/cve/CVE-2026-21519/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02477,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-21514","type":"cve","title":"CVE-2026-21514: Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21514/","md":"https://erroneo.us/security/cve/CVE-2026-21514/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01587,"verdict":null,"product":"Microsoft Office"},{"id":"CVE-2026-21513","type":"cve","title":"CVE-2026-21513: Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21513/","md":"https://erroneo.us/security/cve/CVE-2026-21513/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.15852,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-21510","type":"cve","title":"CVE-2026-21510: Microsoft Windows Shell Protection Mechanism Failure Vulnerability","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-21510/","md":"https://erroneo.us/security/cve/CVE-2026-21510/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.24537,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2026-1774","type":"cve","title":"CVE-2026-1774: CASL Ability is Vulnerable to Prototype Pollution","date":"2026-02-10","url":"https://erroneo.us/security/cve/CVE-2026-1774/","md":"https://erroneo.us/security/cve/CVE-2026-1774/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00715,"verdict":null,"product":"@casl/ability (npm)"},{"id":"2026-02-10","type":"digest","title":"Security digest for February 10, 2026","date":"2026-02-10","url":"https://erroneo.us/security/2026-02-10/","md":"https://erroneo.us/security/2026-02-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":6,"critical":3}},{"id":"CVE-2026-25939","type":"cve","title":"CVE-2026-25939: FUXA Unauthenticated Remote Arbitrary Scheduler Write","date":"2026-02-09","url":"https://erroneo.us/security/cve/CVE-2026-25939/","md":"https://erroneo.us/security/cve/CVE-2026-25939/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00937,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25938","type":"cve","title":"CVE-2026-25938: FUXA Unauthenticated Remote Code Execution in Node-RED Integration","date":"2026-02-09","url":"https://erroneo.us/security/cve/CVE-2026-25938/","md":"https://erroneo.us/security/cve/CVE-2026-25938/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.01483,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25881","type":"cve","title":"CVE-2026-25881: @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)","date":"2026-02-09","url":"https://erroneo.us/security/cve/CVE-2026-25881/","md":"https://erroneo.us/security/cve/CVE-2026-25881/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0073,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2025-66630","type":"cve","title":"CVE-2025-66630: Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure","date":"2026-02-09","url":"https://erroneo.us/security/cve/CVE-2025-66630/","md":"https://erroneo.us/security/cve/CVE-2025-66630/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00535,"verdict":null,"product":"github.com/gofiber/fiber/v2 (Go)"},{"id":"2026-02-09","type":"digest","title":"Security digest for February 9, 2026","date":"2026-02-09","url":"https://erroneo.us/security/2026-02-09/","md":"https://erroneo.us/security/2026-02-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"GHSA-x468-phr8-h3p3","type":"ghsa","title":"`uniswap-utils` was removed from crates.io for malicious code","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-x468-phr8-h3p3/","md":"https://erroneo.us/security/ghsa/GHSA-x468-phr8-h3p3/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"uniswap-utils"},{"id":"GHSA-f8h5-x737-x4xr","type":"ghsa","title":"`finch-rust` was removed from crates.io for malicious code","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-f8h5-x737-x4xr/","md":"https://erroneo.us/security/ghsa/GHSA-f8h5-x737-x4xr/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"finch-rust"},{"id":"GHSA-6662-54xr-8423","type":"ghsa","title":"`evm-units` was removed from crates.io for malicious code","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-6662-54xr-8423/","md":"https://erroneo.us/security/ghsa/GHSA-6662-54xr-8423/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"evm-units"},{"id":"GHSA-4f84-67cv-qrv3","type":"ghsa","title":"A single post-release of dydx-v4-client contained obfuscated multi-stage loader","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-4f84-67cv-qrv3/","md":"https://erroneo.us/security/ghsa/GHSA-4f84-67cv-qrv3/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"dydx-v4-client"},{"id":"GHSA-3mmg-7c2q-8938","type":"ghsa","title":"`sha-rust` was removed from crates.io for malicious code","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-3mmg-7c2q-8938/","md":"https://erroneo.us/security/ghsa/GHSA-3mmg-7c2q-8938/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"sha-rust"},{"id":"GHSA-382q-fpqh-29f7","type":"ghsa","title":"`polymarket-clients-sdk` was removed from crates.io for malicious code","date":"2026-02-06","url":"https://erroneo.us/security/ghsa/GHSA-382q-fpqh-29f7/","md":"https://erroneo.us/security/ghsa/GHSA-382q-fpqh-29f7/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"polymarket-clients-sdk"},{"id":"CVE-2026-25592","type":"cve","title":"CVE-2026-25592: Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK","date":"2026-02-06","url":"https://erroneo.us/security/cve/CVE-2026-25592/","md":"https://erroneo.us/security/cve/CVE-2026-25592/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02362,"verdict":null,"product":"semantic-kernel (PyPI)"},{"id":"CVE-2026-1709","type":"cve","title":"CVE-2026-1709: Keylime Missing Authentication for Critical Function and Improper Authentication","date":"2026-02-06","url":"https://erroneo.us/security/cve/CVE-2026-1709/","md":"https://erroneo.us/security/cve/CVE-2026-1709/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.05794,"verdict":null,"product":"keylime (PyPI)"},{"id":"CVE-2025-69212","type":"cve","title":"CVE-2025-69212: OpenSTAManager has an OS Command Injection in P7M File Processing","date":"2026-02-06","url":"https://erroneo.us/security/cve/CVE-2025-69212/","md":"https://erroneo.us/security/cve/CVE-2025-69212/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01944,"verdict":null,"product":"devcode-it/openstamanager (Composer (PHP))"},{"id":"CVE-2025-64111","type":"cve","title":"CVE-2025-64111: Gogs's update .git/config file allows remote command execution","date":"2026-02-06","url":"https://erroneo.us/security/cve/CVE-2025-64111/","md":"https://erroneo.us/security/cve/CVE-2025-64111/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01395,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"2026-02-06","type":"digest","title":"Security digest for February 6, 2026","date":"2026-02-06","url":"https://erroneo.us/security/2026-02-06/","md":"https://erroneo.us/security/2026-02-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":10}},{"id":"GHSA-x9p2-77v6-6vhf","type":"ghsa","title":"FrankenPHP has delayed propagation of security fixes in upstream base images","date":"2026-02-05","url":"https://erroneo.us/security/ghsa/GHSA-x9p2-77v6-6vhf/","md":"https://erroneo.us/security/ghsa/GHSA-x9p2-77v6-6vhf/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"github.com/dunglas/frankenphp"},{"id":"CVE-2026-25641","type":"cve","title":"CVE-2026-25641: @nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-25641/","md":"https://erroneo.us/security/cve/CVE-2026-25641/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00576,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-25587","type":"cve","title":"CVE-2026-25587: @nyariv/sandboxjs has a Sandbox Escape vulnerability","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-25587/","md":"https://erroneo.us/security/cve/CVE-2026-25587/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00734,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-25586","type":"cve","title":"CVE-2026-25586: @nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-25586/","md":"https://erroneo.us/security/cve/CVE-2026-25586/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00734,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-25544","type":"cve","title":"CVE-2026-25544: @payloadcms/drizzle has SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-25544/","md":"https://erroneo.us/security/cve/CVE-2026-25544/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00962,"verdict":null,"product":"@payloadcms/drizzle (npm)"},{"id":"CVE-2026-25520","type":"cve","title":"CVE-2026-25520: @nyariv/sandboxjs has a Sandbox Escape issue","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-25520/","md":"https://erroneo.us/security/cve/CVE-2026-25520/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0089,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-24423","type":"cve","title":"CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2026-24423/","md":"https://erroneo.us/security/cve/CVE-2026-24423/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.88177,"verdict":null,"product":"SmarterTools SmarterMail"},{"id":"CVE-2025-11953","type":"cve","title":"CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability","date":"2026-02-05","url":"https://erroneo.us/security/cve/CVE-2025-11953/","md":"https://erroneo.us/security/cve/CVE-2025-11953/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9398,"verdict":null,"product":"React Native Community CLI"},{"id":"2026-02-05","type":"digest","title":"Security digest for February 5, 2026","date":"2026-02-05","url":"https://erroneo.us/security/2026-02-05/","md":"https://erroneo.us/security/2026-02-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":6}},{"id":"CVE-2026-25895","type":"cve","title":"CVE-2026-25895: FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25895/","md":"https://erroneo.us/security/cve/CVE-2026-25895/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.06924,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25894","type":"cve","title":"CVE-2026-25894: FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25894/","md":"https://erroneo.us/security/cve/CVE-2026-25894/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.0139,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25893","type":"cve","title":"CVE-2026-25893: FUXA Unauthenticated Remote Code Execution via Admin JWT Minting","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25893/","md":"https://erroneo.us/security/cve/CVE-2026-25893/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01208,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25752","type":"cve","title":"CVE-2026-25752: FUXA Unauthenticated Remote Arbitrary Device Tag Write","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25752/","md":"https://erroneo.us/security/cve/CVE-2026-25752/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00738,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25751","type":"cve","title":"CVE-2026-25751: FUXA Unauthenticated Exposure of Plaintext Database Credentials","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25751/","md":"https://erroneo.us/security/cve/CVE-2026-25751/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00419,"verdict":null,"product":"fuxa-server (npm)"},{"id":"CVE-2026-25632","type":"cve","title":"CVE-2026-25632: EPyT-Flow vulnerable to unsafe JSON deserialization (__type__)","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25632/","md":"https://erroneo.us/security/cve/CVE-2026-25632/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01423,"verdict":null,"product":"epyt-flow (PyPI)"},{"id":"CVE-2026-25630","type":"cve","title":"CVE-2026-25630: survey-pdf Upgraded jsPDF Version Due to Security Vulnerability","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25630/","md":"https://erroneo.us/security/cve/CVE-2026-25630/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"survey-pdf (npm)"},{"id":"CVE-2026-25160","type":"cve","title":"CVE-2026-25160: Alist has Insecure TLS Config","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25160/","md":"https://erroneo.us/security/cve/CVE-2026-25160/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00253,"verdict":null,"product":"github.com/alist-org/alist/v3 (Go)"},{"id":"CVE-2026-25115","type":"cve","title":"CVE-2026-25115: n8n has a Python sandbox escape","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25115/","md":"https://erroneo.us/security/cve/CVE-2026-25115/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00585,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-25056","type":"cve","title":"CVE-2026-25056: n8n Merge Node has Arbitrary File Write leading to RCE","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25056/","md":"https://erroneo.us/security/cve/CVE-2026-25056/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00739,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-25053","type":"cve","title":"CVE-2026-25053: n8n has OS Command Injection in Git Node","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25053/","md":"https://erroneo.us/security/cve/CVE-2026-25053/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00632,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-25052","type":"cve","title":"CVE-2026-25052: n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25052/","md":"https://erroneo.us/security/cve/CVE-2026-25052/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00334,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-25049","type":"cve","title":"CVE-2026-25049: n8n Has Expression Escape Vulnerability Leading to RCE","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-25049/","md":"https://erroneo.us/security/cve/CVE-2026-25049/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01586,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2026-21893","type":"cve","title":"CVE-2026-21893: n8n Vulnerable to Command Injection in Community Package Installation","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2026-21893/","md":"https://erroneo.us/security/cve/CVE-2026-21893/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0156,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2025-62878","type":"cve","title":"CVE-2025-62878: Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern","date":"2026-02-04","url":"https://erroneo.us/security/cve/CVE-2025-62878/","md":"https://erroneo.us/security/cve/CVE-2025-62878/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00604,"verdict":null,"product":"github.com/rancher/local-path-provisioner (Go)"},{"id":"2026-02-04","type":"digest","title":"Security digest for February 4, 2026","date":"2026-02-04","url":"https://erroneo.us/security/2026-02-04/","md":"https://erroneo.us/security/2026-02-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":15}},{"id":"CVE-2026-25579","type":"cve","title":"CVE-2026-25579: Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2026-25579/","md":"https://erroneo.us/security/cve/CVE-2026-25579/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00552,"verdict":null,"product":"github.com/navidrome/navidrome (Go)"},{"id":"CVE-2026-25526","type":"cve","title":"CVE-2026-25526: JinJava Bypass through ForTag leads to Arbitrary Java Execution","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2026-25526/","md":"https://erroneo.us/security/cve/CVE-2026-25526/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01003,"verdict":null,"product":"com.hubspot.jinjava:jinjava (Maven)"},{"id":"CVE-2026-25150","type":"cve","title":"CVE-2026-25150: Prototype Pollution via FormData Processing in Qwik City","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2026-25150/","md":"https://erroneo.us/security/cve/CVE-2026-25150/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00719,"verdict":null,"product":"@builder.io/qwik-city (npm)"},{"id":"CVE-2025-64712","type":"cve","title":"CVE-2025-64712: Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2025-64712/","md":"https://erroneo.us/security/cve/CVE-2025-64712/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00671,"verdict":null,"product":"unstructured (PyPI)"},{"id":"CVE-2025-64328","type":"cve","title":"CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2025-64328/","md":"https://erroneo.us/security/cve/CVE-2025-64328/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.84618,"verdict":null,"product":"Sangoma FreePBX"},{"id":"CVE-2025-40551","type":"cve","title":"CVE-2025-40551: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2025-40551/","md":"https://erroneo.us/security/cve/CVE-2025-40551/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.84181,"verdict":null,"product":"SolarWinds Web Help Desk"},{"id":"CVE-2021-39935","type":"cve","title":"CVE-2021-39935: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2021-39935/","md":"https://erroneo.us/security/cve/CVE-2021-39935/index.md","severity":"medium","cvss":6.8,"kev":true,"epss":0.3614,"verdict":null,"product":"GitLab Community and Enterprise Editions"},{"id":"CVE-2019-19006","type":"cve","title":"CVE-2019-19006:  Sangoma FreePBX Improper Authentication Vulnerability","date":"2026-02-03","url":"https://erroneo.us/security/cve/CVE-2019-19006/","md":"https://erroneo.us/security/cve/CVE-2019-19006/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.55946,"verdict":null,"product":"Sangoma FreePBX"},{"id":"2026-02-03","type":"digest","title":"Security digest for February 3, 2026","date":"2026-02-03","url":"https://erroneo.us/security/2026-02-03/","md":"https://erroneo.us/security/2026-02-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":4}},{"id":"notepad-plus-plus-updater-hijack-cve-2025-15556","type":"brief","title":"Notepad++ Updater Hijack: State Actor Served Bad Updates","date":"2026-02-02","url":"https://erroneo.us/security/briefs/notepad-plus-plus-updater-hijack-cve-2025-15556/","md":"https://erroneo.us/security/briefs/notepad-plus-plus-updater-hijack-cve-2025-15556/index.md","severity":"high","kev":true,"epss":0.01772,"verdict":"check-exposure","cves":["CVE-2025-15556"],"summary":"Targeting was narrow (about a dozen machines in Kaspersky's telemetry), but any fleet that auto-updated Notepad++ between June and December 2025 should update to v8.9.1+ and check the published IoCs."},{"id":"CVE-2026-25521","type":"cve","title":"CVE-2026-25521: locutus is vulnerable to Prototype Pollution","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-25521/","md":"https://erroneo.us/security/cve/CVE-2026-25521/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00498,"verdict":null,"product":"locutus (npm)"},{"id":"CVE-2026-25510","type":"cve","title":"CVE-2026-25510: CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-25510/","md":"https://erroneo.us/security/cve/CVE-2026-25510/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01051,"verdict":null,"product":"ci4-cms-erp/ci4ms (Composer (PHP))"},{"id":"CVE-2026-25505","type":"cve","title":"CVE-2026-25505: Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-25505/","md":"https://erroneo.us/security/cve/CVE-2026-25505/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01034,"verdict":null,"product":"bambuddy (PyPI)"},{"id":"CVE-2026-25481","type":"cve","title":"CVE-2026-25481: Langroid has WAF Bypass Leading to RCE in TableChatAgent","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-25481/","md":"https://erroneo.us/security/cve/CVE-2026-25481/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00817,"verdict":null,"product":"langroid (PyPI)"},{"id":"CVE-2026-25142","type":"cve","title":"CVE-2026-25142: SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-25142/","md":"https://erroneo.us/security/cve/CVE-2026-25142/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01231,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-23515","type":"cve","title":"CVE-2026-23515: Signal K set-system-time plugin vulnerable to RCE - Command Injection","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-23515/","md":"https://erroneo.us/security/cve/CVE-2026-23515/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.04586,"verdict":null,"product":"@signalk/set-system-time (npm)"},{"id":"CVE-2026-22778","type":"cve","title":"CVE-2026-22778: vLLM has RCE In Video Processing","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2026-22778/","md":"https://erroneo.us/security/cve/CVE-2026-22778/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.16697,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2024-5986","type":"cve","title":"CVE-2024-5986: H2O has an External Control of File Name or Path vulnerability","date":"2026-02-02","url":"https://erroneo.us/security/cve/CVE-2024-5986/","md":"https://erroneo.us/security/cve/CVE-2024-5986/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00714,"verdict":null,"product":"ai.h2o:h2o-core (Maven)"},{"id":"2026-02-02","type":"digest","title":"Security digest for February 2, 2026","date":"2026-02-02","url":"https://erroneo.us/security/2026-02-02/","md":"https://erroneo.us/security/2026-02-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":8}},{"id":"CVE-2026-25253","type":"cve","title":"CVE-2026-25253: OpenClaw OpenClaw vulnerability","date":"2026-02-01","url":"https://erroneo.us/security/cve/CVE-2026-25253/","md":"https://erroneo.us/security/cve/CVE-2026-25253/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.24429,"verdict":"patch-this-week","product":"OpenClaw OpenClaw"},{"id":"openclaw-one-click-rce-gatewayurl-token","type":"brief","title":"OpenClaw CVE-2026-25253: One-Click RCE via Token Leak","date":"2026-01-31","url":"https://erroneo.us/security/briefs/openclaw-one-click-rce-gatewayurl-token/","md":"https://erroneo.us/security/briefs/openclaw-one-click-rce-gatewayurl-token/index.md","severity":"high","kev":false,"epss":0.24429,"verdict":"patch-this-week","cves":["CVE-2026-25253"],"summary":"Fixed since January, but any OpenClaw install that missed updates can be taken over by its owner clicking one link, and a loopback-only setup does not save it."},{"id":"2026-01-31","type":"digest","title":"Security digest for January 31, 2026","date":"2026-01-31","url":"https://erroneo.us/security/2026-01-31/","md":"https://erroneo.us/security/2026-01-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2026-25141","type":"cve","title":"CVE-2026-25141: Orval has Code Injection via unsanitized x-enum-descriptions using JS comments","date":"2026-01-30","url":"https://erroneo.us/security/cve/CVE-2026-25141/","md":"https://erroneo.us/security/cve/CVE-2026-25141/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00695,"verdict":null,"product":"@orval/core (npm)"},{"id":"CVE-2026-25130","type":"cve","title":"CVE-2026-25130: CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection","date":"2026-01-30","url":"https://erroneo.us/security/cve/CVE-2026-25130/","md":"https://erroneo.us/security/cve/CVE-2026-25130/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00919,"verdict":null,"product":"cai-framework (PyPI)"},{"id":"2026-01-30","type":"digest","title":"Security digest for January 30, 2026","date":"2026-01-30","url":"https://erroneo.us/security/2026-01-30/","md":"https://erroneo.us/security/2026-01-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"ivanti-epmm-cve-2026-1281-1340-zero-day-rce","type":"brief","title":"Ivanti EPMM Zero-Day RCE: CVE-2026-1281 and CVE-2026-1340","date":"2026-01-29","url":"https://erroneo.us/security/briefs/ivanti-epmm-cve-2026-1281-1340-zero-day-rce/","md":"https://erroneo.us/security/briefs/ivanti-epmm-cve-2026-1281-1340-zero-day-rce/index.md","severity":"critical","kev":true,"epss":0.98688,"verdict":"act-now","cves":["CVE-2026-1281","CVE-2026-1340"],"summary":"On-premises Ivanti EPMM was open to unauthenticated remote command execution, exploited before disclosure and with a public PoC a day later; patch, confirm the RPM survived any later upgrade, and hunt for compromise."},{"id":"GHSA-vg9h-jx4v-cwx2","type":"ghsa","title":"Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)","date":"2026-01-29","url":"https://erroneo.us/security/ghsa/GHSA-vg9h-jx4v-cwx2/","md":"https://erroneo.us/security/ghsa/GHSA-vg9h-jx4v-cwx2/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"dfir-unfurl"},{"id":"CVE-2026-25539","type":"cve","title":"CVE-2026-25539: SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE","date":"2026-01-29","url":"https://erroneo.us/security/cve/CVE-2026-25539/","md":"https://erroneo.us/security/cve/CVE-2026-25539/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01133,"verdict":null,"product":"github.com/siyuan-note/siyuan/kernel (Go)"},{"id":"CVE-2026-25047","type":"cve","title":"CVE-2026-25047: deepHas vulnerable to Prototype Pollution via constructor.prototype","date":"2026-01-29","url":"https://erroneo.us/security/cve/CVE-2026-25047/","md":"https://erroneo.us/security/cve/CVE-2026-25047/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00808,"verdict":null,"product":"deephas (npm)"},{"id":"CVE-2026-1281","type":"cve","title":"CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","date":"2026-01-29","url":"https://erroneo.us/security/cve/CVE-2026-1281/","md":"https://erroneo.us/security/cve/CVE-2026-1281/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98688,"verdict":"act-now","product":"Ivanti Endpoint Manager Mobile (EPMM)"},{"id":"2026-01-29","type":"digest","title":"Security digest for January 29, 2026","date":"2026-01-29","url":"https://erroneo.us/security/2026-01-29/","md":"https://erroneo.us/security/2026-01-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":3}},{"id":"GHSA-5w5r-mf82-595p","type":"ghsa","title":"Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema","date":"2026-01-28","url":"https://erroneo.us/security/ghsa/GHSA-5w5r-mf82-595p/","md":"https://erroneo.us/security/ghsa/GHSA-5w5r-mf82-595p/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"capnp"},{"id":"CVE-2026-24838","type":"cve","title":"CVE-2026-24838: DotNetNuke.Core Vulnerable to Stored XSS via Module Title","date":"2026-01-28","url":"https://erroneo.us/security/cve/CVE-2026-24838/","md":"https://erroneo.us/security/cve/CVE-2026-24838/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00219,"verdict":null,"product":"DotNetNuke.Core (NuGet)"},{"id":"2026-01-28","type":"digest","title":"Security digest for January 28, 2026","date":"2026-01-28","url":"https://erroneo.us/security/2026-01-28/","md":"https://erroneo.us/security/2026-01-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"forticloud-sso-cross-account-bypass-cve-2026-24858","type":"brief","title":"FortiCloud SSO Cross-Account Login: CVE-2026-24858","date":"2026-01-27","url":"https://erroneo.us/security/briefs/forticloud-sso-cross-account-bypass-cve-2026-24858/","md":"https://erroneo.us/security/briefs/forticloud-sso-cross-account-bypass-cve-2026-24858/index.md","severity":"critical","kev":true,"epss":0.85796,"verdict":"act-now","cves":["CVE-2026-24858"],"summary":"Any Fortinet device that relies on FortiCloud SSO needs the January 2026 builds (FortiCloud now refuses SSO from vulnerable versions anyway), and any device with SSO enabled before then should be checked for rogue admins."},{"id":"CVE-2026-24858","type":"cve","title":"CVE-2026-24858: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-01-27","url":"https://erroneo.us/security/cve/CVE-2026-24858/","md":"https://erroneo.us/security/cve/CVE-2026-24858/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.85796,"verdict":"act-now","product":"Fortinet Multiple Products"},{"id":"CVE-2026-23830","type":"cve","title":"CVE-2026-23830: SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor","date":"2026-01-27","url":"https://erroneo.us/security/cve/CVE-2026-23830/","md":"https://erroneo.us/security/cve/CVE-2026-23830/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01237,"verdict":null,"product":"@nyariv/sandboxjs (npm)"},{"id":"CVE-2026-22039","type":"cve","title":"CVE-2026-22039: Kyverno Cross-Namespace Privilege Escalation via Policy apiCall","date":"2026-01-27","url":"https://erroneo.us/security/cve/CVE-2026-22039/","md":"https://erroneo.us/security/cve/CVE-2026-22039/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00587,"verdict":null,"product":"github.com/kyverno/kyverno (Go)"},{"id":"CVE-2026-1470","type":"cve","title":"CVE-2026-1470: n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution","date":"2026-01-27","url":"https://erroneo.us/security/cve/CVE-2026-1470/","md":"https://erroneo.us/security/cve/CVE-2026-1470/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.20683,"verdict":null,"product":"n8n (npm)"},{"id":"2026-01-27","type":"digest","title":"Security digest for January 27, 2026","date":"2026-01-27","url":"https://erroneo.us/security/2026-01-27/","md":"https://erroneo.us/security/2026-01-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":3}},{"id":"GHSA-cr3w-cw5w-h3fj","type":"ghsa","title":"Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE","date":"2026-01-26","url":"https://erroneo.us/security/ghsa/GHSA-cr3w-cw5w-h3fj/","md":"https://erroneo.us/security/ghsa/GHSA-cr3w-cw5w-h3fj/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":null,"verdict":null,"product":"@saltcorn/server"},{"id":"CVE-2026-24061","type":"cve","title":"CVE-2026-24061: GNU InetUtils Argument Injection Vulnerability","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2026-24061/","md":"https://erroneo.us/security/cve/CVE-2026-24061/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98984,"verdict":null,"product":"GNU InetUtils"},{"id":"CVE-2026-23760","type":"cve","title":"CVE-2026-23760: SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2026-23760/","md":"https://erroneo.us/security/cve/CVE-2026-23760/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.96432,"verdict":null,"product":"SmarterTools SmarterMail"},{"id":"CVE-2026-22709","type":"cve","title":"CVE-2026-22709: vm2 has a Sandbox Escape","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2026-22709/","md":"https://erroneo.us/security/cve/CVE-2026-22709/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01289,"verdict":null,"product":"vm2 (npm)"},{"id":"CVE-2026-22696","type":"cve","title":"CVE-2026-22696: dcap-qvl has Missing Verification for QE Identity","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2026-22696/","md":"https://erroneo.us/security/cve/CVE-2026-22696/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00208,"verdict":null,"product":"dcap-qvl (crates.io (Rust))"},{"id":"CVE-2026-21509","type":"cve","title":"CVE-2026-21509: Microsoft Office Security Feature Bypass Vulnerability","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2026-21509/","md":"https://erroneo.us/security/cve/CVE-2026-21509/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.70795,"verdict":null,"product":"Microsoft Office"},{"id":"CVE-2025-52691","type":"cve","title":"CVE-2025-52691: SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2025-52691/","md":"https://erroneo.us/security/cve/CVE-2025-52691/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.85655,"verdict":null,"product":"SmarterTools SmarterMail"},{"id":"CVE-2018-14634","type":"cve","title":"CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2018-14634/","md":"https://erroneo.us/security/cve/CVE-2018-14634/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.14689,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2016-15057","type":"cve","title":"CVE-2016-15057: Apache Continuum vulnerable to Command Injection through Installations REST API","date":"2026-01-26","url":"https://erroneo.us/security/cve/CVE-2016-15057/","md":"https://erroneo.us/security/cve/CVE-2016-15057/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.04134,"verdict":null,"product":"org.apache.continuum:continuum (Maven)"},{"id":"2026-01-26","type":"digest","title":"Security digest for January 26, 2026","date":"2026-01-26","url":"https://erroneo.us/security/2026-01-26/","md":"https://erroneo.us/security/2026-01-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":4}},{"id":"CVE-2025-66719","type":"cve","title":"CVE-2025-66719: Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value","date":"2026-01-23","url":"https://erroneo.us/security/cve/CVE-2025-66719/","md":"https://erroneo.us/security/cve/CVE-2025-66719/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00361,"verdict":null,"product":"github.com/free5gc/nrf (Go)"},{"id":"CVE-2024-37079","type":"cve","title":"CVE-2024-37079: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","date":"2026-01-23","url":"https://erroneo.us/security/cve/CVE-2024-37079/","md":"https://erroneo.us/security/cve/CVE-2024-37079/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.22377,"verdict":null,"product":"Broadcom VMware vCenter Server"},{"id":"2026-01-23","type":"digest","title":"Security digest for January 23, 2026","date":"2026-01-23","url":"https://erroneo.us/security/2026-01-23/","md":"https://erroneo.us/security/2026-01-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-68645","type":"cve","title":"CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","date":"2026-01-22","url":"https://erroneo.us/security/cve/CVE-2025-68645/","md":"https://erroneo.us/security/cve/CVE-2025-68645/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.48873,"verdict":null,"product":"Synacor  Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2025-54313","type":"cve","title":"CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","date":"2026-01-22","url":"https://erroneo.us/security/cve/CVE-2025-54313/","md":"https://erroneo.us/security/cve/CVE-2025-54313/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.05125,"verdict":null,"product":"Prettier eslint-config-prettier"},{"id":"CVE-2025-34026","type":"cve","title":"CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability","date":"2026-01-22","url":"https://erroneo.us/security/cve/CVE-2025-34026/","md":"https://erroneo.us/security/cve/CVE-2025-34026/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.8178,"verdict":null,"product":"Versa Concerto"},{"id":"CVE-2025-31125","type":"cve","title":"CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability","date":"2026-01-22","url":"https://erroneo.us/security/cve/CVE-2025-31125/","md":"https://erroneo.us/security/cve/CVE-2025-31125/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.65189,"verdict":null,"product":"Vite Vitejs"},{"id":"2026-01-22","type":"digest","title":"Security digest for January 22, 2026","date":"2026-01-22","url":"https://erroneo.us/security/2026-01-22/","md":"https://erroneo.us/security/2026-01-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":0}},{"id":"CVE-2026-23966","type":"cve","title":"CVE-2026-23966: sm-crypto Affected by Private Key Recovery in SM2-PKE","date":"2026-01-21","url":"https://erroneo.us/security/cve/CVE-2026-23966/","md":"https://erroneo.us/security/cve/CVE-2026-23966/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00232,"verdict":null,"product":"sm-crypto (npm)"},{"id":"CVE-2026-23524","type":"cve","title":"CVE-2026-23524: Laravel Redis Horizontal Scaling Insecure Deserialization","date":"2026-01-21","url":"https://erroneo.us/security/cve/CVE-2026-23524/","md":"https://erroneo.us/security/cve/CVE-2026-23524/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00976,"verdict":null,"product":"laravel/reverb (Composer (PHP))"},{"id":"CVE-2026-20045","type":"cve","title":"CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability","date":"2026-01-21","url":"https://erroneo.us/security/cve/CVE-2026-20045/","md":"https://erroneo.us/security/cve/CVE-2026-20045/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.04541,"verdict":null,"product":"Cisco Unified Communications Manager"},{"id":"2026-01-21","type":"digest","title":"Security digest for January 21, 2026","date":"2026-01-21","url":"https://erroneo.us/security/2026-01-21/","md":"https://erroneo.us/security/2026-01-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"oracle-http-server-weblogic-proxy-cve-2026-21962","type":"brief","title":"Oracle HTTP Server CVE-2026-21962: CVSS 10 Flaw in KEV","date":"2026-01-20","url":"https://erroneo.us/security/briefs/oracle-http-server-weblogic-proxy-cve-2026-21962/","md":"https://erroneo.us/security/briefs/oracle-http-server-weblogic-proxy-cve-2026-21962/index.md","severity":"critical","kev":true,"epss":0.73192,"verdict":"act-now","cves":["CVE-2026-21962"],"summary":"If an Oracle HTTP Server, Apache or IIS front end with the WebLogic proxy plug-in still lacks the January 2026 CPU, patch it now; exploit code has been public since January and the bug is now confirmed exploited."},{"id":"CVE-2026-23947","type":"cve","title":"CVE-2026-23947: Orval has a code injection via unsanitized x-enum-descriptions in enum generation","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2026-23947/","md":"https://erroneo.us/security/cve/CVE-2026-23947/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00832,"verdict":null,"product":"@orval/core (npm)"},{"id":"CVE-2026-23733","type":"cve","title":"CVE-2026-23733: Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE)","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2026-23733/","md":"https://erroneo.us/security/cve/CVE-2026-23733/index.md","severity":"medium","cvss":6.4,"kev":false,"epss":0.00146,"verdict":null,"product":"@lobehub/chat (npm)"},{"id":"CVE-2026-23518","type":"cve","title":"CVE-2026-23518: Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2026-23518/","md":"https://erroneo.us/security/cve/CVE-2026-23518/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00254,"verdict":null,"product":"github.com/fleetdm/fleet (Go)"},{"id":"CVE-2026-22822","type":"cve","title":"CVE-2026-22822: External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2026-22822/","md":"https://erroneo.us/security/cve/CVE-2026-22822/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00192,"verdict":null,"product":"github.com/external-secrets/external-secrets (Go)"},{"id":"CVE-2025-65482","type":"cve","title":"CVE-2025-65482: XDocReport affected by an XML External Entity (XXE) vulnerability","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2025-65482/","md":"https://erroneo.us/security/cve/CVE-2025-65482/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0057,"verdict":null,"product":"fr.opensagres.xdocreport:fr.opensagres.xdocreport.document (Maven)"},{"id":"CVE-2025-64087","type":"cve","title":"CVE-2025-64087: XDocReport affected by a Server-Side Template Injection (SSTI) vulnerability","date":"2026-01-20","url":"https://erroneo.us/security/cve/CVE-2025-64087/","md":"https://erroneo.us/security/cve/CVE-2025-64087/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00586,"verdict":null,"product":"fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker (Maven)"},{"id":"2026-01-20","type":"digest","title":"Security digest for January 20, 2026","date":"2026-01-20","url":"https://erroneo.us/security/2026-01-20/","md":"https://erroneo.us/security/2026-01-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":6}},{"id":"CVE-2026-26217","type":"cve","title":"CVE-2026-26217: Crawl4AI Has Local File Inclusion in Docker API via file:// URLs","date":"2026-01-16","url":"https://erroneo.us/security/cve/CVE-2026-26217/","md":"https://erroneo.us/security/cve/CVE-2026-26217/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02287,"verdict":null,"product":"crawl4ai (PyPI)"},{"id":"CVE-2026-26216","type":"cve","title":"CVE-2026-26216: Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter","date":"2026-01-16","url":"https://erroneo.us/security/cve/CVE-2026-26216/","md":"https://erroneo.us/security/cve/CVE-2026-26216/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.06001,"verdict":null,"product":"Crawl4AI (PyPI)"},{"id":"CVE-2026-23744","type":"cve","title":"CVE-2026-23744: REC in MCPJam inspector due to HTTP Endpoint exposes","date":"2026-01-16","url":"https://erroneo.us/security/cve/CVE-2026-23744/","md":"https://erroneo.us/security/cve/CVE-2026-23744/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.67516,"verdict":null,"product":"@mcpjam/inspector (npm)"},{"id":"CVE-2026-22863","type":"cve","title":"CVE-2026-22863: Deno node:crypto doesn't finalize cipher","date":"2026-01-16","url":"https://erroneo.us/security/cve/CVE-2026-22863/","md":"https://erroneo.us/security/cve/CVE-2026-22863/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00204,"verdict":null,"product":"deno (crates.io (Rust))"},{"id":"2026-01-16","type":"digest","title":"Security digest for January 16, 2026","date":"2026-01-16","url":"https://erroneo.us/security/2026-01-16/","md":"https://erroneo.us/security/2026-01-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2026-23520","type":"cve","title":"CVE-2026-23520: Arcane Has a Command Injection in Arcane Updater Lifecycle Labels That Enables RCE","date":"2026-01-15","url":"https://erroneo.us/security/cve/CVE-2026-23520/","md":"https://erroneo.us/security/cve/CVE-2026-23520/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01846,"verdict":null,"product":"github.com/getarcaneapp/arcane/backend (Go)"},{"id":"2026-01-15","type":"digest","title":"Security digest for January 15, 2026","date":"2026-01-15","url":"https://erroneo.us/security/2026-01-15/","md":"https://erroneo.us/security/2026-01-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2026-22686","type":"cve","title":"CVE-2026-22686: enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain","date":"2026-01-14","url":"https://erroneo.us/security/cve/CVE-2026-22686/","md":"https://erroneo.us/security/cve/CVE-2026-22686/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00753,"verdict":null,"product":"enclave-vm (npm)"},{"id":"2026-01-14","type":"digest","title":"Security digest for January 14, 2026","date":"2026-01-14","url":"https://erroneo.us/security/2026-01-14/","md":"https://erroneo.us/security/2026-01-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"fortios-cve-2025-25249-capwap-rce-cve-2025-61624","type":"brief","title":"FortiOS CVE-2025-25249 and CVE-2025-61624 Now Exploited","date":"2026-01-13","url":"https://erroneo.us/security/briefs/fortios-cve-2025-25249-capwap-rce-cve-2025-61624/","md":"https://erroneo.us/security/briefs/fortios-cve-2025-25249-capwap-rce-cve-2025-61624/index.md","severity":"high","kev":true,"epss":0.03802,"verdict":"act-now","cves":["CVE-2025-25249","CVE-2025-61624"],"summary":"If you run FortiGates, get to FortiOS 7.4.10+ or 7.6.5+ now and hunt for implants: one bug gives unauthenticated attackers code execution over CAPWAP and is being exploited at scale, and the other turns stolen admin logins into root implants."},{"id":"CVE-2026-22813","type":"cve","title":"CVE-2026-22813: Malicious website can execute commands on the local system through XSS in the OpenCode web UI","date":"2026-01-13","url":"https://erroneo.us/security/cve/CVE-2026-22813/","md":"https://erroneo.us/security/cve/CVE-2026-22813/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00905,"verdict":null,"product":"opencode-ai (npm)"},{"id":"CVE-2026-22785","type":"cve","title":"CVE-2026-22785: orval MCP client is vulnerable to a code injection attack.","date":"2026-01-13","url":"https://erroneo.us/security/cve/CVE-2026-22785/","md":"https://erroneo.us/security/cve/CVE-2026-22785/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00778,"verdict":null,"product":"@orval/mcp (npm)"},{"id":"CVE-2026-20805","type":"cve","title":"CVE-2026-20805: Microsoft Windows Information Disclosure Vulnerability","date":"2026-01-13","url":"https://erroneo.us/security/cve/CVE-2026-20805/","md":"https://erroneo.us/security/cve/CVE-2026-20805/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.07463,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-68924","type":"cve","title":"CVE-2025-68924: UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation","date":"2026-01-13","url":"https://erroneo.us/security/cve/CVE-2025-68924/","md":"https://erroneo.us/security/cve/CVE-2025-68924/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00755,"verdict":null,"product":"UmbracoForms (NuGet)"},{"id":"CVE-2025-68271","type":"cve","title":"CVE-2025-68271: openc3-api Vulnerable to Unauthenticated Remote Code Execution","date":"2026-01-13","url":"https://erroneo.us/security/cve/CVE-2025-68271/","md":"https://erroneo.us/security/cve/CVE-2025-68271/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00642,"verdict":null,"product":"openc3 (RubyGems)"},{"id":"2026-01-13","type":"digest","title":"Security digest for January 13, 2026","date":"2026-01-13","url":"https://erroneo.us/security/2026-01-13/","md":"https://erroneo.us/security/2026-01-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":4}},{"id":"CVE-2025-8110","type":"cve","title":"CVE-2025-8110: Gogs Path Traversal Vulnerability","date":"2026-01-12","url":"https://erroneo.us/security/cve/CVE-2025-8110/","md":"https://erroneo.us/security/cve/CVE-2025-8110/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.85202,"verdict":null,"product":"Gogs Gogs"},{"id":"2026-01-12","type":"digest","title":"Security digest for January 12, 2026","date":"2026-01-12","url":"https://erroneo.us/security/2026-01-12/","md":"https://erroneo.us/security/2026-01-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2026-22688","type":"cve","title":"CVE-2026-22688: WeKnora has Command Injection in MCP stdio test","date":"2026-01-09","url":"https://erroneo.us/security/cve/CVE-2026-22688/","md":"https://erroneo.us/security/cve/CVE-2026-22688/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01936,"verdict":null,"product":"github.com/Tencent/WeKnora (Go)"},{"id":"CVE-2026-22584","type":"cve","title":"CVE-2026-22584: Salesforce Uni2TS has a Code Injection vulnerability","date":"2026-01-09","url":"https://erroneo.us/security/cve/CVE-2026-22584/","md":"https://erroneo.us/security/cve/CVE-2026-22584/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00436,"verdict":null,"product":"uni2ts (PyPI)"},{"id":"CVE-2025-70974","type":"cve","title":"CVE-2025-70974: FASTJSON Includes Functionality from Untrusted Control Sphere","date":"2026-01-09","url":"https://erroneo.us/security/cve/CVE-2025-70974/","md":"https://erroneo.us/security/cve/CVE-2025-70974/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00756,"verdict":null,"product":"com.alibaba:fastjson (Maven)"},{"id":"CVE-2025-65091","type":"cve","title":"CVE-2025-65091: XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONService","date":"2026-01-09","url":"https://erroneo.us/security/cve/CVE-2025-65091/","md":"https://erroneo.us/security/cve/CVE-2025-65091/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00328,"verdict":null,"product":"org.xwiki.contrib:macro-fullcalendar-pom (Maven)"},{"id":"2026-01-09","type":"digest","title":"Security digest for January 9, 2026","date":"2026-01-09","url":"https://erroneo.us/security/2026-01-09/","md":"https://erroneo.us/security/2026-01-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2025-61686","type":"cve","title":"CVE-2025-61686: React Router has Path Traversal in File Session Storage","date":"2026-01-08","url":"https://erroneo.us/security/cve/CVE-2025-61686/","md":"https://erroneo.us/security/cve/CVE-2025-61686/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.17346,"verdict":null,"product":"@react-router/node (npm)"},{"id":"2026-01-08","type":"digest","title":"Security digest for January 8, 2026","date":"2026-01-08","url":"https://erroneo.us/security/2026-01-08/","md":"https://erroneo.us/security/2026-01-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"ni8mare-n8n-unauthenticated-file-read-rce","type":"brief","title":"Ni8mare: n8n Unauthenticated Takeover, Plus a KEV RCE","date":"2026-01-07","url":"https://erroneo.us/security/briefs/ni8mare-n8n-unauthenticated-file-read-rce/","md":"https://erroneo.us/security/briefs/ni8mare-n8n-unauthenticated-file-read-rce/index.md","severity":"critical","kev":true,"epss":0.98994,"verdict":"act-now","cves":["CVE-2026-21858","CVE-2025-68613"],"summary":"If you self-host n8n and anything about it is reachable from the internet, upgrade today: one bug lets strangers in through public forms, and its companion RCE is on CISA's exploited list."},{"id":"CVE-2026-21858","type":"cve","title":"CVE-2026-21858: n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2026-21858/","md":"https://erroneo.us/security/cve/CVE-2026-21858/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.78188,"verdict":"act-now","product":"n8n (npm)"},{"id":"CVE-2026-0650","type":"cve","title":"CVE-2026-0650: OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2026-0650/","md":"https://erroneo.us/security/cve/CVE-2026-0650/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01519,"verdict":null,"product":"github.com/openflagr/flagr (Go)"},{"id":"CVE-2025-61492","type":"cve","title":"CVE-2025-61492: terminal-controller-mcp vulnerable to Command Injection","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2025-61492/","md":"https://erroneo.us/security/cve/CVE-2025-61492/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02138,"verdict":null,"product":"terminal-controller (PyPI)"},{"id":"CVE-2025-37164","type":"cve","title":"CVE-2025-37164: Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2025-37164/","md":"https://erroneo.us/security/cve/CVE-2025-37164/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.90193,"verdict":null,"product":"Hewlett Packard Enterprise (HPE) OneView"},{"id":"CVE-2025-15346","type":"cve","title":"CVE-2025-15346: wolfSSL Python module vulnerable to Improper Authentication","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2025-15346/","md":"https://erroneo.us/security/cve/CVE-2025-15346/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00334,"verdict":null,"product":"wolfssl (PyPI)"},{"id":"CVE-2025-12543","type":"cve","title":"CVE-2025-12543: Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2025-12543/","md":"https://erroneo.us/security/cve/CVE-2025-12543/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01333,"verdict":null,"product":"io.undertow:undertow-core (Maven)"},{"id":"CVE-2009-0556","type":"cve","title":"CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability","date":"2026-01-07","url":"https://erroneo.us/security/cve/CVE-2009-0556/","md":"https://erroneo.us/security/cve/CVE-2009-0556/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.67312,"verdict":null,"product":"Microsoft Office"},{"id":"2026-01-07","type":"digest","title":"Security digest for January 7, 2026","date":"2026-01-07","url":"https://erroneo.us/security/2026-01-07/","md":"https://erroneo.us/security/2026-01-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":5}},{"id":"GHSA-gg4x-fgg2-h9w9","type":"ghsa","title":"Bypassing Kyverno Policies via Double Policy Exceptions","date":"2026-01-06","url":"https://erroneo.us/security/ghsa/GHSA-gg4x-fgg2-h9w9/","md":"https://erroneo.us/security/ghsa/GHSA-gg4x-fgg2-h9w9/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/kyverno/kyverno"},{"id":"CVE-2026-21877","type":"cve","title":"CVE-2026-21877: n8n Vulnerable to RCE via Arbitrary File Write","date":"2026-01-06","url":"https://erroneo.us/security/cve/CVE-2026-21877/","md":"https://erroneo.us/security/cve/CVE-2026-21877/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.05449,"verdict":null,"product":"n8n (npm)"},{"id":"2026-01-06","type":"digest","title":"Security digest for January 6, 2026","date":"2026-01-06","url":"https://erroneo.us/security/2026-01-06/","md":"https://erroneo.us/security/2026-01-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-68428","type":"cve","title":"CVE-2025-68428: jsPDF has Local File Inclusion/Path Traversal vulnerability","date":"2026-01-05","url":"https://erroneo.us/security/cve/CVE-2025-68428/","md":"https://erroneo.us/security/cve/CVE-2025-68428/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02177,"verdict":null,"product":"jspdf (npm)"},{"id":"CVE-2025-62877","type":"cve","title":"CVE-2025-62877: Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer","date":"2026-01-05","url":"https://erroneo.us/security/cve/CVE-2025-62877/","md":"https://erroneo.us/security/cve/CVE-2025-62877/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00514,"verdict":null,"product":"github.com/harvester/harvester-installer (Go)"},{"id":"2026-01-05","type":"digest","title":"Security digest for January 5, 2026","date":"2026-01-05","url":"https://erroneo.us/security/2026-01-05/","md":"https://erroneo.us/security/2026-01-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2026-21440","type":"cve","title":"CVE-2026-21440: AdonisJS Path Traversal in Multipart File Handling","date":"2026-01-02","url":"https://erroneo.us/security/cve/CVE-2026-21440/","md":"https://erroneo.us/security/cve/CVE-2026-21440/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01034,"verdict":null,"product":"@adonisjs/bodyparser (npm)"},{"id":"CVE-2025-68620","type":"cve","title":"CVE-2025-68620: Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling","date":"2026-01-02","url":"https://erroneo.us/security/cve/CVE-2025-68620/","md":"https://erroneo.us/security/cve/CVE-2025-68620/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00539,"verdict":null,"product":"signalk-server (npm)"},{"id":"CVE-2025-66398","type":"cve","title":"CVE-2025-66398: Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)","date":"2026-01-02","url":"https://erroneo.us/security/cve/CVE-2025-66398/","md":"https://erroneo.us/security/cve/CVE-2025-66398/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.1985,"verdict":null,"product":"signalk-server (npm)"},{"id":"2026-01-02","type":"digest","title":"Security digest for January 2, 2026","date":"2026-01-02","url":"https://erroneo.us/security/2026-01-02/","md":"https://erroneo.us/security/2026-01-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-68926","type":"cve","title":"CVE-2025-68926: RustFS has a gRPC Hardcoded Token Authentication Bypass","date":"2025-12-30","url":"https://erroneo.us/security/cve/CVE-2025-68926/","md":"https://erroneo.us/security/cve/CVE-2025-68926/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.3185,"verdict":null,"product":"rustfs (crates.io (Rust))"},{"id":"2025-12-30","type":"digest","title":"Security digest for December 30, 2025","date":"2025-12-30","url":"https://erroneo.us/security/2025-12-30/","md":"https://erroneo.us/security/2025-12-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-14847","type":"cve","title":"CVE-2025-14847: MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","date":"2025-12-29","url":"https://erroneo.us/security/cve/CVE-2025-14847/","md":"https://erroneo.us/security/cve/CVE-2025-14847/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.83218,"verdict":"patch-this-week","product":"MongoDB MongoDB and MongoDB Server"},{"id":"2025-12-29","type":"digest","title":"Security digest for December 29, 2025","date":"2025-12-29","url":"https://erroneo.us/security/2025-12-29/","md":"https://erroneo.us/security/2025-12-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-68668","type":"cve","title":"CVE-2025-68668: n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node","date":"2025-12-26","url":"https://erroneo.us/security/cve/CVE-2025-68668/","md":"https://erroneo.us/security/cve/CVE-2025-68668/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.13167,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2025-13158","type":"cve","title":"CVE-2025-13158: apidoc-core has a prototype pollution vulnerability","date":"2025-12-26","url":"https://erroneo.us/security/cve/CVE-2025-13158/","md":"https://erroneo.us/security/cve/CVE-2025-13158/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00503,"verdict":null,"product":"apidoc-core (npm)"},{"id":"2025-12-26","type":"digest","title":"Security digest for December 26, 2025","date":"2025-12-26","url":"https://erroneo.us/security/2025-12-26/","md":"https://erroneo.us/security/2025-12-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"langgrinch-langchain-core-serialization-injection","type":"brief","title":"LangGrinch: LangChain Core Serialization Injection","date":"2025-12-23","url":"https://erroneo.us/security/briefs/langgrinch-langchain-core-serialization-injection/","md":"https://erroneo.us/security/briefs/langgrinch-langchain-core-serialization-injection/index.md","severity":"critical","kev":false,"epss":0.4293,"verdict":"patch-this-week","cves":["CVE-2025-68664","CVE-2025-68665"],"summary":"A real design flaw in a library almost every Python agent stack pulls in, but it needs a serialize-then-deserialize path over attacker-influenced data; bump langchain-core in your next routine dependency update."},{"id":"CVE-2025-68665","type":"cve","title":"CVE-2025-68665: LangChain serialization injection vulnerability enables secret extraction","date":"2025-12-23","url":"https://erroneo.us/security/cve/CVE-2025-68665/","md":"https://erroneo.us/security/cve/CVE-2025-68665/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.00793,"verdict":"patch-this-week","product":"langchain-ai langchainjs"},{"id":"CVE-2025-68664","type":"cve","title":"CVE-2025-68664: LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs","date":"2025-12-23","url":"https://erroneo.us/security/cve/CVE-2025-68664/","md":"https://erroneo.us/security/cve/CVE-2025-68664/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.4293,"verdict":"patch-this-week","product":"langchain-core (PyPI)"},{"id":"CVE-2025-14931","type":"cve","title":"CVE-2025-14931: Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE","date":"2025-12-23","url":"https://erroneo.us/security/cve/CVE-2025-14931/","md":"https://erroneo.us/security/cve/CVE-2025-14931/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.01087,"verdict":null,"product":"smolagents (PyPI)"},{"id":"2025-12-23","type":"digest","title":"Security digest for December 23, 2025","date":"2025-12-23","url":"https://erroneo.us/security/2025-12-23/","md":"https://erroneo.us/security/2025-12-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"CVE-2023-52163","type":"cve","title":"CVE-2023-52163: Digiever DS-2105 Pro Missing Authorization Vulnerability","date":"2025-12-22","url":"https://erroneo.us/security/cve/CVE-2023-52163/","md":"https://erroneo.us/security/cve/CVE-2023-52163/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.96921,"verdict":null,"product":"Digiever DS-2105 Pro"},{"id":"2025-12-22","type":"digest","title":"Security digest for December 22, 2025","date":"2025-12-22","url":"https://erroneo.us/security/2025-12-22/","md":"https://erroneo.us/security/2025-12-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"mongobleed-mongodb-zlib-memory-leak","type":"brief","title":"MongoBleed: Pre-Auth Memory Leak in MongoDB Server","date":"2025-12-19","url":"https://erroneo.us/security/briefs/mongobleed-mongodb-zlib-memory-leak/","md":"https://erroneo.us/security/briefs/mongobleed-mongodb-zlib-memory-leak/index.md","severity":"high","kev":true,"epss":0.83218,"verdict":"patch-this-week","cves":["CVE-2025-14847"],"summary":"Atlas users are already patched; self-hosted MongoDB that untrusted networks can reach must be upgraded (or have zlib disabled) now, and internet-exposed instances should rotate credentials."},{"id":"CVE-2025-14733","type":"cve","title":"CVE-2025-14733: WatchGuard Firebox Out of Bounds Write Vulnerability","date":"2025-12-19","url":"https://erroneo.us/security/cve/CVE-2025-14733/","md":"https://erroneo.us/security/cve/CVE-2025-14733/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.2651,"verdict":null,"product":"WatchGuard Firebox"},{"id":"2025-12-19","type":"digest","title":"Security digest for December 19, 2025","date":"2025-12-19","url":"https://erroneo.us/security/2025-12-19/","md":"https://erroneo.us/security/2025-12-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"CVE-2025-68398","type":"cve","title":"CVE-2025-68398: Weblate is vulnerable to RCE through Git config file overwrite","date":"2025-12-18","url":"https://erroneo.us/security/cve/CVE-2025-68398/","md":"https://erroneo.us/security/cve/CVE-2025-68398/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00792,"verdict":null,"product":"Weblate (PyPI)"},{"id":"CVE-2025-63389","type":"cve","title":"CVE-2025-63389: Ollama Platform has missing authentication enabling attackers to perform model management operations","date":"2025-12-18","url":"https://erroneo.us/security/cve/CVE-2025-63389/","md":"https://erroneo.us/security/cve/CVE-2025-63389/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00708,"verdict":null,"product":"github.com/ollama/ollama (Go)"},{"id":"2025-12-18","type":"digest","title":"Security digest for December 18, 2025","date":"2025-12-18","url":"https://erroneo.us/security/2025-12-18/","md":"https://erroneo.us/security/2025-12-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-67895","type":"cve","title":"CVE-2025-67895: Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-67895/","md":"https://erroneo.us/security/cve/CVE-2025-67895/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00999,"verdict":null,"product":"apache-airflow-providers-edge3 (PyPI)"},{"id":"CVE-2025-67165","type":"cve","title":"CVE-2025-67165: Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-67165/","md":"https://erroneo.us/security/cve/CVE-2025-67165/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00499,"verdict":null,"product":"pagekit/pagekit (Composer (PHP))"},{"id":"CVE-2025-67164","type":"cve","title":"CVE-2025-67164: Pagekit CMS is vulnerable to OS Command Injection via Storage component","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-67164/","md":"https://erroneo.us/security/cve/CVE-2025-67164/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00535,"verdict":null,"product":"pagekit/pagekit (Composer (PHP))"},{"id":"CVE-2025-59374","type":"cve","title":"CVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-59374/","md":"https://erroneo.us/security/cve/CVE-2025-59374/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.01197,"verdict":null,"product":"ASUS Live Update"},{"id":"CVE-2025-40602","type":"cve","title":"CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-40602/","md":"https://erroneo.us/security/cve/CVE-2025-40602/index.md","severity":"medium","cvss":6.6,"kev":true,"epss":0.02756,"verdict":null,"product":"SonicWall SMA1000 appliance"},{"id":"CVE-2025-20393","type":"cve","title":"CVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability","date":"2025-12-17","url":"https://erroneo.us/security/cve/CVE-2025-20393/","md":"https://erroneo.us/security/cve/CVE-2025-20393/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.32392,"verdict":null,"product":"Cisco Multiple Products"},{"id":"2025-12-17","type":"digest","title":"Security digest for December 17, 2025","date":"2025-12-17","url":"https://erroneo.us/security/2025-12-17/","md":"https://erroneo.us/security/2025-12-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":3}},{"id":"CVE-2025-59718","type":"cve","title":"CVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","date":"2025-12-16","url":"https://erroneo.us/security/cve/CVE-2025-59718/","md":"https://erroneo.us/security/cve/CVE-2025-59718/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.68293,"verdict":"act-now","product":"Fortinet Multiple Products"},{"id":"2025-12-16","type":"digest","title":"Security digest for December 16, 2025","date":"2025-12-16","url":"https://erroneo.us/security/2025-12-16/","md":"https://erroneo.us/security/2025-12-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-66844","type":"cve","title":"CVE-2025-66844: Grav may be vulnerable to SSRF attack via Twig Templates","date":"2025-12-15","url":"https://erroneo.us/security/cve/CVE-2025-66844/","md":"https://erroneo.us/security/cve/CVE-2025-66844/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00291,"verdict":null,"product":"getgrav/grav (Composer (PHP))"},{"id":"CVE-2025-43529","type":"cve","title":"CVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerability","date":"2025-12-15","url":"https://erroneo.us/security/cve/CVE-2025-43529/","md":"https://erroneo.us/security/cve/CVE-2025-43529/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.08763,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-14611","type":"cve","title":"CVE-2025-14611: Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","date":"2025-12-15","url":"https://erroneo.us/security/cve/CVE-2025-14611/","md":"https://erroneo.us/security/cve/CVE-2025-14611/index.md","severity":"high","cvss":7.1,"kev":true,"epss":0.53302,"verdict":null,"product":"Gladinet CentreStack and Triofox"},{"id":"CVE-2025-13888","type":"cve","title":"CVE-2025-13888: OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources","date":"2025-12-15","url":"https://erroneo.us/security/cve/CVE-2025-13888/","md":"https://erroneo.us/security/cve/CVE-2025-13888/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00691,"verdict":null,"product":"github.com/redhat-developer/gitops-operator (Go)"},{"id":"2025-12-15","type":"digest","title":"Security digest for December 15, 2025","date":"2025-12-15","url":"https://erroneo.us/security/2025-12-15/","md":"https://erroneo.us/security/2025-12-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2025-65854","type":"cve","title":"CVE-2025-65854: MineAdmin has an insecure default password","date":"2025-12-12","url":"https://erroneo.us/security/cve/CVE-2025-65854/","md":"https://erroneo.us/security/cve/CVE-2025-65854/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00496,"verdict":null,"product":"mineadmin/mineadmin (Composer (PHP))"},{"id":"CVE-2025-14174","type":"cve","title":"CVE-2025-14174: Google Chromium Out of Bounds Memory Access Vulnerability","date":"2025-12-12","url":"https://erroneo.us/security/cve/CVE-2025-14174/","md":"https://erroneo.us/security/cve/CVE-2025-14174/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.22327,"verdict":null,"product":"Google Chromium"},{"id":"CVE-2018-4063","type":"cve","title":"CVE-2018-4063: Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2025-12-12","url":"https://erroneo.us/security/cve/CVE-2018-4063/","md":"https://erroneo.us/security/cve/CVE-2018-4063/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.2726,"verdict":null,"product":"Sierra Wireless AirLink ALEOS"},{"id":"2025-12-12","type":"digest","title":"Security digest for December 12, 2025","date":"2025-12-12","url":"https://erroneo.us/security/2025-12-12/","md":"https://erroneo.us/security/2025-12-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2025-58360","type":"cve","title":"CVE-2025-58360: OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","date":"2025-12-11","url":"https://erroneo.us/security/cve/CVE-2025-58360/","md":"https://erroneo.us/security/cve/CVE-2025-58360/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.60012,"verdict":null,"product":"OSGeo GeoServer"},{"id":"CVE-2025-13780","type":"cve","title":"CVE-2025-13780: pgadmin4 has a Meta-Command Filter Command Execution","date":"2025-12-11","url":"https://erroneo.us/security/cve/CVE-2025-13780/","md":"https://erroneo.us/security/cve/CVE-2025-13780/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00943,"verdict":null,"product":"pgadmin4 (PyPI)"},{"id":"2025-12-11","type":"digest","title":"Security digest for December 11, 2025","date":"2025-12-11","url":"https://erroneo.us/security/2025-12-11/","md":"https://erroneo.us/security/2025-12-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-67719","type":"cve","title":"CVE-2025-67719: Ibexa User Bundle is missing password change validation","date":"2025-12-10","url":"https://erroneo.us/security/cve/CVE-2025-67719/","md":"https://erroneo.us/security/cve/CVE-2025-67719/index.md","severity":"high","cvss":8.5,"kev":false,"epss":0.00142,"verdict":null,"product":"ibexa/user (Composer (PHP))"},{"id":"2025-12-10","type":"digest","title":"Security digest for December 10, 2025","date":"2025-12-10","url":"https://erroneo.us/security/2025-12-10/","md":"https://erroneo.us/security/2025-12-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"forticloud-sso-saml-bypass-cve-2025-59718","type":"brief","title":"FortiCloud SSO SAML Bypass: CVE-2025-59718/59719","date":"2025-12-09","url":"https://erroneo.us/security/briefs/forticloud-sso-saml-bypass-cve-2025-59718/","md":"https://erroneo.us/security/briefs/forticloud-sso-saml-bypass-cve-2025-59718/index.md","severity":"critical","kev":true,"epss":0.68293,"verdict":"act-now","cves":["CVE-2025-59718","CVE-2025-59719"],"summary":"If any Fortinet device has FortiCloud SSO admin login turned on, it was open to unauthenticated admin takeover; upgrade, then also apply the January 2026 fix for CVE-2026-24858, which bypassed this patch."},{"id":"GHSA-5j8p-438x-rgg5","type":"ghsa","title":"SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475","date":"2025-12-09","url":"https://erroneo.us/security/ghsa/GHSA-5j8p-438x-rgg5/","md":"https://erroneo.us/security/ghsa/GHSA-5j8p-438x-rgg5/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"onelogin/php-saml, onelogin/php-saml"},{"id":"CVE-2025-67511","type":"cve","title":"CVE-2025-67511: Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-67511/","md":"https://erroneo.us/security/cve/CVE-2025-67511/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.02022,"verdict":null,"product":"cai-framework (PyPI)"},{"id":"CVE-2025-67510","type":"cve","title":"CVE-2025-67510: Neuron MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-67510/","md":"https://erroneo.us/security/cve/CVE-2025-67510/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00408,"verdict":null,"product":"neuron-core/neuron-ai (Composer (PHP))"},{"id":"CVE-2025-66456","type":"cve","title":"CVE-2025-66456: Elysia vulnerable to prototype pollution with multiple standalone schema validation","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-66456/","md":"https://erroneo.us/security/cve/CVE-2025-66456/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0056,"verdict":null,"product":"elysia (npm)"},{"id":"CVE-2025-62221","type":"cve","title":"CVE-2025-62221: Microsoft Windows Use After Free Vulnerability","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-62221/","md":"https://erroneo.us/security/cve/CVE-2025-62221/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02505,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-6218","type":"cve","title":"CVE-2025-6218: RARLAB WinRAR Path Traversal Vulnerability","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-6218/","md":"https://erroneo.us/security/cve/CVE-2025-6218/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.90479,"verdict":null,"product":"RARLAB WinRAR"},{"id":"CVE-2025-59719","type":"cve","title":"CVE-2025-59719: Fortinet FortiWeb vulnerability","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-59719/","md":"https://erroneo.us/security/cve/CVE-2025-59719/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.29224,"verdict":"act-now","product":"Fortinet FortiWeb"},{"id":"CVE-2025-14307","type":"cve","title":"CVE-2025-14307: Robocode has an insecure temporary file creation vulnerability in the AutoExtract component","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-14307/","md":"https://erroneo.us/security/cve/CVE-2025-14307/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00332,"verdict":null,"product":"net.sf.robocode:robocode.battle (Maven)"},{"id":"CVE-2025-14306","type":"cve","title":"CVE-2025-14306: Robocode vulnerable to Directory Traversal in recursivelyDelete Method","date":"2025-12-09","url":"https://erroneo.us/security/cve/CVE-2025-14306/","md":"https://erroneo.us/security/cve/CVE-2025-14306/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01074,"verdict":null,"product":"net.sf.robocode:robocode.core (Maven)"},{"id":"2025-12-09","type":"digest","title":"Security digest for December 9, 2025","date":"2025-12-09","url":"https://erroneo.us/security/2025-12-09/","md":"https://erroneo.us/security/2025-12-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":6}},{"id":"CVE-2025-67494","type":"cve","title":"CVE-2025-67494: ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-67494/","md":"https://erroneo.us/security/cve/CVE-2025-67494/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00444,"verdict":null,"product":"github.com/zitadel/zitadel (Go)"},{"id":"CVE-2025-67489","type":"cve","title":"CVE-2025-67489: @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-67489/","md":"https://erroneo.us/security/cve/CVE-2025-67489/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00814,"verdict":null,"product":"@vitejs/plugin-rsc (npm)"},{"id":"CVE-2025-66644","type":"cve","title":"CVE-2025-66644: Array Networks ArrayOS AG OS Command Injection Vulnerability","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-66644/","md":"https://erroneo.us/security/cve/CVE-2025-66644/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.03415,"verdict":null,"product":"Array Networks  ArrayOS AG"},{"id":"CVE-2025-66568","type":"cve","title":"CVE-2025-66568: Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-66568/","md":"https://erroneo.us/security/cve/CVE-2025-66568/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00235,"verdict":null,"product":"ruby-saml (RubyGems)"},{"id":"CVE-2025-66567","type":"cve","title":"CVE-2025-66567: Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-66567/","md":"https://erroneo.us/security/cve/CVE-2025-66567/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00392,"verdict":null,"product":"ruby-saml (RubyGems)"},{"id":"CVE-2025-66565","type":"cve","title":"CVE-2025-66565: Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-66565/","md":"https://erroneo.us/security/cve/CVE-2025-66565/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00468,"verdict":null,"product":"github.com/gofiber/utils/v2 (Go)"},{"id":"CVE-2025-65964","type":"cve","title":"CVE-2025-65964: n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2025-65964/","md":"https://erroneo.us/security/cve/CVE-2025-65964/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00663,"verdict":null,"product":"n8n (npm)"},{"id":"CVE-2022-37055","type":"cve","title":"CVE-2022-37055: D-Link Routers Buffer Overflow Vulnerability","date":"2025-12-08","url":"https://erroneo.us/security/cve/CVE-2022-37055/","md":"https://erroneo.us/security/cve/CVE-2022-37055/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.55531,"verdict":null,"product":"D-Link Routers"},{"id":"2025-12-08","type":"digest","title":"Security digest for December 8, 2025","date":"2025-12-08","url":"https://erroneo.us/security/2025-12-08/","md":"https://erroneo.us/security/2025-12-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":6}},{"id":"CVE-2025-55182","type":"cve","title":"CVE-2025-55182: Meta React Server Components Remote Code Execution Vulnerability","date":"2025-12-05","url":"https://erroneo.us/security/cve/CVE-2025-55182/","md":"https://erroneo.us/security/cve/CVE-2025-55182/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99802,"verdict":"act-now","product":"Meta React Server Components"},{"id":"2025-12-05","type":"digest","title":"Security digest for December 5, 2025","date":"2025-12-05","url":"https://erroneo.us/security/2025-12-05/","md":"https://erroneo.us/security/2025-12-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-66516","type":"cve","title":"CVE-2025-66516: Apache Tika has XXE vulnerability","date":"2025-12-04","url":"https://erroneo.us/security/cve/CVE-2025-66516/","md":"https://erroneo.us/security/cve/CVE-2025-66516/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.88976,"verdict":null,"product":"org.apache.tika:tika-core (Maven)"},{"id":"2025-12-04","type":"digest","title":"Security digest for December 4, 2025","date":"2025-12-04","url":"https://erroneo.us/security/2025-12-04/","md":"https://erroneo.us/security/2025-12-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"react2shell-react-server-components-rce","type":"brief","title":"React2Shell: Unauthenticated RCE in React Server Components","date":"2025-12-03","url":"https://erroneo.us/security/briefs/react2shell-react-server-components-rce/","md":"https://erroneo.us/security/briefs/react2shell-react-server-components-rce/index.md","severity":"critical","kev":true,"epss":0.99802,"verdict":"act-now","cves":["CVE-2025-55182"],"summary":"If any server you run renders React Server Components and was not patched in December 2025, treat it as compromised until shown otherwise: patch, redeploy, and rotate its secrets."},{"id":"GHSA-fmh4-wr37-44fp","type":"ghsa","title":"React Server Components are Vulnerable to RCE","date":"2025-12-03","url":"https://erroneo.us/security/ghsa/GHSA-fmh4-wr37-44fp/","md":"https://erroneo.us/security/ghsa/GHSA-fmh4-wr37-44fp/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"@vitejs/plugin-rsc"},{"id":"GHSA-9qr9-h5gf-34mp","type":"ghsa","title":"Next.js is vulnerable to RCE in React flight protocol","date":"2025-12-03","url":"https://erroneo.us/security/ghsa/GHSA-9qr9-h5gf-34mp/","md":"https://erroneo.us/security/ghsa/GHSA-9qr9-h5gf-34mp/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"next, next"},{"id":"CVE-2025-44005","type":"cve","title":"CVE-2025-44005: Step CA Has Authorization Bypass in ACME and SCEP Provisioners","date":"2025-12-03","url":"https://erroneo.us/security/cve/CVE-2025-44005/","md":"https://erroneo.us/security/cve/CVE-2025-44005/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.09091,"verdict":null,"product":"github.com/smallstep/certificates (Go)"},{"id":"CVE-2021-26828","type":"cve","title":"CVE-2021-26828: OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","date":"2025-12-03","url":"https://erroneo.us/security/cve/CVE-2021-26828/","md":"https://erroneo.us/security/cve/CVE-2021-26828/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.39096,"verdict":null,"product":"OpenPLC ScadaBR"},{"id":"2025-12-03","type":"digest","title":"Security digest for December 3, 2025","date":"2025-12-03","url":"https://erroneo.us/security/2025-12-03/","md":"https://erroneo.us/security/2025-12-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":4}},{"id":"CVE-2025-65896","type":"cve","title":"CVE-2025-65896: asyncmy is vulnerable to SQL injection via crafted dict keys","date":"2025-12-02","url":"https://erroneo.us/security/cve/CVE-2025-65896/","md":"https://erroneo.us/security/cve/CVE-2025-65896/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0043,"verdict":null,"product":"asyncmy (PyPI)"},{"id":"CVE-2025-48633","type":"cve","title":"CVE-2025-48633: Android Framework Information Disclosure Vulnerability","date":"2025-12-02","url":"https://erroneo.us/security/cve/CVE-2025-48633/","md":"https://erroneo.us/security/cve/CVE-2025-48633/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.00262,"verdict":null,"product":"Android Framework"},{"id":"CVE-2025-48572","type":"cve","title":"CVE-2025-48572: Android Framework Privilege Escalation Vulnerability","date":"2025-12-02","url":"https://erroneo.us/security/cve/CVE-2025-48572/","md":"https://erroneo.us/security/cve/CVE-2025-48572/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00259,"verdict":null,"product":"Android Framework"},{"id":"CVE-2025-13828","type":"cve","title":"CVE-2025-13828: Mautic user without privileged access to the Marketplace can install and uninstall composer packages","date":"2025-12-02","url":"https://erroneo.us/security/cve/CVE-2025-13828/","md":"https://erroneo.us/security/cve/CVE-2025-13828/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00246,"verdict":null,"product":"mautic/core (Composer (PHP))"},{"id":"2025-12-02","type":"digest","title":"Security digest for December 2, 2025","date":"2025-12-02","url":"https://erroneo.us/security/2025-12-02/","md":"https://erroneo.us/security/2025-12-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2025-66401","type":"cve","title":"CVE-2025-66401: MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL","date":"2025-12-01","url":"https://erroneo.us/security/cve/CVE-2025-66401/","md":"https://erroneo.us/security/cve/CVE-2025-66401/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02227,"verdict":null,"product":"mcp-watch (npm)"},{"id":"2025-12-01","type":"digest","title":"Security digest for December 1, 2025","date":"2025-12-01","url":"https://erroneo.us/security/2025-12-01/","md":"https://erroneo.us/security/2025-12-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2021-26829","type":"cve","title":"CVE-2021-26829: OpenPLC ScadaBR Cross-site Scripting Vulnerability","date":"2025-11-28","url":"https://erroneo.us/security/cve/CVE-2021-26829/","md":"https://erroneo.us/security/cve/CVE-2021-26829/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.4805,"verdict":null,"product":"OpenPLC ScadaBR"},{"id":"2025-11-28","type":"digest","title":"Security digest for November 28, 2025","date":"2025-11-28","url":"https://erroneo.us/security/2025-11-28/","md":"https://erroneo.us/security/2025-11-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-12421","type":"cve","title":"CVE-2025-12421: Mattermost fails to to verify the token used during code exchange","date":"2025-11-27","url":"https://erroneo.us/security/cve/CVE-2025-12421/","md":"https://erroneo.us/security/cve/CVE-2025-12421/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00345,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"CVE-2025-12419","type":"cve","title":"CVE-2025-12419: Mattermost fails to properly validate OAuth state tokens during OpenID Connect authentication","date":"2025-11-27","url":"https://erroneo.us/security/cve/CVE-2025-12419/","md":"https://erroneo.us/security/cve/CVE-2025-12419/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00345,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"2025-11-27","type":"digest","title":"Security digest for November 27, 2025","date":"2025-11-27","url":"https://erroneo.us/security/2025-11-27/","md":"https://erroneo.us/security/2025-11-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"ray-cve-2025-62593-browser-dns-rebinding-rce","type":"brief","title":"Ray CVE-2025-62593: Browser-Driven RCE Against Ray Devs","date":"2025-11-26","url":"https://erroneo.us/security/briefs/ray-cve-2025-62593-browser-dns-rebinding-rce/","md":"https://erroneo.us/security/briefs/ray-cve-2025-62593-browser-dns-rebinding-rce/index.md","severity":"critical","kev":true,"epss":0.62459,"verdict":"patch-this-week","cves":["CVE-2025-62593"],"summary":"Upgrade Ray to 2.52.0 or later on developer machines and internal clusters this week; the attack needs a Firefox or Safari user to load a hostile page while a pre-2.52 dashboard is running, and the public evidence of real-world use is thin."},{"id":"CVE-2025-59390","type":"cve","title":"CVE-2025-59390: Apache Druid’s Kerberos authenticator uses a weak fallback secret","date":"2025-11-26","url":"https://erroneo.us/security/cve/CVE-2025-59390/","md":"https://erroneo.us/security/cve/CVE-2025-59390/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00611,"verdict":null,"product":"org.apache.druid:druid (Maven)"},{"id":"CVE-2025-34351","type":"cve","title":"CVE-2025-34351: Ray's New Token Authentication is Disabled By Default","date":"2025-11-26","url":"https://erroneo.us/security/cve/CVE-2025-34351/","md":"https://erroneo.us/security/cve/CVE-2025-34351/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"ray (PyPI)"},{"id":"2025-11-26","type":"digest","title":"Security digest for November 26, 2025","date":"2025-11-26","url":"https://erroneo.us/security/2025-11-26/","md":"https://erroneo.us/security/2025-11-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"GHSA-2fjw-whxm-9v4q","type":"ghsa","title":"libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)","date":"2025-11-25","url":"https://erroneo.us/security/ghsa/GHSA-2fjw-whxm-9v4q/","md":"https://erroneo.us/security/ghsa/GHSA-2fjw-whxm-9v4q/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"nftnl"},{"id":"CVE-2025-66016","type":"cve","title":"CVE-2025-66016: cggmp21 has a missing check in the ZK proof used in CGGMP21","date":"2025-11-25","url":"https://erroneo.us/security/cve/CVE-2025-66016/","md":"https://erroneo.us/security/cve/CVE-2025-66016/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00186,"verdict":null,"product":"cggmp21 (crates.io (Rust))"},{"id":"2025-11-25","type":"digest","title":"Security digest for November 25, 2025","date":"2025-11-25","url":"https://erroneo.us/security/2025-11-25/","md":"https://erroneo.us/security/2025-11-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"shai-hulud-2-npm-worm","type":"brief","title":"Shai-Hulud 2.0: npm Worm Hits PostHog, Zapier, Postman","date":"2025-11-24","url":"https://erroneo.us/security/briefs/shai-hulud-2-npm-worm/","md":"https://erroneo.us/security/briefs/shai-hulud-2-npm-worm/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"The worm is long dead on npm, but any machine or CI runner that installed a trojanized version between Nov 21 and Nov 27, 2025 should be treated as having leaked every secret it could reach."},{"id":"GHSA-rj4j-2jph-gg43","type":"ghsa","title":"LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction","date":"2025-11-24","url":"https://erroneo.us/security/ghsa/GHSA-rj4j-2jph-gg43/","md":"https://erroneo.us/security/ghsa/GHSA-rj4j-2jph-gg43/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/lf-edge/ekuiper/v2"},{"id":"2025-11-24","type":"digest","title":"Security digest for November 24, 2025","date":"2025-11-24","url":"https://erroneo.us/security/2025-11-24/","md":"https://erroneo.us/security/2025-11-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2025-61757","type":"cve","title":"CVE-2025-61757: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","date":"2025-11-21","url":"https://erroneo.us/security/cve/CVE-2025-61757/","md":"https://erroneo.us/security/cve/CVE-2025-61757/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.88647,"verdict":null,"product":"Oracle Fusion Middleware"},{"id":"CVE-2025-41115","type":"cve","title":"CVE-2025-41115: Grafana Incorrect Privilege Assignment vulnerability","date":"2025-11-21","url":"https://erroneo.us/security/cve/CVE-2025-41115/","md":"https://erroneo.us/security/cve/CVE-2025-41115/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.16905,"verdict":null,"product":"github.com/grafana/grafana (Go)"},{"id":"2025-11-21","type":"digest","title":"Security digest for November 21, 2025","date":"2025-11-21","url":"https://erroneo.us/security/2025-11-21/","md":"https://erroneo.us/security/2025-11-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-65108","type":"cve","title":"CVE-2025-65108: md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter","date":"2025-11-20","url":"https://erroneo.us/security/cve/CVE-2025-65108/","md":"https://erroneo.us/security/cve/CVE-2025-65108/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00926,"verdict":null,"product":"md-to-pdf (npm)"},{"id":"CVE-2025-64767","type":"cve","title":"CVE-2025-64767: @hpke/core reuses AEAD nonces","date":"2025-11-20","url":"https://erroneo.us/security/cve/CVE-2025-64767/","md":"https://erroneo.us/security/cve/CVE-2025-64767/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00212,"verdict":null,"product":"@hpke/core (npm)"},{"id":"2025-11-20","type":"digest","title":"Security digest for November 20, 2025","date":"2025-11-20","url":"https://erroneo.us/security/2025-11-20/","md":"https://erroneo.us/security/2025-11-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-64408","type":"cve","title":"CVE-2025-64408: Apache Causeway vulnerable to deserialization in Java","date":"2025-11-19","url":"https://erroneo.us/security/cve/CVE-2025-64408/","md":"https://erroneo.us/security/cve/CVE-2025-64408/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.11555,"verdict":null,"product":"org.apache.causeway.commons:causeway-commons (Maven)"},{"id":"CVE-2025-13223","type":"cve","title":"CVE-2025-13223: Google Chromium V8 Type Confusion Vulnerability","date":"2025-11-19","url":"https://erroneo.us/security/cve/CVE-2025-13223/","md":"https://erroneo.us/security/cve/CVE-2025-13223/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.049,"verdict":null,"product":"Google Chromium V8"},{"id":"2025-11-19","type":"digest","title":"Security digest for November 19, 2025","date":"2025-11-19","url":"https://erroneo.us/security/2025-11-19/","md":"https://erroneo.us/security/2025-11-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-65015","type":"cve","title":"CVE-2025-65015: joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads","date":"2025-11-18","url":"https://erroneo.us/security/cve/CVE-2025-65015/","md":"https://erroneo.us/security/cve/CVE-2025-65015/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0044,"verdict":null,"product":"joserfc (PyPI)"},{"id":"CVE-2025-60455","type":"cve","title":"CVE-2025-60455: Modular Max Serve has Unsafe Deserialization vulnerability","date":"2025-11-18","url":"https://erroneo.us/security/cve/CVE-2025-60455/","md":"https://erroneo.us/security/cve/CVE-2025-60455/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00333,"verdict":null,"product":"modular (PyPI)"},{"id":"CVE-2025-58034","type":"cve","title":"CVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerability","date":"2025-11-18","url":"https://erroneo.us/security/cve/CVE-2025-58034/","md":"https://erroneo.us/security/cve/CVE-2025-58034/index.md","severity":"medium","cvss":6.7,"kev":true,"epss":0.54724,"verdict":"act-now","product":"Fortinet FortiWeb"},{"id":"CVE-2025-12383","type":"cve","title":"CVE-2025-12383: Eclipse Jersey has a Race Condition","date":"2025-11-18","url":"https://erroneo.us/security/cve/CVE-2025-12383/","md":"https://erroneo.us/security/cve/CVE-2025-12383/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00298,"verdict":null,"product":"org.glassfish.jersey.core:jersey-client (Maven)"},{"id":"2025-11-18","type":"digest","title":"Security digest for November 18, 2025","date":"2025-11-18","url":"https://erroneo.us/security/2025-11-18/","md":"https://erroneo.us/security/2025-11-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"fortiweb-cve-2025-64446-path-traversal","type":"brief","title":"FortiWeb CVE-2025-64446: Exploited Unauthenticated Takeover","date":"2025-11-14","url":"https://erroneo.us/security/briefs/fortiweb-cve-2025-64446-path-traversal/","md":"https://erroneo.us/security/briefs/fortiweb-cve-2025-64446-path-traversal/index.md","severity":"critical","kev":true,"epss":0.91965,"verdict":"act-now","cves":["CVE-2025-64446","CVE-2025-58034"],"summary":"Any FortiWeb still below the fixed builds with its web GUI reachable from the internet should be presumed compromised and rebuilt, not just patched."},{"id":"CVE-2025-64446","type":"cve","title":"CVE-2025-64446: Fortinet FortiWeb Path Traversal Vulnerability","date":"2025-11-14","url":"https://erroneo.us/security/cve/CVE-2025-64446/","md":"https://erroneo.us/security/cve/CVE-2025-64446/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.91965,"verdict":"act-now","product":"Fortinet FortiWeb"},{"id":"CVE-2025-55449","type":"cve","title":"CVE-2025-55449: AstrBot is vulnerable to RCE with hard-coded JWT signing keys","date":"2025-11-14","url":"https://erroneo.us/security/cve/CVE-2025-55449/","md":"https://erroneo.us/security/cve/CVE-2025-55449/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00281,"verdict":null,"product":"astrbot (PyPI)"},{"id":"2025-11-14","type":"digest","title":"Security digest for November 14, 2025","date":"2025-11-14","url":"https://erroneo.us/security/2025-11-14/","md":"https://erroneo.us/security/2025-11-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"GHSA-6jqf-mv7m-3q7p","type":"ghsa","title":"File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency","date":"2025-11-13","url":"https://erroneo.us/security/ghsa/GHSA-6jqf-mv7m-3q7p/","md":"https://erroneo.us/security/ghsa/GHSA-6jqf-mv7m-3q7p/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/filebrowser/filebrowser/v2"},{"id":"CVE-2025-64513","type":"cve","title":"CVE-2025-64513: Milvus Proxy has a Critical Authentication Bypass Vulnerability","date":"2025-11-13","url":"https://erroneo.us/security/cve/CVE-2025-64513/","md":"https://erroneo.us/security/cve/CVE-2025-64513/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00869,"verdict":null,"product":"github.com/milvus-io/milvus (Go)"},{"id":"CVE-2025-12762","type":"cve","title":"CVE-2025-12762: pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode","date":"2025-11-13","url":"https://erroneo.us/security/cve/CVE-2025-12762/","md":"https://erroneo.us/security/cve/CVE-2025-12762/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.12705,"verdict":null,"product":"pgadmin4 (PyPI)"},{"id":"2025-11-13","type":"digest","title":"Security digest for November 13, 2025","date":"2025-11-13","url":"https://erroneo.us/security/2025-11-13/","md":"https://erroneo.us/security/2025-11-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-9242","type":"cve","title":"CVE-2025-9242: WatchGuard Firebox Out-of-Bounds Write Vulnerability","date":"2025-11-12","url":"https://erroneo.us/security/cve/CVE-2025-9242/","md":"https://erroneo.us/security/cve/CVE-2025-9242/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.91804,"verdict":null,"product":"WatchGuard Firebox"},{"id":"CVE-2025-62215","type":"cve","title":"CVE-2025-62215: Microsoft Windows Race Condition Vulnerability","date":"2025-11-12","url":"https://erroneo.us/security/cve/CVE-2025-62215/","md":"https://erroneo.us/security/cve/CVE-2025-62215/index.md","severity":"high","cvss":7,"kev":true,"epss":0.04464,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-12480","type":"cve","title":"CVE-2025-12480: Gladinet Triofox Improper Access Control Vulnerability","date":"2025-11-12","url":"https://erroneo.us/security/cve/CVE-2025-12480/","md":"https://erroneo.us/security/cve/CVE-2025-12480/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.95748,"verdict":null,"product":"Gladinet Triofox"},{"id":"2025-11-12","type":"digest","title":"Security digest for November 12, 2025","date":"2025-11-12","url":"https://erroneo.us/security/2025-11-12/","md":"https://erroneo.us/security/2025-11-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2025-64522","type":"cve","title":"CVE-2025-64522: Soft Serve is vulnerable to SSRF through its Webhooks","date":"2025-11-10","url":"https://erroneo.us/security/cve/CVE-2025-64522/","md":"https://erroneo.us/security/cve/CVE-2025-64522/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00368,"verdict":null,"product":"github.com/charmbracelet/soft-serve (Go)"},{"id":"CVE-2025-21042","type":"cve","title":"CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability","date":"2025-11-10","url":"https://erroneo.us/security/cve/CVE-2025-21042/","md":"https://erroneo.us/security/cve/CVE-2025-21042/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.34549,"verdict":null,"product":"Samsung Mobile Devices"},{"id":"2025-11-10","type":"digest","title":"Security digest for November 10, 2025","date":"2025-11-10","url":"https://erroneo.us/security/2025-11-10/","md":"https://erroneo.us/security/2025-11-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-52881","type":"cve","title":"CVE-2025-52881: runc: LSM labels can be bypassed with malicious config using dummy procfs files","date":"2025-11-06","url":"https://erroneo.us/security/cve/CVE-2025-52881/","md":"https://erroneo.us/security/cve/CVE-2025-52881/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00567,"verdict":"patch-this-week","product":"opencontainers runc"},{"id":"CVE-2025-52565","type":"cve","title":"CVE-2025-52565: container escape due to /dev/console mount and related races","date":"2025-11-06","url":"https://erroneo.us/security/cve/CVE-2025-52565/","md":"https://erroneo.us/security/cve/CVE-2025-52565/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.00567,"verdict":"patch-this-week","product":"opencontainers runc"},{"id":"CVE-2025-31133","type":"cve","title":"CVE-2025-31133: runc container escape via \"masked path\" abuse due to mount race conditions","date":"2025-11-06","url":"https://erroneo.us/security/cve/CVE-2025-31133/","md":"https://erroneo.us/security/cve/CVE-2025-31133/index.md","severity":"high","cvss":7.3,"kev":false,"epss":0.00844,"verdict":"patch-this-week","product":"opencontainers runc"},{"id":"runc-container-escape-cve-2025-31133","type":"brief","title":"runc Container Escapes: Three Mount-Race CVEs Fixed","date":"2025-11-05","url":"https://erroneo.us/security/briefs/runc-container-escape-cve-2025-31133/","md":"https://erroneo.us/security/briefs/runc-container-escape-cve-2025-31133/index.md","severity":"high","kev":false,"epss":0.00844,"verdict":"patch-this-week","cves":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"],"summary":"Not remotely exploitable and not seen in attacks, but anyone who runs or builds images they do not fully trust (CI runners, multi-tenant clusters) should roll out patched runc this week."},{"id":"CVE-2025-64459","type":"cve","title":"CVE-2025-64459: Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.","date":"2025-11-05","url":"https://erroneo.us/security/cve/CVE-2025-64459/","md":"https://erroneo.us/security/cve/CVE-2025-64459/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.19257,"verdict":null,"product":"django (PyPI)"},{"id":"2025-11-05","type":"digest","title":"Security digest for November 5, 2025","date":"2025-11-05","url":"https://erroneo.us/security/2025-11-05/","md":"https://erroneo.us/security/2025-11-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2025-48703","type":"cve","title":"CVE-2025-48703: CWP Control Web Panel OS Command Injection Vulnerability","date":"2025-11-04","url":"https://erroneo.us/security/cve/CVE-2025-48703/","md":"https://erroneo.us/security/cve/CVE-2025-48703/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.99655,"verdict":null,"product":"CWP Control Web Panel"},{"id":"CVE-2025-11371","type":"cve","title":"CVE-2025-11371: Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","date":"2025-11-04","url":"https://erroneo.us/security/cve/CVE-2025-11371/","md":"https://erroneo.us/security/cve/CVE-2025-11371/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.92137,"verdict":null,"product":"Gladinet CentreStack and Triofox"},{"id":"2025-11-04","type":"digest","title":"Security digest for November 4, 2025","date":"2025-11-04","url":"https://erroneo.us/security/2025-11-04/","md":"https://erroneo.us/security/2025-11-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"2025-11-03","type":"digest","title":"Security digest for November 3, 2025","date":"2025-11-03","url":"https://erroneo.us/security/2025-11-03/","md":"https://erroneo.us/security/2025-11-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-41244","type":"cve","title":"CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","date":"2025-10-30","url":"https://erroneo.us/security/cve/CVE-2025-41244/","md":"https://erroneo.us/security/cve/CVE-2025-41244/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.08629,"verdict":null,"product":"Broadcom VMware Aria Operations and VMware Tools"},{"id":"CVE-2025-24893","type":"cve","title":"CVE-2025-24893: XWiki Platform Eval Injection Vulnerability","date":"2025-10-30","url":"https://erroneo.us/security/cve/CVE-2025-24893/","md":"https://erroneo.us/security/cve/CVE-2025-24893/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99864,"verdict":null,"product":"XWiki Platform"},{"id":"2025-10-30","type":"digest","title":"Security digest for October 30, 2025","date":"2025-10-30","url":"https://erroneo.us/security/2025-10-30/","md":"https://erroneo.us/security/2025-10-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-64095","type":"cve","title":"CVE-2025-64095: DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite","date":"2025-10-29","url":"https://erroneo.us/security/cve/CVE-2025-64095/","md":"https://erroneo.us/security/cve/CVE-2025-64095/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.4697,"verdict":null,"product":"DNN.PLATFORM (NuGet)"},{"id":"2025-10-29","type":"digest","title":"Security digest for October 29, 2025","date":"2025-10-29","url":"https://erroneo.us/security/2025-10-29/","md":"https://erroneo.us/security/2025-10-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-6205","type":"cve","title":"CVE-2025-6205: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","date":"2025-10-28","url":"https://erroneo.us/security/cve/CVE-2025-6205/","md":"https://erroneo.us/security/cve/CVE-2025-6205/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.73572,"verdict":null,"product":"Dassault Systèmes DELMIA Apriso"},{"id":"CVE-2025-6204","type":"cve","title":"CVE-2025-6204: Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","date":"2025-10-28","url":"https://erroneo.us/security/cve/CVE-2025-6204/","md":"https://erroneo.us/security/cve/CVE-2025-6204/index.md","severity":"high","cvss":8,"kev":true,"epss":0.79202,"verdict":null,"product":"Dassault Systèmes DELMIA Apriso"},{"id":"2025-10-28","type":"digest","title":"Security digest for October 28, 2025","date":"2025-10-28","url":"https://erroneo.us/security/2025-10-28/","md":"https://erroneo.us/security/2025-10-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-62714","type":"cve","title":"CVE-2025-62714: Karmada Dashboard API Unauthorized Access Vulnerability","date":"2025-10-24","url":"https://erroneo.us/security/cve/CVE-2025-62714/","md":"https://erroneo.us/security/cve/CVE-2025-62714/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00494,"verdict":null,"product":"github.com/karmada-io/dashboard (Go)"},{"id":"CVE-2025-59287","type":"cve","title":"CVE-2025-59287: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","date":"2025-10-24","url":"https://erroneo.us/security/cve/CVE-2025-59287/","md":"https://erroneo.us/security/cve/CVE-2025-59287/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9998,"verdict":"patch-this-week","product":"Microsoft Windows"},{"id":"CVE-2025-54236","type":"cve","title":"CVE-2025-54236: Adobe Commerce and Magento Improper Input Validation Vulnerability","date":"2025-10-24","url":"https://erroneo.us/security/cve/CVE-2025-54236/","md":"https://erroneo.us/security/cve/CVE-2025-54236/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.9466,"verdict":null,"product":"Adobe Commerce and Magento"},{"id":"2025-10-24","type":"digest","title":"Security digest for October 24, 2025","date":"2025-10-24","url":"https://erroneo.us/security/2025-10-24/","md":"https://erroneo.us/security/2025-10-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"microsoft-wsus-cve-2025-59287-rce","type":"brief","title":"Microsoft WSUS CVE-2025-59287: Unauthenticated SYSTEM RCE","date":"2025-10-23","url":"https://erroneo.us/security/briefs/microsoft-wsus-cve-2025-59287-rce/","md":"https://erroneo.us/security/briefs/microsoft-wsus-cve-2025-59287-rce/index.md","severity":"critical","kev":true,"epss":0.9998,"verdict":"patch-this-week","cves":["CVE-2025-59287"],"summary":"Only servers with the WSUS role are at risk, but on those it is unauthenticated SYSTEM code execution: patch them now, and treat any WSUS server exposed on 8530/8531 to the internet as a likely incident."},{"id":"2025-10-23","type":"digest","title":"Security digest for October 23, 2025","date":"2025-10-23","url":"https://erroneo.us/security/2025-10-23/","md":"https://erroneo.us/security/2025-10-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-61932","type":"cve","title":"CVE-2025-61932: Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","date":"2025-10-22","url":"https://erroneo.us/security/cve/CVE-2025-61932/","md":"https://erroneo.us/security/cve/CVE-2025-61932/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.02768,"verdict":null,"product":"Motex LANSCOPE Endpoint Manager"},{"id":"2025-10-22","type":"digest","title":"Security digest for October 22, 2025","date":"2025-10-22","url":"https://erroneo.us/security/2025-10-22/","md":"https://erroneo.us/security/2025-10-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-8pfh-j44r-f654","type":"ghsa","title":"Cosmos EVM Vulnerability","date":"2025-10-21","url":"https://erroneo.us/security/ghsa/GHSA-8pfh-j44r-f654/","md":"https://erroneo.us/security/ghsa/GHSA-8pfh-j44r-f654/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"github.com/cosmos/evm, github.com/cosmos/evm"},{"id":"CVE-2025-54469","type":"cve","title":"CVE-2025-54469: NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow","date":"2025-10-21","url":"https://erroneo.us/security/cve/CVE-2025-54469/","md":"https://erroneo.us/security/cve/CVE-2025-54469/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00471,"verdict":null,"product":"github.com/neuvector/neuvector (Go)"},{"id":"2025-10-21","type":"digest","title":"Security digest for October 21, 2025","date":"2025-10-21","url":"https://erroneo.us/security/2025-10-21/","md":"https://erroneo.us/security/2025-10-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-61884","type":"cve","title":"CVE-2025-61884: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2025-61884/","md":"https://erroneo.us/security/cve/CVE-2025-61884/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.95891,"verdict":"act-now","product":"Oracle E-Business Suite"},{"id":"CVE-2025-33073","type":"cve","title":"CVE-2025-33073: Microsoft Windows SMB Client Improper Access Control Vulnerability","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2025-33073/","md":"https://erroneo.us/security/cve/CVE-2025-33073/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.82699,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-2747","type":"cve","title":"CVE-2025-2747: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2025-2747/","md":"https://erroneo.us/security/cve/CVE-2025-2747/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97166,"verdict":null,"product":"Kentico Xperience CMS"},{"id":"CVE-2025-2746","type":"cve","title":"CVE-2025-2746: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2025-2746/","md":"https://erroneo.us/security/cve/CVE-2025-2746/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.74055,"verdict":null,"product":"Kentico Xperience CMS"},{"id":"CVE-2025-10678","type":"cve","title":"CVE-2025-10678: NetBird VPN does not remove the default password of an admin account","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2025-10678/","md":"https://erroneo.us/security/cve/CVE-2025-10678/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0042,"verdict":null,"product":"github.com/netbirdio/netbird (Go)"},{"id":"CVE-2022-48503","type":"cve","title":"CVE-2022-48503: Apple Multiple Products Unspecified Vulnerability","date":"2025-10-20","url":"https://erroneo.us/security/cve/CVE-2022-48503/","md":"https://erroneo.us/security/cve/CVE-2022-48503/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.03213,"verdict":null,"product":"Apple Multiple Products"},{"id":"2025-10-20","type":"digest","title":"Security digest for October 20, 2025","date":"2025-10-20","url":"https://erroneo.us/security/2025-10-20/","md":"https://erroneo.us/security/2025-10-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":1}},{"id":"glassworm-open-vsx-extension-malware","type":"brief","title":"GlassWorm: Invisible-Unicode Malware in Open VSX Extensions","date":"2025-10-17","url":"https://erroneo.us/security/briefs/glassworm-open-vsx-extension-malware/","md":"https://erroneo.us/security/briefs/glassworm-open-vsx-extension-malware/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"This is a recurring campaign rather than a single event; developers on VS Code forks that pull from Open VSX should audit installed extensions and auto-updates, while most stock VS Code users with mainstream extensions were not affected."},{"id":"CVE-2025-62515","type":"cve","title":"CVE-2025-62515: pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer","date":"2025-10-17","url":"https://erroneo.us/security/cve/CVE-2025-62515/","md":"https://erroneo.us/security/cve/CVE-2025-62515/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00835,"verdict":null,"product":"pyquokka (PyPI)"},{"id":"CVE-2025-56316","type":"cve","title":"CVE-2025-56316: MCMS vulnerable SQL injection via the content_title parameter","date":"2025-10-17","url":"https://erroneo.us/security/cve/CVE-2025-56316/","md":"https://erroneo.us/security/cve/CVE-2025-56316/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00636,"verdict":null,"product":"net.mingsoft:ms-mcms (Maven)"},{"id":"CVE-2025-49655","type":"cve","title":"CVE-2025-49655: Keras framework vulnerable to deserialization of untrusted data","date":"2025-10-17","url":"https://erroneo.us/security/cve/CVE-2025-49655/","md":"https://erroneo.us/security/cve/CVE-2025-49655/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0075,"verdict":null,"product":"keras (PyPI)"},{"id":"2025-10-17","type":"digest","title":"Security digest for October 17, 2025","date":"2025-10-17","url":"https://erroneo.us/security/2025-10-17/","md":"https://erroneo.us/security/2025-10-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2025-62417","type":"cve","title":"CVE-2025-62417: bagisto has CSV Formula Injection in Create New Product","date":"2025-10-16","url":"https://erroneo.us/security/cve/CVE-2025-62417/","md":"https://erroneo.us/security/cve/CVE-2025-62417/index.md","severity":"high","cvss":7.1,"kev":false,"epss":0.00392,"verdict":null,"product":"bagisto/bagisto (Composer (PHP))"},{"id":"CVE-2025-61922","type":"cve","title":"CVE-2025-61922: PrestaShop Checkout allows customer account takeover via email","date":"2025-10-16","url":"https://erroneo.us/security/cve/CVE-2025-61922/","md":"https://erroneo.us/security/cve/CVE-2025-61922/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00503,"verdict":null,"product":"prestashop/ps_checkout (Composer (PHP))"},{"id":"CVE-2025-54539","type":"cve","title":"CVE-2025-54539: Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability","date":"2025-10-16","url":"https://erroneo.us/security/cve/CVE-2025-54539/","md":"https://erroneo.us/security/cve/CVE-2025-54539/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02087,"verdict":null,"product":"Apache.NMS.AMQP (NuGet)"},{"id":"2025-10-16","type":"digest","title":"Security digest for October 16, 2025","date":"2025-10-16","url":"https://erroneo.us/security/2025-10-16/","md":"https://erroneo.us/security/2025-10-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"f5-big-ip-source-code-breach","type":"brief","title":"F5 Breach: Nation-State Stole BIG-IP Source Code","date":"2025-10-15","url":"https://erroneo.us/security/briefs/f5-big-ip-source-code-breach/","md":"https://erroneo.us/security/briefs/f5-big-ip-source-code-breach/index.md","severity":"critical","kev":true,"epss":0.02295,"verdict":"patch-this-week","cves":["CVE-2025-53521","CVE-2026-94127"],"summary":"The breach itself needs no new action a year on, but its aftermath does: two unauthenticated BIG-IP APM RCEs are now on CISA's exploited list, so every BIG-IP owner should be on current fixed builds with management interfaces off the internet."},{"id":"CVE-2025-62410","type":"cve","title":"CVE-2025-62410: happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript","date":"2025-10-15","url":"https://erroneo.us/security/cve/CVE-2025-62410/","md":"https://erroneo.us/security/cve/CVE-2025-62410/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00352,"verdict":null,"product":"happy-dom (npm)"},{"id":"CVE-2025-54253","type":"cve","title":"CVE-2025-54253: Adobe Experience Manager Forms Code Execution Vulnerability","date":"2025-10-15","url":"https://erroneo.us/security/cve/CVE-2025-54253/","md":"https://erroneo.us/security/cve/CVE-2025-54253/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.88262,"verdict":null,"product":"Adobe Experience Manager (AEM) Forms"},{"id":"2025-10-15","type":"digest","title":"Security digest for October 15, 2025","date":"2025-10-15","url":"https://erroneo.us/security/2025-10-15/","md":"https://erroneo.us/security/2025-10-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2025-59230","type":"cve","title":"CVE-2025-59230: Microsoft Windows Improper Access Control Vulnerability","date":"2025-10-14","url":"https://erroneo.us/security/cve/CVE-2025-59230/","md":"https://erroneo.us/security/cve/CVE-2025-59230/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02657,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-55315","type":"cve","title":"CVE-2025-55315: Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability","date":"2025-10-14","url":"https://erroneo.us/security/cve/CVE-2025-55315/","md":"https://erroneo.us/security/cve/CVE-2025-55315/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.66526,"verdict":null,"product":"Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)"},{"id":"CVE-2025-47827","type":"cve","title":"CVE-2025-47827: IGEL OS Use of a Key Past its Expiration Date Vulnerability","date":"2025-10-14","url":"https://erroneo.us/security/cve/CVE-2025-47827/","md":"https://erroneo.us/security/cve/CVE-2025-47827/index.md","severity":"medium","cvss":4.6,"kev":true,"epss":0.04927,"verdict":null,"product":"IGEL IGEL OS"},{"id":"CVE-2025-24990","type":"cve","title":"CVE-2025-24990: Microsoft Windows Untrusted Pointer Dereference Vulnerability","date":"2025-10-14","url":"https://erroneo.us/security/cve/CVE-2025-24990/","md":"https://erroneo.us/security/cve/CVE-2025-24990/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.06369,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2016-7836","type":"cve","title":"CVE-2016-7836: SKYSEA Client View Improper Authentication Vulnerability","date":"2025-10-14","url":"https://erroneo.us/security/cve/CVE-2016-7836/","md":"https://erroneo.us/security/cve/CVE-2016-7836/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.1923,"verdict":null,"product":"SKYSEA Client View"},{"id":"2025-10-14","type":"digest","title":"Security digest for October 14, 2025","date":"2025-10-14","url":"https://erroneo.us/security/2025-10-14/","md":"https://erroneo.us/security/2025-10-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2025-61927","type":"cve","title":"CVE-2025-61927: Happy DOM: VM Context Escape can lead to Remote Code Execution","date":"2025-10-10","url":"https://erroneo.us/security/cve/CVE-2025-61927/","md":"https://erroneo.us/security/cve/CVE-2025-61927/index.md","severity":"high","cvss":7.2,"kev":false,"epss":0.00642,"verdict":null,"product":"happy-dom (npm)"},{"id":"2025-10-10","type":"digest","title":"Security digest for October 10, 2025","date":"2025-10-10","url":"https://erroneo.us/security/2025-10-10/","md":"https://erroneo.us/security/2025-10-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-m9mp-6x32-5rhg","type":"ghsa","title":"scio is vunerable to  Remote Command Execution  through PyTorch","date":"2025-10-09","url":"https://erroneo.us/security/ghsa/GHSA-m9mp-6x32-5rhg/","md":"https://erroneo.us/security/ghsa/GHSA-m9mp-6x32-5rhg/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"scio-pypi"},{"id":"CVE-2025-61913","type":"cve","title":"CVE-2025-61913: Flowise is vulnerable to arbitrary file write through its WriteFileTool","date":"2025-10-09","url":"https://erroneo.us/security/cve/CVE-2025-61913/","md":"https://erroneo.us/security/cve/CVE-2025-61913/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.1295,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2025-10284","type":"cve","title":"CVE-2025-10284: BBOT's various issues in unarchive.py can cause arbitrary file write and RCE","date":"2025-10-09","url":"https://erroneo.us/security/cve/CVE-2025-10284/","md":"https://erroneo.us/security/cve/CVE-2025-10284/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00712,"verdict":null,"product":"bbot (PyPI)"},{"id":"CVE-2025-10283","type":"cve","title":"CVE-2025-10283: BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE","date":"2025-10-09","url":"https://erroneo.us/security/cve/CVE-2025-10283/","md":"https://erroneo.us/security/cve/CVE-2025-10283/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00483,"verdict":null,"product":"bbot (PyPI)"},{"id":"CVE-2021-43798","type":"cve","title":"CVE-2021-43798: Grafana Path Traversal Vulnerability","date":"2025-10-09","url":"https://erroneo.us/security/cve/CVE-2021-43798/","md":"https://erroneo.us/security/cve/CVE-2021-43798/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.88503,"verdict":null,"product":"Grafana Labs Grafana"},{"id":"2025-10-09","type":"digest","title":"Security digest for October 9, 2025","date":"2025-10-09","url":"https://erroneo.us/security/2025-10-09/","md":"https://erroneo.us/security/2025-10-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"CVE-2025-10353","type":"cve","title":"CVE-2025-10353: Melis Platform CMS Unauthenticated File Upload Leading to RCE","date":"2025-10-08","url":"https://erroneo.us/security/cve/CVE-2025-10353/","md":"https://erroneo.us/security/cve/CVE-2025-10353/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0266,"verdict":null,"product":"melisplatform/melis-cms-slider (Composer (PHP))"},{"id":"CVE-2025-10352","type":"cve","title":"CVE-2025-10352: Melis Platform CMS Unauthenticated Admin Account Creation","date":"2025-10-08","url":"https://erroneo.us/security/cve/CVE-2025-10352/","md":"https://erroneo.us/security/cve/CVE-2025-10352/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00327,"verdict":null,"product":"melisplatform/melis-core (Composer (PHP))"},{"id":"CVE-2025-10351","type":"cve","title":"CVE-2025-10351: Melis Platform CMS SQL Injection","date":"2025-10-08","url":"https://erroneo.us/security/cve/CVE-2025-10351/","md":"https://erroneo.us/security/cve/CVE-2025-10351/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00413,"verdict":null,"product":"melisplatform/melis-cms (Composer (PHP))"},{"id":"2025-10-08","type":"digest","title":"Security digest for October 8, 2025","date":"2025-10-08","url":"https://erroneo.us/security/2025-10-08/","md":"https://erroneo.us/security/2025-10-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-61778","type":"cve","title":"CVE-2025-61778: Akka.Remote TLS did not properly implement certificate-based authentication","date":"2025-10-07","url":"https://erroneo.us/security/cve/CVE-2025-61778/","md":"https://erroneo.us/security/cve/CVE-2025-61778/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00308,"verdict":null,"product":"Akka.Remote (NuGet)"},{"id":"CVE-2025-27915","type":"cve","title":"CVE-2025-27915: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","date":"2025-10-07","url":"https://erroneo.us/security/cve/CVE-2025-27915/","md":"https://erroneo.us/security/cve/CVE-2025-27915/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.04064,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"2025-10-07","type":"digest","title":"Security digest for October 7, 2025","date":"2025-10-07","url":"https://erroneo.us/security/2025-10-07/","md":"https://erroneo.us/security/2025-10-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-61882","type":"cve","title":"CVE-2025-61882: Oracle E-Business Suite Unspecified Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2025-61882/","md":"https://erroneo.us/security/cve/CVE-2025-61882/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99728,"verdict":"act-now","product":"Oracle E-Business Suite"},{"id":"CVE-2025-59159","type":"cve","title":"CVE-2025-59159: SillyTavern Web Interface Vulnerable DNS Rebinding","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2025-59159/","md":"https://erroneo.us/security/cve/CVE-2025-59159/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.0025,"verdict":null,"product":"sillytavern (npm)"},{"id":"CVE-2025-55346","type":"cve","title":"CVE-2025-55346: Flowise vulnerable to RCE via Dynamic function constructor injection","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2025-55346/","md":"https://erroneo.us/security/cve/CVE-2025-55346/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.22368,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2025-52472","type":"cve","title":"CVE-2025-52472: XWiki Platform is vulnerable to HQL injection via wiki and space search REST API","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2025-52472/","md":"https://erroneo.us/security/cve/CVE-2025-52472/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02365,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-rest-server (Maven)"},{"id":"CVE-2025-49594","type":"cve","title":"CVE-2025-49594: XWiki OIDC Authenticator: Users with \"view\" access can create tokens for any users they can view","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2025-49594/","md":"https://erroneo.us/security/cve/CVE-2025-49594/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00442,"verdict":null,"product":"org.xwiki.contrib.oidc:oidc-authenticator (Maven)"},{"id":"CVE-2021-43226","type":"cve","title":"CVE-2021-43226: Microsoft Windows Privilege Escalation Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2021-43226/","md":"https://erroneo.us/security/cve/CVE-2021-43226/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.03275,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2021-22555","type":"cve","title":"CVE-2021-22555: Linux Kernel Heap Out-of-Bounds Write Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2021-22555/","md":"https://erroneo.us/security/cve/CVE-2021-22555/index.md","severity":"high","cvss":8.3,"kev":true,"epss":0.78684,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2013-3918","type":"cve","title":"CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2013-3918/","md":"https://erroneo.us/security/cve/CVE-2013-3918/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.73693,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2011-3402","type":"cve","title":"CVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2011-3402/","md":"https://erroneo.us/security/cve/CVE-2011-3402/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.78138,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2010-3962","type":"cve","title":"CVE-2010-3962: Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2010-3962/","md":"https://erroneo.us/security/cve/CVE-2010-3962/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.96831,"verdict":null,"product":"Microsoft Internet Explorer"},{"id":"CVE-2010-3765","type":"cve","title":"CVE-2010-3765: Mozilla Multiple Products Remote Code Execution Vulnerability","date":"2025-10-06","url":"https://erroneo.us/security/cve/CVE-2010-3765/","md":"https://erroneo.us/security/cve/CVE-2010-3765/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.83156,"verdict":null,"product":"Mozilla Multiple Products"},{"id":"2025-10-06","type":"digest","title":"Security digest for October 6, 2025","date":"2025-10-06","url":"https://erroneo.us/security/2025-10-06/","md":"https://erroneo.us/security/2025-10-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":7,"critical":4}},{"id":"oracle-ebs-cve-2025-61882-cl0p-zero-day","type":"brief","title":"Oracle EBS CVE-2025-61882: Cl0p Zero-Day Data Theft","date":"2025-10-04","url":"https://erroneo.us/security/briefs/oracle-ebs-cve-2025-61882-cl0p-zero-day/","md":"https://erroneo.us/security/briefs/oracle-ebs-cve-2025-61882-cl0p-zero-day/index.md","severity":"critical","kev":true,"epss":0.99728,"verdict":"act-now","cves":["CVE-2025-61882","CVE-2025-61884"],"summary":"Any internet-reachable Oracle EBS 12.2.x server that missed the October 2025 alerts should be treated as compromised until a hunt proves otherwise."},{"id":"2025-10-04","type":"digest","title":"Security digest for October 4, 2025","date":"2025-10-04","url":"https://erroneo.us/security/2025-10-04/","md":"https://erroneo.us/security/2025-10-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"redishell-redis-lua-rce-cve-2025-49844","type":"brief","title":"RediShell: 13-Year-Old Lua Use-After-Free RCE in Redis","date":"2025-10-03","url":"https://erroneo.us/security/briefs/redishell-redis-lua-rce-cve-2025-49844/","md":"https://erroneo.us/security/briefs/redishell-redis-lua-rce-cve-2025-49844/index.md","severity":"critical","kev":false,"epss":0.82294,"verdict":"patch-this-week","cves":["CVE-2025-49844"],"summary":"Exploitation needs an authenticated session, so properly locked-down Redis can be patched in a normal urgent window; instances reachable without a password are effectively unauthenticated RCE and should be fixed today."},{"id":"CVE-2025-50538","type":"cve","title":"CVE-2025-50538: Flowise is vulnerable to stored XSS via \"View Messages\" allows credential theft in FlowiseAI admin panel","date":"2025-10-03","url":"https://erroneo.us/security/cve/CVE-2025-50538/","md":"https://erroneo.us/security/cve/CVE-2025-50538/index.md","severity":"high","cvss":8.2,"kev":false,"epss":0.1404,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2025-49844","type":"cve","title":"CVE-2025-49844: Redis Lua Use-After-Free may lead to remote code execution","date":"2025-10-03","url":"https://erroneo.us/security/cve/CVE-2025-49844/","md":"https://erroneo.us/security/cve/CVE-2025-49844/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.82294,"verdict":"patch-this-week","product":"redis redis"},{"id":"2025-10-03","type":"digest","title":"Security digest for October 3, 2025","date":"2025-10-03","url":"https://erroneo.us/security/2025-10-03/","md":"https://erroneo.us/security/2025-10-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2025-4008","type":"cve","title":"CVE-2025-4008: Smartbedded Meteobridge Command Injection Vulnerability","date":"2025-10-02","url":"https://erroneo.us/security/cve/CVE-2025-4008/","md":"https://erroneo.us/security/cve/CVE-2025-4008/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.93315,"verdict":null,"product":"Smartbedded Meteobridge"},{"id":"CVE-2025-21043","type":"cve","title":"CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability","date":"2025-10-02","url":"https://erroneo.us/security/cve/CVE-2025-21043/","md":"https://erroneo.us/security/cve/CVE-2025-21043/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.02216,"verdict":null,"product":"Samsung Mobile Devices"},{"id":"CVE-2017-1000353","type":"cve","title":"CVE-2017-1000353: Jenkins Remote Code Execution Vulnerability","date":"2025-10-02","url":"https://erroneo.us/security/cve/CVE-2017-1000353/","md":"https://erroneo.us/security/cve/CVE-2017-1000353/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99679,"verdict":null,"product":"Jenkins Jenkins"},{"id":"CVE-2015-7755","type":"cve","title":"CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability","date":"2025-10-02","url":"https://erroneo.us/security/cve/CVE-2015-7755/","md":"https://erroneo.us/security/cve/CVE-2015-7755/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.61139,"verdict":null,"product":"Juniper ScreenOS"},{"id":"CVE-2014-6278","type":"cve","title":"CVE-2014-6278: GNU Bash OS Command Injection Vulnerability","date":"2025-10-02","url":"https://erroneo.us/security/cve/CVE-2014-6278/","md":"https://erroneo.us/security/cve/CVE-2014-6278/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.99594,"verdict":null,"product":"GNU GNU Bash"},{"id":"2025-10-02","type":"digest","title":"Security digest for October 2, 2025","date":"2025-10-02","url":"https://erroneo.us/security/2025-10-02/","md":"https://erroneo.us/security/2025-10-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":0}},{"id":"CVE-2025-61622","type":"cve","title":"CVE-2025-61622: Apache Pyfory python is vulnerable to deserialization of untrusted data","date":"2025-10-01","url":"https://erroneo.us/security/cve/CVE-2025-61622/","md":"https://erroneo.us/security/cve/CVE-2025-61622/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.45125,"verdict":null,"product":"pyfory (PyPI)"},{"id":"CVE-2025-61588","type":"cve","title":"CVE-2025-61588: risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`","date":"2025-10-01","url":"https://erroneo.us/security/cve/CVE-2025-61588/","md":"https://erroneo.us/security/cve/CVE-2025-61588/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00463,"verdict":null,"product":"risc0-zkvm-platform (crates.io (Rust))"},{"id":"2025-10-01","type":"digest","title":"Security digest for October 1, 2025","date":"2025-10-01","url":"https://erroneo.us/security/2025-10-01/","md":"https://erroneo.us/security/2025-10-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-11148","type":"cve","title":"CVE-2025-11148: check-branches is vulnerable to command Injection","date":"2025-09-30","url":"https://erroneo.us/security/cve/CVE-2025-11148/","md":"https://erroneo.us/security/cve/CVE-2025-11148/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01354,"verdict":null,"product":"check-branches (npm)"},{"id":"2025-09-30","type":"digest","title":"Security digest for September 30, 2025","date":"2025-09-30","url":"https://erroneo.us/security/2025-09-30/","md":"https://erroneo.us/security/2025-09-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-pwf7-47c3-mfhx","type":"ghsa","title":"j178/prek-action vulnerable to arbitrary code injection in composite action","date":"2025-09-29","url":"https://erroneo.us/security/ghsa/GHSA-pwf7-47c3-mfhx/","md":"https://erroneo.us/security/ghsa/GHSA-pwf7-47c3-mfhx/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"j178/prek-action"},{"id":"CVE-2025-59689","type":"cve","title":"CVE-2025-59689: Libraesva Email Security Gateway Command Injection Vulnerability","date":"2025-09-29","url":"https://erroneo.us/security/cve/CVE-2025-59689/","md":"https://erroneo.us/security/cve/CVE-2025-59689/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.01864,"verdict":null,"product":"Libraesva Email Security Gateway"},{"id":"CVE-2025-32463","type":"cve","title":"CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","date":"2025-09-29","url":"https://erroneo.us/security/cve/CVE-2025-32463/","md":"https://erroneo.us/security/cve/CVE-2025-32463/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.55498,"verdict":"check-exposure","product":"Sudo Sudo"},{"id":"CVE-2025-20352","type":"cve","title":"CVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","date":"2025-09-29","url":"https://erroneo.us/security/cve/CVE-2025-20352/","md":"https://erroneo.us/security/cve/CVE-2025-20352/index.md","severity":"high","cvss":7.7,"kev":true,"epss":0.41502,"verdict":null,"product":"Cisco IOS and IOS XE"},{"id":"CVE-2025-10035","type":"cve","title":"CVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","date":"2025-09-29","url":"https://erroneo.us/security/cve/CVE-2025-10035/","md":"https://erroneo.us/security/cve/CVE-2025-10035/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99799,"verdict":null,"product":"Fortra GoAnywhere MFT"},{"id":"CVE-2021-21311","type":"cve","title":"CVE-2021-21311: Adminer Server-Side Request Forgery Vulnerability","date":"2025-09-29","url":"https://erroneo.us/security/cve/CVE-2021-21311/","md":"https://erroneo.us/security/cve/CVE-2021-21311/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.98464,"verdict":null,"product":"Adminer Adminer"},{"id":"2025-09-29","type":"digest","title":"Security digest for September 29, 2025","date":"2025-09-29","url":"https://erroneo.us/security/2025-09-29/","md":"https://erroneo.us/security/2025-09-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":1}},{"id":"CVE-2025-59936","type":"cve","title":"CVE-2025-59936: get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass","date":"2025-09-26","url":"https://erroneo.us/security/cve/CVE-2025-59936/","md":"https://erroneo.us/security/cve/CVE-2025-59936/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00404,"verdict":null,"product":"get-jwks (npm)"},{"id":"2025-09-26","type":"digest","title":"Security digest for September 26, 2025","date":"2025-09-26","url":"https://erroneo.us/security/2025-09-26/","md":"https://erroneo.us/security/2025-09-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"cisco-asa-ftd-vpn-cve-2025-20333-20362-arcanedoor","type":"brief","title":"Cisco ASA/FTD VPN Zero-Days Tied to ArcaneDoor","date":"2025-09-25","url":"https://erroneo.us/security/briefs/cisco-asa-ftd-vpn-cve-2025-20333-20362-arcanedoor/","md":"https://erroneo.us/security/briefs/cisco-asa-ftd-vpn-cve-2025-20333-20362-arcanedoor/index.md","severity":"critical","kev":true,"epss":0.87085,"verdict":"patch-this-week","cves":["CVE-2025-20333","CVE-2025-20362"],"summary":"Still live in October 2026: the actor added a persistence mechanism in April 2026 that survives the September 2025 fixes, so ASA/FTD owners with VPN web services need the latest updates and a physical power cycle, not just last year's patch."},{"id":"CVE-2025-59823","type":"cve","title":"CVE-2025-59823: Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning","date":"2025-09-25","url":"https://erroneo.us/security/cve/CVE-2025-59823/","md":"https://erroneo.us/security/cve/CVE-2025-59823/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00529,"verdict":null,"product":"github.com/gardener/gardener-extension-provider-aws (Go)"},{"id":"CVE-2025-20362","type":"cve","title":"CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","date":"2025-09-25","url":"https://erroneo.us/security/cve/CVE-2025-20362/","md":"https://erroneo.us/security/cve/CVE-2025-20362/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.87085,"verdict":"patch-this-week","product":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense"},{"id":"CVE-2025-20333","type":"cve","title":"CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","date":"2025-09-25","url":"https://erroneo.us/security/cve/CVE-2025-20333/","md":"https://erroneo.us/security/cve/CVE-2025-20333/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.71207,"verdict":"patch-this-week","product":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense"},{"id":"CVE-2020-36851","type":"cve","title":"CVE-2020-36851: cors-anywhere vulnerable to server-side request forgery","date":"2025-09-25","url":"https://erroneo.us/security/cve/CVE-2020-36851/","md":"https://erroneo.us/security/cve/CVE-2020-36851/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.00828,"verdict":null,"product":"cors-anywhere (npm)"},{"id":"2025-09-25","type":"digest","title":"Security digest for September 25, 2025","date":"2025-09-25","url":"https://erroneo.us/security/2025-09-25/","md":"https://erroneo.us/security/2025-09-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":2}},{"id":"CVE-2025-59834","type":"cve","title":"CVE-2025-59834: Command Injection in adb-mcp MCP Server","date":"2025-09-24","url":"https://erroneo.us/security/cve/CVE-2025-59834/","md":"https://erroneo.us/security/cve/CVE-2025-59834/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02514,"verdict":null,"product":"adb-mcp (npm)"},{"id":"CVE-2025-48459","type":"cve","title":"CVE-2025-48459: Apache IoTDB: Deserialization of untrusted Data","date":"2025-09-24","url":"https://erroneo.us/security/cve/CVE-2025-48459/","md":"https://erroneo.us/security/cve/CVE-2025-48459/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00494,"verdict":null,"product":"org.apache.iotdb:iotdb-confignode (Maven)"},{"id":"CVE-2025-10894","type":"cve","title":"CVE-2025-10894: Nx: nx/devkit: malicious versions of nx and plugins published to npm","date":"2025-09-24","url":"https://erroneo.us/security/cve/CVE-2025-10894/","md":"https://erroneo.us/security/cve/CVE-2025-10894/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00565,"verdict":"check-exposure","product":"nx"},{"id":"2025-09-24","type":"digest","title":"Security digest for September 24, 2025","date":"2025-09-24","url":"https://erroneo.us/security/2025-09-24/","md":"https://erroneo.us/security/2025-09-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-59545","type":"cve","title":"CVE-2025-59545: DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module","date":"2025-09-23","url":"https://erroneo.us/security/cve/CVE-2025-59545/","md":"https://erroneo.us/security/cve/CVE-2025-59545/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00497,"verdict":null,"product":"DotNetNuke.Core (NuGet)"},{"id":"CVE-2025-10585","type":"cve","title":"CVE-2025-10585: Google Chromium V8 Type Confusion Vulnerability","date":"2025-09-23","url":"https://erroneo.us/security/cve/CVE-2025-10585/","md":"https://erroneo.us/security/cve/CVE-2025-10585/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.05391,"verdict":null,"product":"Google Chromium V8"},{"id":"2025-09-23","type":"digest","title":"Security digest for September 23, 2025","date":"2025-09-23","url":"https://erroneo.us/security/2025-09-23/","md":"https://erroneo.us/security/2025-09-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-6544","type":"cve","title":"CVE-2025-6544: H2O affected by a deserialization vulnerability","date":"2025-09-22","url":"https://erroneo.us/security/cve/CVE-2025-6544/","md":"https://erroneo.us/security/cve/CVE-2025-6544/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00919,"verdict":null,"product":"ai.h2o:h2o-core (Maven)"},{"id":"2025-09-22","type":"digest","title":"Security digest for September 22, 2025","date":"2025-09-22","url":"https://erroneo.us/security/2025-09-22/","md":"https://erroneo.us/security/2025-09-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-6237","type":"cve","title":"CVE-2025-6237: InvokeAI has External Control of File Name or Path","date":"2025-09-18","url":"https://erroneo.us/security/cve/CVE-2025-6237/","md":"https://erroneo.us/security/cve/CVE-2025-6237/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00386,"verdict":null,"product":"invokeai (PyPI)"},{"id":"2025-09-18","type":"digest","title":"Security digest for September 18, 2025","date":"2025-09-18","url":"https://erroneo.us/security/2025-09-18/","md":"https://erroneo.us/security/2025-09-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-59340","type":"cve","title":"CVE-2025-59340: jinjava has Sandbox Bypass via JavaType-Based Deserialization","date":"2025-09-17","url":"https://erroneo.us/security/cve/CVE-2025-59340/","md":"https://erroneo.us/security/cve/CVE-2025-59340/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02109,"verdict":null,"product":"com.hubspot.jinjava:jinjava (Maven)"},{"id":"2025-09-17","type":"digest","title":"Security digest for September 17, 2025","date":"2025-09-17","url":"https://erroneo.us/security/2025-09-17/","md":"https://erroneo.us/security/2025-09-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-41243","type":"cve","title":"CVE-2025-41243: Spring Expression language property modification using Spring Cloud Gateway Server WebFlux","date":"2025-09-16","url":"https://erroneo.us/security/cve/CVE-2025-41243/","md":"https://erroneo.us/security/cve/CVE-2025-41243/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.03548,"verdict":null,"product":"org.springframework.cloud:spring-cloud-gateway-server-webflux (Maven)"},{"id":"2025-09-16","type":"digest","title":"Security digest for September 16, 2025","date":"2025-09-16","url":"https://erroneo.us/security/2025-09-16/","md":"https://erroneo.us/security/2025-09-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"shai-hulud-self-replicating-npm-worm","type":"brief","title":"Shai-Hulud: Self-Replicating Worm Hits 500+ npm Packages","date":"2025-09-15","url":"https://erroneo.us/security/briefs/shai-hulud-self-replicating-npm-worm/","md":"https://erroneo.us/security/briefs/shai-hulud-self-replicating-npm-worm/index.md","severity":"critical","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"The worm's packages were removed in September 2025, but every machine that installed one handed over its npm, GitHub and cloud credentials, so the open question is whether you rotated them and removed the backdoor workflow."},{"id":"GHSA-q67q-549q-p849","type":"ghsa","title":"Flowise has arbitrary file access due to missing chat flow id validation","date":"2025-09-15","url":"https://erroneo.us/security/ghsa/GHSA-q67q-549q-p849/","md":"https://erroneo.us/security/ghsa/GHSA-q67q-549q-p849/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"flowise"},{"id":"GHSA-99pg-hqvx-r4gf","type":"ghsa","title":"Flowise has an Arbitrary File Read","date":"2025-09-15","url":"https://erroneo.us/security/ghsa/GHSA-99pg-hqvx-r4gf/","md":"https://erroneo.us/security/ghsa/GHSA-99pg-hqvx-r4gf/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"flowise"},{"id":"CVE-2025-59528","type":"cve","title":"CVE-2025-59528: Flowise has Remote Code Execution vulnerability","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-59528/","md":"https://erroneo.us/security/cve/CVE-2025-59528/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.86218,"verdict":null,"product":"flowise (npm)"},{"id":"CVE-2025-59377","type":"cve","title":"CVE-2025-59377: mcp-kubernetes-server has an OS Command Injection vulnerability","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-59377/","md":"https://erroneo.us/security/cve/CVE-2025-59377/index.md","severity":"low","cvss":3.7,"kev":false,"epss":0.01203,"verdict":null,"product":"mcp-kubernetes-server (PyPI)"},{"id":"CVE-2025-59361","type":"cve","title":"CVE-2025-59361: Chaos Controller Manager is vulnerable to OS command injection","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-59361/","md":"https://erroneo.us/security/cve/CVE-2025-59361/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03269,"verdict":null,"product":"github.com/chaos-mesh/chaos-mesh (Go)"},{"id":"CVE-2025-59360","type":"cve","title":"CVE-2025-59360: Chaos Controller Manager is vulnerable to OS command injection","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-59360/","md":"https://erroneo.us/security/cve/CVE-2025-59360/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02814,"verdict":null,"product":"github.com/chaos-mesh/chaos-mesh (Go)"},{"id":"CVE-2025-59359","type":"cve","title":"CVE-2025-59359: Chaos Controller Manager is vulnerable to OS command injection","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-59359/","md":"https://erroneo.us/security/cve/CVE-2025-59359/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02926,"verdict":null,"product":"github.com/chaos-mesh/chaos-mesh (Go)"},{"id":"CVE-2025-57164","type":"cve","title":"CVE-2025-57164: FlowiseAI Pre-Auth Arbitrary Code Execution","date":"2025-09-15","url":"https://erroneo.us/security/cve/CVE-2025-57164/","md":"https://erroneo.us/security/cve/CVE-2025-57164/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.00637,"verdict":null,"product":"flowise (npm)"},{"id":"2025-09-15","type":"digest","title":"Security digest for September 15, 2025","date":"2025-09-15","url":"https://erroneo.us/security/2025-09-15/","md":"https://erroneo.us/security/2025-09-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":8}},{"id":"CVE-2025-58434","type":"cve","title":"CVE-2025-58434: Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover","date":"2025-09-12","url":"https://erroneo.us/security/cve/CVE-2025-58434/","md":"https://erroneo.us/security/cve/CVE-2025-58434/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.4935,"verdict":null,"product":"flowise (npm)"},{"id":"2025-09-12","type":"digest","title":"Security digest for September 12, 2025","date":"2025-09-12","url":"https://erroneo.us/security/2025-09-12/","md":"https://erroneo.us/security/2025-09-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-59039","type":"cve","title":"CVE-2025-59039: Prebid-universal-creative latest on npm briefly compromised","date":"2025-09-11","url":"https://erroneo.us/security/cve/CVE-2025-59039/","md":"https://erroneo.us/security/cve/CVE-2025-59039/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00335,"verdict":null,"product":"prebid-universal-creative (npm)"},{"id":"CVE-2025-5086","type":"cve","title":"CVE-2025-5086: Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","date":"2025-09-11","url":"https://erroneo.us/security/cve/CVE-2025-5086/","md":"https://erroneo.us/security/cve/CVE-2025-5086/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.96915,"verdict":null,"product":"Dassault Systèmes DELMIA Apriso"},{"id":"2025-09-11","type":"digest","title":"Security digest for September 11, 2025","date":"2025-09-11","url":"https://erroneo.us/security/2025-09-11/","md":"https://erroneo.us/security/2025-09-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-59046","type":"cve","title":"CVE-2025-59046: interactive-git-checkout has a Command Injection vulnerability","date":"2025-09-10","url":"https://erroneo.us/security/cve/CVE-2025-59046/","md":"https://erroneo.us/security/cve/CVE-2025-59046/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01146,"verdict":null,"product":"interactive-git-checkout (npm)"},{"id":"CVE-2025-54123","type":"cve","title":"CVE-2025-54123: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation","date":"2025-09-10","url":"https://erroneo.us/security/cve/CVE-2025-54123/","md":"https://erroneo.us/security/cve/CVE-2025-54123/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.10543,"verdict":null,"product":"github.com/SpectoLabs/hoverfly (Go)"},{"id":"CVE-2025-10157","type":"cve","title":"CVE-2025-10157: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports","date":"2025-09-10","url":"https://erroneo.us/security/cve/CVE-2025-10157/","md":"https://erroneo.us/security/cve/CVE-2025-10157/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00789,"verdict":null,"product":"picklescan (PyPI)"},{"id":"CVE-2025-10156","type":"cve","title":"CVE-2025-10156: Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check","date":"2025-09-10","url":"https://erroneo.us/security/cve/CVE-2025-10156/","md":"https://erroneo.us/security/cve/CVE-2025-10156/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01481,"verdict":null,"product":"picklescan (PyPI)"},{"id":"CVE-2025-10155","type":"cve","title":"CVE-2025-10155: Picklescan Bypass is Possible via File Extension Mismatch","date":"2025-09-10","url":"https://erroneo.us/security/cve/CVE-2025-10155/","md":"https://erroneo.us/security/cve/CVE-2025-10155/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00847,"verdict":null,"product":"picklescan (PyPI)"},{"id":"2025-09-10","type":"digest","title":"Security digest for September 10, 2025","date":"2025-09-10","url":"https://erroneo.us/security/2025-09-10/","md":"https://erroneo.us/security/2025-09-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"2025-09-09","type":"digest","title":"Security digest for September 9, 2025","date":"2025-09-09","url":"https://erroneo.us/security/2025-09-09/","md":"https://erroneo.us/security/2025-09-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"chalk-debug-npm-qix-phishing-hijack","type":"brief","title":"chalk, debug and 16+ npm Packages Hijacked via Phishing","date":"2025-09-08","url":"https://erroneo.us/security/briefs/chalk-debug-npm-qix-phishing-hijack/","md":"https://erroneo.us/security/briefs/chalk-debug-npm-qix-phishing-hijack/index.md","severity":"high","kev":false,"epss":null,"verdict":"most-can-relax","cves":[],"summary":"Despite billions of weekly downloads, the bad versions were live for about two hours and the payload only swapped crypto addresses inside browsers, so most teams just need to confirm no lockfile or bundle captured them."},{"id":"CVE-2025-58450","type":"cve","title":"CVE-2025-58450: pREST has a Systemic SQL Injection Vulnerability","date":"2025-09-08","url":"https://erroneo.us/security/cve/CVE-2025-58450/","md":"https://erroneo.us/security/cve/CVE-2025-58450/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00442,"verdict":null,"product":"github.com/prest/prest/v2 (Go)"},{"id":"CVE-2025-57285","type":"cve","title":"CVE-2025-57285: CodeceptJS's incomprehensive sanitation can lead to Command Injection","date":"2025-09-08","url":"https://erroneo.us/security/cve/CVE-2025-57285/","md":"https://erroneo.us/security/cve/CVE-2025-57285/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02169,"verdict":null,"product":"codeceptjs (npm)"},{"id":"CVE-2025-54994","type":"cve","title":"CVE-2025-54994: @akoskm/create-mcp-server-stdio is vulnerable to MCP Server Command Injection through `exec` API","date":"2025-09-08","url":"https://erroneo.us/security/cve/CVE-2025-54994/","md":"https://erroneo.us/security/cve/CVE-2025-54994/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01337,"verdict":null,"product":"@akoskm/create-mcp-server-stdio (npm)"},{"id":"2025-09-08","type":"digest","title":"Security digest for September 8, 2025","date":"2025-09-08","url":"https://erroneo.us/security/2025-09-08/","md":"https://erroneo.us/security/2025-09-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2025-58438","type":"cve","title":"CVE-2025-58438: internetarchive Vulnerable to Directory Traversal in File.download()","date":"2025-09-05","url":"https://erroneo.us/security/cve/CVE-2025-58438/","md":"https://erroneo.us/security/cve/CVE-2025-58438/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0159,"verdict":null,"product":"internetarchive (PyPI)"},{"id":"2025-09-05","type":"digest","title":"Security digest for September 5, 2025","date":"2025-09-05","url":"https://erroneo.us/security/2025-09-05/","md":"https://erroneo.us/security/2025-09-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-58p5-r2f6-g2cj","type":"ghsa","title":"Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution","date":"2025-09-04","url":"https://erroneo.us/security/ghsa/GHSA-58p5-r2f6-g2cj/","md":"https://erroneo.us/security/ghsa/GHSA-58p5-r2f6-g2cj/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":null,"verdict":null,"product":"usd-core"},{"id":"CVE-2025-55190","type":"cve","title":"CVE-2025-55190: Argo CD's Project API Token Exposes Repository Credentials","date":"2025-09-04","url":"https://erroneo.us/security/cve/CVE-2025-55190/","md":"https://erroneo.us/security/cve/CVE-2025-55190/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.05655,"verdict":null,"product":"github.com/argoproj/argo-cd/v2 (Go)"},{"id":"CVE-2025-55037","type":"cve","title":"CVE-2025-55037: TkEasyGUI Vulnerable to OS Command Injection","date":"2025-09-04","url":"https://erroneo.us/security/cve/CVE-2025-55037/","md":"https://erroneo.us/security/cve/CVE-2025-55037/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02339,"verdict":null,"product":"TkEasyGUI (PyPI)"},{"id":"CVE-2025-53690","type":"cve","title":"CVE-2025-53690: Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","date":"2025-09-04","url":"https://erroneo.us/security/cve/CVE-2025-53690/","md":"https://erroneo.us/security/cve/CVE-2025-53690/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.60601,"verdict":null,"product":"Sitecore Multiple Products"},{"id":"CVE-2025-48543","type":"cve","title":"CVE-2025-48543: Android Runtime Use-After-Free Vulnerability","date":"2025-09-04","url":"https://erroneo.us/security/cve/CVE-2025-48543/","md":"https://erroneo.us/security/cve/CVE-2025-48543/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.00634,"verdict":null,"product":"Android Runtime"},{"id":"CVE-2025-38352","type":"cve","title":"CVE-2025-38352: Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","date":"2025-09-04","url":"https://erroneo.us/security/cve/CVE-2025-38352/","md":"https://erroneo.us/security/cve/CVE-2025-38352/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01341,"verdict":null,"product":"Linux Kernel"},{"id":"2025-09-04","type":"digest","title":"Security digest for September 4, 2025","date":"2025-09-04","url":"https://erroneo.us/security/2025-09-04/","md":"https://erroneo.us/security/2025-09-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":3}},{"id":"CVE-2025-9377","type":"cve","title":"CVE-2025-9377: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","date":"2025-09-03","url":"https://erroneo.us/security/cve/CVE-2025-9377/","md":"https://erroneo.us/security/cve/CVE-2025-9377/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.37731,"verdict":null,"product":"TP-Link Multiple Routers"},{"id":"CVE-2025-58367","type":"cve","title":"CVE-2025-58367: DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more","date":"2025-09-03","url":"https://erroneo.us/security/cve/CVE-2025-58367/","md":"https://erroneo.us/security/cve/CVE-2025-58367/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01188,"verdict":null,"product":"deepdiff (PyPI)"},{"id":"CVE-2025-55748","type":"cve","title":"CVE-2025-55748: XWiki configuration files can be accessed through jsx and sx endpoints","date":"2025-09-03","url":"https://erroneo.us/security/cve/CVE-2025-55748/","md":"https://erroneo.us/security/cve/CVE-2025-55748/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01771,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-skin-skinx (Maven)"},{"id":"CVE-2025-55747","type":"cve","title":"CVE-2025-55747: XWiki configuration files can be accessed through the webjars API","date":"2025-09-03","url":"https://erroneo.us/security/cve/CVE-2025-55747/","md":"https://erroneo.us/security/cve/CVE-2025-55747/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01682,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-webjars-api (Maven)"},{"id":"CVE-2023-50224","type":"cve","title":"CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","date":"2025-09-03","url":"https://erroneo.us/security/cve/CVE-2023-50224/","md":"https://erroneo.us/security/cve/CVE-2023-50224/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.20021,"verdict":null,"product":"TP-Link TL-WR841N"},{"id":"2025-09-03","type":"digest","title":"Security digest for September 3, 2025","date":"2025-09-03","url":"https://erroneo.us/security/2025-09-03/","md":"https://erroneo.us/security/2025-09-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"CVE-2025-55177","type":"cve","title":"CVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerability","date":"2025-09-02","url":"https://erroneo.us/security/cve/CVE-2025-55177/","md":"https://erroneo.us/security/cve/CVE-2025-55177/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.04734,"verdict":null,"product":"Meta Platforms WhatsApp"},{"id":"CVE-2020-24363","type":"cve","title":"CVE-2020-24363: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","date":"2025-09-02","url":"https://erroneo.us/security/cve/CVE-2020-24363/","md":"https://erroneo.us/security/cve/CVE-2020-24363/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.22187,"verdict":null,"product":"TP-Link TL-WA855RE"},{"id":"2025-09-02","type":"digest","title":"Security digest for September 2, 2025","date":"2025-09-02","url":"https://erroneo.us/security/2025-09-02/","md":"https://erroneo.us/security/2025-09-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-57819","type":"cve","title":"CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability","date":"2025-08-29","url":"https://erroneo.us/security/cve/CVE-2025-57819/","md":"https://erroneo.us/security/cve/CVE-2025-57819/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.95024,"verdict":null,"product":"Sangoma FreePBX"},{"id":"2025-08-29","type":"digest","title":"Security digest for August 29, 2025","date":"2025-08-29","url":"https://erroneo.us/security/2025-08-29/","md":"https://erroneo.us/security/2025-08-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-8077","type":"cve","title":"CVE-2025-8077: NeuVector admin account has insecure default password","date":"2025-08-28","url":"https://erroneo.us/security/cve/CVE-2025-8077/","md":"https://erroneo.us/security/cve/CVE-2025-8077/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00558,"verdict":null,"product":"github.com/neuvector/neuvector (Go)"},{"id":"CVE-2025-58059","type":"cve","title":"CVE-2025-58059: Valtimo scripting engine can be used to gain access to sensitive data or resources","date":"2025-08-28","url":"https://erroneo.us/security/cve/CVE-2025-58059/","md":"https://erroneo.us/security/cve/CVE-2025-58059/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00405,"verdict":null,"product":"com.ritense.valtimo:core (Maven)"},{"id":"2025-08-28","type":"digest","title":"Security digest for August 28, 2025","date":"2025-08-28","url":"https://erroneo.us/security/2025-08-28/","md":"https://erroneo.us/security/2025-08-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-52122","type":"cve","title":"CVE-2025-52122: The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability","date":"2025-08-27","url":"https://erroneo.us/security/cve/CVE-2025-52122/","md":"https://erroneo.us/security/cve/CVE-2025-52122/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0061,"verdict":null,"product":"solspace/craft-freeform (Composer (PHP))"},{"id":"2025-08-27","type":"digest","title":"Security digest for August 27, 2025","date":"2025-08-27","url":"https://erroneo.us/security/2025-08-27/","md":"https://erroneo.us/security/2025-08-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"salesloft-drift-oauth-salesforce-data-theft","type":"brief","title":"Salesloft Drift OAuth Token Theft Hits Salesforce Orgs","date":"2025-08-26","url":"https://erroneo.us/security/briefs/salesloft-drift-oauth-salesforce-data-theft/","md":"https://erroneo.us/security/briefs/salesloft-drift-oauth-salesforce-data-theft/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"Contained since September 2025, but if your org ever connected Drift, verify that every token and every secret sitting in your CRM or support cases was rotated, because the theft was aimed at exactly those secrets."},{"id":"nx-s1ngularity-malicious-npm-releases","type":"brief","title":"Nx s1ngularity: Malicious npm Releases Hijack AI CLIs","date":"2025-08-26","url":"https://erroneo.us/security/briefs/nx-s1ngularity-malicious-npm-releases/","md":"https://erroneo.us/security/briefs/nx-s1ngularity-malicious-npm-releases/index.md","severity":"critical","kev":false,"epss":0.00565,"verdict":"check-exposure","cves":["CVE-2025-10894"],"summary":"The packages were live for about four hours in August 2025, but anything they stole (GitHub and npm tokens, SSH keys, .env files, wallets) stays useful until rotated, so confirm you were not hit rather than assume."},{"id":"CVE-2025-7775","type":"cve","title":"CVE-2025-7775: Citrix NetScaler Memory Overflow Vulnerability","date":"2025-08-26","url":"https://erroneo.us/security/cve/CVE-2025-7775/","md":"https://erroneo.us/security/cve/CVE-2025-7775/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.20284,"verdict":null,"product":"Citrix NetScaler"},{"id":"2025-08-26","type":"digest","title":"Security digest for August 26, 2025","date":"2025-08-26","url":"https://erroneo.us/security/2025-08-26/","md":"https://erroneo.us/security/2025-08-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":1,"critical":0}},{"id":"CVE-2025-48384","type":"cve","title":"CVE-2025-48384: Git Link Following Vulnerability","date":"2025-08-25","url":"https://erroneo.us/security/cve/CVE-2025-48384/","md":"https://erroneo.us/security/cve/CVE-2025-48384/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.04379,"verdict":null,"product":"Git Git"},{"id":"CVE-2024-8069","type":"cve","title":"CVE-2024-8069: Citrix Session Recording Deserialization of Untrusted Data Vulnerability","date":"2025-08-25","url":"https://erroneo.us/security/cve/CVE-2024-8069/","md":"https://erroneo.us/security/cve/CVE-2024-8069/index.md","severity":"medium","cvss":5.1,"kev":true,"epss":0.14643,"verdict":null,"product":"Citrix Session Recording"},{"id":"CVE-2024-8068","type":"cve","title":"CVE-2024-8068: Citrix Session Recording Improper Privilege Management Vulnerability","date":"2025-08-25","url":"https://erroneo.us/security/cve/CVE-2024-8068/","md":"https://erroneo.us/security/cve/CVE-2024-8068/index.md","severity":"medium","cvss":5.1,"kev":true,"epss":0.03481,"verdict":null,"product":"Citrix Session Recording"},{"id":"2025-08-25","type":"digest","title":"Security digest for August 25, 2025","date":"2025-08-25","url":"https://erroneo.us/security/2025-08-25/","md":"https://erroneo.us/security/2025-08-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2025-9288","type":"cve","title":"CVE-2025-9288: sha.js is missing type checks leading to hash rewind and passing on crafted data","date":"2025-08-21","url":"https://erroneo.us/security/cve/CVE-2025-9288/","md":"https://erroneo.us/security/cve/CVE-2025-9288/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00738,"verdict":null,"product":"sha.js (npm)"},{"id":"CVE-2025-9287","type":"cve","title":"CVE-2025-9287: cipher-base is missing type checks, leading to hash rewind and passing on crafted data","date":"2025-08-21","url":"https://erroneo.us/security/cve/CVE-2025-9287/","md":"https://erroneo.us/security/cve/CVE-2025-9287/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0055,"verdict":null,"product":"cipher-base (npm)"},{"id":"CVE-2025-43300","type":"cve","title":"CVE-2025-43300: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","date":"2025-08-21","url":"https://erroneo.us/security/cve/CVE-2025-43300/","md":"https://erroneo.us/security/cve/CVE-2025-43300/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.3203,"verdict":null,"product":"Apple iOS, iPadOS, and macOS"},{"id":"2025-08-21","type":"digest","title":"Security digest for August 21, 2025","date":"2025-08-21","url":"https://erroneo.us/security/2025-08-21/","md":"https://erroneo.us/security/2025-08-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2025-55746","type":"cve","title":"CVE-2025-55746: Directus allows unauthenticated file upload and file modification due to lacking input sanitization","date":"2025-08-20","url":"https://erroneo.us/security/cve/CVE-2025-55746/","md":"https://erroneo.us/security/cve/CVE-2025-55746/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.014,"verdict":null,"product":"directus (npm)"},{"id":"CVE-2025-54988","type":"cve","title":"CVE-2025-54988: Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF","date":"2025-08-20","url":"https://erroneo.us/security/cve/CVE-2025-54988/","md":"https://erroneo.us/security/cve/CVE-2025-54988/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.47948,"verdict":null,"product":"org.apache.tika:tika-parser-pdf-module (Maven)"},{"id":"CVE-2011-10026","type":"cve","title":"CVE-2011-10026: Spree Commerce is vulnerable to RCE through Search API","date":"2025-08-20","url":"https://erroneo.us/security/cve/CVE-2011-10026/","md":"https://erroneo.us/security/cve/CVE-2011-10026/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.03803,"verdict":null,"product":"spree (RubyGems)"},{"id":"2025-08-20","type":"digest","title":"Security digest for August 20, 2025","date":"2025-08-20","url":"https://erroneo.us/security/2025-08-20/","md":"https://erroneo.us/security/2025-08-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"GHSA-qp7j-x725-g67f","type":"ghsa","title":"HydrAIDE Authentication Bypass Vulnerability","date":"2025-08-19","url":"https://erroneo.us/security/ghsa/GHSA-qp7j-x725-g67f/","md":"https://erroneo.us/security/ghsa/GHSA-qp7j-x725-g67f/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"github.com/hydraide/hydraide, github.com/hydraide/hydraide"},{"id":"CVE-2025-55294","type":"cve","title":"CVE-2025-55294: screenshot-desktop vulnerable to command Injection via `format` option","date":"2025-08-19","url":"https://erroneo.us/security/cve/CVE-2025-55294/","md":"https://erroneo.us/security/cve/CVE-2025-55294/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01441,"verdict":null,"product":"screenshot-desktop (npm)"},{"id":"2025-08-19","type":"digest","title":"Security digest for August 19, 2025","date":"2025-08-19","url":"https://erroneo.us/security/2025-08-19/","md":"https://erroneo.us/security/2025-08-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-55205","type":"cve","title":"CVE-2025-55205: Capsule tenant owners with \"patch namespace\" permission can hijack system namespaces label","date":"2025-08-18","url":"https://erroneo.us/security/cve/CVE-2025-55205/","md":"https://erroneo.us/security/cve/CVE-2025-55205/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0046,"verdict":null,"product":"github.com/projectcapsule/capsule (Go)"},{"id":"CVE-2025-54948","type":"cve","title":"CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability","date":"2025-08-18","url":"https://erroneo.us/security/cve/CVE-2025-54948/","md":"https://erroneo.us/security/cve/CVE-2025-54948/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.23919,"verdict":null,"product":"Trend Micro Apex One"},{"id":"2025-08-18","type":"digest","title":"Security digest for August 18, 2025","date":"2025-08-18","url":"https://erroneo.us/security/2025-08-18/","md":"https://erroneo.us/security/2025-08-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-8943","type":"cve","title":"CVE-2025-8943: Flowise OS command remote code execution","date":"2025-08-14","url":"https://erroneo.us/security/cve/CVE-2025-8943/","md":"https://erroneo.us/security/cve/CVE-2025-8943/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.75203,"verdict":null,"product":"flowise (npm)"},{"id":"2025-08-14","type":"digest","title":"Security digest for August 14, 2025","date":"2025-08-14","url":"https://erroneo.us/security/2025-08-14/","md":"https://erroneo.us/security/2025-08-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-x6gv-2rvh-qmp6","type":"ghsa","title":"m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials","date":"2025-08-13","url":"https://erroneo.us/security/ghsa/GHSA-x6gv-2rvh-qmp6/","md":"https://erroneo.us/security/ghsa/GHSA-x6gv-2rvh-qmp6/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"m00nl1ght-dev/steam-workshop-deploy, BoldestDungeon/steam-workshop-deploy"},{"id":"CVE-2025-8876","type":"cve","title":"CVE-2025-8876: N-able N-Central Command Injection Vulnerability","date":"2025-08-13","url":"https://erroneo.us/security/cve/CVE-2025-8876/","md":"https://erroneo.us/security/cve/CVE-2025-8876/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.03448,"verdict":null,"product":"N-able N-Central"},{"id":"CVE-2025-8875","type":"cve","title":"CVE-2025-8875: N-able N-Central Insecure Deserialization Vulnerability","date":"2025-08-13","url":"https://erroneo.us/security/cve/CVE-2025-8875/","md":"https://erroneo.us/security/cve/CVE-2025-8875/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.01899,"verdict":null,"product":"N-able N-Central"},{"id":"CVE-2025-24293","type":"cve","title":"CVE-2025-24293: Active Storage allowed transformation methods that were potentially unsafe","date":"2025-08-13","url":"https://erroneo.us/security/cve/CVE-2025-24293/","md":"https://erroneo.us/security/cve/CVE-2025-24293/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.05468,"verdict":null,"product":"activestorage (RubyGems)"},{"id":"CVE-2011-10019","type":"cve","title":"CVE-2011-10019: Spree has Remote Command Execution vulnerability in search functionality","date":"2025-08-13","url":"https://erroneo.us/security/cve/CVE-2011-10019/","md":"https://erroneo.us/security/cve/CVE-2011-10019/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.05805,"verdict":null,"product":"spree (RubyGems)"},{"id":"2025-08-13","type":"digest","title":"Security digest for August 13, 2025","date":"2025-08-13","url":"https://erroneo.us/security/2025-08-13/","md":"https://erroneo.us/security/2025-08-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"github-copilot-yolo-mode-prompt-injection-rce","type":"brief","title":"GitHub Copilot \"YOLO Mode\" Prompt Injection RCE","date":"2025-08-12","url":"https://erroneo.us/security/briefs/github-copilot-yolo-mode-prompt-injection-rce/","md":"https://erroneo.us/security/briefs/github-copilot-yolo-mode-prompt-injection-rce/index.md","severity":"high","kev":false,"epss":0.03241,"verdict":"check-exposure","cves":["CVE-2025-53773"],"summary":"Patched in August 2025 and not known to be exploited, but enterprise Visual Studio installs lag and the autoApprove setting can still be turned on by hand, so verify both."},{"id":"CVE-2025-8088","type":"cve","title":"CVE-2025-8088: RARLAB WinRAR Path Traversal Vulnerability","date":"2025-08-12","url":"https://erroneo.us/security/cve/CVE-2025-8088/","md":"https://erroneo.us/security/cve/CVE-2025-8088/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.94509,"verdict":"check-exposure","product":"RARLAB WinRAR"},{"id":"CVE-2025-53773","type":"cve","title":"CVE-2025-53773: GitHub Copilot and Visual Studio Remote Code Execution Vulnerability","date":"2025-08-12","url":"https://erroneo.us/security/cve/CVE-2025-53773/","md":"https://erroneo.us/security/cve/CVE-2025-53773/index.md","severity":"high","cvss":7.8,"kev":false,"epss":0.03241,"verdict":"check-exposure","product":"Microsoft Microsoft Visual Studio 2022 version 17.14"},{"id":"CVE-2013-3893","type":"cve","title":"CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability","date":"2025-08-12","url":"https://erroneo.us/security/cve/CVE-2013-3893/","md":"https://erroneo.us/security/cve/CVE-2013-3893/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.87639,"verdict":null,"product":"Microsoft Internet Explorer"},{"id":"CVE-2007-0671","type":"cve","title":"CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability","date":"2025-08-12","url":"https://erroneo.us/security/cve/CVE-2007-0671/","md":"https://erroneo.us/security/cve/CVE-2007-0671/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.43241,"verdict":null,"product":"Microsoft Office"},{"id":"2025-08-12","type":"digest","title":"Security digest for August 12, 2025","date":"2025-08-12","url":"https://erroneo.us/security/2025-08-12/","md":"https://erroneo.us/security/2025-08-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":0}},{"id":"winrar-cve-2025-8088-ads-path-traversal","type":"brief","title":"WinRAR CVE-2025-8088: ADS Path Traversal Exploited by RomCom","date":"2025-08-11","url":"https://erroneo.us/security/briefs/winrar-cve-2025-8088-ads-path-traversal/","md":"https://erroneo.us/security/briefs/winrar-cve-2025-8088-ads-path-traversal/index.md","severity":"high","kev":true,"epss":0.94509,"verdict":"check-exposure","cves":["CVE-2025-8088"],"summary":"Fixed since July 2025 but still heavily exploited, and WinRAR does not update itself, so hunt down every copy at 7.12 or older and update it today."},{"id":"2025-08-11","type":"digest","title":"Security digest for August 11, 2025","date":"2025-08-11","url":"https://erroneo.us/security/2025-08-11/","md":"https://erroneo.us/security/2025-08-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-54997","type":"cve","title":"CVE-2025-54997: Privileged OpenBao Operator May Execute Code on the Underlying Host","date":"2025-08-08","url":"https://erroneo.us/security/cve/CVE-2025-54997/","md":"https://erroneo.us/security/cve/CVE-2025-54997/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.004,"verdict":null,"product":"github.com/openbao/openbao (Go)"},{"id":"2025-08-08","type":"digest","title":"Security digest for August 8, 2025","date":"2025-08-08","url":"https://erroneo.us/security/2025-08-08/","md":"https://erroneo.us/security/2025-08-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-54951","type":"cve","title":"CVE-2025-54951: ExecuTorch vulnerable to Heap-based Buffer Overflow","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-54951/","md":"https://erroneo.us/security/cve/CVE-2025-54951/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00693,"verdict":null,"product":"executorch (PyPI)"},{"id":"CVE-2025-54950","type":"cve","title":"CVE-2025-54950: ExecuTorch out-of-bounds access vulnerability","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-54950/","md":"https://erroneo.us/security/cve/CVE-2025-54950/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00619,"verdict":null,"product":"executorch (PyPI)"},{"id":"CVE-2025-54949","type":"cve","title":"CVE-2025-54949: ExecuTorch heap buffer overflow vulnerability","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-54949/","md":"https://erroneo.us/security/cve/CVE-2025-54949/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00669,"verdict":null,"product":"executorch (PyPI)"},{"id":"CVE-2025-54887","type":"cve","title":"CVE-2025-54887: JWE is missing AES-GCM authentication tag validation in encrypted JWE","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-54887/","md":"https://erroneo.us/security/cve/CVE-2025-54887/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00253,"verdict":null,"product":"jwe (RubyGems)"},{"id":"CVE-2025-30405","type":"cve","title":"CVE-2025-30405: ExecuTorch integer overflow vulnerability","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-30405/","md":"https://erroneo.us/security/cve/CVE-2025-30405/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00619,"verdict":null,"product":"executorch (PyPI)"},{"id":"CVE-2025-30404","type":"cve","title":"CVE-2025-30404: ExecuTorch integer overflow vulnerability","date":"2025-08-07","url":"https://erroneo.us/security/cve/CVE-2025-30404/","md":"https://erroneo.us/security/cve/CVE-2025-30404/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00619,"verdict":null,"product":"executorch (PyPI)"},{"id":"2025-08-07","type":"digest","title":"Security digest for August 7, 2025","date":"2025-08-07","url":"https://erroneo.us/security/2025-08-07/","md":"https://erroneo.us/security/2025-08-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"exchange-hybrid-cve-2025-53786-privilege-escalation","type":"brief","title":"Exchange Hybrid CVE-2025-53786: On-Prem to Cloud Escalation","date":"2025-08-06","url":"https://erroneo.us/security/briefs/exchange-hybrid-cve-2025-53786-privilege-escalation/","md":"https://erroneo.us/security/briefs/exchange-hybrid-cve-2025-53786-privilege-escalation/index.md","severity":"high","kev":false,"epss":0.07709,"verdict":"check-exposure","cves":["CVE-2025-53786"],"summary":"Not known to be exploited and requires on-prem Exchange admin first, but it turns any on-prem compromise into a quiet cloud takeover, so verify the dedicated hybrid app is in place and the old shared credential is gone."},{"id":"CVE-2025-53786","type":"cve","title":"CVE-2025-53786: Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability","date":"2025-08-06","url":"https://erroneo.us/security/cve/CVE-2025-53786/","md":"https://erroneo.us/security/cve/CVE-2025-53786/index.md","severity":"high","cvss":8,"kev":false,"epss":0.07709,"verdict":"check-exposure","product":"Microsoft Microsoft Exchange Server 2016 Cumulative Update 23"},{"id":"2025-08-06","type":"digest","title":"Security digest for August 6, 2025","date":"2025-08-06","url":"https://erroneo.us/security/2025-08-06/","md":"https://erroneo.us/security/2025-08-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-54135","type":"cve","title":"CVE-2025-54135: Cursor Agent is vulnerable to prompt injection via MCP Special Files","date":"2025-08-05","url":"https://erroneo.us/security/cve/CVE-2025-54135/","md":"https://erroneo.us/security/cve/CVE-2025-54135/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.0181,"verdict":"most-can-relax","product":"cursor cursor"},{"id":"CVE-2025-50706","type":"cve","title":"CVE-2025-50706: ThinkPHP Path Traversal Vulnerability","date":"2025-08-05","url":"https://erroneo.us/security/cve/CVE-2025-50706/","md":"https://erroneo.us/security/cve/CVE-2025-50706/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01029,"verdict":null,"product":"topthink/framework (Composer (PHP))"},{"id":"CVE-2022-40799","type":"cve","title":"CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","date":"2025-08-05","url":"https://erroneo.us/security/cve/CVE-2022-40799/","md":"https://erroneo.us/security/cve/CVE-2022-40799/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.3365,"verdict":null,"product":"D-Link DNR-322L"},{"id":"CVE-2020-25079","type":"cve","title":"CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","date":"2025-08-05","url":"https://erroneo.us/security/cve/CVE-2020-25079/","md":"https://erroneo.us/security/cve/CVE-2020-25079/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.54007,"verdict":null,"product":"D-Link DCS-2530L and DCS-2670L Devices"},{"id":"CVE-2020-25078","type":"cve","title":"CVE-2020-25078: D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","date":"2025-08-05","url":"https://erroneo.us/security/cve/CVE-2020-25078/","md":"https://erroneo.us/security/cve/CVE-2020-25078/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.97511,"verdict":null,"product":"D-Link DCS-2530L and DCS-2670L Devices"},{"id":"2025-08-05","type":"digest","title":"Security digest for August 5, 2025","date":"2025-08-05","url":"https://erroneo.us/security/2025-08-05/","md":"https://erroneo.us/security/2025-08-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2025-54802","type":"cve","title":"CVE-2025-54802: pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)","date":"2025-08-04","url":"https://erroneo.us/security/cve/CVE-2025-54802/","md":"https://erroneo.us/security/cve/CVE-2025-54802/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.012,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2025-54119","type":"cve","title":"CVE-2025-54119: The ADOdb sqlite3 driver allows SQL injection","date":"2025-08-04","url":"https://erroneo.us/security/cve/CVE-2025-54119/","md":"https://erroneo.us/security/cve/CVE-2025-54119/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00504,"verdict":null,"product":"adodb/adodb-php (Composer (PHP))"},{"id":"2025-08-04","type":"digest","title":"Security digest for August 4, 2025","date":"2025-08-04","url":"https://erroneo.us/security/2025-08-04/","md":"https://erroneo.us/security/2025-08-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"cursor-curxecute-mcp-prompt-injection-rce","type":"brief","title":"Cursor CurXecute: Prompt Injection to RCE via mcp.json","date":"2025-08-01","url":"https://erroneo.us/security/briefs/cursor-curxecute-mcp-prompt-injection-rce/","md":"https://erroneo.us/security/briefs/cursor-curxecute-mcp-prompt-injection-rce/index.md","severity":"high","kev":false,"epss":0.28255,"verdict":"most-can-relax","cves":["CVE-2025-54135","CVE-2025-54136"],"summary":"Cursor auto-updates and both bugs were fixed by mid-2025; the lasting takeaway is to treat any agent that can write its own tool config as a code-execution path."},{"id":"CVE-2025-6000","type":"cve","title":"CVE-2025-6000: Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration","date":"2025-08-01","url":"https://erroneo.us/security/cve/CVE-2025-6000/","md":"https://erroneo.us/security/cve/CVE-2025-6000/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00913,"verdict":null,"product":"github.com/hashicorp/vault (Go)"},{"id":"CVE-2025-54782","type":"cve","title":"CVE-2025-54782: @nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers","date":"2025-08-01","url":"https://erroneo.us/security/cve/CVE-2025-54782/","md":"https://erroneo.us/security/cve/CVE-2025-54782/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.52014,"verdict":null,"product":"@nestjs/devtools-integration (npm)"},{"id":"CVE-2025-54136","type":"cve","title":"CVE-2025-54136: Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals","date":"2025-08-01","url":"https://erroneo.us/security/cve/CVE-2025-54136/","md":"https://erroneo.us/security/cve/CVE-2025-54136/index.md","severity":"high","cvss":7.2,"kev":false,"epss":0.28255,"verdict":"most-can-relax","product":"cursor cursor"},{"id":"2025-08-01","type":"digest","title":"Security digest for August 1, 2025","date":"2025-08-01","url":"https://erroneo.us/security/2025-08-01/","md":"https://erroneo.us/security/2025-08-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"CVE-2025-8217","type":"cve","title":"CVE-2025-8217: Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension","date":"2025-07-30","url":"https://erroneo.us/security/cve/CVE-2025-8217/","md":"https://erroneo.us/security/cve/CVE-2025-8217/index.md","severity":"medium","cvss":5.1,"kev":false,"epss":0.00219,"verdict":"most-can-relax","product":"Amazon Q Developer VS Code Extension"},{"id":"CVE-2025-54576","type":"cve","title":"CVE-2025-54576: OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion","date":"2025-07-30","url":"https://erroneo.us/security/cve/CVE-2025-54576/","md":"https://erroneo.us/security/cve/CVE-2025-54576/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.012,"verdict":null,"product":"github.com/oauth2-proxy/oauth2-proxy/v7 (Go)"},{"id":"2025-07-30","type":"digest","title":"Security digest for July 30, 2025","date":"2025-07-30","url":"https://erroneo.us/security/2025-07-30/","md":"https://erroneo.us/security/2025-07-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-54381","type":"cve","title":"CVE-2025-54381: BentoML SSRF Vulnerability in File Upload Processing","date":"2025-07-29","url":"https://erroneo.us/security/cve/CVE-2025-54381/","md":"https://erroneo.us/security/cve/CVE-2025-54381/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.16152,"verdict":null,"product":"bentoml (PyPI)"},{"id":"2025-07-29","type":"digest","title":"Security digest for July 29, 2025","date":"2025-07-29","url":"https://erroneo.us/security/2025-07-29/","md":"https://erroneo.us/security/2025-07-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-54419","type":"cve","title":"CVE-2025-54419: Node-SAML SAML Signature Verification Vulnerability","date":"2025-07-28","url":"https://erroneo.us/security/cve/CVE-2025-54419/","md":"https://erroneo.us/security/cve/CVE-2025-54419/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00365,"verdict":null,"product":"@node-saml/node-saml (npm)"},{"id":"CVE-2025-54418","type":"cve","title":"CVE-2025-54418: CodeIgniter4's ImageMagick Handler has Command Injection Vulnerability","date":"2025-07-28","url":"https://erroneo.us/security/cve/CVE-2025-54418/","md":"https://erroneo.us/security/cve/CVE-2025-54418/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01531,"verdict":null,"product":"codeigniter4/framework (Composer (PHP))"},{"id":"CVE-2025-20337","type":"cve","title":"CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability","date":"2025-07-28","url":"https://erroneo.us/security/cve/CVE-2025-20337/","md":"https://erroneo.us/security/cve/CVE-2025-20337/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.74499,"verdict":null,"product":"Cisco Identity Services Engine"},{"id":"CVE-2025-20281","type":"cve","title":"CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability","date":"2025-07-28","url":"https://erroneo.us/security/cve/CVE-2025-20281/","md":"https://erroneo.us/security/cve/CVE-2025-20281/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.97601,"verdict":null,"product":"Cisco Identity Services Engine"},{"id":"CVE-2023-2533","type":"cve","title":"CVE-2023-2533: PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","date":"2025-07-28","url":"https://erroneo.us/security/cve/CVE-2023-2533/","md":"https://erroneo.us/security/cve/CVE-2023-2533/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.28621,"verdict":null,"product":"PaperCut NG/MF"},{"id":"2025-07-28","type":"digest","title":"Security digest for July 28, 2025","date":"2025-07-28","url":"https://erroneo.us/security/2025-07-28/","md":"https://erroneo.us/security/2025-07-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2025-5120","type":"cve","title":"CVE-2025-5120: smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module","date":"2025-07-27","url":"https://erroneo.us/security/cve/CVE-2025-5120/","md":"https://erroneo.us/security/cve/CVE-2025-5120/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.26303,"verdict":null,"product":"smolagents (PyPI)"},{"id":"2025-07-27","type":"digest","title":"Security digest for July 27, 2025","date":"2025-07-27","url":"https://erroneo.us/security/2025-07-27/","md":"https://erroneo.us/security/2025-07-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-54416","type":"cve","title":"CVE-2025-54416: tj-actions/branch-names has a Command Injection Vulnerability","date":"2025-07-25","url":"https://erroneo.us/security/cve/CVE-2025-54416/","md":"https://erroneo.us/security/cve/CVE-2025-54416/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00652,"verdict":null,"product":"tj-actions/branch-names (GitHub Actions)"},{"id":"CVE-2025-54369","type":"cve","title":"CVE-2025-54369: Node-SAML SAML Authentication Bypass","date":"2025-07-25","url":"https://erroneo.us/security/cve/CVE-2025-54369/","md":"https://erroneo.us/security/cve/CVE-2025-54369/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00546,"verdict":null,"product":"node-saml (npm)"},{"id":"2025-07-25","type":"digest","title":"Security digest for July 25, 2025","date":"2025-07-25","url":"https://erroneo.us/security/2025-07-25/","md":"https://erroneo.us/security/2025-07-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-32429","type":"cve","title":"CVE-2025-32429: XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter","date":"2025-07-24","url":"https://erroneo.us/security/cve/CVE-2025-32429/","md":"https://erroneo.us/security/cve/CVE-2025-32429/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.87899,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-distribution-war (Maven)"},{"id":"2025-07-24","type":"digest","title":"Security digest for July 24, 2025","date":"2025-07-24","url":"https://erroneo.us/security/2025-07-24/","md":"https://erroneo.us/security/2025-07-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"amazon-q-vscode-extension-wiper-prompt","type":"brief","title":"Amazon Q VS Code Extension 1.84.0 Shipped a Wiper Prompt","date":"2025-07-23","url":"https://erroneo.us/security/briefs/amazon-q-vscode-extension-wiper-prompt/","md":"https://erroneo.us/security/briefs/amazon-q-vscode-extension-wiper-prompt/index.md","severity":"medium","kev":false,"epss":0.00219,"verdict":"most-can-relax","cves":["CVE-2025-8217"],"summary":"A real supply-chain compromise with a payload that AWS says could not run; if nothing in your fleet still has 1.84.0, there is nothing left to do."},{"id":"2025-07-23","type":"digest","title":"Security digest for July 23, 2025","date":"2025-07-23","url":"https://erroneo.us/security/2025-07-23/","md":"https://erroneo.us/security/2025-07-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-6558","type":"cve","title":"CVE-2025-6558: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-6558/","md":"https://erroneo.us/security/cve/CVE-2025-6558/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.10927,"verdict":null,"product":"Google Chromium"},{"id":"CVE-2025-54309","type":"cve","title":"CVE-2025-54309:  CrushFTP Unprotected Alternate Channel Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-54309/","md":"https://erroneo.us/security/cve/CVE-2025-54309/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.93473,"verdict":null,"product":"CrushFTP CrushFTP"},{"id":"CVE-2025-49706","type":"cve","title":"CVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-49706/","md":"https://erroneo.us/security/cve/CVE-2025-49706/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.99095,"verdict":"check-exposure","product":"Microsoft SharePoint"},{"id":"CVE-2025-49704","type":"cve","title":"CVE-2025-49704: Microsoft SharePoint Code Injection Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-49704/","md":"https://erroneo.us/security/cve/CVE-2025-49704/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.99995,"verdict":"check-exposure","product":"Microsoft SharePoint"},{"id":"CVE-2025-2776","type":"cve","title":"CVE-2025-2776: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-2776/","md":"https://erroneo.us/security/cve/CVE-2025-2776/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.64726,"verdict":null,"product":"SysAid SysAid On-Prem"},{"id":"CVE-2025-2775","type":"cve","title":"CVE-2025-2775: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","date":"2025-07-22","url":"https://erroneo.us/security/cve/CVE-2025-2775/","md":"https://erroneo.us/security/cve/CVE-2025-2775/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.42612,"verdict":null,"product":"SysAid SysAid On-Prem"},{"id":"2025-07-22","type":"digest","title":"Security digest for July 22, 2025","date":"2025-07-22","url":"https://erroneo.us/security/2025-07-22/","md":"https://erroneo.us/security/2025-07-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":0}},{"id":"GHSA-353f-x4gh-cqq8","type":"ghsa","title":"Nokogiri patches vendored libxml2 to resolve multiple CVEs","date":"2025-07-21","url":"https://erroneo.us/security/ghsa/GHSA-353f-x4gh-cqq8/","md":"https://erroneo.us/security/ghsa/GHSA-353f-x4gh-cqq8/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"nokogiri"},{"id":"CVE-2025-7783","type":"cve","title":"CVE-2025-7783: form-data uses unsafe random function in form-data for choosing boundary","date":"2025-07-21","url":"https://erroneo.us/security/cve/CVE-2025-7783/","md":"https://erroneo.us/security/cve/CVE-2025-7783/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0181,"verdict":null,"product":"form-data (npm)"},{"id":"CVE-2025-54127","type":"cve","title":"CVE-2025-54127: NodeJS version of HAX CMS Has Insecure Default Configuration That Leads to Unauthenticated Access","date":"2025-07-21","url":"https://erroneo.us/security/cve/CVE-2025-54127/","md":"https://erroneo.us/security/cve/CVE-2025-54127/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0044,"verdict":null,"product":"@haxtheweb/haxcms-nodejs (npm)"},{"id":"CVE-2025-54082","type":"cve","title":"CVE-2025-54082: nova-tiptap has Unauthenticated Arbitrary File Upload Vulnerability","date":"2025-07-21","url":"https://erroneo.us/security/cve/CVE-2025-54082/","md":"https://erroneo.us/security/cve/CVE-2025-54082/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.00907,"verdict":null,"product":"marshmallow/nova-tiptap (Composer (PHP))"},{"id":"2025-07-21","type":"digest","title":"Security digest for July 21, 2025","date":"2025-07-21","url":"https://erroneo.us/security/2025-07-21/","md":"https://erroneo.us/security/2025-07-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2025-53771","type":"cve","title":"CVE-2025-53771: Microsoft SharePoint Server Spoofing Vulnerability","date":"2025-07-20","url":"https://erroneo.us/security/cve/CVE-2025-53771/","md":"https://erroneo.us/security/cve/CVE-2025-53771/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.9989,"verdict":"check-exposure","product":"Microsoft Microsoft SharePoint Enterprise Server 2016"},{"id":"CVE-2025-53770","type":"cve","title":"CVE-2025-53770: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","date":"2025-07-20","url":"https://erroneo.us/security/cve/CVE-2025-53770/","md":"https://erroneo.us/security/cve/CVE-2025-53770/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99999,"verdict":"check-exposure","product":"Microsoft SharePoint"},{"id":"2025-07-20","type":"digest","title":"Security digest for July 20, 2025","date":"2025-07-20","url":"https://erroneo.us/security/2025-07-20/","md":"https://erroneo.us/security/2025-07-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"toolshell-sharepoint-cve-2025-53770","type":"brief","title":"ToolShell: SharePoint On-Prem Unauthenticated RCE Chain","date":"2025-07-19","url":"https://erroneo.us/security/briefs/toolshell-sharepoint-cve-2025-53770/","md":"https://erroneo.us/security/briefs/toolshell-sharepoint-cve-2025-53770/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"check-exposure","cves":["CVE-2025-53770","CVE-2025-53771","CVE-2025-49704","CVE-2025-49706"],"summary":"Fixes shipped in July 2025, but ToolShell stole ASP.NET machine keys that survive patching, so any on-prem SharePoint that was internet-facing then needs proof that keys were rotated and no backdoor remains."},{"id":"2025-07-19","type":"digest","title":"Security digest for July 19, 2025","date":"2025-07-19","url":"https://erroneo.us/security/2025-07-19/","md":"https://erroneo.us/security/2025-07-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-46001","type":"cve","title":"CVE-2025-46001: simogeo/filemanager arbitrary file upload vulnerability","date":"2025-07-18","url":"https://erroneo.us/security/cve/CVE-2025-46001/","md":"https://erroneo.us/security/cve/CVE-2025-46001/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00773,"verdict":null,"product":"simogeo/filemanager (Composer (PHP))"},{"id":"CVE-2025-25257","type":"cve","title":"CVE-2025-25257: Fortinet FortiWeb SQL Injection Vulnerability","date":"2025-07-18","url":"https://erroneo.us/security/cve/CVE-2025-25257/","md":"https://erroneo.us/security/cve/CVE-2025-25257/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.99921,"verdict":null,"product":"Fortinet FortiWeb"},{"id":"2025-07-18","type":"digest","title":"Security digest for July 18, 2025","date":"2025-07-18","url":"https://erroneo.us/security/2025-07-18/","md":"https://erroneo.us/security/2025-07-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-23266","type":"cve","title":"CVE-2025-23266: NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path","date":"2025-07-17","url":"https://erroneo.us/security/cve/CVE-2025-23266/","md":"https://erroneo.us/security/cve/CVE-2025-23266/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.03323,"verdict":null,"product":"github.com/NVIDIA/nvidia-container-toolkit (Go)"},{"id":"2025-07-17","type":"digest","title":"Security digest for July 17, 2025","date":"2025-07-17","url":"https://erroneo.us/security/2025-07-17/","md":"https://erroneo.us/security/2025-07-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-53890","type":"cve","title":"CVE-2025-53890: pyLoad vulnerable to XSS through insecure CAPTCHA","date":"2025-07-15","url":"https://erroneo.us/security/cve/CVE-2025-53890/","md":"https://erroneo.us/security/cve/CVE-2025-53890/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01298,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"2025-07-15","type":"digest","title":"Security digest for July 15, 2025","date":"2025-07-15","url":"https://erroneo.us/security/2025-07-15/","md":"https://erroneo.us/security/2025-07-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-53836","type":"cve","title":"CVE-2025-53836: XWiki Rendering is vulnerable to RCE attacks when processing nested macros","date":"2025-07-14","url":"https://erroneo.us/security/cve/CVE-2025-53836/","md":"https://erroneo.us/security/cve/CVE-2025-53836/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00638,"verdict":null,"product":"org.xwiki.rendering:xwiki-rendering-transformation-macro (Maven)"},{"id":"CVE-2025-53835","type":"cve","title":"CVE-2025-53835: XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax","date":"2025-07-14","url":"https://erroneo.us/security/cve/CVE-2025-53835/","md":"https://erroneo.us/security/cve/CVE-2025-53835/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00408,"verdict":null,"product":"org.xwiki.rendering:xwiki-rendering-syntax-xhtml (Maven)"},{"id":"CVE-2025-53833","type":"cve","title":"CVE-2025-53833: LaRecipe is vulnerable to Server-Side Template Injection attacks","date":"2025-07-14","url":"https://erroneo.us/security/cve/CVE-2025-53833/","md":"https://erroneo.us/security/cve/CVE-2025-53833/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.09141,"verdict":null,"product":"binarytorch/larecipe (Composer (PHP))"},{"id":"CVE-2025-53623","type":"cve","title":"CVE-2025-53623: Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class","date":"2025-07-14","url":"https://erroneo.us/security/cve/CVE-2025-53623/","md":"https://erroneo.us/security/cve/CVE-2025-53623/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.00833,"verdict":null,"product":"job-iteration (RubyGems)"},{"id":"CVE-2025-47812","type":"cve","title":"CVE-2025-47812: Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","date":"2025-07-14","url":"https://erroneo.us/security/cve/CVE-2025-47812/","md":"https://erroneo.us/security/cve/CVE-2025-47812/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.93884,"verdict":null,"product":"Wing FTP Server Wing FTP Server"},{"id":"2025-07-14","type":"digest","title":"Security digest for July 14, 2025","date":"2025-07-14","url":"https://erroneo.us/security/2025-07-14/","md":"https://erroneo.us/security/2025-07-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":4}},{"id":"CVE-2025-5777","type":"cve","title":"CVE-2025-5777: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","date":"2025-07-10","url":"https://erroneo.us/security/cve/CVE-2025-5777/","md":"https://erroneo.us/security/cve/CVE-2025-5777/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99972,"verdict":"check-exposure","product":"Citrix NetScaler ADC and Gateway"},{"id":"2025-07-10","type":"digest","title":"Security digest for July 10, 2025","date":"2025-07-10","url":"https://erroneo.us/security/2025-07-10/","md":"https://erroneo.us/security/2025-07-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"mcp-remote-oauth-command-injection","type":"brief","title":"mcp-remote: OS Command Injection via OAuth Endpoint","date":"2025-07-09","url":"https://erroneo.us/security/briefs/mcp-remote-oauth-command-injection/","md":"https://erroneo.us/security/briefs/mcp-remote-oauth-command-injection/index.md","severity":"critical","kev":false,"epss":0.77027,"verdict":"check-exposure","cves":["CVE-2025-6514"],"summary":"The fix is more than a year old, but version-pinned MCP client configs and stale npx caches can keep a vulnerable mcp-remote alive, so confirm the version and move on."},{"id":"CVE-2025-6514","type":"cve","title":"CVE-2025-6514: mcp-remote exposed to OS command injection via untrusted MCP server connections","date":"2025-07-09","url":"https://erroneo.us/security/cve/CVE-2025-6514/","md":"https://erroneo.us/security/cve/CVE-2025-6514/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.77027,"verdict":"check-exposure","product":"mcp-remote (npm)"},{"id":"CVE-2025-53624","type":"cve","title":"CVE-2025-53624: docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token","date":"2025-07-09","url":"https://erroneo.us/security/cve/CVE-2025-53624/","md":"https://erroneo.us/security/cve/CVE-2025-53624/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02048,"verdict":null,"product":"docusaurus-plugin-content-gists (npm)"},{"id":"CVE-2025-53620","type":"cve","title":"CVE-2025-53620: Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests","date":"2025-07-09","url":"https://erroneo.us/security/cve/CVE-2025-53620/","md":"https://erroneo.us/security/cve/CVE-2025-53620/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00356,"verdict":null,"product":"@builder.io/qwik-city (npm)"},{"id":"2025-07-09","type":"digest","title":"Security digest for July 9, 2025","date":"2025-07-09","url":"https://erroneo.us/security/2025-07-09/","md":"https://erroneo.us/security/2025-07-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2019-9621","type":"cve","title":"CVE-2019-9621: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","date":"2025-07-07","url":"https://erroneo.us/security/cve/CVE-2019-9621/","md":"https://erroneo.us/security/cve/CVE-2019-9621/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.81037,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2019-5418","type":"cve","title":"CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability","date":"2025-07-07","url":"https://erroneo.us/security/cve/CVE-2019-5418/","md":"https://erroneo.us/security/cve/CVE-2019-5418/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.98507,"verdict":null,"product":"Rails Ruby on Rails"},{"id":"CVE-2016-10033","type":"cve","title":"CVE-2016-10033: PHPMailer Command Injection Vulnerability","date":"2025-07-07","url":"https://erroneo.us/security/cve/CVE-2016-10033/","md":"https://erroneo.us/security/cve/CVE-2016-10033/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99714,"verdict":null,"product":"PHP PHPMailer"},{"id":"CVE-2014-3931","type":"cve","title":"CVE-2014-3931: Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","date":"2025-07-07","url":"https://erroneo.us/security/cve/CVE-2014-3931/","md":"https://erroneo.us/security/cve/CVE-2014-3931/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.28978,"verdict":null,"product":"Looking Glass Multi-Router Looking Glass (MRLG)"},{"id":"2025-07-07","type":"digest","title":"Security digest for July 7, 2025","date":"2025-07-07","url":"https://erroneo.us/security/2025-07-07/","md":"https://erroneo.us/security/2025-07-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":0}},{"id":"CVE-2025-6554","type":"cve","title":"CVE-2025-6554: Google Chromium V8 Type Confusion Vulnerability","date":"2025-07-02","url":"https://erroneo.us/security/cve/CVE-2025-6554/","md":"https://erroneo.us/security/cve/CVE-2025-6554/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.14142,"verdict":null,"product":"Google Chromium V8"},{"id":"2025-07-02","type":"digest","title":"Security digest for July 2, 2025","date":"2025-07-02","url":"https://erroneo.us/security/2025-07-02/","md":"https://erroneo.us/security/2025-07-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-48928","type":"cve","title":"CVE-2025-48928: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","date":"2025-07-01","url":"https://erroneo.us/security/cve/CVE-2025-48928/","md":"https://erroneo.us/security/cve/CVE-2025-48928/index.md","severity":"medium","cvss":4,"kev":true,"epss":0.00553,"verdict":null,"product":"TeleMessage TM SGNL"},{"id":"CVE-2025-48927","type":"cve","title":"CVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","date":"2025-07-01","url":"https://erroneo.us/security/cve/CVE-2025-48927/","md":"https://erroneo.us/security/cve/CVE-2025-48927/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.11104,"verdict":null,"product":"TeleMessage TM SGNL"},{"id":"2025-07-01","type":"digest","title":"Security digest for July 1, 2025","date":"2025-07-01","url":"https://erroneo.us/security/2025-07-01/","md":"https://erroneo.us/security/2025-07-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"sudo-chroot-privilege-escalation-cve-2025-32463","type":"brief","title":"sudo --chroot Local Root Escalation (CVE-2025-32463)","date":"2025-06-30","url":"https://erroneo.us/security/briefs/sudo-chroot-privilege-escalation-cve-2025-32463/","md":"https://erroneo.us/security/briefs/sudo-chroot-privilege-escalation-cve-2025-32463/index.md","severity":"critical","kev":true,"epss":0.55498,"verdict":"check-exposure","cves":["CVE-2025-32463","CVE-2025-32462"],"summary":"Distros patched this in mid-2025 and it is now known-exploited; any multi-user or shared Linux host still on sudo 1.9.14-1.9.17 without the vendor fix hands root to every local account."},{"id":"CVE-2025-6543","type":"cve","title":"CVE-2025-6543: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","date":"2025-06-30","url":"https://erroneo.us/security/cve/CVE-2025-6543/","md":"https://erroneo.us/security/cve/CVE-2025-6543/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.10562,"verdict":"check-exposure","product":"Citrix NetScaler ADC and Gateway"},{"id":"CVE-2025-32462","type":"cve","title":"CVE-2025-32462: Sudo project Sudo vulnerability","date":"2025-06-30","url":"https://erroneo.us/security/cve/CVE-2025-32462/","md":"https://erroneo.us/security/cve/CVE-2025-32462/index.md","severity":"low","cvss":2.8,"kev":false,"epss":0.04477,"verdict":"check-exposure","product":"Sudo project Sudo"},{"id":"CVE-2025-26074","type":"cve","title":"CVE-2025-26074: Conductor vulnerable to OS command injection through unrestricted access to Java classes","date":"2025-06-30","url":"https://erroneo.us/security/cve/CVE-2025-26074/","md":"https://erroneo.us/security/cve/CVE-2025-26074/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00713,"verdict":null,"product":"org.conductoross:conductor-core (Maven)"},{"id":"2025-06-30","type":"digest","title":"Security digest for June 30, 2025","date":"2025-06-30","url":"https://erroneo.us/security/2025-06-30/","md":"https://erroneo.us/security/2025-06-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2025-50213","type":"cve","title":"CVE-2025-50213: Apache Airflow Providers Snowflake package allows for Special Element Injection via CopyFromExternalStageToSnowflakeOperator","date":"2025-06-26","url":"https://erroneo.us/security/cve/CVE-2025-50213/","md":"https://erroneo.us/security/cve/CVE-2025-50213/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00662,"verdict":null,"product":"apache-airflow-providers-snowflake (PyPI)"},{"id":"2025-06-26","type":"digest","title":"Security digest for June 26, 2025","date":"2025-06-26","url":"https://erroneo.us/security/2025-06-26/","md":"https://erroneo.us/security/2025-06-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-54085","type":"cve","title":"CVE-2024-54085: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","date":"2025-06-25","url":"https://erroneo.us/security/cve/CVE-2024-54085/","md":"https://erroneo.us/security/cve/CVE-2024-54085/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.60747,"verdict":null,"product":"AMI MegaRAC SPx"},{"id":"CVE-2024-0769","type":"cve","title":"CVE-2024-0769:  D-Link DIR-859 Router Path Traversal Vulnerability","date":"2025-06-25","url":"https://erroneo.us/security/cve/CVE-2024-0769/","md":"https://erroneo.us/security/cve/CVE-2024-0769/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.82714,"verdict":null,"product":"D-Link DIR-859 Router"},{"id":"CVE-2019-6693","type":"cve","title":"CVE-2019-6693: Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","date":"2025-06-25","url":"https://erroneo.us/security/cve/CVE-2019-6693/","md":"https://erroneo.us/security/cve/CVE-2019-6693/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.0664,"verdict":null,"product":"Fortinet FortiOS"},{"id":"2025-06-25","type":"digest","title":"Security digest for June 25, 2025","date":"2025-06-25","url":"https://erroneo.us/security/2025-06-25/","md":"https://erroneo.us/security/2025-06-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2024-56731","type":"cve","title":"CVE-2024-56731: Gogs allows deletion of internal files which leads to remote command execution","date":"2025-06-24","url":"https://erroneo.us/security/cve/CVE-2024-56731/","md":"https://erroneo.us/security/cve/CVE-2024-56731/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0115,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"2025-06-24","type":"digest","title":"Security digest for June 24, 2025","date":"2025-06-24","url":"https://erroneo.us/security/2025-06-24/","md":"https://erroneo.us/security/2025-06-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-6547","type":"cve","title":"CVE-2025-6547: pbkdf2 silently disregards Uint8Array input, returning static keys","date":"2025-06-23","url":"https://erroneo.us/security/cve/CVE-2025-6547/","md":"https://erroneo.us/security/cve/CVE-2025-6547/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00463,"verdict":null,"product":"pbkdf2 (npm)"},{"id":"CVE-2025-6545","type":"cve","title":"CVE-2025-6545: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos","date":"2025-06-23","url":"https://erroneo.us/security/cve/CVE-2025-6545/","md":"https://erroneo.us/security/cve/CVE-2025-6545/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00447,"verdict":null,"product":"pbkdf2 (npm)"},{"id":"2025-06-23","type":"digest","title":"Security digest for June 23, 2025","date":"2025-06-23","url":"https://erroneo.us/security/2025-06-23/","md":"https://erroneo.us/security/2025-06-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-52556","type":"cve","title":"CVE-2025-52556: rfc3161-client has insufficient verification for timestamp response signatures","date":"2025-06-20","url":"https://erroneo.us/security/cve/CVE-2025-52556/","md":"https://erroneo.us/security/cve/CVE-2025-52556/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00169,"verdict":null,"product":"rfc3161-client (PyPI)"},{"id":"CVE-2025-4981","type":"cve","title":"CVE-2025-4981: Mattermost allows authenticated users to write files to arbitrary locations","date":"2025-06-20","url":"https://erroneo.us/security/cve/CVE-2025-4981/","md":"https://erroneo.us/security/cve/CVE-2025-4981/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0084,"verdict":null,"product":"github.com/mattermost/mattermost-server (Go)"},{"id":"2025-06-20","type":"digest","title":"Security digest for June 20, 2025","date":"2025-06-20","url":"https://erroneo.us/security/2025-06-20/","md":"https://erroneo.us/security/2025-06-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-49132","type":"cve","title":"CVE-2025-49132: Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution","date":"2025-06-19","url":"https://erroneo.us/security/cve/CVE-2025-49132/","md":"https://erroneo.us/security/cve/CVE-2025-49132/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.5446,"verdict":null,"product":"pterodactyl/panel (Composer (PHP))"},{"id":"2025-06-19","type":"digest","title":"Security digest for June 19, 2025","date":"2025-06-19","url":"https://erroneo.us/security/2025-06-19/","md":"https://erroneo.us/security/2025-06-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-8g98-m4j9-qww5","type":"ghsa","title":"Taylored webhook validation vulnerabilities","date":"2025-06-18","url":"https://erroneo.us/security/ghsa/GHSA-8g98-m4j9-qww5/","md":"https://erroneo.us/security/ghsa/GHSA-8g98-m4j9-qww5/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"taylored"},{"id":"2025-06-18","type":"digest","title":"Security digest for June 18, 2025","date":"2025-06-18","url":"https://erroneo.us/security/2025-06-18/","md":"https://erroneo.us/security/2025-06-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"citrix-bleed-2-netscaler-cve-2025-5777","type":"brief","title":"Citrix Bleed 2: NetScaler Gateway Memory Leak","date":"2025-06-17","url":"https://erroneo.us/security/briefs/citrix-bleed-2-netscaler-cve-2025-5777/","md":"https://erroneo.us/security/briefs/citrix-bleed-2-netscaler-cve-2025-5777/index.md","severity":"critical","kev":true,"epss":0.99972,"verdict":"check-exposure","cves":["CVE-2025-5777","CVE-2025-6543"],"summary":"A pre-auth memory leak on internet-facing VPN gateways that was exploited within weeks; patched since June 2025, so the job now is proving you patched, killed sessions and were not session-hijacked."},{"id":"CVE-2023-0386","type":"cve","title":"CVE-2023-0386: Linux Kernel Improper Ownership Management Vulnerability","date":"2025-06-17","url":"https://erroneo.us/security/cve/CVE-2023-0386/","md":"https://erroneo.us/security/cve/CVE-2023-0386/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.0788,"verdict":null,"product":"Linux Kernel"},{"id":"2025-06-17","type":"digest","title":"Security digest for June 17, 2025","date":"2025-06-17","url":"https://erroneo.us/security/2025-06-17/","md":"https://erroneo.us/security/2025-06-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2025-49825","type":"cve","title":"CVE-2025-49825: Teleport allows remote authentication bypass","date":"2025-06-16","url":"https://erroneo.us/security/cve/CVE-2025-49825/","md":"https://erroneo.us/security/cve/CVE-2025-49825/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.07924,"verdict":null,"product":"github.com/gravitational/teleport (Go)"},{"id":"CVE-2025-43200","type":"cve","title":"CVE-2025-43200: Apple Multiple Products Unspecified Vulnerability","date":"2025-06-16","url":"https://erroneo.us/security/cve/CVE-2025-43200/","md":"https://erroneo.us/security/cve/CVE-2025-43200/index.md","severity":"medium","cvss":4.2,"kev":true,"epss":0.01191,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2023-33538","type":"cve","title":"CVE-2023-33538: TP-Link Multiple Routers Command Injection Vulnerability","date":"2025-06-16","url":"https://erroneo.us/security/cve/CVE-2023-33538/","md":"https://erroneo.us/security/cve/CVE-2023-33538/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.41606,"verdict":null,"product":"TP-Link Multiple Routers"},{"id":"2025-06-16","type":"digest","title":"Security digest for June 16, 2025","date":"2025-06-16","url":"https://erroneo.us/security/2025-06-16/","md":"https://erroneo.us/security/2025-06-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"mcp-inspector-unauthenticated-rce","type":"brief","title":"MCP Inspector: Unauthenticated RCE via Browser CSRF","date":"2025-06-13","url":"https://erroneo.us/security/briefs/mcp-inspector-unauthenticated-rce/","md":"https://erroneo.us/security/briefs/mcp-inspector-unauthenticated-rce/index.md","severity":"critical","kev":false,"epss":0.44453,"verdict":"check-exposure","cves":["CVE-2025-49596"],"summary":"Fixed since June 2025, but Inspector sits in project devDependencies and npx caches, so old copies survive; confirm 0.14.1+ and never run it with auth disabled."},{"id":"CVE-2025-49596","type":"cve","title":"CVE-2025-49596: MCP Inspector proxy server lacks authentication between the Inspector client and proxy","date":"2025-06-13","url":"https://erroneo.us/security/cve/CVE-2025-49596/","md":"https://erroneo.us/security/cve/CVE-2025-49596/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.44453,"verdict":"check-exposure","product":"@modelcontextprotocol/inspector (npm)"},{"id":"CVE-2025-28384","type":"cve","title":"CVE-2025-28384: OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint","date":"2025-06-13","url":"https://erroneo.us/security/cve/CVE-2025-28384/","md":"https://erroneo.us/security/cve/CVE-2025-28384/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00886,"verdict":null,"product":"openc3-cosmos-tool-iframe (RubyGems)"},{"id":"CVE-2024-38824","type":"cve","title":"CVE-2024-38824: Salt vulnerable to directory traversal attack in file receiving method","date":"2025-06-13","url":"https://erroneo.us/security/cve/CVE-2024-38824/","md":"https://erroneo.us/security/cve/CVE-2024-38824/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01035,"verdict":null,"product":"salt (PyPI)"},{"id":"2025-06-13","type":"digest","title":"Security digest for June 13, 2025","date":"2025-06-13","url":"https://erroneo.us/security/2025-06-13/","md":"https://erroneo.us/security/2025-06-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2024-56158","type":"cve","title":"CVE-2024-56158: XWiki allows SQL injection in query endpoint of REST API with Oracle","date":"2025-06-12","url":"https://erroneo.us/security/cve/CVE-2024-56158/","md":"https://erroneo.us/security/cve/CVE-2024-56158/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00512,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"2025-06-12","type":"digest","title":"Security digest for June 12, 2025","date":"2025-06-12","url":"https://erroneo.us/security/2025-06-12/","md":"https://erroneo.us/security/2025-06-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"echoleak-m365-copilot-cve-2025-32711","type":"brief","title":"EchoLeak: Zero-Click Data Leak in Microsoft 365 Copilot","date":"2025-06-11","url":"https://erroneo.us/security/briefs/echoleak-m365-copilot-cve-2025-32711/","md":"https://erroneo.us/security/briefs/echoleak-m365-copilot-cve-2025-32711/index.md","severity":"critical","kev":false,"epss":0.08034,"verdict":"most-can-relax","cves":["CVE-2025-32711"],"summary":"Nothing to patch: Microsoft fixed it in its cloud service before disclosure and saw no exploitation, but it is the reference case for why AI assistants that read untrusted content need guardrails."},{"id":"CVE-2025-32711","type":"cve","title":"CVE-2025-32711: M365 Copilot Information Disclosure Vulnerability","date":"2025-06-11","url":"https://erroneo.us/security/cve/CVE-2025-32711/","md":"https://erroneo.us/security/cve/CVE-2025-32711/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.08034,"verdict":"most-can-relax","product":"Microsoft Microsoft 365 Copilot"},{"id":"2025-06-11","type":"digest","title":"Security digest for June 11, 2025","date":"2025-06-11","url":"https://erroneo.us/security/2025-06-11/","md":"https://erroneo.us/security/2025-06-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2025-47110","type":"cve","title":"CVE-2025-47110: Magneto contains stored XSS vulnerability","date":"2025-06-10","url":"https://erroneo.us/security/cve/CVE-2025-47110/","md":"https://erroneo.us/security/cve/CVE-2025-47110/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.00728,"verdict":null,"product":"magento/community-edition (Composer (PHP))"},{"id":"CVE-2025-36852","type":"cve","title":"CVE-2025-36852: @nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests","date":"2025-06-10","url":"https://erroneo.us/security/cve/CVE-2025-36852/","md":"https://erroneo.us/security/cve/CVE-2025-36852/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00249,"verdict":null,"product":"@nx/azure-cache (npm)"},{"id":"CVE-2025-33053","type":"cve","title":"CVE-2025-33053:  Microsoft Windows External Control of File Name or Path Vulnerability","date":"2025-06-10","url":"https://erroneo.us/security/cve/CVE-2025-33053/","md":"https://erroneo.us/security/cve/CVE-2025-33053/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.87015,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24016","type":"cve","title":"CVE-2025-24016: Wazuh Server Deserialization of Untrusted Data Vulnerability","date":"2025-06-10","url":"https://erroneo.us/security/cve/CVE-2025-24016/","md":"https://erroneo.us/security/cve/CVE-2025-24016/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.9384,"verdict":null,"product":"Wazuh Wazuh Server"},{"id":"CVE-2024-34711","type":"cve","title":"CVE-2024-34711: GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)","date":"2025-06-10","url":"https://erroneo.us/security/cve/CVE-2024-34711/","md":"https://erroneo.us/security/cve/CVE-2024-34711/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00298,"verdict":null,"product":"org.geoserver.web:gs-web-app (Maven)"},{"id":"2025-06-10","type":"digest","title":"Security digest for June 10, 2025","date":"2025-06-10","url":"https://erroneo.us/security/2025-06-10/","md":"https://erroneo.us/security/2025-06-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"GHSA-826p-4gcg-35vw","type":"ghsa","title":"GeoTools has XML External Entity (XXE) Processing Vulnerability in XSD schema handling","date":"2025-06-09","url":"https://erroneo.us/security/ghsa/GHSA-826p-4gcg-35vw/","md":"https://erroneo.us/security/ghsa/GHSA-826p-4gcg-35vw/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"org.geotools:gt-xsd-core, org.geotools:gt-xsd-core"},{"id":"CVE-2025-49652","type":"cve","title":"CVE-2025-49652: BackendAI Missing Authentication for Critical Function","date":"2025-06-09","url":"https://erroneo.us/security/cve/CVE-2025-49652/","md":"https://erroneo.us/security/cve/CVE-2025-49652/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00427,"verdict":null,"product":"backend.ai (PyPI)"},{"id":"CVE-2025-49136","type":"cve","title":"CVE-2025-49136: listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user","date":"2025-06-09","url":"https://erroneo.us/security/cve/CVE-2025-49136/","md":"https://erroneo.us/security/cve/CVE-2025-49136/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0158,"verdict":null,"product":"github.com/knadh/listmonk (Go)"},{"id":"CVE-2025-32433","type":"cve","title":"CVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","date":"2025-06-09","url":"https://erroneo.us/security/cve/CVE-2025-32433/","md":"https://erroneo.us/security/cve/CVE-2025-32433/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.98786,"verdict":"check-exposure","product":"Erlang Erlang/OTP"},{"id":"CVE-2024-42009","type":"cve","title":"CVE-2024-42009: RoundCube Webmail Cross-Site Scripting Vulnerability","date":"2025-06-09","url":"https://erroneo.us/security/cve/CVE-2024-42009/","md":"https://erroneo.us/security/cve/CVE-2024-42009/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.82882,"verdict":null,"product":"Roundcube Webmail"},{"id":"2025-06-09","type":"digest","title":"Security digest for June 9, 2025","date":"2025-06-09","url":"https://erroneo.us/security/2025-06-09/","md":"https://erroneo.us/security/2025-06-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"GHSA-c42h-56wx-h85q","type":"ghsa","title":"laravel-auth0 SDK Deserialization of Untrusted Data vulnerability","date":"2025-06-06","url":"https://erroneo.us/security/ghsa/GHSA-c42h-56wx-h85q/","md":"https://erroneo.us/security/ghsa/GHSA-c42h-56wx-h85q/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"auth0/login"},{"id":"2025-06-06","type":"digest","title":"Security digest for June 6, 2025","date":"2025-06-06","url":"https://erroneo.us/security/2025-06-06/","md":"https://erroneo.us/security/2025-06-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-98j6-67v3-mw34","type":"ghsa","title":"Auth0 Symfony SDK Deserialization of Untrusted Data vulnerability","date":"2025-06-05","url":"https://erroneo.us/security/ghsa/GHSA-98j6-67v3-mw34/","md":"https://erroneo.us/security/ghsa/GHSA-98j6-67v3-mw34/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"auth0/symfony"},{"id":"CVE-2025-5419","type":"cve","title":"CVE-2025-5419: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","date":"2025-06-05","url":"https://erroneo.us/security/cve/CVE-2025-5419/","md":"https://erroneo.us/security/cve/CVE-2025-5419/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.07821,"verdict":null,"product":"Google Chromium V8"},{"id":"2025-06-05","type":"digest","title":"Security digest for June 5, 2025","date":"2025-06-05","url":"https://erroneo.us/security/2025-06-05/","md":"https://erroneo.us/security/2025-06-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"GHSA-862m-5253-832r","type":"ghsa","title":"Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data","date":"2025-06-04","url":"https://erroneo.us/security/ghsa/GHSA-862m-5253-832r/","md":"https://erroneo.us/security/ghsa/GHSA-862m-5253-832r/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"auth0/wordpress"},{"id":"CVE-2025-48951","type":"cve","title":"CVE-2025-48951: Auth0-PHP SDK Deserialization of Untrusted Data vulnerability","date":"2025-06-04","url":"https://erroneo.us/security/cve/CVE-2025-48951/","md":"https://erroneo.us/security/cve/CVE-2025-48951/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00746,"verdict":null,"product":"auth0/auth0-php (Composer (PHP))"},{"id":"CVE-2025-1793","type":"cve","title":"CVE-2025-1793: llama_index vulnerable to SQL Injection","date":"2025-06-04","url":"https://erroneo.us/security/cve/CVE-2025-1793/","md":"https://erroneo.us/security/cve/CVE-2025-1793/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00663,"verdict":null,"product":"llama-index (PyPI)"},{"id":"2025-06-04","type":"digest","title":"Security digest for June 4, 2025","date":"2025-06-04","url":"https://erroneo.us/security/2025-06-04/","md":"https://erroneo.us/security/2025-06-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-49223","type":"cve","title":"CVE-2025-49223: billboard.js allows prototype pollution via the function generate","date":"2025-06-03","url":"https://erroneo.us/security/cve/CVE-2025-49223/","md":"https://erroneo.us/security/cve/CVE-2025-49223/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0084,"verdict":null,"product":"billboard.js (npm)"},{"id":"CVE-2025-27038","type":"cve","title":"CVE-2025-27038: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date":"2025-06-03","url":"https://erroneo.us/security/cve/CVE-2025-27038/","md":"https://erroneo.us/security/cve/CVE-2025-27038/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.01016,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2025-21480","type":"cve","title":"CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","date":"2025-06-03","url":"https://erroneo.us/security/cve/CVE-2025-21480/","md":"https://erroneo.us/security/cve/CVE-2025-21480/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.0046,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2025-21479","type":"cve","title":"CVE-2025-21479: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","date":"2025-06-03","url":"https://erroneo.us/security/cve/CVE-2025-21479/","md":"https://erroneo.us/security/cve/CVE-2025-21479/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.00843,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"2025-06-03","type":"digest","title":"Security digest for June 3, 2025","date":"2025-06-03","url":"https://erroneo.us/security/2025-06-03/","md":"https://erroneo.us/security/2025-06-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2025-3935","type":"cve","title":"CVE-2025-3935: ConnectWise ScreenConnect Improper Authentication Vulnerability","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2025-3935/","md":"https://erroneo.us/security/cve/CVE-2025-3935/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.03536,"verdict":null,"product":"ConnectWise ScreenConnect"},{"id":"CVE-2025-35939","type":"cve","title":"CVE-2025-35939: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2025-35939/","md":"https://erroneo.us/security/cve/CVE-2025-35939/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.01349,"verdict":null,"product":"Craft CMS Craft CMS"},{"id":"CVE-2025-1750","type":"cve","title":"CVE-2025-1750: LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2025-1750/","md":"https://erroneo.us/security/cve/CVE-2025-1750/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00817,"verdict":null,"product":"llama-index-vector-stores-duckdb (PyPI)"},{"id":"CVE-2024-56145","type":"cve","title":"CVE-2024-56145: Craft CMS Code Injection Vulnerability","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2024-56145/","md":"https://erroneo.us/security/cve/CVE-2024-56145/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.97405,"verdict":null,"product":"Craft CMS Craft CMS"},{"id":"CVE-2023-39780","type":"cve","title":"CVE-2023-39780: ASUS RT-AX55 Routers OS Command Injection Vulnerability","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2023-39780/","md":"https://erroneo.us/security/cve/CVE-2023-39780/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.39514,"verdict":null,"product":"ASUS RT-AX55 Routers"},{"id":"CVE-2021-32030","type":"cve","title":"CVE-2021-32030: ASUS Routers Improper Authentication Vulnerability","date":"2025-06-02","url":"https://erroneo.us/security/cve/CVE-2021-32030/","md":"https://erroneo.us/security/cve/CVE-2021-32030/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99393,"verdict":null,"product":"ASUS Routers"},{"id":"2025-06-02","type":"digest","title":"Security digest for June 2, 2025","date":"2025-06-02","url":"https://erroneo.us/security/2025-06-02/","md":"https://erroneo.us/security/2025-06-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":1}},{"id":"2025-06-01","type":"digest","title":"Security digest for June 1, 2025","date":"2025-06-01","url":"https://erroneo.us/security/2025-06-01/","md":"https://erroneo.us/security/2025-06-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-48865","type":"cve","title":"CVE-2025-48865: Fabio allows HTTP clients to manipulate custom headers it adds","date":"2025-05-29","url":"https://erroneo.us/security/cve/CVE-2025-48865/","md":"https://erroneo.us/security/cve/CVE-2025-48865/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00451,"verdict":null,"product":"github.com/fabiolb/fabio (Go)"},{"id":"2025-05-29","type":"digest","title":"Security digest for May 29, 2025","date":"2025-05-29","url":"https://erroneo.us/security/2025-05-29/","md":"https://erroneo.us/security/2025-05-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-phf6-hm3h-x8qp","type":"ghsa","title":"Cromwell GitHub Actions Secrets exfiltration via `Issue_comment`","date":"2025-05-28","url":"https://erroneo.us/security/ghsa/GHSA-phf6-hm3h-x8qp/","md":"https://erroneo.us/security/ghsa/GHSA-phf6-hm3h-x8qp/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"broadinstitute/cromwell"},{"id":"CVE-2025-47933","type":"cve","title":"CVE-2025-47933: Argo CD allows cross-site scripting on repositories page","date":"2025-05-28","url":"https://erroneo.us/security/cve/CVE-2025-47933/","md":"https://erroneo.us/security/cve/CVE-2025-47933/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00466,"verdict":null,"product":"github.com/argoproj/argo-cd (Go)"},{"id":"2025-05-28","type":"digest","title":"Security digest for May 28, 2025","date":"2025-05-28","url":"https://erroneo.us/security/2025-05-28/","md":"https://erroneo.us/security/2025-05-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-4632","type":"cve","title":"CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability","date":"2025-05-22","url":"https://erroneo.us/security/cve/CVE-2025-4632/","md":"https://erroneo.us/security/cve/CVE-2025-4632/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.24066,"verdict":null,"product":"Samsung MagicINFO 9 Server"},{"id":"2025-05-22","type":"digest","title":"Security digest for May 22, 2025","date":"2025-05-22","url":"https://erroneo.us/security/2025-05-22/","md":"https://erroneo.us/security/2025-05-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-48200","type":"cve","title":"CVE-2025-48200: The Front End User Registration extension for TYPO3 (sr_feuser_register) Remote Code Execution","date":"2025-05-21","url":"https://erroneo.us/security/cve/CVE-2025-48200/","md":"https://erroneo.us/security/cve/CVE-2025-48200/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00766,"verdict":null,"product":"sjbr/sr-feuser-register (Composer (PHP))"},{"id":"CVE-2025-41232","type":"cve","title":"CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods","date":"2025-05-21","url":"https://erroneo.us/security/cve/CVE-2025-41232/","md":"https://erroneo.us/security/cve/CVE-2025-41232/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00622,"verdict":null,"product":"org.springframework.security:spring-security-aspects (Maven)"},{"id":"2025-05-21","type":"digest","title":"Security digest for May 21, 2025","date":"2025-05-21","url":"https://erroneo.us/security/2025-05-21/","md":"https://erroneo.us/security/2025-05-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-47277","type":"cve","title":"CVE-2025-47277: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service","date":"2025-05-20","url":"https://erroneo.us/security/cve/CVE-2025-47277/","md":"https://erroneo.us/security/cve/CVE-2025-47277/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00964,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2025-46724","type":"cve","title":"CVE-2025-46724: Langroid has a Code Injection vulnerability in TableChatAgent","date":"2025-05-20","url":"https://erroneo.us/security/cve/CVE-2025-46724/","md":"https://erroneo.us/security/cve/CVE-2025-46724/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0083,"verdict":null,"product":"langroid (PyPI)"},{"id":"2025-05-20","type":"digest","title":"Security digest for May 20, 2025","date":"2025-05-20","url":"https://erroneo.us/security/2025-05-20/","md":"https://erroneo.us/security/2025-05-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-47949","type":"cve","title":"CVE-2025-47949: samlify SAML Signature Wrapping attack","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-47949/","md":"https://erroneo.us/security/cve/CVE-2025-47949/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00468,"verdict":null,"product":"samlify (npm)"},{"id":"CVE-2025-47284","type":"cve","title":"CVE-2025-47284: Gardener allows metadata injection for a project secret which can lead to privilege escalation","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-47284/","md":"https://erroneo.us/security/cve/CVE-2025-47284/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00468,"verdict":null,"product":"github.com/gardener/gardener (Go)"},{"id":"CVE-2025-47283","type":"cve","title":"CVE-2025-47283: Gardener allows bypassing project secret validation which can lead to privilege escalation","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-47283/","md":"https://erroneo.us/security/cve/CVE-2025-47283/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00677,"verdict":null,"product":"github.com/gardener/gardener (Go)"},{"id":"CVE-2025-47282","type":"cve","title":"CVE-2025-47282: Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-47282/","md":"https://erroneo.us/security/cve/CVE-2025-47282/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00743,"verdict":null,"product":"github.com/gardener/external-dns-management (Go)"},{"id":"CVE-2025-4428","type":"cve","title":"CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-4428/","md":"https://erroneo.us/security/cve/CVE-2025-4428/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.88003,"verdict":null,"product":"Ivanti Endpoint Manager Mobile (EPMM)"},{"id":"CVE-2025-4427","type":"cve","title":"CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-4427/","md":"https://erroneo.us/security/cve/CVE-2025-4427/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.99927,"verdict":null,"product":"Ivanti Endpoint Manager Mobile (EPMM)"},{"id":"CVE-2025-27920","type":"cve","title":"CVE-2025-27920: Srimax Output Messenger Directory Traversal Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2025-27920/","md":"https://erroneo.us/security/cve/CVE-2025-27920/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.01865,"verdict":null,"product":"Srimax Output Messenger"},{"id":"CVE-2024-27443","type":"cve","title":"CVE-2024-27443: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2024-27443/","md":"https://erroneo.us/security/cve/CVE-2024-27443/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.24606,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2024-11182","type":"cve","title":"CVE-2024-11182: MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2024-11182/","md":"https://erroneo.us/security/cve/CVE-2024-11182/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.31355,"verdict":null,"product":"MDaemon Email Server"},{"id":"CVE-2023-38950","type":"cve","title":"CVE-2023-38950: ZKTeco BioTime Path Traversal Vulnerability","date":"2025-05-19","url":"https://erroneo.us/security/cve/CVE-2023-38950/","md":"https://erroneo.us/security/cve/CVE-2023-38950/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.92468,"verdict":null,"product":"ZKTeco BioTime"},{"id":"2025-05-19","type":"digest","title":"Security digest for May 19, 2025","date":"2025-05-19","url":"https://erroneo.us/security/2025-05-19/","md":"https://erroneo.us/security/2025-05-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":4}},{"id":"GHSA-9wg9-93h9-j8ch","type":"ghsa","title":"Auth0 Symfony SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions","date":"2025-05-17","url":"https://erroneo.us/security/ghsa/GHSA-9wg9-93h9-j8ch/","md":"https://erroneo.us/security/ghsa/GHSA-9wg9-93h9-j8ch/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"auth0/symfony"},{"id":"GHSA-9fwj-9mjf-rhj3","type":"ghsa","title":"laravel-auth0 SDK Vulnerable to Brute Force Authentication Tags of CookieStore Sessions","date":"2025-05-17","url":"https://erroneo.us/security/ghsa/GHSA-9fwj-9mjf-rhj3/","md":"https://erroneo.us/security/ghsa/GHSA-9fwj-9mjf-rhj3/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"auth0/login"},{"id":"GHSA-2f4r-34m4-3w8q","type":"ghsa","title":"Auth0 Wordpress plugin Vulnerable to Brute Force Authentication Tags of CookieStore Sessions","date":"2025-05-17","url":"https://erroneo.us/security/ghsa/GHSA-2f4r-34m4-3w8q/","md":"https://erroneo.us/security/ghsa/GHSA-2f4r-34m4-3w8q/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"auth0/wordpress"},{"id":"2025-05-17","type":"digest","title":"Security digest for May 17, 2025","date":"2025-05-17","url":"https://erroneo.us/security/2025-05-17/","md":"https://erroneo.us/security/2025-05-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-47275","type":"cve","title":"CVE-2025-47275: Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK","date":"2025-05-16","url":"https://erroneo.us/security/cve/CVE-2025-47275/","md":"https://erroneo.us/security/cve/CVE-2025-47275/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00539,"verdict":null,"product":"auth0/auth0-php (Composer (PHP))"},{"id":"2025-05-16","type":"digest","title":"Security digest for May 16, 2025","date":"2025-05-16","url":"https://erroneo.us/security/2025-05-16/","md":"https://erroneo.us/security/2025-05-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-42999","type":"cve","title":"CVE-2025-42999: SAP NetWeaver Deserialization Vulnerability","date":"2025-05-15","url":"https://erroneo.us/security/cve/CVE-2025-42999/","md":"https://erroneo.us/security/cve/CVE-2025-42999/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.12854,"verdict":"check-exposure","product":"SAP NetWeaver"},{"id":"CVE-2024-12987","type":"cve","title":"CVE-2024-12987: DrayTek Vigor Routers OS Command Injection Vulnerability","date":"2025-05-15","url":"https://erroneo.us/security/cve/CVE-2024-12987/","md":"https://erroneo.us/security/cve/CVE-2024-12987/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.98163,"verdict":null,"product":"DrayTek Vigor Routers"},{"id":"2025-05-15","type":"digest","title":"Security digest for May 15, 2025","date":"2025-05-15","url":"https://erroneo.us/security/2025-05-15/","md":"https://erroneo.us/security/2025-05-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-47884","type":"cve","title":"CVE-2025-47884: Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens","date":"2025-05-14","url":"https://erroneo.us/security/cve/CVE-2025-47884/","md":"https://erroneo.us/security/cve/CVE-2025-47884/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0064,"verdict":null,"product":"io.jenkins.plugins:oidc-provider (Maven)"},{"id":"CVE-2025-4641","type":"cve","title":"CVE-2025-4641: BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference","date":"2025-05-14","url":"https://erroneo.us/security/cve/CVE-2025-4641/","md":"https://erroneo.us/security/cve/CVE-2025-4641/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00558,"verdict":null,"product":"io.github.bonigarcia:webdrivermanager (Maven)"},{"id":"CVE-2025-32756","type":"cve","title":"CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","date":"2025-05-14","url":"https://erroneo.us/security/cve/CVE-2025-32756/","md":"https://erroneo.us/security/cve/CVE-2025-32756/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.30944,"verdict":null,"product":"Fortinet Multiple Products"},{"id":"CVE-2024-24780","type":"cve","title":"CVE-2024-24780: Apache IoTDB Vulnerable to Remote Code Execution","date":"2025-05-14","url":"https://erroneo.us/security/cve/CVE-2024-24780/","md":"https://erroneo.us/security/cve/CVE-2024-24780/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01437,"verdict":null,"product":"org.apache.iotdb:iotdb-core (Maven)"},{"id":"2025-05-14","type":"digest","title":"Security digest for May 14, 2025","date":"2025-05-14","url":"https://erroneo.us/security/2025-05-14/","md":"https://erroneo.us/security/2025-05-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2025-4658","type":"cve","title":"CVE-2025-4658: OPKSSH Vulnerable to Authentication Bypass","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-4658/","md":"https://erroneo.us/security/cve/CVE-2025-4658/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0034,"verdict":null,"product":"github.com/openpubkey/opkssh (Go)"},{"id":"CVE-2025-3757","type":"cve","title":"CVE-2025-3757: OpenPubkey Vulnerable to Authentication Bypass","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-3757/","md":"https://erroneo.us/security/cve/CVE-2025-3757/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00427,"verdict":null,"product":"github.com/openpubkey/openpubkey (Go)"},{"id":"CVE-2025-32709","type":"cve","title":"CVE-2025-32709: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-32709/","md":"https://erroneo.us/security/cve/CVE-2025-32709/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01818,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-32706","type":"cve","title":"CVE-2025-32706: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-32706/","md":"https://erroneo.us/security/cve/CVE-2025-32706/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02333,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-32701","type":"cve","title":"CVE-2025-32701: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-32701/","md":"https://erroneo.us/security/cve/CVE-2025-32701/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01416,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-30400","type":"cve","title":"CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-30400/","md":"https://erroneo.us/security/cve/CVE-2025-30400/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01917,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-30397","type":"cve","title":"CVE-2025-30397: Microsoft Windows Scripting Engine Type Confusion Vulnerability","date":"2025-05-13","url":"https://erroneo.us/security/cve/CVE-2025-30397/","md":"https://erroneo.us/security/cve/CVE-2025-30397/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.27263,"verdict":null,"product":"Microsoft Windows"},{"id":"2025-05-13","type":"digest","title":"Security digest for May 13, 2025","date":"2025-05-13","url":"https://erroneo.us/security/2025-05-13/","md":"https://erroneo.us/security/2025-05-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":2}},{"id":"CVE-2025-47729","type":"cve","title":"CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability","date":"2025-05-12","url":"https://erroneo.us/security/cve/CVE-2025-47729/","md":"https://erroneo.us/security/cve/CVE-2025-47729/index.md","severity":"low","cvss":1.9,"kev":true,"epss":0.00447,"verdict":null,"product":"TeleMessage TM SGNL"},{"id":"2025-05-12","type":"digest","title":"Security digest for May 12, 2025","date":"2025-05-12","url":"https://erroneo.us/security/2025-05-12/","md":"https://erroneo.us/security/2025-05-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-6047","type":"cve","title":"CVE-2024-6047: GeoVision Devices OS Command Injection Vulnerability","date":"2025-05-07","url":"https://erroneo.us/security/cve/CVE-2024-6047/","md":"https://erroneo.us/security/cve/CVE-2024-6047/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.10072,"verdict":null,"product":"GeoVision Multiple Devices"},{"id":"CVE-2024-11120","type":"cve","title":"CVE-2024-11120: GeoVision Devices OS Command Injection Vulnerability","date":"2025-05-07","url":"https://erroneo.us/security/cve/CVE-2024-11120/","md":"https://erroneo.us/security/cve/CVE-2024-11120/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.28386,"verdict":null,"product":"GeoVision Multiple Devices"},{"id":"2025-05-07","type":"digest","title":"Security digest for May 7, 2025","date":"2025-05-07","url":"https://erroneo.us/security/2025-05-07/","md":"https://erroneo.us/security/2025-05-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-46816","type":"cve","title":"CVE-2025-46816: goshs route not protected, allows command execution","date":"2025-05-06","url":"https://erroneo.us/security/cve/CVE-2025-46816/","md":"https://erroneo.us/security/cve/CVE-2025-46816/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00737,"verdict":null,"product":"github.com/patrickhener/goshs (Go)"},{"id":"CVE-2025-46572","type":"cve","title":"CVE-2025-46572: Passport-wsfed-saml2 allows SAML Authentication Bypass via Signature Wrapping","date":"2025-05-06","url":"https://erroneo.us/security/cve/CVE-2025-46572/","md":"https://erroneo.us/security/cve/CVE-2025-46572/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00423,"verdict":null,"product":"passport-wsfed-saml2 (npm)"},{"id":"CVE-2025-27363","type":"cve","title":"CVE-2025-27363: FreeType Out-of-Bounds Write Vulnerability","date":"2025-05-06","url":"https://erroneo.us/security/cve/CVE-2025-27363/","md":"https://erroneo.us/security/cve/CVE-2025-27363/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.27775,"verdict":null,"product":"FreeType FreeType"},{"id":"2025-05-06","type":"digest","title":"Security digest for May 6, 2025","date":"2025-05-06","url":"https://erroneo.us/security/2025-05-06/","md":"https://erroneo.us/security/2025-05-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2025-47241","type":"cve","title":"CVE-2025-47241: Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL","date":"2025-05-05","url":"https://erroneo.us/security/cve/CVE-2025-47241/","md":"https://erroneo.us/security/cve/CVE-2025-47241/index.md","severity":"medium","cvss":4,"kev":false,"epss":0.00454,"verdict":null,"product":"browser-use (PyPI)"},{"id":"CVE-2025-45616","type":"cve","title":"CVE-2025-45616: BRCC Incorrect Access Control vulnerability","date":"2025-05-05","url":"https://erroneo.us/security/cve/CVE-2025-45616/","md":"https://erroneo.us/security/cve/CVE-2025-45616/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00447,"verdict":null,"product":"com.baidu.mapp:brcc-core (Maven)"},{"id":"CVE-2025-3248","type":"cve","title":"CVE-2025-3248: Langflow Missing Authentication Vulnerability","date":"2025-05-05","url":"https://erroneo.us/security/cve/CVE-2025-3248/","md":"https://erroneo.us/security/cve/CVE-2025-3248/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99993,"verdict":"check-exposure","product":"Langflow Langflow"},{"id":"CVE-2025-2905","type":"cve","title":"CVE-2025-2905: WSO2 API Manager XML External Entity (XXE) vulnerability","date":"2025-05-05","url":"https://erroneo.us/security/cve/CVE-2025-2905/","md":"https://erroneo.us/security/cve/CVE-2025-2905/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01294,"verdict":null,"product":"org.wso2.am:am-distribution-parent (Maven)"},{"id":"2025-05-05","type":"digest","title":"Security digest for May 5, 2025","date":"2025-05-05","url":"https://erroneo.us/security/2025-05-05/","md":"https://erroneo.us/security/2025-05-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2025-34028","type":"cve","title":"CVE-2025-34028: Commvault Command Center Path Traversal Vulnerability","date":"2025-05-02","url":"https://erroneo.us/security/cve/CVE-2025-34028/","md":"https://erroneo.us/security/cve/CVE-2025-34028/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.97604,"verdict":null,"product":"Commvault Command Center"},{"id":"CVE-2024-58136","type":"cve","title":"CVE-2024-58136: Yiiframework Yii Improper Protection of Alternate Path Vulnerability","date":"2025-05-02","url":"https://erroneo.us/security/cve/CVE-2024-58136/","md":"https://erroneo.us/security/cve/CVE-2024-58136/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.87757,"verdict":null,"product":"Yiiframework Yii"},{"id":"2025-05-02","type":"digest","title":"Security digest for May 2, 2025","date":"2025-05-02","url":"https://erroneo.us/security/2025-05-02/","md":"https://erroneo.us/security/2025-05-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2025-46337","type":"cve","title":"CVE-2025-46337: SQL injection in ADOdb PostgreSQL driver pg_insert_id() method","date":"2025-05-01","url":"https://erroneo.us/security/cve/CVE-2025-46337/","md":"https://erroneo.us/security/cve/CVE-2025-46337/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00743,"verdict":null,"product":"adodb/adodb-php (Composer (PHP))"},{"id":"CVE-2024-38475","type":"cve","title":"CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability","date":"2025-05-01","url":"https://erroneo.us/security/cve/CVE-2024-38475/","md":"https://erroneo.us/security/cve/CVE-2024-38475/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.99957,"verdict":null,"product":"Apache HTTP Server"},{"id":"CVE-2023-44221","type":"cve","title":"CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerability","date":"2025-05-01","url":"https://erroneo.us/security/cve/CVE-2023-44221/","md":"https://erroneo.us/security/cve/CVE-2023-44221/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.7625,"verdict":null,"product":"SonicWall SMA100 Appliances"},{"id":"2025-05-01","type":"digest","title":"Security digest for May 1, 2025","date":"2025-05-01","url":"https://erroneo.us/security/2025-05-01/","md":"https://erroneo.us/security/2025-05-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2025-46558","type":"cve","title":"CVE-2025-46558: org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content","date":"2025-04-30","url":"https://erroneo.us/security/cve/CVE-2025-46558/","md":"https://erroneo.us/security/cve/CVE-2025-46558/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00478,"verdict":null,"product":"org.xwiki.contrib.markdown:syntax-markdown-commonmark12 (Maven)"},{"id":"2025-04-30","type":"digest","title":"Security digest for April 30, 2025","date":"2025-04-30","url":"https://erroneo.us/security/2025-04-30/","md":"https://erroneo.us/security/2025-04-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-46348","type":"cve","title":"CVE-2025-46348: YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-46348/","md":"https://erroneo.us/security/cve/CVE-2025-46348/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00653,"verdict":null,"product":"yeswiki/yeswiki (Composer (PHP))"},{"id":"CVE-2025-32974","type":"cve","title":"CVE-2025-32974: org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-32974/","md":"https://erroneo.us/security/cve/CVE-2025-32974/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00354,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-security-requiredrights-default (Maven)"},{"id":"CVE-2025-32973","type":"cve","title":"CVE-2025-32973: org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-32973/","md":"https://erroneo.us/security/cve/CVE-2025-32973/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00402,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-component-wiki (Maven)"},{"id":"CVE-2025-32444","type":"cve","title":"CVE-2025-32444: vLLM Vulnerable to Remote Code Execution via Mooncake Integration","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-32444/","md":"https://erroneo.us/security/cve/CVE-2025-32444/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01789,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2025-31324","type":"cve","title":"CVE-2025-31324: SAP NetWeaver Unrestricted File Upload Vulnerability","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-31324/","md":"https://erroneo.us/security/cve/CVE-2025-31324/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99486,"verdict":"check-exposure","product":"SAP NetWeaver"},{"id":"CVE-2025-0520","type":"cve","title":"CVE-2025-0520: ShowDoc unrestricted file upload vulnerability","date":"2025-04-29","url":"https://erroneo.us/security/cve/CVE-2025-0520/","md":"https://erroneo.us/security/cve/CVE-2025-0520/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.02647,"verdict":null,"product":"showdoc/showdoc (Composer (PHP))"},{"id":"2025-04-29","type":"digest","title":"Security digest for April 29, 2025","date":"2025-04-29","url":"https://erroneo.us/security/2025-04-29/","md":"https://erroneo.us/security/2025-04-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":5}},{"id":"CVE-2025-42599","type":"cve","title":"CVE-2025-42599: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","date":"2025-04-28","url":"https://erroneo.us/security/cve/CVE-2025-42599/","md":"https://erroneo.us/security/cve/CVE-2025-42599/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.03355,"verdict":null,"product":"Qualitia Active! Mail"},{"id":"CVE-2025-3928","type":"cve","title":"CVE-2025-3928: Commvault Web Server Unspecified Vulnerability","date":"2025-04-28","url":"https://erroneo.us/security/cve/CVE-2025-3928/","md":"https://erroneo.us/security/cve/CVE-2025-3928/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.02484,"verdict":null,"product":"Commvault Web Server"},{"id":"CVE-2025-1976","type":"cve","title":"CVE-2025-1976: Broadcom Brocade Fabric OS Code Injection Vulnerability","date":"2025-04-28","url":"https://erroneo.us/security/cve/CVE-2025-1976/","md":"https://erroneo.us/security/cve/CVE-2025-1976/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.0069,"verdict":null,"product":"Broadcom Brocade Fabric OS"},{"id":"2025-04-28","type":"digest","title":"Security digest for April 28, 2025","date":"2025-04-28","url":"https://erroneo.us/security/2025-04-28/","md":"https://erroneo.us/security/2025-04-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"2025-04-25","type":"digest","title":"Security digest for April 25, 2025","date":"2025-04-25","url":"https://erroneo.us/security/2025-04-25/","md":"https://erroneo.us/security/2025-04-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"sap-netweaver-visual-composer-cve-2025-31324","type":"brief","title":"SAP NetWeaver Visual Composer: Unauthenticated Upload RCE","date":"2025-04-24","url":"https://erroneo.us/security/briefs/sap-netweaver-visual-composer-cve-2025-31324/","md":"https://erroneo.us/security/briefs/sap-netweaver-visual-composer-cve-2025-31324/index.md","severity":"critical","kev":true,"epss":0.99486,"verdict":"check-exposure","cves":["CVE-2025-31324","CVE-2025-42999"],"summary":"Patches have existed since April and May 2025, but this was a mass-exploited zero-day used by ransomware crews, so every SAP Java shop should confirm the fix and hunt for leftover webshells."},{"id":"CVE-2025-43859","type":"cve","title":"CVE-2025-43859: h11 accepts some malformed Chunked-Encoding bodies","date":"2025-04-24","url":"https://erroneo.us/security/cve/CVE-2025-43859/","md":"https://erroneo.us/security/cve/CVE-2025-43859/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00584,"verdict":null,"product":"h11 (PyPI)"},{"id":"2025-04-24","type":"digest","title":"Security digest for April 24, 2025","date":"2025-04-24","url":"https://erroneo.us/security/2025-04-24/","md":"https://erroneo.us/security/2025-04-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2025-43858","type":"cve","title":"CVE-2025-43858: YoutubeDLSharp allows command injection on windows system due to non sanitized arguments","date":"2025-04-23","url":"https://erroneo.us/security/cve/CVE-2025-43858/","md":"https://erroneo.us/security/cve/CVE-2025-43858/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00264,"verdict":null,"product":"YoutubeDLSharp (NuGet)"},{"id":"CVE-2025-32969","type":"cve","title":"CVE-2025-32969: org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API","date":"2025-04-23","url":"https://erroneo.us/security/cve/CVE-2025-32969/","md":"https://erroneo.us/security/cve/CVE-2025-32969/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.80009,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-rest-server (Maven)"},{"id":"2025-04-23","type":"digest","title":"Security digest for April 23, 2025","date":"2025-04-23","url":"https://erroneo.us/security/2025-04-23/","md":"https://erroneo.us/security/2025-04-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-ggpf-24jw-3fcw","type":"ghsa","title":"CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0","date":"2025-04-22","url":"https://erroneo.us/security/ghsa/GHSA-ggpf-24jw-3fcw/","md":"https://erroneo.us/security/ghsa/GHSA-ggpf-24jw-3fcw/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"vllm"},{"id":"CVE-2025-32965","type":"cve","title":"CVE-2025-32965: Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2","date":"2025-04-22","url":"https://erroneo.us/security/cve/CVE-2025-32965/","md":"https://erroneo.us/security/cve/CVE-2025-32965/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00906,"verdict":null,"product":"xrpl (npm)"},{"id":"2025-04-22","type":"digest","title":"Security digest for April 22, 2025","date":"2025-04-22","url":"https://erroneo.us/security/2025-04-22/","md":"https://erroneo.us/security/2025-04-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-29287","type":"cve","title":"CVE-2025-29287: MCMS allows arbitrary file uploads in the ueditor component","date":"2025-04-21","url":"https://erroneo.us/security/cve/CVE-2025-29287/","md":"https://erroneo.us/security/cve/CVE-2025-29287/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00778,"verdict":null,"product":"net.mingsoft:ms-mcms (Maven)"},{"id":"2025-04-21","type":"digest","title":"Security digest for April 21, 2025","date":"2025-04-21","url":"https://erroneo.us/security/2025-04-21/","md":"https://erroneo.us/security/2025-04-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-5423-jcjm-2gpv","type":"ghsa","title":"Traefik affected by Go HTTP Request Smuggling Vulnerability","date":"2025-04-18","url":"https://erroneo.us/security/ghsa/GHSA-5423-jcjm-2gpv/","md":"https://erroneo.us/security/ghsa/GHSA-5423-jcjm-2gpv/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/traefik/traefik/v2, github.com/traefik/traefik/v3"},{"id":"CVE-2025-32434","type":"cve","title":"CVE-2025-32434: PyTorch: `torch.load` with `weights_only=True` leads to remote code execution","date":"2025-04-18","url":"https://erroneo.us/security/cve/CVE-2025-32434/","md":"https://erroneo.us/security/cve/CVE-2025-32434/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02369,"verdict":null,"product":"torch (PyPI)"},{"id":"CVE-2025-29953","type":"cve","title":"CVE-2025-29953: Apache ActiveMQ NMS OpenWire Client Deserialization of Untrusted Data vulnerability","date":"2025-04-18","url":"https://erroneo.us/security/cve/CVE-2025-29953/","md":"https://erroneo.us/security/cve/CVE-2025-29953/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02091,"verdict":null,"product":"Apache.NMS.ActiveMQ (NuGet)"},{"id":"2025-04-18","type":"digest","title":"Security digest for April 18, 2025","date":"2025-04-18","url":"https://erroneo.us/security/2025-04-18/","md":"https://erroneo.us/security/2025-04-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2025-31201","type":"cve","title":"CVE-2025-31201: Apple Multiple Products Arbitrary Read and Write Vulnerability","date":"2025-04-17","url":"https://erroneo.us/security/cve/CVE-2025-31201/","md":"https://erroneo.us/security/cve/CVE-2025-31201/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.13863,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-31200","type":"cve","title":"CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability","date":"2025-04-17","url":"https://erroneo.us/security/cve/CVE-2025-31200/","md":"https://erroneo.us/security/cve/CVE-2025-31200/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.20898,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-24054","type":"cve","title":"CVE-2025-24054: Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","date":"2025-04-17","url":"https://erroneo.us/security/cve/CVE-2025-24054/","md":"https://erroneo.us/security/cve/CVE-2025-24054/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.6227,"verdict":null,"product":"Microsoft Windows"},{"id":"2025-04-17","type":"digest","title":"Security digest for April 17, 2025","date":"2025-04-17","url":"https://erroneo.us/security/2025-04-17/","md":"https://erroneo.us/security/2025-04-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"erlang-otp-ssh-unauthenticated-rce-cve-2025-32433","type":"brief","title":"Erlang/OTP SSH: Unauthenticated RCE (CVE-2025-32433)","date":"2025-04-16","url":"https://erroneo.us/security/briefs/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433/","md":"https://erroneo.us/security/briefs/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433/index.md","severity":"critical","kev":true,"epss":0.98786,"verdict":"check-exposure","cves":["CVE-2025-32433"],"summary":"The OTP fix is 18 months old, but the bug hides inside appliances and OT gear that patch slowly; inventory anything exposing an Erlang SSH daemon rather than assuming your servers' OpenSSH covers you."},{"id":"CVE-2021-20035","type":"cve","title":"CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability","date":"2025-04-16","url":"https://erroneo.us/security/cve/CVE-2021-20035/","md":"https://erroneo.us/security/cve/CVE-2021-20035/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.04181,"verdict":null,"product":"SonicWall SMA100 Appliances"},{"id":"2025-04-16","type":"digest","title":"Security digest for April 16, 2025","date":"2025-04-16","url":"https://erroneo.us/security/2025-04-16/","md":"https://erroneo.us/security/2025-04-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"CVE-2025-30215","type":"cve","title":"CVE-2025-30215: NATS Server may fail to authorize certain Jetstream admin APIs","date":"2025-04-15","url":"https://erroneo.us/security/cve/CVE-2025-30215/","md":"https://erroneo.us/security/cve/CVE-2025-30215/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00601,"verdict":null,"product":"github.com/nats-io/nats-server/v2 (Go)"},{"id":"CVE-2025-30206","type":"cve","title":"CVE-2025-30206: Dpanel's hard-coded JWT secret leads to remote code execution","date":"2025-04-15","url":"https://erroneo.us/security/cve/CVE-2025-30206/","md":"https://erroneo.us/security/cve/CVE-2025-30206/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00902,"verdict":null,"product":"github.com/donknap/dpanel (Go)"},{"id":"2025-04-15","type":"digest","title":"Security digest for April 15, 2025","date":"2025-04-15","url":"https://erroneo.us/security/2025-04-15/","md":"https://erroneo.us/security/2025-04-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-32931","type":"cve","title":"CVE-2025-32931: DevDojo Voyager Argument Injection vulnerability","date":"2025-04-14","url":"https://erroneo.us/security/cve/CVE-2025-32931/","md":"https://erroneo.us/security/cve/CVE-2025-32931/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00569,"verdict":null,"product":"tcg/voyager (Composer (PHP))"},{"id":"CVE-2025-32445","type":"cve","title":"CVE-2025-32445: Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR","date":"2025-04-14","url":"https://erroneo.us/security/cve/CVE-2025-32445/","md":"https://erroneo.us/security/cve/CVE-2025-32445/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00789,"verdict":null,"product":"github.com/argoproj/argo-events (Go)"},{"id":"2025-04-14","type":"digest","title":"Security digest for April 14, 2025","date":"2025-04-14","url":"https://erroneo.us/security/2025-04-14/","md":"https://erroneo.us/security/2025-04-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-71392","type":"cve","title":"CVE-2025-71392: SurrealDB server-takeover via SurrealQL injection on backup import","date":"2025-04-11","url":"https://erroneo.us/security/cve/CVE-2025-71392/","md":"https://erroneo.us/security/cve/CVE-2025-71392/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00442,"verdict":null,"product":"surrealdb (crates.io (Rust))"},{"id":"CVE-2025-32428","type":"cve","title":"CVE-2025-32428: TigerVNC accessible via the network and not just via a UNIX socket as intended","date":"2025-04-11","url":"https://erroneo.us/security/cve/CVE-2025-32428/","md":"https://erroneo.us/security/cve/CVE-2025-32428/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00916,"verdict":null,"product":"jupyter-remote-desktop-proxy (PyPI)"},{"id":"2025-04-11","type":"digest","title":"Security digest for April 11, 2025","date":"2025-04-11","url":"https://erroneo.us/security/2025-04-11/","md":"https://erroneo.us/security/2025-04-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-32375","type":"cve","title":"CVE-2025-32375: BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization","date":"2025-04-09","url":"https://erroneo.us/security/cve/CVE-2025-32375/","md":"https://erroneo.us/security/cve/CVE-2025-32375/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.52415,"verdict":null,"product":"bentoml (PyPI)"},{"id":"CVE-2024-53197","type":"cve","title":"CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability","date":"2025-04-09","url":"https://erroneo.us/security/cve/CVE-2024-53197/","md":"https://erroneo.us/security/cve/CVE-2024-53197/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.04117,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2024-53150","type":"cve","title":"CVE-2024-53150: Linux Kernel Out-of-Bounds Read Vulnerability","date":"2025-04-09","url":"https://erroneo.us/security/cve/CVE-2024-53150/","md":"https://erroneo.us/security/cve/CVE-2024-53150/index.md","severity":"high","cvss":7.1,"kev":true,"epss":0.01354,"verdict":null,"product":"Linux Kernel"},{"id":"2025-04-09","type":"digest","title":"Security digest for April 9, 2025","date":"2025-04-09","url":"https://erroneo.us/security/2025-04-09/","md":"https://erroneo.us/security/2025-04-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2025-30406","type":"cve","title":"CVE-2025-30406: Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","date":"2025-04-08","url":"https://erroneo.us/security/cve/CVE-2025-30406/","md":"https://erroneo.us/security/cve/CVE-2025-30406/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.94343,"verdict":null,"product":"Gladinet CentreStack"},{"id":"CVE-2025-29824","type":"cve","title":"CVE-2025-29824: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","date":"2025-04-08","url":"https://erroneo.us/security/cve/CVE-2025-29824/","md":"https://erroneo.us/security/cve/CVE-2025-29824/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.13904,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-22871","type":"cve","title":"CVE-2025-22871: RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency","date":"2025-04-08","url":"https://erroneo.us/security/cve/CVE-2025-22871/","md":"https://erroneo.us/security/cve/CVE-2025-22871/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00826,"verdict":null,"product":"spiral/roadrunner (Composer (PHP))"},{"id":"2025-04-08","type":"digest","title":"Security digest for April 8, 2025","date":"2025-04-08","url":"https://erroneo.us/security/2025-04-08/","md":"https://erroneo.us/security/2025-04-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"langflow-unauthenticated-rce-cve-2025-3248","type":"brief","title":"Langflow Unauthenticated Code Execution (CVE-2025-3248)","date":"2025-04-07","url":"https://erroneo.us/security/briefs/langflow-unauthenticated-rce-cve-2025-3248/","md":"https://erroneo.us/security/briefs/langflow-unauthenticated-rce-cve-2025-3248/index.md","severity":"critical","kev":true,"epss":0.99993,"verdict":"check-exposure","cves":["CVE-2025-3248"],"summary":"Fixed in March 2025 and exploited in the wild since; if any Langflow below 1.3.0 is reachable from the internet, treat it as compromised, not merely unpatched."},{"id":"CVE-2025-32013","type":"cve","title":"CVE-2025-32013: LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback","date":"2025-04-07","url":"https://erroneo.us/security/cve/CVE-2025-32013/","md":"https://erroneo.us/security/cve/CVE-2025-32013/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00648,"verdict":null,"product":"lnbits (PyPI)"},{"id":"CVE-2025-31161","type":"cve","title":"CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability","date":"2025-04-07","url":"https://erroneo.us/security/cve/CVE-2025-31161/","md":"https://erroneo.us/security/cve/CVE-2025-31161/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99966,"verdict":"check-exposure","product":"CrushFTP CrushFTP"},{"id":"2025-04-07","type":"digest","title":"Security digest for April 7, 2025","date":"2025-04-07","url":"https://erroneo.us/security/2025-04-07/","md":"https://erroneo.us/security/2025-04-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2025-27520","type":"cve","title":"CVE-2025-27520: BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization","date":"2025-04-04","url":"https://erroneo.us/security/cve/CVE-2025-27520/","md":"https://erroneo.us/security/cve/CVE-2025-27520/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.4062,"verdict":null,"product":"bentoml (PyPI)"},{"id":"CVE-2025-22457","type":"cve","title":"CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","date":"2025-04-04","url":"https://erroneo.us/security/cve/CVE-2025-22457/","md":"https://erroneo.us/security/cve/CVE-2025-22457/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.99981,"verdict":null,"product":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways"},{"id":"2025-04-04","type":"digest","title":"Security digest for April 4, 2025","date":"2025-04-04","url":"https://erroneo.us/security/2025-04-04/","md":"https://erroneo.us/security/2025-04-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-2946","type":"cve","title":"CVE-2025-2946: pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering","date":"2025-04-03","url":"https://erroneo.us/security/cve/CVE-2025-2946/","md":"https://erroneo.us/security/cve/CVE-2025-2946/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00322,"verdict":null,"product":"pgadmin4 (PyPI)"},{"id":"CVE-2025-2945","type":"cve","title":"CVE-2025-2945: pgAdmin 4 Vulnerable to Remote Code Execution","date":"2025-04-03","url":"https://erroneo.us/security/cve/CVE-2025-2945/","md":"https://erroneo.us/security/cve/CVE-2025-2945/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.563,"verdict":null,"product":"pgadmin4 (PyPI)"},{"id":"2025-04-03","type":"digest","title":"Security digest for April 3, 2025","date":"2025-04-03","url":"https://erroneo.us/security/2025-04-03/","md":"https://erroneo.us/security/2025-04-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-31477","type":"cve","title":"CVE-2025-31477: Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`","date":"2025-04-02","url":"https://erroneo.us/security/cve/CVE-2025-31477/","md":"https://erroneo.us/security/cve/CVE-2025-31477/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01039,"verdict":null,"product":"tauri-plugin-shell (crates.io (Rust))"},{"id":"2025-04-02","type":"digest","title":"Security digest for April 2, 2025","date":"2025-04-02","url":"https://erroneo.us/security/2025-04-02/","md":"https://erroneo.us/security/2025-04-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-30065","type":"cve","title":"CVE-2025-30065: Apache Parquet Avro Module Vulnerable to Arbitrary Code Execution","date":"2025-04-01","url":"https://erroneo.us/security/cve/CVE-2025-30065/","md":"https://erroneo.us/security/cve/CVE-2025-30065/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.43597,"verdict":null,"product":"org.apache.parquet:parquet-avro (Maven)"},{"id":"CVE-2025-24813","type":"cve","title":"CVE-2025-24813: Apache Tomcat Path Equivalence Vulnerability","date":"2025-04-01","url":"https://erroneo.us/security/cve/CVE-2025-24813/","md":"https://erroneo.us/security/cve/CVE-2025-24813/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.99927,"verdict":"most-can-relax","product":"Apache Tomcat"},{"id":"CVE-2025-23391","type":"cve","title":"CVE-2025-23391: Rancher: Restricted Administrator can change Administrator's passwords","date":"2025-04-01","url":"https://erroneo.us/security/cve/CVE-2025-23391/","md":"https://erroneo.us/security/cve/CVE-2025-23391/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00465,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"CVE-2024-56325","type":"cve","title":"CVE-2024-56325: Apache Pinot Vulnerable to Authentication Bypass","date":"2025-04-01","url":"https://erroneo.us/security/cve/CVE-2024-56325/","md":"https://erroneo.us/security/cve/CVE-2024-56325/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.80212,"verdict":null,"product":"org.apache.pinot:pinot-broker (Maven)"},{"id":"2025-04-01","type":"digest","title":"Security digest for April 1, 2025","date":"2025-04-01","url":"https://erroneo.us/security/2025-04-01/","md":"https://erroneo.us/security/2025-04-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2025-30223","type":"cve","title":"CVE-2025-30223: Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input","date":"2025-03-31","url":"https://erroneo.us/security/cve/CVE-2025-30223/","md":"https://erroneo.us/security/cve/CVE-2025-30223/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00603,"verdict":null,"product":"github.com/beego/beego/v2 (Go)"},{"id":"CVE-2024-20439","type":"cve","title":"CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerability","date":"2025-03-31","url":"https://erroneo.us/security/cve/CVE-2024-20439/","md":"https://erroneo.us/security/cve/CVE-2024-20439/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9709,"verdict":null,"product":"Cisco Smart Licensing Utility"},{"id":"2025-03-31","type":"digest","title":"Security digest for March 31, 2025","date":"2025-03-31","url":"https://erroneo.us/security/2025-03-31/","md":"https://erroneo.us/security/2025-03-31/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-2783","type":"cve","title":"CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability","date":"2025-03-27","url":"https://erroneo.us/security/cve/CVE-2025-2783/","md":"https://erroneo.us/security/cve/CVE-2025-2783/index.md","severity":"high","cvss":8.3,"kev":true,"epss":0.09238,"verdict":"most-can-relax","product":"Google Chromium Mojo"},{"id":"2025-03-27","type":"digest","title":"Security digest for March 27, 2025","date":"2025-03-27","url":"https://erroneo.us/security/2025-03-27/","md":"https://erroneo.us/security/2025-03-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2019-9875","type":"cve","title":"CVE-2019-9875: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","date":"2025-03-26","url":"https://erroneo.us/security/cve/CVE-2019-9875/","md":"https://erroneo.us/security/cve/CVE-2019-9875/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.13795,"verdict":null,"product":"Sitecore CMS and Experience Platform (XP)"},{"id":"CVE-2019-9874","type":"cve","title":"CVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","date":"2025-03-26","url":"https://erroneo.us/security/cve/CVE-2019-9874/","md":"https://erroneo.us/security/cve/CVE-2019-9874/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.83736,"verdict":null,"product":"Sitecore CMS and Experience Platform (XP)"},{"id":"2025-03-26","type":"digest","title":"Security digest for March 26, 2025","date":"2025-03-26","url":"https://erroneo.us/security/2025-03-26/","md":"https://erroneo.us/security/2025-03-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"chrome-cve-2025-2783-mojo-sandbox-escape","type":"brief","title":"Chrome CVE-2025-2783: Mojo Sandbox Escape Zero-Day","date":"2025-03-25","url":"https://erroneo.us/security/briefs/chrome-cve-2025-2783-mojo-sandbox-escape/","md":"https://erroneo.us/security/briefs/chrome-cve-2025-2783-mojo-sandbox-escape/index.md","severity":"high","kev":true,"epss":0.09238,"verdict":"most-can-relax","cves":["CVE-2025-2783"],"summary":"A real zero-day used for espionage in early 2025, long since fixed by Chrome's automatic updates; the lasting lesson is to make sure auto-update actually works on your fleet."},{"id":"2025-03-25","type":"digest","title":"Security digest for March 25, 2025","date":"2025-03-25","url":"https://erroneo.us/security/2025-03-25/","md":"https://erroneo.us/security/2025-03-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"ingressnightmare-ingress-nginx-cve-2025-1974","type":"brief","title":"IngressNightmare: ingress-nginx Cluster Takeover RCE","date":"2025-03-24","url":"https://erroneo.us/security/briefs/ingressnightmare-ingress-nginx-cve-2025-1974/","md":"https://erroneo.us/security/briefs/ingressnightmare-ingress-nginx-cve-2025-1974/index.md","severity":"critical","kev":false,"epss":0.99384,"verdict":"check-exposure","cves":["CVE-2025-1974","CVE-2025-1097","CVE-2025-1098","CVE-2025-24514","CVE-2025-24513"],"summary":"Patched since March 2025. If any cluster still runs ingress-nginx below 1.11.5 or 1.12.1, that is a cluster-takeover risk, and the controller itself is now retired, so plan the migration while you check."},{"id":"CVE-2025-30154","type":"cve","title":"CVE-2025-30154: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-30154/","md":"https://erroneo.us/security/cve/CVE-2025-30154/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.02485,"verdict":"check-exposure","product":"reviewdog action-setup GitHub Action"},{"id":"CVE-2025-29315","type":"cve","title":"CVE-2025-29315: OpenDaylight SFC Allows Unauthorized Privileged Execution via Crafted Request","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-29315/","md":"https://erroneo.us/security/cve/CVE-2025-29315/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00409,"verdict":null,"product":"org.opendaylight.sfc:sfc-parent (Maven)"},{"id":"CVE-2025-24514","type":"cve","title":"CVE-2025-24514: ingress-nginx controller - configuration injection via unsanitized auth-url annotation","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-24514/","md":"https://erroneo.us/security/cve/CVE-2025-24514/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.30455,"verdict":"check-exposure","product":"kubernetes ingress-nginx"},{"id":"CVE-2025-24513","type":"cve","title":"CVE-2025-24513: ingress-nginx controller - auth secret file path traversal vulnerability","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-24513/","md":"https://erroneo.us/security/cve/CVE-2025-24513/index.md","severity":"medium","cvss":4.8,"kev":false,"epss":0.03331,"verdict":"check-exposure","product":"kubernetes ingress-nginx"},{"id":"CVE-2025-1974","type":"cve","title":"CVE-2025-1974: ingress-nginx admission controller RCE escalation","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-1974/","md":"https://erroneo.us/security/cve/CVE-2025-1974/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.99384,"verdict":"check-exposure","product":"k8s.io/ingress-nginx (Go)"},{"id":"CVE-2025-1098","type":"cve","title":"CVE-2025-1098: ingress-nginx controller - configuration injection via unsanitized mirror annotations","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-1098/","md":"https://erroneo.us/security/cve/CVE-2025-1098/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.82313,"verdict":"check-exposure","product":"kubernetes ingress-nginx"},{"id":"CVE-2025-1097","type":"cve","title":"CVE-2025-1097: ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation","date":"2025-03-24","url":"https://erroneo.us/security/cve/CVE-2025-1097/","md":"https://erroneo.us/security/cve/CVE-2025-1097/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.33236,"verdict":"check-exposure","product":"kubernetes ingress-nginx"},{"id":"2025-03-24","type":"digest","title":"Security digest for March 24, 2025","date":"2025-03-24","url":"https://erroneo.us/security/2025-03-24/","md":"https://erroneo.us/security/2025-03-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":2}},{"id":"nextjs-middleware-bypass-cve-2025-29927","type":"brief","title":"Next.js Middleware Authorization Bypass (CVE-2025-29927)","date":"2025-03-21","url":"https://erroneo.us/security/briefs/nextjs-middleware-bypass-cve-2025-29927/","md":"https://erroneo.us/security/briefs/nextjs-middleware-bypass-cve-2025-29927/index.md","severity":"critical","kev":false,"epss":0.99225,"verdict":"check-exposure","cves":["CVE-2025-29927"],"summary":"Patched since March 2025 and easy to fix; if you self-host Next.js and lean on middleware for auth, confirm you are on a fixed release and that the header is stripped at your edge."},{"id":"crushftp-auth-bypass-cve-2025-31161","type":"brief","title":"CrushFTP Auth Bypass CVE-2025-31161 Exploited in the Wild","date":"2025-03-21","url":"https://erroneo.us/security/briefs/crushftp-auth-bypass-cve-2025-31161/","md":"https://erroneo.us/security/briefs/crushftp-auth-bypass-cve-2025-31161/index.md","severity":"critical","kev":true,"epss":0.99966,"verdict":"check-exposure","cves":["CVE-2025-31161"],"summary":"Fixed since March 2025 and widely exploited from early April; if you run CrushFTP, make sure you are on a current build (later CrushFTP flaws raised the minimum) and audit for backdoor admin accounts."},{"id":"CVE-2025-29927","type":"cve","title":"CVE-2025-29927: Authorization Bypass in Next.js Middleware","date":"2025-03-21","url":"https://erroneo.us/security/cve/CVE-2025-29927/","md":"https://erroneo.us/security/cve/CVE-2025-29927/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.99225,"verdict":"check-exposure","product":"next (npm)"},{"id":"CVE-2024-12029","type":"cve","title":"CVE-2024-12029: InvokeAI Deserialization of Untrusted Data vulnerability","date":"2025-03-21","url":"https://erroneo.us/security/cve/CVE-2024-12029/","md":"https://erroneo.us/security/cve/CVE-2024-12029/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.05983,"verdict":null,"product":"InvokeAI (PyPI)"},{"id":"2025-03-21","type":"digest","title":"Security digest for March 21, 2025","date":"2025-03-21","url":"https://erroneo.us/security/2025-03-21/","md":"https://erroneo.us/security/2025-03-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":2}},{"id":"CVE-2025-29922","type":"cve","title":"CVE-2025-29922: kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2025-29922/","md":"https://erroneo.us/security/cve/CVE-2025-29922/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00377,"verdict":null,"product":"github.com/kcp-dev/kcp (Go)"},{"id":"CVE-2024-9701","type":"cve","title":"CVE-2024-9701: Kedro deserialization vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-9701/","md":"https://erroneo.us/security/cve/CVE-2024-9701/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0114,"verdict":null,"product":"kedro (PyPI)"},{"id":"CVE-2024-9070","type":"cve","title":"CVE-2024-9070: BentoML deserialization vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-9070/","md":"https://erroneo.us/security/cve/CVE-2024-9070/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00931,"verdict":null,"product":"bentoml (PyPI)"},{"id":"CVE-2024-9053","type":"cve","title":"CVE-2024-9053: vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-9053/","md":"https://erroneo.us/security/cve/CVE-2024-9053/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0138,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2024-9052","type":"cve","title":"CVE-2024-9052: vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-9052/","md":"https://erroneo.us/security/cve/CVE-2024-9052/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2024-8769","type":"cve","title":"CVE-2024-8769: Aim  path traversal in LockManager.release_locks","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-8769/","md":"https://erroneo.us/security/cve/CVE-2024-8769/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00927,"verdict":null,"product":"aim (PyPI)"},{"id":"CVE-2024-8551","type":"cve","title":"CVE-2024-8551: AgentScope path traversal vulnerability in save-workflow","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-8551/","md":"https://erroneo.us/security/cve/CVE-2024-8551/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01022,"verdict":null,"product":"agentscope (PyPI)"},{"id":"CVE-2024-8537","type":"cve","title":"CVE-2024-8537: AgentScope path traversal vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-8537/","md":"https://erroneo.us/security/cve/CVE-2024-8537/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0104,"verdict":null,"product":"agentscope (PyPI)"},{"id":"CVE-2024-8502","type":"cve","title":"CVE-2024-8502: AgentScope Deserialization Vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-8502/","md":"https://erroneo.us/security/cve/CVE-2024-8502/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01844,"verdict":null,"product":"agentscope (PyPI)"},{"id":"CVE-2024-8019","type":"cve","title":"CVE-2024-8019: PyTorch Lightning path traversal vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-8019/","md":"https://erroneo.us/security/cve/CVE-2024-8019/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01122,"verdict":null,"product":"pytorch-lightning (PyPI)"},{"id":"CVE-2024-6829","type":"cve","title":"CVE-2024-6829: Aim External Control of File Name or Path vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-6829/","md":"https://erroneo.us/security/cve/CVE-2024-6829/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00884,"verdict":null,"product":"aim (PyPI)"},{"id":"CVE-2024-12909","type":"cve","title":"CVE-2024-12909: llama-index-packs-finchat SQL Injection vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-12909/","md":"https://erroneo.us/security/cve/CVE-2024-12909/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.01444,"verdict":null,"product":"llama-index-packs-finchat (PyPI)"},{"id":"CVE-2024-11958","type":"cve","title":"CVE-2024-11958: LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-11958/","md":"https://erroneo.us/security/cve/CVE-2024-11958/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01444,"verdict":null,"product":"llama-index-retrievers-duckdb-retriever (PyPI)"},{"id":"CVE-2024-11042","type":"cve","title":"CVE-2024-11042: InvokeAI Arbitrary File Deletion vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-11042/","md":"https://erroneo.us/security/cve/CVE-2024-11042/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01564,"verdict":null,"product":"InvokeAI (PyPI)"},{"id":"CVE-2024-11041","type":"cve","title":"CVE-2024-11041: vLLM Deserialization of Untrusted Data vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-11041/","md":"https://erroneo.us/security/cve/CVE-2024-11041/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01719,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2024-10902","type":"cve","title":"CVE-2024-10902: DB-GPT vulnerable to Arbitrary File Upload with Path Traversal","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10902/","md":"https://erroneo.us/security/cve/CVE-2024-10902/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01313,"verdict":null,"product":"dbgpt (PyPI)"},{"id":"CVE-2024-10901","type":"cve","title":"CVE-2024-10901: DB-GPT Arbitrary File Write vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10901/","md":"https://erroneo.us/security/cve/CVE-2024-10901/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01095,"verdict":null,"product":"dbgpt (PyPI)"},{"id":"CVE-2024-10835","type":"cve","title":"CVE-2024-10835: DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10835/","md":"https://erroneo.us/security/cve/CVE-2024-10835/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01183,"verdict":null,"product":"dbgpt (PyPI)"},{"id":"CVE-2024-10833","type":"cve","title":"CVE-2024-10833: DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10833/","md":"https://erroneo.us/security/cve/CVE-2024-10833/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00839,"verdict":null,"product":"dbgpt (PyPI)"},{"id":"CVE-2024-10831","type":"cve","title":"CVE-2024-10831: DB-GPT Absolute Path Traversal vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10831/","md":"https://erroneo.us/security/cve/CVE-2024-10831/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00839,"verdict":null,"product":"dbgpt (PyPI)"},{"id":"CVE-2024-10553","type":"cve","title":"CVE-2024-10553: H2O Deserialization of Untrusted Data Vulnerability","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10553/","md":"https://erroneo.us/security/cve/CVE-2024-10553/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01587,"verdict":null,"product":"h2o (PyPI)"},{"id":"CVE-2024-10190","type":"cve","title":"CVE-2024-10190: Horovod Vulnerable to Command Injection","date":"2025-03-20","url":"https://erroneo.us/security/cve/CVE-2024-10190/","md":"https://erroneo.us/security/cve/CVE-2024-10190/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01124,"verdict":null,"product":"horovod (PyPI)"},{"id":"2025-03-20","type":"digest","title":"Security digest for March 20, 2025","date":"2025-03-20","url":"https://erroneo.us/security/2025-03-20/","md":"https://erroneo.us/security/2025-03-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":22}},{"id":"CVE-2025-29783","type":"cve","title":"CVE-2025-29783: vLLM Allows Remote Code Execution via Mooncake Integration","date":"2025-03-19","url":"https://erroneo.us/security/cve/CVE-2025-29783/","md":"https://erroneo.us/security/cve/CVE-2025-29783/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00734,"verdict":null,"product":"vllm (PyPI)"},{"id":"CVE-2025-1316","type":"cve","title":"CVE-2025-1316: Edimax IC-7100 IP Camera OS Command Injection Vulnerability","date":"2025-03-19","url":"https://erroneo.us/security/cve/CVE-2025-1316/","md":"https://erroneo.us/security/cve/CVE-2025-1316/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.74482,"verdict":null,"product":"Edimax IC-7100 IP Camera"},{"id":"CVE-2024-48248","type":"cve","title":"CVE-2024-48248: NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","date":"2025-03-19","url":"https://erroneo.us/security/cve/CVE-2024-48248/","md":"https://erroneo.us/security/cve/CVE-2024-48248/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.94356,"verdict":null,"product":"NAKIVO Backup and Replication"},{"id":"CVE-2017-12637","type":"cve","title":"CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability","date":"2025-03-19","url":"https://erroneo.us/security/cve/CVE-2017-12637/","md":"https://erroneo.us/security/cve/CVE-2017-12637/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.95111,"verdict":null,"product":"SAP NetWeaver"},{"id":"2025-03-19","type":"digest","title":"Security digest for March 19, 2025","date":"2025-03-19","url":"https://erroneo.us/security/2025-03-19/","md":"https://erroneo.us/security/2025-03-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2025-30066","type":"cve","title":"CVE-2025-30066: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","date":"2025-03-18","url":"https://erroneo.us/security/cve/CVE-2025-30066/","md":"https://erroneo.us/security/cve/CVE-2025-30066/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.72092,"verdict":"check-exposure","product":"tj-actions changed-files GitHub Action"},{"id":"CVE-2025-24472","type":"cve","title":"CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","date":"2025-03-18","url":"https://erroneo.us/security/cve/CVE-2025-24472/","md":"https://erroneo.us/security/cve/CVE-2025-24472/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.07235,"verdict":"check-exposure","product":"Fortinet FortiOS and FortiProxy"},{"id":"2025-03-18","type":"digest","title":"Security digest for March 18, 2025","date":"2025-03-18","url":"https://erroneo.us/security/2025-03-18/","md":"https://erroneo.us/security/2025-03-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"tj-actions-changed-files-compromise","type":"brief","title":"tj-actions/changed-files: GitHub Action Leaked CI Secrets","date":"2025-03-14","url":"https://erroneo.us/security/briefs/tj-actions-changed-files-compromise/","md":"https://erroneo.us/security/briefs/tj-actions-changed-files-compromise/index.md","severity":"high","kev":true,"epss":0.72092,"verdict":"check-exposure","cves":["CVE-2025-30066","CVE-2025-30154"],"summary":"The malicious tags were cleaned up within about a day in March 2025; today the job is confirming you rotated any secret that a March 14-15, 2025 workflow run could have printed, and that you pin Actions by SHA."},{"id":"GHSA-8vvx-qvq9-5948","type":"ghsa","title":"Flowise allows arbitrary file write to RCE","date":"2025-03-14","url":"https://erroneo.us/security/ghsa/GHSA-8vvx-qvq9-5948/","md":"https://erroneo.us/security/ghsa/GHSA-8vvx-qvq9-5948/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"flowise"},{"id":"CVE-2025-29775","type":"cve","title":"CVE-2025-29775: xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment","date":"2025-03-14","url":"https://erroneo.us/security/cve/CVE-2025-29775/","md":"https://erroneo.us/security/cve/CVE-2025-29775/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.09586,"verdict":null,"product":"xml-crypto (npm)"},{"id":"CVE-2025-29774","type":"cve","title":"CVE-2025-29774: xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References","date":"2025-03-14","url":"https://erroneo.us/security/cve/CVE-2025-29774/","md":"https://erroneo.us/security/cve/CVE-2025-29774/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.09103,"verdict":null,"product":"xml-crypto (npm)"},{"id":"CVE-2025-2304","type":"cve","title":"CVE-2025-2304: Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment","date":"2025-03-14","url":"https://erroneo.us/security/cve/CVE-2025-2304/","md":"https://erroneo.us/security/cve/CVE-2025-2304/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00628,"verdict":null,"product":"camaleon_cms (RubyGems)"},{"id":"CVE-2025-2000","type":"cve","title":"CVE-2025-2000: Qiskit allows arbitrary code execution decoding QPY format versions < 13","date":"2025-03-14","url":"https://erroneo.us/security/cve/CVE-2025-2000/","md":"https://erroneo.us/security/cve/CVE-2025-2000/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0081,"verdict":null,"product":"qiskit-terra (PyPI)"},{"id":"2025-03-14","type":"digest","title":"Security digest for March 14, 2025","date":"2025-03-14","url":"https://erroneo.us/security/2025-03-14/","md":"https://erroneo.us/security/2025-03-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":5}},{"id":"GHSA-h42x-xx2q-6v6g","type":"ghsa","title":"Flowise Pre-auth Arbitrary File Upload","date":"2025-03-13","url":"https://erroneo.us/security/ghsa/GHSA-h42x-xx2q-6v6g/","md":"https://erroneo.us/security/ghsa/GHSA-h42x-xx2q-6v6g/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"flowise"},{"id":"GHSA-h2rp-8vpx-q9r4","type":"ghsa","title":"cheqd-node Security patch for upstream vulnerabilities in IBC-Go (ISA-2025-001) and Cosmos SDK (ISA-2025-002)","date":"2025-03-13","url":"https://erroneo.us/security/ghsa/GHSA-h2rp-8vpx-q9r4/","md":"https://erroneo.us/security/ghsa/GHSA-h2rp-8vpx-q9r4/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"github.com/cheqd/cheqd-node"},{"id":"CVE-2025-24201","type":"cve","title":"CVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","date":"2025-03-13","url":"https://erroneo.us/security/cve/CVE-2025-24201/","md":"https://erroneo.us/security/cve/CVE-2025-24201/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.03847,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-21590","type":"cve","title":"CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","date":"2025-03-13","url":"https://erroneo.us/security/cve/CVE-2025-21590/","md":"https://erroneo.us/security/cve/CVE-2025-21590/index.md","severity":"medium","cvss":6.7,"kev":true,"epss":0.01735,"verdict":null,"product":"Juniper Junos OS"},{"id":"2025-03-13","type":"digest","title":"Security digest for March 13, 2025","date":"2025-03-13","url":"https://erroneo.us/security/2025-03-13/","md":"https://erroneo.us/security/2025-03-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"GHSA-hw46-3hmr-x9xv","type":"ghsa","title":"omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue","date":"2025-03-12","url":"https://erroneo.us/security/ghsa/GHSA-hw46-3hmr-x9xv/","md":"https://erroneo.us/security/ghsa/GHSA-hw46-3hmr-x9xv/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"omniauth-saml, omniauth-saml"},{"id":"GHSA-4wf3-5qj9-368v","type":"ghsa","title":"IBC-Go: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt","date":"2025-03-12","url":"https://erroneo.us/security/ghsa/GHSA-4wf3-5qj9-368v/","md":"https://erroneo.us/security/ghsa/GHSA-4wf3-5qj9-368v/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"github.com/cosmos/ibc-go, github.com/cosmos/ibc-go/v8"},{"id":"CVE-2025-27407","type":"cve","title":"CVE-2025-27407: graphql allows remote code execution when loading a crafted GraphQL schema","date":"2025-03-12","url":"https://erroneo.us/security/cve/CVE-2025-27407/","md":"https://erroneo.us/security/cve/CVE-2025-27407/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.03102,"verdict":null,"product":"graphql (RubyGems)"},{"id":"CVE-2025-25292","type":"cve","title":"CVE-2025-25292: Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)","date":"2025-03-12","url":"https://erroneo.us/security/cve/CVE-2025-25292/","md":"https://erroneo.us/security/cve/CVE-2025-25292/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.65086,"verdict":null,"product":"ruby-saml (RubyGems)"},{"id":"CVE-2025-25291","type":"cve","title":"CVE-2025-25291: Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)","date":"2025-03-12","url":"https://erroneo.us/security/cve/CVE-2025-25291/","md":"https://erroneo.us/security/cve/CVE-2025-25291/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.20965,"verdict":null,"product":"ruby-saml (RubyGems)"},{"id":"2025-03-12","type":"digest","title":"Security digest for March 12, 2025","date":"2025-03-12","url":"https://erroneo.us/security/2025-03-12/","md":"https://erroneo.us/security/2025-03-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"GHSA-33cr-m232-xqch","type":"ghsa","title":"cheqd-node affected by Non-deterministic JSON Unmarshalling of IBC Acknowledgement","date":"2025-03-11","url":"https://erroneo.us/security/ghsa/GHSA-33cr-m232-xqch/","md":"https://erroneo.us/security/ghsa/GHSA-33cr-m232-xqch/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/cheqd/cheqd-node"},{"id":"CVE-2025-26633","type":"cve","title":"CVE-2025-26633: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-26633/","md":"https://erroneo.us/security/cve/CVE-2025-26633/index.md","severity":"high","cvss":7,"kev":true,"epss":0.30391,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24993","type":"cve","title":"CVE-2025-24993: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-24993/","md":"https://erroneo.us/security/cve/CVE-2025-24993/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02198,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24991","type":"cve","title":"CVE-2025-24991: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-24991/","md":"https://erroneo.us/security/cve/CVE-2025-24991/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.02018,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24985","type":"cve","title":"CVE-2025-24985: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-24985/","md":"https://erroneo.us/security/cve/CVE-2025-24985/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.0389,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24984","type":"cve","title":"CVE-2025-24984: Microsoft Windows NTFS Information Disclosure Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-24984/","md":"https://erroneo.us/security/cve/CVE-2025-24984/index.md","severity":"medium","cvss":4.6,"kev":true,"epss":0.01994,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-24983","type":"cve","title":"CVE-2025-24983: Microsoft Windows Win32k Use-After-Free Vulnerability","date":"2025-03-11","url":"https://erroneo.us/security/cve/CVE-2025-24983/","md":"https://erroneo.us/security/cve/CVE-2025-24983/index.md","severity":"high","cvss":7,"kev":true,"epss":0.01375,"verdict":null,"product":"Microsoft Windows"},{"id":"2025-03-11","type":"digest","title":"Security digest for March 11, 2025","date":"2025-03-11","url":"https://erroneo.us/security/2025-03-11/","md":"https://erroneo.us/security/2025-03-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":1}},{"id":"apache-tomcat-partial-put-cve-2025-24813","type":"brief","title":"Apache Tomcat Partial PUT RCE (CVE-2025-24813)","date":"2025-03-10","url":"https://erroneo.us/security/briefs/apache-tomcat-partial-put-cve-2025-24813/","md":"https://erroneo.us/security/briefs/apache-tomcat-partial-put-cve-2025-24813/index.md","severity":"critical","kev":true,"epss":0.99927,"verdict":"most-can-relax","cves":["CVE-2025-24813"],"summary":"It is in KEV and attacks were seen within days, but exploitation needs the default servlet's write support turned on, which is off by default and rare; upgrade on your normal cycle and check that one setting."},{"id":"CVE-2025-25181","type":"cve","title":"CVE-2025-25181:  Advantive VeraCore SQL Injection Vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2025-25181/","md":"https://erroneo.us/security/cve/CVE-2025-25181/index.md","severity":"medium","cvss":5.8,"kev":true,"epss":0.55549,"verdict":null,"product":"Advantive VeraCore"},{"id":"CVE-2025-1497","type":"cve","title":"CVE-2025-1497: PlotAI eval vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2025-1497/","md":"https://erroneo.us/security/cve/CVE-2025-1497/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01048,"verdict":null,"product":"plotai (PyPI)"},{"id":"CVE-2024-57968","type":"cve","title":"CVE-2024-57968: Advantive VeraCore Unrestricted File Upload Vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2024-57968/","md":"https://erroneo.us/security/cve/CVE-2024-57968/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.32284,"verdict":null,"product":"Advantive VeraCore"},{"id":"CVE-2024-13161","type":"cve","title":"CVE-2024-13161: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2024-13161/","md":"https://erroneo.us/security/cve/CVE-2024-13161/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.89809,"verdict":null,"product":"Ivanti Endpoint Manager (EPM)"},{"id":"CVE-2024-13160","type":"cve","title":"CVE-2024-13160: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2024-13160/","md":"https://erroneo.us/security/cve/CVE-2024-13160/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.90985,"verdict":null,"product":"Ivanti Endpoint Manager (EPM)"},{"id":"CVE-2024-13159","type":"cve","title":"CVE-2024-13159: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","date":"2025-03-10","url":"https://erroneo.us/security/cve/CVE-2024-13159/","md":"https://erroneo.us/security/cve/CVE-2024-13159/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99993,"verdict":null,"product":"Ivanti Endpoint Manager (EPM)"},{"id":"2025-03-10","type":"digest","title":"Security digest for March 10, 2025","date":"2025-03-10","url":"https://erroneo.us/security/2025-03-10/","md":"https://erroneo.us/security/2025-03-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":5,"critical":2}},{"id":"CVE-2025-27603","type":"cve","title":"CVE-2025-27603: com.xwiki.confluencepro:application-confluence-migrator-pro-ui Remote Code Execution via unescaped translations","date":"2025-03-07","url":"https://erroneo.us/security/cve/CVE-2025-27603/","md":"https://erroneo.us/security/cve/CVE-2025-27603/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00658,"verdict":null,"product":"com.xwiki.confluencepro:application-confluence-migrator-pro-ui (Maven)"},{"id":"2025-03-07","type":"digest","title":"Security digest for March 7, 2025","date":"2025-03-07","url":"https://erroneo.us/security/2025-03-07/","md":"https://erroneo.us/security/2025-03-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-27509","type":"cve","title":"CVE-2025-27509: Fleet has SAML authentication vulnerability due to improper SAML response validation","date":"2025-03-06","url":"https://erroneo.us/security/cve/CVE-2025-27509/","md":"https://erroneo.us/security/cve/CVE-2025-27509/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00669,"verdict":null,"product":"github.com/fleetdm/fleet/v4 (Go)"},{"id":"2025-03-06","type":"digest","title":"Security digest for March 6, 2025","date":"2025-03-06","url":"https://erroneo.us/security/2025-03-06/","md":"https://erroneo.us/security/2025-03-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-27517","type":"cve","title":"CVE-2025-27517: Volt Allows RCE Via User-Crafted Requests","date":"2025-03-05","url":"https://erroneo.us/security/cve/CVE-2025-27517/","md":"https://erroneo.us/security/cve/CVE-2025-27517/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00619,"verdict":null,"product":"livewire/volt (Composer (PHP))"},{"id":"CVE-2023-38693","type":"cve","title":"CVE-2023-38693: Lucee RCE/XXE Vulnerability","date":"2025-03-05","url":"https://erroneo.us/security/cve/CVE-2023-38693/","md":"https://erroneo.us/security/cve/CVE-2023-38693/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00823,"verdict":null,"product":"org.lucee:lucee (Maven)"},{"id":"2025-03-05","type":"digest","title":"Security digest for March 5, 2025","date":"2025-03-05","url":"https://erroneo.us/security/2025-03-05/","md":"https://erroneo.us/security/2025-03-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2025-27507","type":"cve","title":"CVE-2025-27507: IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations","date":"2025-03-04","url":"https://erroneo.us/security/cve/CVE-2025-27507/","md":"https://erroneo.us/security/cve/CVE-2025-27507/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00609,"verdict":null,"product":"github.com/zitadel/zitadel/v2 (Go)"},{"id":"CVE-2025-22226","type":"cve","title":"CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","date":"2025-03-04","url":"https://erroneo.us/security/cve/CVE-2025-22226/","md":"https://erroneo.us/security/cve/CVE-2025-22226/index.md","severity":"high","cvss":7.1,"kev":true,"epss":0.01769,"verdict":null,"product":"VMware ESXi, Workstation, and Fusion"},{"id":"CVE-2025-22225","type":"cve","title":"CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability","date":"2025-03-04","url":"https://erroneo.us/security/cve/CVE-2025-22225/","md":"https://erroneo.us/security/cve/CVE-2025-22225/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.01016,"verdict":null,"product":"VMware ESXi"},{"id":"CVE-2025-22224","type":"cve","title":"CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","date":"2025-03-04","url":"https://erroneo.us/security/cve/CVE-2025-22224/","md":"https://erroneo.us/security/cve/CVE-2025-22224/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.01561,"verdict":null,"product":"VMware ESXi and Workstation"},{"id":"CVE-2024-50302","type":"cve","title":"CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability","date":"2025-03-04","url":"https://erroneo.us/security/cve/CVE-2024-50302/","md":"https://erroneo.us/security/cve/CVE-2024-50302/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.00811,"verdict":null,"product":"Linux Kernel"},{"id":"2025-03-04","type":"digest","title":"Security digest for March 4, 2025","date":"2025-03-04","url":"https://erroneo.us/security/2025-03-04/","md":"https://erroneo.us/security/2025-03-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2024-4885","type":"cve","title":"CVE-2024-4885: Progress WhatsUp Gold Path Traversal Vulnerability","date":"2025-03-03","url":"https://erroneo.us/security/cve/CVE-2024-4885/","md":"https://erroneo.us/security/cve/CVE-2024-4885/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99288,"verdict":null,"product":"Progress WhatsUp Gold"},{"id":"CVE-2023-20118","type":"cve","title":"CVE-2023-20118: Cisco Small Business RV Series Routers Command Injection Vulnerability","date":"2025-03-03","url":"https://erroneo.us/security/cve/CVE-2023-20118/","md":"https://erroneo.us/security/cve/CVE-2023-20118/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.54107,"verdict":null,"product":"Cisco Small Business RV Series Routers"},{"id":"CVE-2022-43939","type":"cve","title":"CVE-2022-43939: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","date":"2025-03-03","url":"https://erroneo.us/security/cve/CVE-2022-43939/","md":"https://erroneo.us/security/cve/CVE-2022-43939/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.92266,"verdict":null,"product":"Hitachi Vantara Pentaho Business Analytics (BA) Server"},{"id":"CVE-2022-43769","type":"cve","title":"CVE-2022-43769: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","date":"2025-03-03","url":"https://erroneo.us/security/cve/CVE-2022-43769/","md":"https://erroneo.us/security/cve/CVE-2022-43769/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.9767,"verdict":null,"product":"Hitachi Vantara Pentaho Business Analytics (BA) Server"},{"id":"CVE-2018-8639","type":"cve","title":"CVE-2018-8639: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","date":"2025-03-03","url":"https://erroneo.us/security/cve/CVE-2018-8639/","md":"https://erroneo.us/security/cve/CVE-2018-8639/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.22179,"verdict":null,"product":"Microsoft Windows"},{"id":"2025-03-03","type":"digest","title":"Security digest for March 3, 2025","date":"2025-03-03","url":"https://erroneo.us/security/2025-03-03/","md":"https://erroneo.us/security/2025-03-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":0}},{"id":"CVE-2025-27590","type":"cve","title":"CVE-2025-27590: Oxidized Web RANCID migration page allows unauthenticated user to gain control over Linux user account","date":"2025-03-02","url":"https://erroneo.us/security/cve/CVE-2025-27590/","md":"https://erroneo.us/security/cve/CVE-2025-27590/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.27573,"verdict":null,"product":"oxidized-web (RubyGems)"},{"id":"2025-03-02","type":"digest","title":"Security digest for March 2, 2025","date":"2025-03-02","url":"https://erroneo.us/security/2025-03-02/","md":"https://erroneo.us/security/2025-03-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-jg6f-48ff-5xrw","type":"ghsa","title":"IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement","date":"2025-02-28","url":"https://erroneo.us/security/ghsa/GHSA-jg6f-48ff-5xrw/","md":"https://erroneo.us/security/ghsa/GHSA-jg6f-48ff-5xrw/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/cosmos/ibc-go, github.com/cosmos/ibc-go/v2"},{"id":"2025-02-28","type":"digest","title":"Security digest for February 28, 2025","date":"2025-02-28","url":"https://erroneo.us/security/2025-02-28/","md":"https://erroneo.us/security/2025-02-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-47051","type":"cve","title":"CVE-2024-47051: Mautic allows Remote Code Execution and File Deletion in Asset Uploads","date":"2025-02-26","url":"https://erroneo.us/security/cve/CVE-2024-47051/","md":"https://erroneo.us/security/cve/CVE-2024-47051/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01799,"verdict":null,"product":"mautic/core (Composer (PHP))"},{"id":"2025-02-26","type":"digest","title":"Security digest for February 26, 2025","date":"2025-02-26","url":"https://erroneo.us/security/2025-02-26/","md":"https://erroneo.us/security/2025-02-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-49035","type":"cve","title":"CVE-2024-49035: Microsoft Partner Center Improper Access Control Vulnerability","date":"2025-02-25","url":"https://erroneo.us/security/cve/CVE-2024-49035/","md":"https://erroneo.us/security/cve/CVE-2024-49035/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.013,"verdict":null,"product":"Microsoft Partner Center"},{"id":"CVE-2023-34192","type":"cve","title":"CVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","date":"2025-02-25","url":"https://erroneo.us/security/cve/CVE-2023-34192/","md":"https://erroneo.us/security/cve/CVE-2023-34192/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.77266,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"CVE-2023-25574","type":"cve","title":"CVE-2023-25574: LTI JupyterHub Authenticator does not properly validate JWT Signature","date":"2025-02-25","url":"https://erroneo.us/security/cve/CVE-2023-25574/","md":"https://erroneo.us/security/cve/CVE-2023-25574/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00355,"verdict":null,"product":"jupyterhub-ltiauthenticator (PyPI)"},{"id":"2025-02-25","type":"digest","title":"Security digest for February 25, 2025","date":"2025-02-25","url":"https://erroneo.us/security/2025-02-25/","md":"https://erroneo.us/security/2025-02-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2025-25279","type":"cve","title":"CVE-2025-25279: Mattermost allows reading arbitrary files related to importing boards","date":"2025-02-24","url":"https://erroneo.us/security/cve/CVE-2025-25279/","md":"https://erroneo.us/security/cve/CVE-2025-25279/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.24223,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"CVE-2025-20051","type":"cve","title":"CVE-2025-20051: Mattermost allows reading arbitrary files","date":"2025-02-24","url":"https://erroneo.us/security/cve/CVE-2025-20051/","md":"https://erroneo.us/security/cve/CVE-2025-20051/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00611,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"CVE-2024-20953","type":"cve","title":"CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","date":"2025-02-24","url":"https://erroneo.us/security/cve/CVE-2024-20953/","md":"https://erroneo.us/security/cve/CVE-2024-20953/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.03934,"verdict":null,"product":"Oracle Agile Product Lifecycle Management (PLM)"},{"id":"CVE-2017-3066","type":"cve","title":"CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability","date":"2025-02-24","url":"https://erroneo.us/security/cve/CVE-2017-3066/","md":"https://erroneo.us/security/cve/CVE-2017-3066/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.90597,"verdict":null,"product":"Adobe ColdFusion"},{"id":"2025-02-24","type":"digest","title":"Security digest for February 24, 2025","date":"2025-02-24","url":"https://erroneo.us/security/2025-02-24/","md":"https://erroneo.us/security/2025-02-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2025-24989","type":"cve","title":"CVE-2025-24989: Microsoft Power Pages Improper Access Control Vulnerability","date":"2025-02-21","url":"https://erroneo.us/security/cve/CVE-2025-24989/","md":"https://erroneo.us/security/cve/CVE-2025-24989/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.01622,"verdict":null,"product":"Microsoft Power Pages"},{"id":"2025-02-21","type":"digest","title":"Security digest for February 21, 2025","date":"2025-02-21","url":"https://erroneo.us/security/2025-02-21/","md":"https://erroneo.us/security/2025-02-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-f8qm-hmm3-fv7f","type":"ghsa","title":"Namada-apps allows Excessive Computation in Mempool Validation","date":"2025-02-20","url":"https://erroneo.us/security/ghsa/GHSA-f8qm-hmm3-fv7f/","md":"https://erroneo.us/security/ghsa/GHSA-f8qm-hmm3-fv7f/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"namada-apps"},{"id":"GHSA-82vg-5v4f-f9wq","type":"ghsa","title":"Namada-apps can Crash with Excessive Computation in Mempool Validation","date":"2025-02-20","url":"https://erroneo.us/security/ghsa/GHSA-82vg-5v4f-f9wq/","md":"https://erroneo.us/security/ghsa/GHSA-82vg-5v4f-f9wq/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":null,"verdict":null,"product":"namada-apps"},{"id":"GHSA-2gw2-qgjg-xh6p","type":"ghsa","title":"Namada-apps allows Post-Genesis Validator Bypass","date":"2025-02-20","url":"https://erroneo.us/security/ghsa/GHSA-2gw2-qgjg-xh6p/","md":"https://erroneo.us/security/ghsa/GHSA-2gw2-qgjg-xh6p/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"namada-apps"},{"id":"CVE-2025-23209","type":"cve","title":"CVE-2025-23209: Craft CMS Code Injection Vulnerability","date":"2025-02-20","url":"https://erroneo.us/security/cve/CVE-2025-23209/","md":"https://erroneo.us/security/cve/CVE-2025-23209/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.21776,"verdict":null,"product":"Craft CMS Craft CMS"},{"id":"CVE-2025-0868","type":"cve","title":"CVE-2025-0868: DocsGPT Allows Remote Code Execution","date":"2025-02-20","url":"https://erroneo.us/security/cve/CVE-2025-0868/","md":"https://erroneo.us/security/cve/CVE-2025-0868/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.17087,"verdict":null,"product":"docsgpt (npm)"},{"id":"CVE-2025-0111","type":"cve","title":"CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability","date":"2025-02-20","url":"https://erroneo.us/security/cve/CVE-2025-0111/","md":"https://erroneo.us/security/cve/CVE-2025-0111/index.md","severity":"high","cvss":7.1,"kev":true,"epss":0.01999,"verdict":null,"product":"Palo Alto Networks PAN-OS"},{"id":"2025-02-20","type":"digest","title":"Security digest for February 20, 2025","date":"2025-02-20","url":"https://erroneo.us/security/2025-02-20/","md":"https://erroneo.us/security/2025-02-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":5}},{"id":"CVE-2025-24895","type":"cve","title":"CVE-2025-24895: AspNetCore Remote Authenticator for CIE3.0 Allows SAML Response Signature Verification Bypass","date":"2025-02-18","url":"https://erroneo.us/security/cve/CVE-2025-24895/","md":"https://erroneo.us/security/cve/CVE-2025-24895/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00607,"verdict":null,"product":"CIE.AspNetCore.Authentication (NuGet)"},{"id":"CVE-2025-24894","type":"cve","title":"CVE-2025-24894: The AspNetCore Remote Authenticator for SPID Allows SAML Response Signature Verification Bypass","date":"2025-02-18","url":"https://erroneo.us/security/cve/CVE-2025-24894/","md":"https://erroneo.us/security/cve/CVE-2025-24894/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00607,"verdict":null,"product":"SPID.AspNetCore.Authentication (NuGet)"},{"id":"CVE-2025-0108","type":"cve","title":"CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","date":"2025-02-18","url":"https://erroneo.us/security/cve/CVE-2025-0108/","md":"https://erroneo.us/security/cve/CVE-2025-0108/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.98455,"verdict":null,"product":"Palo Alto Networks PAN-OS"},{"id":"CVE-2024-53704","type":"cve","title":"CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","date":"2025-02-18","url":"https://erroneo.us/security/cve/CVE-2024-53704/","md":"https://erroneo.us/security/cve/CVE-2024-53704/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.95314,"verdict":null,"product":"SonicWall SonicOS"},{"id":"2025-02-18","type":"digest","title":"Security digest for February 18, 2025","date":"2025-02-18","url":"https://erroneo.us/security/2025-02-18/","md":"https://erroneo.us/security/2025-02-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2024-56180","type":"cve","title":"CVE-2024-56180: Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution","date":"2025-02-14","url":"https://erroneo.us/security/cve/CVE-2024-56180/","md":"https://erroneo.us/security/cve/CVE-2024-56180/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00786,"verdict":null,"product":"org.apache.eventmesh:eventmesh-meta-raft (Maven)"},{"id":"CVE-2024-52577","type":"cve","title":"CVE-2024-52577: Apache Ignite: Possible RCE when deserializing incoming messages by the server node","date":"2025-02-14","url":"https://erroneo.us/security/cve/CVE-2024-52577/","md":"https://erroneo.us/security/cve/CVE-2024-52577/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.03131,"verdict":null,"product":"org.apache.ignite:ignite-core (Maven)"},{"id":"2025-02-14","type":"digest","title":"Security digest for February 14, 2025","date":"2025-02-14","url":"https://erroneo.us/security/2025-02-14/","md":"https://erroneo.us/security/2025-02-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-57727","type":"cve","title":"CVE-2024-57727: SimpleHelp Path Traversal Vulnerability","date":"2025-02-13","url":"https://erroneo.us/security/cve/CVE-2024-57727/","md":"https://erroneo.us/security/cve/CVE-2024-57727/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.96576,"verdict":null,"product":"SimpleHelp  SimpleHelp"},{"id":"2025-02-13","type":"digest","title":"Security digest for February 13, 2025","date":"2025-02-13","url":"https://erroneo.us/security/2025-02-13/","md":"https://erroneo.us/security/2025-02-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-vjh7-7g9h-fjfh","type":"ghsa","title":"Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)","date":"2025-02-12","url":"https://erroneo.us/security/ghsa/GHSA-vjh7-7g9h-fjfh/","md":"https://erroneo.us/security/ghsa/GHSA-vjh7-7g9h-fjfh/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"elliptic"},{"id":"GHSA-c2p2-hgjg-9r3f","type":"ghsa","title":"Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header","date":"2025-02-12","url":"https://erroneo.us/security/ghsa/GHSA-c2p2-hgjg-9r3f/","md":"https://erroneo.us/security/ghsa/GHSA-c2p2-hgjg-9r3f/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":null,"verdict":null,"product":"islandora/crayfish"},{"id":"CVE-2025-25200","type":"cve","title":"CVE-2025-25200: Inefficient Regular Expression Complexity in koa","date":"2025-02-12","url":"https://erroneo.us/security/cve/CVE-2025-25200/","md":"https://erroneo.us/security/cve/CVE-2025-25200/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00841,"verdict":null,"product":"koa (npm)"},{"id":"CVE-2025-24200","type":"cve","title":"CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability","date":"2025-02-12","url":"https://erroneo.us/security/cve/CVE-2025-24200/","md":"https://erroneo.us/security/cve/CVE-2025-24200/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.0442,"verdict":null,"product":"Apple iOS and iPadOS"},{"id":"CVE-2024-57604","type":"cve","title":"CVE-2024-57604: MaysWind ezBookkeeping has Improper Privilege Management","date":"2025-02-12","url":"https://erroneo.us/security/cve/CVE-2024-57604/","md":"https://erroneo.us/security/cve/CVE-2024-57604/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00736,"verdict":null,"product":"github.com/mayswind/ezbookkeeping (Go)"},{"id":"CVE-2024-57602","type":"cve","title":"CVE-2024-57602: Easy!Appointments Improper Restriction of Excessive Authentication Attempts","date":"2025-02-12","url":"https://erroneo.us/security/cve/CVE-2024-57602/","md":"https://erroneo.us/security/cve/CVE-2024-57602/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00831,"verdict":null,"product":"alextselegidis/easyappointments (Composer (PHP))"},{"id":"CVE-2024-41710","type":"cve","title":"CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability","date":"2025-02-12","url":"https://erroneo.us/security/cve/CVE-2024-41710/","md":"https://erroneo.us/security/cve/CVE-2024-41710/index.md","severity":"medium","cvss":6.8,"kev":true,"epss":0.41646,"verdict":null,"product":"Mitel SIP Phones"},{"id":"2025-02-12","type":"digest","title":"Security digest for February 12, 2025","date":"2025-02-12","url":"https://erroneo.us/security/2025-02-12/","md":"https://erroneo.us/security/2025-02-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":5}},{"id":"CVE-2025-24434","type":"cve","title":"CVE-2025-24434: Improper Authorization vulnerability in Magento and Adobe Commerce","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2025-24434/","md":"https://erroneo.us/security/cve/CVE-2025-24434/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.17186,"verdict":null,"product":"magento/community-edition (Composer (PHP))"},{"id":"CVE-2025-21418","type":"cve","title":"CVE-2025-21418: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2025-21418/","md":"https://erroneo.us/security/cve/CVE-2025-21418/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01568,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-21391","type":"cve","title":"CVE-2025-21391: Microsoft Windows Storage Link Following Vulnerability","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2025-21391/","md":"https://erroneo.us/security/cve/CVE-2025-21391/index.md","severity":"high","cvss":7.1,"kev":true,"epss":0.02303,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-40891","type":"cve","title":"CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2024-40891/","md":"https://erroneo.us/security/cve/CVE-2024-40891/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.22888,"verdict":null,"product":"Zyxel DSL CPE Devices"},{"id":"CVE-2024-40890","type":"cve","title":"CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2024-40890/","md":"https://erroneo.us/security/cve/CVE-2024-40890/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.20703,"verdict":null,"product":"Zyxel DSL CPE Devices"},{"id":"CVE-2024-12366","type":"cve","title":"CVE-2024-12366: PandasAI interactive prompt function Remote Code Execution (RCE)","date":"2025-02-11","url":"https://erroneo.us/security/cve/CVE-2024-12366/","md":"https://erroneo.us/security/cve/CVE-2024-12366/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01214,"verdict":null,"product":"pandasai (PyPI)"},{"id":"2025-02-11","type":"digest","title":"Security digest for February 11, 2025","date":"2025-02-11","url":"https://erroneo.us/security/2025-02-11/","md":"https://erroneo.us/security/2025-02-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":2}},{"id":"CVE-2025-0994","type":"cve","title":"CVE-2025-0994: Trimble Cityworks Deserialization Vulnerability","date":"2025-02-07","url":"https://erroneo.us/security/cve/CVE-2025-0994/","md":"https://erroneo.us/security/cve/CVE-2025-0994/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.31085,"verdict":null,"product":"Trimble Cityworks"},{"id":"2025-02-07","type":"digest","title":"Security digest for February 7, 2025","date":"2025-02-07","url":"https://erroneo.us/security/2025-02-07/","md":"https://erroneo.us/security/2025-02-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-vrpv-vw92-328g","type":"ghsa","title":"Multiple rtmpdump vulnerabilities","date":"2025-02-06","url":"https://erroneo.us/security/ghsa/GHSA-vrpv-vw92-328g/","md":"https://erroneo.us/security/ghsa/GHSA-vrpv-vw92-328g/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"rudloff/rtmpdump-bin"},{"id":"CVE-2025-24981","type":"cve","title":"CVE-2025-24981: Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2025-24981/","md":"https://erroneo.us/security/cve/CVE-2025-24981/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00684,"verdict":null,"product":"@nuxtjs/mdc (npm)"},{"id":"CVE-2025-24786","type":"cve","title":"CVE-2025-24786: WhoDB has a path traversal opening Sqlite3 database","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2025-24786/","md":"https://erroneo.us/security/cve/CVE-2025-24786/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02728,"verdict":null,"product":"github.com/clidey/whodb/core (Go)"},{"id":"CVE-2025-0411","type":"cve","title":"CVE-2025-0411: 7-Zip Mark of the Web Bypass Vulnerability","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2025-0411/","md":"https://erroneo.us/security/cve/CVE-2025-0411/index.md","severity":"high","cvss":7,"kev":true,"epss":0.67071,"verdict":null,"product":"7-Zip 7-Zip"},{"id":"CVE-2024-21413","type":"cve","title":"CVE-2024-21413: Microsoft Outlook Improper Input Validation Vulnerability","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2024-21413/","md":"https://erroneo.us/security/cve/CVE-2024-21413/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9466,"verdict":null,"product":"Microsoft Office Outlook"},{"id":"CVE-2022-23748","type":"cve","title":"CVE-2022-23748: Dante Discovery Process Control Vulnerability","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2022-23748/","md":"https://erroneo.us/security/cve/CVE-2022-23748/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.08329,"verdict":null,"product":"Audinate Dante Discovery"},{"id":"CVE-2020-29574","type":"cve","title":"CVE-2020-29574: CyberoamOS (CROS) SQL Injection Vulnerability","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2020-29574/","md":"https://erroneo.us/security/cve/CVE-2020-29574/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.04696,"verdict":null,"product":"Sophos CyberoamOS"},{"id":"CVE-2020-15069","type":"cve","title":"CVE-2020-15069: Sophos XG Firewall Buffer Overflow Vulnerability","date":"2025-02-06","url":"https://erroneo.us/security/cve/CVE-2020-15069/","md":"https://erroneo.us/security/cve/CVE-2020-15069/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.10674,"verdict":null,"product":"Sophos XG Firewall"},{"id":"2025-02-06","type":"digest","title":"Security digest for February 6, 2025","date":"2025-02-06","url":"https://erroneo.us/security/2025-02-06/","md":"https://erroneo.us/security/2025-02-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":3}},{"id":"CVE-2024-57077","type":"cve","title":"CVE-2024-57077: utils-extend Prototype Pollution","date":"2025-02-05","url":"https://erroneo.us/security/cve/CVE-2024-57077/","md":"https://erroneo.us/security/cve/CVE-2024-57077/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0049,"verdict":null,"product":"utils-extend (npm)"},{"id":"CVE-2024-53104","type":"cve","title":"CVE-2024-53104: Linux Kernel Out-of-Bounds Write Vulnerability","date":"2025-02-05","url":"https://erroneo.us/security/cve/CVE-2024-53104/","md":"https://erroneo.us/security/cve/CVE-2024-53104/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.03395,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2024-36404","type":"cve","title":"CVE-2024-36404: GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions","date":"2025-02-05","url":"https://erroneo.us/security/cve/CVE-2024-36404/","md":"https://erroneo.us/security/cve/CVE-2024-36404/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.76065,"verdict":null,"product":"org.geotools:gt-app-schema (Maven)"},{"id":"2025-02-05","type":"digest","title":"Security digest for February 5, 2025","date":"2025-02-05","url":"https://erroneo.us/security/2025-02-05/","md":"https://erroneo.us/security/2025-02-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2025-24964","type":"cve","title":"CVE-2025-24964: Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening","date":"2025-02-04","url":"https://erroneo.us/security/cve/CVE-2025-24964/","md":"https://erroneo.us/security/cve/CVE-2025-24964/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00682,"verdict":null,"product":"vitest (npm)"},{"id":"CVE-2024-45195","type":"cve","title":"CVE-2024-45195: Apache OFBiz Forced Browsing Vulnerability","date":"2025-02-04","url":"https://erroneo.us/security/cve/CVE-2024-45195/","md":"https://erroneo.us/security/cve/CVE-2024-45195/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99983,"verdict":null,"product":"Apache OFBiz"},{"id":"CVE-2024-29059","type":"cve","title":"CVE-2024-29059: Microsoft .NET Framework Information Disclosure Vulnerability","date":"2025-02-04","url":"https://erroneo.us/security/cve/CVE-2024-29059/","md":"https://erroneo.us/security/cve/CVE-2024-29059/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.98624,"verdict":null,"product":"Microsoft .NET Framework"},{"id":"CVE-2018-9276","type":"cve","title":"CVE-2018-9276: Paessler PRTG Network Monitor OS Command Injection Vulnerability","date":"2025-02-04","url":"https://erroneo.us/security/cve/CVE-2018-9276/","md":"https://erroneo.us/security/cve/CVE-2018-9276/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.86996,"verdict":null,"product":"Paessler PRTG Network Monitor"},{"id":"CVE-2018-19410","type":"cve","title":"CVE-2018-19410: Paessler PRTG Network Monitor Local File Inclusion Vulnerability","date":"2025-02-04","url":"https://erroneo.us/security/cve/CVE-2018-19410/","md":"https://erroneo.us/security/cve/CVE-2018-19410/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97939,"verdict":null,"product":"Paessler PRTG Network Monitor"},{"id":"2025-02-04","type":"digest","title":"Security digest for February 4, 2025","date":"2025-02-04","url":"https://erroneo.us/security/2025-02-04/","md":"https://erroneo.us/security/2025-02-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2025-24370","type":"cve","title":"CVE-2025-24370: Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass","date":"2025-02-03","url":"https://erroneo.us/security/cve/CVE-2025-24370/","md":"https://erroneo.us/security/cve/CVE-2025-24370/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00492,"verdict":null,"product":"django-unicorn (PyPI)"},{"id":"2025-02-03","type":"digest","title":"Security digest for February 3, 2025","date":"2025-02-03","url":"https://erroneo.us/security/2025-02-03/","md":"https://erroneo.us/security/2025-02-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-23215","type":"cve","title":"CVE-2025-23215: PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext","date":"2025-01-31","url":"https://erroneo.us/security/cve/CVE-2025-23215/","md":"https://erroneo.us/security/cve/CVE-2025-23215/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00329,"verdict":null,"product":"net.sourceforge.pmd:pmd-designer (Maven)"},{"id":"2025-01-31","type":"digest","title":"Security digest for January 31, 2025","date":"2025-01-31","url":"https://erroneo.us/security/2025-01-31/","md":"https://erroneo.us/security/2025-01-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-vpxm-cr3r-pjp9","type":"ghsa","title":"General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches","date":"2025-01-30","url":"https://erroneo.us/security/ghsa/GHSA-vpxm-cr3r-pjp9/","md":"https://erroneo.us/security/ghsa/GHSA-vpxm-cr3r-pjp9/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"org.openmrs:openmrs, org.openmrs.module:legacyui"},{"id":"2025-01-30","type":"digest","title":"Security digest for January 30, 2025","date":"2025-01-30","url":"https://erroneo.us/security/2025-01-30/","md":"https://erroneo.us/security/2025-01-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-24085","type":"cve","title":"CVE-2025-24085: Apple Multiple Products Use-After-Free Vulnerability","date":"2025-01-29","url":"https://erroneo.us/security/cve/CVE-2025-24085/","md":"https://erroneo.us/security/cve/CVE-2025-24085/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.1751,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2025-0851","type":"cve","title":"CVE-2025-0851: Deep Java Library path traversal issue","date":"2025-01-29","url":"https://erroneo.us/security/cve/CVE-2025-0851/","md":"https://erroneo.us/security/cve/CVE-2025-0851/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.23267,"verdict":null,"product":"ai.djl:api (Maven)"},{"id":"2025-01-29","type":"digest","title":"Security digest for January 29, 2025","date":"2025-01-29","url":"https://erroneo.us/security/2025-01-29/","md":"https://erroneo.us/security/2025-01-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2025-24800","type":"cve","title":"CVE-2025-24800: ismp-grandpa crate accepted incorrect signatures","date":"2025-01-28","url":"https://erroneo.us/security/cve/CVE-2025-24800/","md":"https://erroneo.us/security/cve/CVE-2025-24800/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00315,"verdict":null,"product":"ismp-grandpa (crates.io (Rust))"},{"id":"2025-01-28","type":"digest","title":"Security digest for January 28, 2025","date":"2025-01-28","url":"https://erroneo.us/security/2025-01-28/","md":"https://erroneo.us/security/2025-01-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2025-23006","type":"cve","title":"CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability","date":"2025-01-24","url":"https://erroneo.us/security/cve/CVE-2025-23006/","md":"https://erroneo.us/security/cve/CVE-2025-23006/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.23432,"verdict":null,"product":"SonicWall SMA1000 Appliances"},{"id":"2025-01-24","type":"digest","title":"Security digest for January 24, 2025","date":"2025-01-24","url":"https://erroneo.us/security/2025-01-24/","md":"https://erroneo.us/security/2025-01-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2020-11023","type":"cve","title":"CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability","date":"2025-01-23","url":"https://erroneo.us/security/cve/CVE-2020-11023/","md":"https://erroneo.us/security/cve/CVE-2020-11023/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.84887,"verdict":null,"product":"JQuery JQuery"},{"id":"2025-01-23","type":"digest","title":"Security digest for January 23, 2025","date":"2025-01-23","url":"https://erroneo.us/security/2025-01-23/","md":"https://erroneo.us/security/2025-01-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-45479","type":"cve","title":"CVE-2024-45479: Apache Ranger UI vulnerable to Server Side Request Forgery","date":"2025-01-21","url":"https://erroneo.us/security/cve/CVE-2024-45479/","md":"https://erroneo.us/security/cve/CVE-2024-45479/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0064,"verdict":null,"product":"org.apache.ranger:ranger (Maven)"},{"id":"2025-01-21","type":"digest","title":"Security digest for January 21, 2025","date":"2025-01-21","url":"https://erroneo.us/security/2025-01-21/","md":"https://erroneo.us/security/2025-01-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-50603","type":"cve","title":"CVE-2024-50603: Aviatrix Controllers OS Command Injection Vulnerability","date":"2025-01-16","url":"https://erroneo.us/security/cve/CVE-2024-50603/","md":"https://erroneo.us/security/cve/CVE-2024-50603/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.98518,"verdict":null,"product":"Aviatrix Controllers"},{"id":"2025-01-16","type":"digest","title":"Security digest for January 16, 2025","date":"2025-01-16","url":"https://erroneo.us/security/2025-01-16/","md":"https://erroneo.us/security/2025-01-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2025-25286","type":"cve","title":"CVE-2025-25286: Crayfish allows Remote Code Execution via Homarus Authorization header","date":"2025-01-15","url":"https://erroneo.us/security/cve/CVE-2025-25286/","md":"https://erroneo.us/security/cve/CVE-2025-25286/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01024,"verdict":null,"product":"islandora/crayfish (Composer (PHP))"},{"id":"CVE-2025-22146","type":"cve","title":"CVE-2025-22146: Sentry's improper authentication on SAML SSO process allows user impersonation","date":"2025-01-15","url":"https://erroneo.us/security/cve/CVE-2025-22146/","md":"https://erroneo.us/security/cve/CVE-2025-22146/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00606,"verdict":null,"product":"sentry (PyPI)"},{"id":"CVE-2024-12084","type":"cve","title":"CVE-2024-12084: Rsync: heap buffer overflow in rsync due to improper checksum length handling","date":"2025-01-15","url":"https://erroneo.us/security/cve/CVE-2024-12084/","md":"https://erroneo.us/security/cve/CVE-2024-12084/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.72059,"verdict":"check-exposure","product":"rsync"},{"id":"2025-01-15","type":"digest","title":"Security digest for January 15, 2025","date":"2025-01-15","url":"https://erroneo.us/security/2025-01-15/","md":"https://erroneo.us/security/2025-01-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"rsync-heap-overflow-cve-2024-12084","type":"brief","title":"rsync: Six Flaws Incl. Daemon Heap Overflow (CVE-2024-12084)","date":"2025-01-14","url":"https://erroneo.us/security/briefs/rsync-heap-overflow-cve-2024-12084/","md":"https://erroneo.us/security/briefs/rsync-heap-overflow-cve-2024-12084/index.md","severity":"critical","kev":false,"epss":0.72059,"verdict":"check-exposure","cves":["CVE-2024-12084","CVE-2024-12085","CVE-2024-12086","CVE-2024-12087","CVE-2024-12088","CVE-2024-12747"],"summary":"Distros shipped fixes in January 2025 and there is no known exploitation, but internet-facing rsync daemons have since needed two more security releases, so verify you run a current rsync rather than just 3.4.0."},{"id":"fortios-websocket-auth-bypass-cve-2024-55591","type":"brief","title":"FortiOS 7.0 Websocket Auth Bypass to Super-Admin","date":"2025-01-14","url":"https://erroneo.us/security/briefs/fortios-websocket-auth-bypass-cve-2024-55591/","md":"https://erroneo.us/security/briefs/fortios-websocket-auth-bypass-cve-2024-55591/index.md","severity":"critical","kev":true,"epss":0.9435,"verdict":"check-exposure","cves":["CVE-2024-55591","CVE-2025-24472"],"summary":"Exploited as a zero-day in late 2024 and patched in January 2025; anyone whose FortiOS 7.0 admin interface was internet-facing back then should audit admin and VPN accounts, not just the firmware version."},{"id":"CVE-2025-23061","type":"cve","title":"CVE-2025-23061: Mongoose search injection vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-23061/","md":"https://erroneo.us/security/cve/CVE-2025-23061/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.07284,"verdict":null,"product":"mongoose (npm)"},{"id":"CVE-2025-23042","type":"cve","title":"CVE-2025-23042: Gradio Blocked Path ACL Bypass Vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-23042/","md":"https://erroneo.us/security/cve/CVE-2025-23042/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00997,"verdict":null,"product":"gradio (PyPI)"},{"id":"CVE-2025-23025","type":"cve","title":"CVE-2025-23025: XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-23025/","md":"https://erroneo.us/security/cve/CVE-2025-23025/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00423,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-realtime-wysiwyg-ui (Maven)"},{"id":"CVE-2025-21335","type":"cve","title":"CVE-2025-21335: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-21335/","md":"https://erroneo.us/security/cve/CVE-2025-21335/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01401,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-21334","type":"cve","title":"CVE-2025-21334: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-21334/","md":"https://erroneo.us/security/cve/CVE-2025-21334/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01573,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2025-21333","type":"cve","title":"CVE-2025-21333: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2025-21333/","md":"https://erroneo.us/security/cve/CVE-2025-21333/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.10066,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-55591","type":"cve","title":"CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-55591/","md":"https://erroneo.us/security/cve/CVE-2024-55591/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.9435,"verdict":"check-exposure","product":"Fortinet FortiOS and FortiProxy"},{"id":"CVE-2024-49375","type":"cve","title":"CVE-2024-49375: Rasa Allows Remote Code Execution via Remote Model Loading","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-49375/","md":"https://erroneo.us/security/cve/CVE-2024-49375/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00937,"verdict":null,"product":"rasa-pro (PyPI)"},{"id":"CVE-2024-12747","type":"cve","title":"CVE-2024-12747: Rsync: race condition in rsync handling symbolic links","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-12747/","md":"https://erroneo.us/security/cve/CVE-2024-12747/index.md","severity":"medium","cvss":5.6,"kev":false,"epss":0.00385,"verdict":"check-exposure","product":"rsync"},{"id":"CVE-2024-12088","type":"cve","title":"CVE-2024-12088: Rsync: --safe-links option bypass leads to path traversal","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-12088/","md":"https://erroneo.us/security/cve/CVE-2024-12088/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.04646,"verdict":"check-exposure","product":"rsync"},{"id":"CVE-2024-12087","type":"cve","title":"CVE-2024-12087: Rsync: path traversal vulnerability in rsync","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-12087/","md":"https://erroneo.us/security/cve/CVE-2024-12087/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.02259,"verdict":"check-exposure","product":"rsync"},{"id":"CVE-2024-12086","type":"cve","title":"CVE-2024-12086: Rsync: rsync server leaks arbitrary client files","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-12086/","md":"https://erroneo.us/security/cve/CVE-2024-12086/index.md","severity":"medium","cvss":6.1,"kev":false,"epss":0.01789,"verdict":"check-exposure","product":"rsync"},{"id":"CVE-2024-12085","type":"cve","title":"CVE-2024-12085: Rsync: info leak via uninitialized stack contents","date":"2025-01-14","url":"https://erroneo.us/security/cve/CVE-2024-12085/","md":"https://erroneo.us/security/cve/CVE-2024-12085/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.08641,"verdict":"check-exposure","product":"rsync"},{"id":"2025-01-14","type":"digest","title":"Security digest for January 14, 2025","date":"2025-01-14","url":"https://erroneo.us/security/2025-01-14/","md":"https://erroneo.us/security/2025-01-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":4,"critical":4}},{"id":"CVE-2024-12686","type":"cve","title":"CVE-2024-12686: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","date":"2025-01-13","url":"https://erroneo.us/security/cve/CVE-2024-12686/","md":"https://erroneo.us/security/cve/CVE-2024-12686/index.md","severity":"medium","cvss":6.6,"kev":true,"epss":0.137,"verdict":null,"product":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)"},{"id":"CVE-2023-48365","type":"cve","title":"CVE-2023-48365: Qlik Sense HTTP Tunneling Vulnerability","date":"2025-01-13","url":"https://erroneo.us/security/cve/CVE-2023-48365/","md":"https://erroneo.us/security/cve/CVE-2023-48365/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.47453,"verdict":null,"product":"Qlik Sense"},{"id":"2025-01-13","type":"digest","title":"Security digest for January 13, 2025","date":"2025-01-13","url":"https://erroneo.us/security/2025-01-13/","md":"https://erroneo.us/security/2025-01-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"ivanti-connect-secure-cve-2025-0282","type":"brief","title":"Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282)","date":"2025-01-08","url":"https://erroneo.us/security/briefs/ivanti-connect-secure-cve-2025-0282/","md":"https://erroneo.us/security/briefs/ivanti-connect-secure-cve-2025-0282/index.md","severity":"critical","kev":true,"epss":0.99981,"verdict":"check-exposure","cves":["CVE-2025-0282","CVE-2025-0283"],"summary":"A real zero-day used for espionage and patched in January 2025; if you ran Connect Secure below 22.7R2.5 last winter, a clean patch level today does not prove you were never backdoored."},{"id":"CVE-2025-0283","type":"cve","title":"CVE-2025-0283: Ivanti Connect Secure vulnerability","date":"2025-01-08","url":"https://erroneo.us/security/cve/CVE-2025-0283/","md":"https://erroneo.us/security/cve/CVE-2025-0283/index.md","severity":"high","cvss":7,"kev":false,"epss":0.17456,"verdict":"check-exposure","product":"Ivanti Connect Secure"},{"id":"CVE-2025-0282","type":"cve","title":"CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","date":"2025-01-08","url":"https://erroneo.us/security/cve/CVE-2025-0282/","md":"https://erroneo.us/security/cve/CVE-2025-0282/index.md","severity":"critical","cvss":9,"kev":true,"epss":0.99981,"verdict":"check-exposure","product":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways"},{"id":"CVE-2024-54676","type":"cve","title":"CVE-2024-54676: Apache OpenMeetings vulnerable to Deserialization of Untrusted Data","date":"2025-01-08","url":"https://erroneo.us/security/cve/CVE-2024-54676/","md":"https://erroneo.us/security/cve/CVE-2024-54676/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.68777,"verdict":null,"product":"org.apache.openmeetings:openmeetings-parent (Maven)"},{"id":"2025-01-08","type":"digest","title":"Security digest for January 8, 2025","date":"2025-01-08","url":"https://erroneo.us/security/2025-01-08/","md":"https://erroneo.us/security/2025-01-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2024-55550","type":"cve","title":"CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability","date":"2025-01-07","url":"https://erroneo.us/security/cve/CVE-2024-55550/","md":"https://erroneo.us/security/cve/CVE-2024-55550/index.md","severity":"medium","cvss":4.4,"kev":true,"epss":0.38155,"verdict":null,"product":"Mitel MiCollab"},{"id":"CVE-2024-41713","type":"cve","title":"CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability","date":"2025-01-07","url":"https://erroneo.us/security/cve/CVE-2024-41713/","md":"https://erroneo.us/security/cve/CVE-2024-41713/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.97209,"verdict":null,"product":"Mitel MiCollab"},{"id":"CVE-2020-2883","type":"cve","title":"CVE-2020-2883: Oracle WebLogic Server Unspecified Vulnerability","date":"2025-01-07","url":"https://erroneo.us/security/cve/CVE-2020-2883/","md":"https://erroneo.us/security/cve/CVE-2020-2883/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.94582,"verdict":null,"product":"Oracle WebLogic Server"},{"id":"2025-01-07","type":"digest","title":"Security digest for January 7, 2025","date":"2025-01-07","url":"https://erroneo.us/security/2025-01-07/","md":"https://erroneo.us/security/2025-01-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2025-21613","type":"cve","title":"CVE-2025-21613: go-git has an Argument Injection via the URL field","date":"2025-01-06","url":"https://erroneo.us/security/cve/CVE-2025-21613/","md":"https://erroneo.us/security/cve/CVE-2025-21613/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01278,"verdict":null,"product":"gopkg.in/src-d/go-git.v4 (Go)"},{"id":"2025-01-06","type":"digest","title":"Security digest for January 6, 2025","date":"2025-01-06","url":"https://erroneo.us/security/2025-01-06/","md":"https://erroneo.us/security/2025-01-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-56198","type":"cve","title":"CVE-2024-56198: path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability","date":"2025-01-02","url":"https://erroneo.us/security/cve/CVE-2024-56198/","md":"https://erroneo.us/security/cve/CVE-2024-56198/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00743,"verdict":null,"product":"path-sanitizer (npm)"},{"id":"2025-01-02","type":"digest","title":"Security digest for January 2, 2025","date":"2025-01-02","url":"https://erroneo.us/security/2025-01-02/","md":"https://erroneo.us/security/2025-01-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-50703","type":"cve","title":"CVE-2024-50703: TeamPass privileges issue","date":"2024-12-30","url":"https://erroneo.us/security/cve/CVE-2024-50703/","md":"https://erroneo.us/security/cve/CVE-2024-50703/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00467,"verdict":null,"product":"nilsteampassnet/teampass (Composer (PHP))"},{"id":"CVE-2024-3393","type":"cve","title":"CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","date":"2024-12-30","url":"https://erroneo.us/security/cve/CVE-2024-3393/","md":"https://erroneo.us/security/cve/CVE-2024-3393/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.2912,"verdict":null,"product":"Palo Alto Networks PAN-OS"},{"id":"2024-12-30","type":"digest","title":"Security digest for December 30, 2024","date":"2024-12-30","url":"https://erroneo.us/security/2024-12-30/","md":"https://erroneo.us/security/2024-12-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-52046","type":"cve","title":"CVE-2024-52046: Apache MINA Deserialization RCE Vulnerability","date":"2024-12-25","url":"https://erroneo.us/security/cve/CVE-2024-52046/","md":"https://erroneo.us/security/cve/CVE-2024-52046/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.24366,"verdict":null,"product":"org.apache.mina:mina-core (Maven)"},{"id":"2024-12-25","type":"digest","title":"Security digest for December 25, 2024","date":"2024-12-25","url":"https://erroneo.us/security/2024-12-25/","md":"https://erroneo.us/security/2024-12-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-43441","type":"cve","title":"CVE-2024-43441: Apache HugeGraph-Server: Fixed JWT Token (Secret)","date":"2024-12-24","url":"https://erroneo.us/security/cve/CVE-2024-43441/","md":"https://erroneo.us/security/cve/CVE-2024-43441/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.72777,"verdict":null,"product":"org.apache.hugegraph:hugegraph-server (Maven)"},{"id":"2024-12-24","type":"digest","title":"Security digest for December 24, 2024","date":"2024-12-24","url":"https://erroneo.us/security/2024-12-24/","md":"https://erroneo.us/security/2024-12-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-39932","type":"cve","title":"CVE-2024-39932: Gogs allows argument injection during the previewing of changes","date":"2024-12-23","url":"https://erroneo.us/security/cve/CVE-2024-39932/","md":"https://erroneo.us/security/cve/CVE-2024-39932/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.17315,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2024-39931","type":"cve","title":"CVE-2024-39931: Gogs allows deletion of internal files","date":"2024-12-23","url":"https://erroneo.us/security/cve/CVE-2024-39931/","md":"https://erroneo.us/security/cve/CVE-2024-39931/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.52658,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2024-39930","type":"cve","title":"CVE-2024-39930: Gogs has an argument Injection in the built-in SSH server","date":"2024-12-23","url":"https://erroneo.us/security/cve/CVE-2024-39930/","md":"https://erroneo.us/security/cve/CVE-2024-39930/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.07743,"verdict":null,"product":"gogs.io/gogs (Go)"},{"id":"CVE-2021-44207","type":"cve","title":"CVE-2021-44207: Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ","date":"2024-12-23","url":"https://erroneo.us/security/cve/CVE-2021-44207/","md":"https://erroneo.us/security/cve/CVE-2021-44207/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.17578,"verdict":null,"product":"Acclaim Systems USAHERDS"},{"id":"2024-12-23","type":"digest","title":"Security digest for December 23, 2024","date":"2024-12-23","url":"https://erroneo.us/security/2024-12-23/","md":"https://erroneo.us/security/2024-12-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2024-28892","type":"cve","title":"CVE-2024-28892: GoCast OS Command Injection vulnerability","date":"2024-12-20","url":"https://erroneo.us/security/cve/CVE-2024-28892/","md":"https://erroneo.us/security/cve/CVE-2024-28892/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.06455,"verdict":null,"product":"github.com/mayuresh82/gocast (Go)"},{"id":"2024-12-20","type":"digest","title":"Security digest for December 20, 2024","date":"2024-12-20","url":"https://erroneo.us/security/2024-12-20/","md":"https://erroneo.us/security/2024-12-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-12356","type":"cve","title":"CVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","date":"2024-12-19","url":"https://erroneo.us/security/cve/CVE-2024-12356/","md":"https://erroneo.us/security/cve/CVE-2024-12356/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.87258,"verdict":null,"product":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)"},{"id":"2024-12-19","type":"digest","title":"Security digest for December 19, 2024","date":"2024-12-19","url":"https://erroneo.us/security/2024-12-19/","md":"https://erroneo.us/security/2024-12-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2022-23227","type":"cve","title":"CVE-2022-23227: NUUO NVRmini2 Devices Missing Authentication Vulnerability ","date":"2024-12-18","url":"https://erroneo.us/security/cve/CVE-2022-23227/","md":"https://erroneo.us/security/cve/CVE-2022-23227/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.48497,"verdict":null,"product":"NUUO NVRmini2 Devices"},{"id":"CVE-2021-40407","type":"cve","title":"CVE-2021-40407: Reolink RLC-410W IP Camera OS Command Injection Vulnerability ","date":"2024-12-18","url":"https://erroneo.us/security/cve/CVE-2021-40407/","md":"https://erroneo.us/security/cve/CVE-2021-40407/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.47635,"verdict":null,"product":"Reolink RLC-410W IP Camera"},{"id":"CVE-2019-11001","type":"cve","title":"CVE-2019-11001: Reolink Multiple IP Cameras OS Command Injection Vulnerability","date":"2024-12-18","url":"https://erroneo.us/security/cve/CVE-2019-11001/","md":"https://erroneo.us/security/cve/CVE-2019-11001/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.37542,"verdict":null,"product":"Reolink Multiple IP Cameras"},{"id":"CVE-2018-14933","type":"cve","title":"CVE-2018-14933: NUUO NVRmini Devices OS Command Injection Vulnerability ","date":"2024-12-18","url":"https://erroneo.us/security/cve/CVE-2018-14933/","md":"https://erroneo.us/security/cve/CVE-2018-14933/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.94761,"verdict":null,"product":"NUUO NVRmini Devices"},{"id":"2024-12-18","type":"digest","title":"Security digest for December 18, 2024","date":"2024-12-18","url":"https://erroneo.us/security/2024-12-18/","md":"https://erroneo.us/security/2024-12-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2024-55956","type":"cve","title":"CVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerability","date":"2024-12-17","url":"https://erroneo.us/security/cve/CVE-2024-55956/","md":"https://erroneo.us/security/cve/CVE-2024-55956/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.93968,"verdict":null,"product":"Cleo Multiple Products"},{"id":"2024-12-17","type":"digest","title":"Security digest for December 17, 2024","date":"2024-12-17","url":"https://erroneo.us/security/2024-12-17/","md":"https://erroneo.us/security/2024-12-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-35250","type":"cve","title":"CVE-2024-35250: Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","date":"2024-12-16","url":"https://erroneo.us/security/cve/CVE-2024-35250/","md":"https://erroneo.us/security/cve/CVE-2024-35250/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.25222,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-20767","type":"cve","title":"CVE-2024-20767: Adobe ColdFusion Improper Access Control Vulnerability","date":"2024-12-16","url":"https://erroneo.us/security/cve/CVE-2024-20767/","md":"https://erroneo.us/security/cve/CVE-2024-20767/index.md","severity":"high","cvss":7.4,"kev":true,"epss":0.98514,"verdict":null,"product":"Adobe ColdFusion"},{"id":"2024-12-16","type":"digest","title":"Security digest for December 16, 2024","date":"2024-12-16","url":"https://erroneo.us/security/2024-12-16/","md":"https://erroneo.us/security/2024-12-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2024-50623","type":"cve","title":"CVE-2024-50623: Cleo Multiple Products Unrestricted File Upload Vulnerability","date":"2024-12-13","url":"https://erroneo.us/security/cve/CVE-2024-50623/","md":"https://erroneo.us/security/cve/CVE-2024-50623/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98607,"verdict":null,"product":"Cleo Multiple Products"},{"id":"2024-12-13","type":"digest","title":"Security digest for December 13, 2024","date":"2024-12-13","url":"https://erroneo.us/security/2024-12-13/","md":"https://erroneo.us/security/2024-12-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-55879","type":"cve","title":"CVE-2024-55879: XWiki allows RCE from script right in configurable sections","date":"2024-12-12","url":"https://erroneo.us/security/cve/CVE-2024-55879/","md":"https://erroneo.us/security/cve/CVE-2024-55879/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01066,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-administration-ui (Maven)"},{"id":"CVE-2024-55877","type":"cve","title":"CVE-2024-55877: XWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosList","date":"2024-12-12","url":"https://erroneo.us/security/cve/CVE-2024-55877/","md":"https://erroneo.us/security/cve/CVE-2024-55877/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01603,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-help-ui (Maven)"},{"id":"CVE-2024-55875","type":"cve","title":"CVE-2024-55875: http4k has a potential XXE (XML External Entity Injection) vulnerability","date":"2024-12-12","url":"https://erroneo.us/security/cve/CVE-2024-55875/","md":"https://erroneo.us/security/cve/CVE-2024-55875/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01905,"verdict":null,"product":"org.http4k:http4k-format-xml (Maven)"},{"id":"CVE-2024-55662","type":"cve","title":"CVE-2024-55662: XWiki allows remote code execution through the extension sheet","date":"2024-12-12","url":"https://erroneo.us/security/cve/CVE-2024-55662/","md":"https://erroneo.us/security/cve/CVE-2024-55662/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00786,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-repository-server-ui (Maven)"},{"id":"2024-12-12","type":"digest","title":"Security digest for December 12, 2024","date":"2024-12-12","url":"https://erroneo.us/security/2024-12-12/","md":"https://erroneo.us/security/2024-12-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2024-53677","type":"cve","title":"CVE-2024-53677: Apache Struts file upload logic is flawed","date":"2024-12-11","url":"https://erroneo.us/security/cve/CVE-2024-53677/","md":"https://erroneo.us/security/cve/CVE-2024-53677/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.70143,"verdict":null,"product":"org.apache.struts:struts2-core (Maven)"},{"id":"CVE-2024-45337","type":"cve","title":"CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto","date":"2024-12-11","url":"https://erroneo.us/security/cve/CVE-2024-45337/","md":"https://erroneo.us/security/cve/CVE-2024-45337/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.03181,"verdict":null,"product":"golang.org/x/crypto (Go)"},{"id":"2024-12-11","type":"digest","title":"Security digest for December 11, 2024","date":"2024-12-11","url":"https://erroneo.us/security/2024-12-11/","md":"https://erroneo.us/security/2024-12-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-54152","type":"cve","title":"CVE-2024-54152: Angular Expressions - Remote Code Execution when using locals","date":"2024-12-10","url":"https://erroneo.us/security/cve/CVE-2024-54152/","md":"https://erroneo.us/security/cve/CVE-2024-54152/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02242,"verdict":null,"product":"angular-expressions (npm)"},{"id":"CVE-2024-49138","type":"cve","title":"CVE-2024-49138: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","date":"2024-12-10","url":"https://erroneo.us/security/cve/CVE-2024-49138/","md":"https://erroneo.us/security/cve/CVE-2024-49138/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.26215,"verdict":null,"product":"Microsoft Windows"},{"id":"2024-12-10","type":"digest","title":"Security digest for December 10, 2024","date":"2024-12-10","url":"https://erroneo.us/security/2024-12-10/","md":"https://erroneo.us/security/2024-12-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"ultralytics-pypi-cache-poisoning-compromise","type":"brief","title":"Ultralytics PyPI Releases Shipped a Crypto Miner","date":"2024-12-04","url":"https://erroneo.us/security/briefs/ultralytics-pypi-cache-poisoning-compromise/","md":"https://erroneo.us/security/briefs/ultralytics-pypi-cache-poisoning-compromise/index.md","severity":"high","kev":false,"epss":null,"verdict":"most-can-relax","cves":[],"summary":"The four bad versions were pulled from PyPI within hours to about half a day in December 2024 and carried a coin miner, not a credential stealer; unless something still pins one of them, there is nothing to do but learn the CI lessons."},{"id":"CVE-2024-51378","type":"cve","title":"CVE-2024-51378: CyberPanel Incorrect Default Permissions Vulnerability","date":"2024-12-04","url":"https://erroneo.us/security/cve/CVE-2024-51378/","md":"https://erroneo.us/security/cve/CVE-2024-51378/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.94748,"verdict":null,"product":"CyberPersons CyberPanel"},{"id":"2024-12-04","type":"digest","title":"Security digest for December 4, 2024","date":"2024-12-04","url":"https://erroneo.us/security/2024-12-04/","md":"https://erroneo.us/security/2024-12-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"CVE-2024-11680","type":"cve","title":"CVE-2024-11680: ProjectSend Improper Authentication Vulnerability","date":"2024-12-03","url":"https://erroneo.us/security/cve/CVE-2024-11680/","md":"https://erroneo.us/security/cve/CVE-2024-11680/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.91849,"verdict":null,"product":"ProjectSend ProjectSend"},{"id":"CVE-2024-11667","type":"cve","title":"CVE-2024-11667: Zyxel Multiple Firewalls Path Traversal Vulnerability","date":"2024-12-03","url":"https://erroneo.us/security/cve/CVE-2024-11667/","md":"https://erroneo.us/security/cve/CVE-2024-11667/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.02929,"verdict":null,"product":"Zyxel Multiple Firewalls"},{"id":"CVE-2023-45727","type":"cve","title":"CVE-2023-45727: North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","date":"2024-12-03","url":"https://erroneo.us/security/cve/CVE-2023-45727/","md":"https://erroneo.us/security/cve/CVE-2023-45727/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.04822,"verdict":null,"product":"North Grid Proself"},{"id":"2024-12-03","type":"digest","title":"Security digest for December 3, 2024","date":"2024-12-03","url":"https://erroneo.us/security/2024-12-03/","md":"https://erroneo.us/security/2024-12-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"GHSA-q849-wxrc-vqrp","type":"ghsa","title":"hull.js Code Injection Vulnerability","date":"2024-12-02","url":"https://erroneo.us/security/ghsa/GHSA-q849-wxrc-vqrp/","md":"https://erroneo.us/security/ghsa/GHSA-q849-wxrc-vqrp/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"hull.js"},{"id":"CVE-2024-53990","type":"cve","title":"CVE-2024-53990: AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s","date":"2024-12-02","url":"https://erroneo.us/security/cve/CVE-2024-53990/","md":"https://erroneo.us/security/cve/CVE-2024-53990/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00722,"verdict":null,"product":"org.asynchttpclient:async-http-client (Maven)"},{"id":"2024-12-02","type":"digest","title":"Security digest for December 2, 2024","date":"2024-12-02","url":"https://erroneo.us/security/2024-12-02/","md":"https://erroneo.us/security/2024-12-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-28461","type":"cve","title":"CVE-2023-28461: Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","date":"2024-11-25","url":"https://erroneo.us/security/cve/CVE-2023-28461/","md":"https://erroneo.us/security/cve/CVE-2023-28461/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.68079,"verdict":null,"product":"Array Networks  AG/vxAG ArrayOS"},{"id":"2024-11-25","type":"digest","title":"Security digest for November 25, 2024","date":"2024-11-25","url":"https://erroneo.us/security/2024-11-25/","md":"https://erroneo.us/security/2024-11-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-44309","type":"cve","title":"CVE-2024-44309: Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","date":"2024-11-21","url":"https://erroneo.us/security/cve/CVE-2024-44309/","md":"https://erroneo.us/security/cve/CVE-2024-44309/index.md","severity":"medium","cvss":6.3,"kev":true,"epss":0.2259,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2024-44308","type":"cve","title":"CVE-2024-44308: Apple Multiple Products Code Execution Vulnerability","date":"2024-11-21","url":"https://erroneo.us/security/cve/CVE-2024-44308/","md":"https://erroneo.us/security/cve/CVE-2024-44308/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.10157,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2024-21287","type":"cve","title":"CVE-2024-21287: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","date":"2024-11-21","url":"https://erroneo.us/security/cve/CVE-2024-21287/","md":"https://erroneo.us/security/cve/CVE-2024-21287/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.01723,"verdict":null,"product":"Oracle Agile Product Lifecycle Management (PLM)"},{"id":"2024-11-21","type":"digest","title":"Security digest for November 21, 2024","date":"2024-11-21","url":"https://erroneo.us/security/2024-11-21/","md":"https://erroneo.us/security/2024-11-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2024-38813","type":"cve","title":"CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability","date":"2024-11-20","url":"https://erroneo.us/security/cve/CVE-2024-38813/","md":"https://erroneo.us/security/cve/CVE-2024-38813/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.17355,"verdict":null,"product":"VMware vCenter Server"},{"id":"CVE-2024-38812","type":"cve","title":"CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","date":"2024-11-20","url":"https://erroneo.us/security/cve/CVE-2024-38812/","md":"https://erroneo.us/security/cve/CVE-2024-38812/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.54571,"verdict":null,"product":"VMware vCenter Server"},{"id":"2024-11-20","type":"digest","title":"Security digest for November 20, 2024","date":"2024-11-20","url":"https://erroneo.us/security/2024-11-20/","md":"https://erroneo.us/security/2024-11-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"pan-os-cve-2024-0012-9474-lunar-peek","type":"brief","title":"PAN-OS Management Auth Bypass Chain (Lunar Peek)","date":"2024-11-18","url":"https://erroneo.us/security/briefs/pan-os-cve-2024-0012-9474-lunar-peek/","md":"https://erroneo.us/security/briefs/pan-os-cve-2024-0012-9474-lunar-peek/index.md","severity":"critical","kev":true,"epss":0.99855,"verdict":"check-exposure","cves":["CVE-2024-0012","CVE-2024-9474"],"summary":"Exploited at scale in late 2024 and patched for almost two years; if your management interface was ever internet-reachable, verify the fix and hunt for leftovers rather than assume you are clean."},{"id":"CVE-2024-9474","type":"cve","title":"CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","date":"2024-11-18","url":"https://erroneo.us/security/cve/CVE-2024-9474/","md":"https://erroneo.us/security/cve/CVE-2024-9474/index.md","severity":"medium","cvss":6.9,"kev":true,"epss":0.94824,"verdict":"check-exposure","product":"Palo Alto Networks PAN-OS"},{"id":"CVE-2024-52316","type":"cve","title":"CVE-2024-52316: Apache Tomcat - Authentication Bypass","date":"2024-11-18","url":"https://erroneo.us/security/cve/CVE-2024-52316/","md":"https://erroneo.us/security/cve/CVE-2024-52316/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.06246,"verdict":null,"product":"org.apache.tomcat:tomcat-catalina (Maven)"},{"id":"CVE-2024-47533","type":"cve","title":"CVE-2024-47533: cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes","date":"2024-11-18","url":"https://erroneo.us/security/cve/CVE-2024-47533/","md":"https://erroneo.us/security/cve/CVE-2024-47533/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.04003,"verdict":null,"product":"cobbler (PyPI)"},{"id":"CVE-2024-1212","type":"cve","title":"CVE-2024-1212: Progress Kemp LoadMaster OS Command Injection Vulnerability","date":"2024-11-18","url":"https://erroneo.us/security/cve/CVE-2024-1212/","md":"https://erroneo.us/security/cve/CVE-2024-1212/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.95388,"verdict":null,"product":"Progress Kemp LoadMaster"},{"id":"CVE-2024-0012","type":"cve","title":"CVE-2024-0012: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","date":"2024-11-18","url":"https://erroneo.us/security/cve/CVE-2024-0012/","md":"https://erroneo.us/security/cve/CVE-2024-0012/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99855,"verdict":"check-exposure","product":"Palo Alto Networks PAN-OS"},{"id":"2024-11-18","type":"digest","title":"Security digest for November 18, 2024","date":"2024-11-18","url":"https://erroneo.us/security/2024-11-18/","md":"https://erroneo.us/security/2024-11-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":2}},{"id":"CVE-2024-51092","type":"cve","title":"CVE-2024-51092: LibreNMS has an Authenticated OS Command Injection","date":"2024-11-15","url":"https://erroneo.us/security/cve/CVE-2024-51092/","md":"https://erroneo.us/security/cve/CVE-2024-51092/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.07176,"verdict":null,"product":"librenms/librenms (Composer (PHP))"},{"id":"CVE-2021-3902","type":"cve","title":"CVE-2021-3902: Improper Restriction of XML External Entity Reference in dompdf/dompdf","date":"2024-11-15","url":"https://erroneo.us/security/cve/CVE-2021-3902/","md":"https://erroneo.us/security/cve/CVE-2021-3902/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00951,"verdict":null,"product":"dompdf/dompdf (Composer (PHP))"},{"id":"CVE-2021-3838","type":"cve","title":"CVE-2021-3838: Deserialization of Untrusted Data in dompdf/dompdf","date":"2024-11-15","url":"https://erroneo.us/security/cve/CVE-2021-3838/","md":"https://erroneo.us/security/cve/CVE-2021-3838/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01432,"verdict":null,"product":"dompdf/dompdf (Composer (PHP))"},{"id":"2024-11-15","type":"digest","title":"Security digest for November 15, 2024","date":"2024-11-15","url":"https://erroneo.us/security/2024-11-15/","md":"https://erroneo.us/security/2024-11-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-9465","type":"cve","title":"CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability","date":"2024-11-14","url":"https://erroneo.us/security/cve/CVE-2024-9465/","md":"https://erroneo.us/security/cve/CVE-2024-9465/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.99626,"verdict":null,"product":"Palo Alto Networks Expedition"},{"id":"CVE-2024-9463","type":"cve","title":"CVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerability","date":"2024-11-14","url":"https://erroneo.us/security/cve/CVE-2024-9463/","md":"https://erroneo.us/security/cve/CVE-2024-9463/index.md","severity":"critical","cvss":9.9,"kev":true,"epss":0.98546,"verdict":null,"product":"Palo Alto Networks Expedition"},{"id":"2024-11-14","type":"digest","title":"Security digest for November 14, 2024","date":"2024-11-14","url":"https://erroneo.us/security/2024-11-14/","md":"https://erroneo.us/security/2024-11-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2024-49039","type":"cve","title":"CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2024-49039/","md":"https://erroneo.us/security/cve/CVE-2024-49039/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.14179,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-43498","type":"cve","title":"CVE-2024-43498: .NET Remote Code Execution Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2024-43498/","md":"https://erroneo.us/security/cve/CVE-2024-43498/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.03591,"verdict":null,"product":"System.Formats.Nrbf (NuGet)"},{"id":"CVE-2024-43451","type":"cve","title":"CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2024-43451/","md":"https://erroneo.us/security/cve/CVE-2024-43451/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.84266,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2021-41277","type":"cve","title":"CVE-2021-41277: Metabase GeoJSON API Local File Inclusion Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2021-41277/","md":"https://erroneo.us/security/cve/CVE-2021-41277/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.97178,"verdict":null,"product":"Metabase Metabase"},{"id":"CVE-2021-26086","type":"cve","title":"CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2021-26086/","md":"https://erroneo.us/security/cve/CVE-2021-26086/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.99999,"verdict":null,"product":"Atlassian Jira Server and Data Center"},{"id":"CVE-2014-2120","type":"cve","title":"CVE-2014-2120: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","date":"2024-11-12","url":"https://erroneo.us/security/cve/CVE-2014-2120/","md":"https://erroneo.us/security/cve/CVE-2014-2120/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.22558,"verdict":null,"product":"Cisco Adaptive Security Appliance (ASA)"},{"id":"2024-11-12","type":"digest","title":"Security digest for November 12, 2024","date":"2024-11-12","url":"https://erroneo.us/security/2024-11-12/","md":"https://erroneo.us/security/2024-11-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":5,"critical":1}},{"id":"CVE-2024-5910","type":"cve","title":"CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability","date":"2024-11-07","url":"https://erroneo.us/security/cve/CVE-2024-5910/","md":"https://erroneo.us/security/cve/CVE-2024-5910/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.91684,"verdict":null,"product":"Palo Alto Networks Expedition"},{"id":"CVE-2024-51990","type":"cve","title":"CVE-2024-51990: jj vulnerable to path traversal via crafted Git repositories","date":"2024-11-07","url":"https://erroneo.us/security/cve/CVE-2024-51990/","md":"https://erroneo.us/security/cve/CVE-2024-51990/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00615,"verdict":null,"product":"jj-lib (crates.io (Rust))"},{"id":"CVE-2024-51567","type":"cve","title":"CVE-2024-51567: CyberPanel Incorrect Default Permissions Vulnerability","date":"2024-11-07","url":"https://erroneo.us/security/cve/CVE-2024-51567/","md":"https://erroneo.us/security/cve/CVE-2024-51567/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.84402,"verdict":null,"product":"CyberPersons CyberPanel"},{"id":"CVE-2024-43093","type":"cve","title":"CVE-2024-43093: Android Framework Privilege Escalation Vulnerability","date":"2024-11-07","url":"https://erroneo.us/security/cve/CVE-2024-43093/","md":"https://erroneo.us/security/cve/CVE-2024-43093/index.md","severity":"high","cvss":7.3,"kev":true,"epss":0.00709,"verdict":null,"product":"Android Framework"},{"id":"CVE-2019-16278","type":"cve","title":"CVE-2019-16278: Nostromo nhttpd Directory Traversal Vulnerability","date":"2024-11-07","url":"https://erroneo.us/security/cve/CVE-2019-16278/","md":"https://erroneo.us/security/cve/CVE-2019-16278/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99033,"verdict":null,"product":"Nostromo nhttpd"},{"id":"2024-11-07","type":"digest","title":"Security digest for November 7, 2024","date":"2024-11-07","url":"https://erroneo.us/security/2024-11-07/","md":"https://erroneo.us/security/2024-11-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2024-51757","type":"cve","title":"CVE-2024-51757: happy-dom allows for server side code to be executed by a <script> tag","date":"2024-11-06","url":"https://erroneo.us/security/cve/CVE-2024-51757/","md":"https://erroneo.us/security/cve/CVE-2024-51757/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00772,"verdict":null,"product":"happy-dom (npm)"},{"id":"CVE-2024-10082","type":"cve","title":"CVE-2024-10082: codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service","date":"2024-11-06","url":"https://erroneo.us/security/cve/CVE-2024-10082/","md":"https://erroneo.us/security/cve/CVE-2024-10082/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00479,"verdict":null,"product":"codechecker (PyPI)"},{"id":"CVE-2024-10081","type":"cve","title":"CVE-2024-10081: codechecker vulnerable to authentication bypass when using specifically crafted URLs","date":"2024-11-06","url":"https://erroneo.us/security/cve/CVE-2024-10081/","md":"https://erroneo.us/security/cve/CVE-2024-10081/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.3992,"verdict":null,"product":"codechecker (PyPI)"},{"id":"2024-11-06","type":"digest","title":"Security digest for November 6, 2024","date":"2024-11-06","url":"https://erroneo.us/security/2024-11-06/","md":"https://erroneo.us/security/2024-11-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-51735","type":"cve","title":"CVE-2024-51735: Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE","date":"2024-11-05","url":"https://erroneo.us/security/cve/CVE-2024-51735/","md":"https://erroneo.us/security/cve/CVE-2024-51735/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00458,"verdict":null,"product":"github.com/j3ssie/osmedeus (Go)"},{"id":"2024-11-05","type":"digest","title":"Security digest for November 5, 2024","date":"2024-11-05","url":"https://erroneo.us/security/2024-11-05/","md":"https://erroneo.us/security/2024-11-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-8957","type":"cve","title":"CVE-2024-8957: PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","date":"2024-11-04","url":"https://erroneo.us/security/cve/CVE-2024-8957/","md":"https://erroneo.us/security/cve/CVE-2024-8957/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.7984,"verdict":null,"product":"PTZOptics PT30X-SDI/NDI Cameras"},{"id":"CVE-2024-8956","type":"cve","title":"CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","date":"2024-11-04","url":"https://erroneo.us/security/cve/CVE-2024-8956/","md":"https://erroneo.us/security/cve/CVE-2024-8956/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.58787,"verdict":null,"product":"PTZOptics PT30X-SDI/NDI Cameras"},{"id":"CVE-2024-51501","type":"cve","title":"CVE-2024-51501: CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes","date":"2024-11-04","url":"https://erroneo.us/security/cve/CVE-2024-51501/","md":"https://erroneo.us/security/cve/CVE-2024-51501/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00562,"verdict":null,"product":"Refit (NuGet)"},{"id":"2024-11-04","type":"digest","title":"Security digest for November 4, 2024","date":"2024-11-04","url":"https://erroneo.us/security/2024-11-04/","md":"https://erroneo.us/security/2024-11-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-48910","type":"cve","title":"CVE-2024-48910: DOMPurify vulnerable to tampering by prototype polution","date":"2024-10-31","url":"https://erroneo.us/security/cve/CVE-2024-48910/","md":"https://erroneo.us/security/cve/CVE-2024-48910/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01151,"verdict":null,"product":"dompurify (npm)"},{"id":"2024-10-31","type":"digest","title":"Security digest for October 31, 2024","date":"2024-10-31","url":"https://erroneo.us/security/2024-10-31/","md":"https://erroneo.us/security/2024-10-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-49768","type":"cve","title":"CVE-2024-49768: Waitress has request processing race condition in HTTP pipelining with invalid first request","date":"2024-10-29","url":"https://erroneo.us/security/cve/CVE-2024-49768/","md":"https://erroneo.us/security/cve/CVE-2024-49768/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00486,"verdict":null,"product":"waitress (PyPI)"},{"id":"CVE-2024-0132","type":"cve","title":"CVE-2024-0132: NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability","date":"2024-10-29","url":"https://erroneo.us/security/cve/CVE-2024-0132/","md":"https://erroneo.us/security/cve/CVE-2024-0132/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.40842,"verdict":null,"product":"github.com/NVIDIA/nvidia-container-toolkit (Go)"},{"id":"2024-10-29","type":"digest","title":"Security digest for October 29, 2024","date":"2024-10-29","url":"https://erroneo.us/security/2024-10-29/","md":"https://erroneo.us/security/2024-10-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-38821","type":"cve","title":"CVE-2024-38821: Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications","date":"2024-10-28","url":"https://erroneo.us/security/cve/CVE-2024-38821/","md":"https://erroneo.us/security/cve/CVE-2024-38821/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01741,"verdict":null,"product":"org.springframework.security:spring-security-web (Maven)"},{"id":"2024-10-28","type":"digest","title":"Security digest for October 28, 2024","date":"2024-10-28","url":"https://erroneo.us/security/2024-10-28/","md":"https://erroneo.us/security/2024-10-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-x7xj-jvwp-97rv","type":"ghsa","title":"RKE2 allows privilege escalation in Windows nodes due to Insecure Access Control Lists","date":"2024-10-25","url":"https://erroneo.us/security/ghsa/GHSA-x7xj-jvwp-97rv/","md":"https://erroneo.us/security/ghsa/GHSA-x7xj-jvwp-97rv/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/rancher/rke2, github.com/rancher/rke2"},{"id":"GHSA-7h65-4p22-39j6","type":"ghsa","title":"github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses","date":"2024-10-25","url":"https://erroneo.us/security/ghsa/GHSA-7h65-4p22-39j6/","md":"https://erroneo.us/security/ghsa/GHSA-7h65-4p22-39j6/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"github.com/crossplane/crossplane, github.com/crossplane/crossplane"},{"id":"CVE-2024-22036","type":"cve","title":"CVE-2024-22036: Rancher Remote Code Execution via Cluster/Node Drivers","date":"2024-10-25","url":"https://erroneo.us/security/cve/CVE-2024-22036/","md":"https://erroneo.us/security/cve/CVE-2024-22036/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00805,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"CVE-2023-32197","type":"cve","title":"CVE-2023-32197: Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists","date":"2024-10-25","url":"https://erroneo.us/security/cve/CVE-2023-32197/","md":"https://erroneo.us/security/cve/CVE-2023-32197/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00625,"verdict":null,"product":"github.com/rancher/rancher (Go)"},{"id":"2024-10-25","type":"digest","title":"Security digest for October 25, 2024","date":"2024-10-25","url":"https://erroneo.us/security/2024-10-25/","md":"https://erroneo.us/security/2024-10-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2024-47883","type":"cve","title":"CVE-2024-47883: Butterfly has path/URL confusion in resource handling leading to multiple weaknesses","date":"2024-10-24","url":"https://erroneo.us/security/cve/CVE-2024-47883/","md":"https://erroneo.us/security/cve/CVE-2024-47883/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01638,"verdict":null,"product":"org.openrefine.dependencies:butterfly (Maven)"},{"id":"CVE-2024-37383","type":"cve","title":"CVE-2024-37383: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","date":"2024-10-24","url":"https://erroneo.us/security/cve/CVE-2024-37383/","md":"https://erroneo.us/security/cve/CVE-2024-37383/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.73296,"verdict":null,"product":"Roundcube Webmail"},{"id":"CVE-2024-20481","type":"cve","title":"CVE-2024-20481: Cisco ASA and FTD Denial-of-Service Vulnerability","date":"2024-10-24","url":"https://erroneo.us/security/cve/CVE-2024-20481/","md":"https://erroneo.us/security/cve/CVE-2024-20481/index.md","severity":"medium","cvss":5.8,"kev":true,"epss":0.15874,"verdict":null,"product":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)"},{"id":"2024-10-24","type":"digest","title":"Security digest for October 24, 2024","date":"2024-10-24","url":"https://erroneo.us/security/2024-10-24/","md":"https://erroneo.us/security/2024-10-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-47575","type":"cve","title":"CVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerability","date":"2024-10-23","url":"https://erroneo.us/security/cve/CVE-2024-47575/","md":"https://erroneo.us/security/cve/CVE-2024-47575/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.94766,"verdict":null,"product":"Fortinet FortiManager"},{"id":"2024-10-23","type":"digest","title":"Security digest for October 23, 2024","date":"2024-10-23","url":"https://erroneo.us/security/2024-10-23/","md":"https://erroneo.us/security/2024-10-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-8980","type":"cve","title":"CVE-2024-8980: Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console","date":"2024-10-22","url":"https://erroneo.us/security/cve/CVE-2024-8980/","md":"https://erroneo.us/security/cve/CVE-2024-8980/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00237,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-38094","type":"cve","title":"CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability","date":"2024-10-22","url":"https://erroneo.us/security/cve/CVE-2024-38094/","md":"https://erroneo.us/security/cve/CVE-2024-38094/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.50892,"verdict":null,"product":"Microsoft SharePoint"},{"id":"CVE-2024-38002","type":"cve","title":"CVE-2024-38002: Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions","date":"2024-10-22","url":"https://erroneo.us/security/cve/CVE-2024-38002/","md":"https://erroneo.us/security/cve/CVE-2024-38002/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00648,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"2024-10-22","type":"digest","title":"Security digest for October 22, 2024","date":"2024-10-22","url":"https://erroneo.us/security/2024-10-22/","md":"https://erroneo.us/security/2024-10-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-9537","type":"cve","title":"CVE-2024-9537: ScienceLogic SL1 Unspecified Vulnerability","date":"2024-10-21","url":"https://erroneo.us/security/cve/CVE-2024-9537/","md":"https://erroneo.us/security/cve/CVE-2024-9537/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.03826,"verdict":null,"product":"ScienceLogic SL1"},{"id":"2024-10-21","type":"digest","title":"Security digest for October 21, 2024","date":"2024-10-21","url":"https://erroneo.us/security/2024-10-21/","md":"https://erroneo.us/security/2024-10-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-9264","type":"cve","title":"CVE-2024-9264: Grafana Command Injection And Local File Inclusion Via Sql Expressions","date":"2024-10-17","url":"https://erroneo.us/security/cve/CVE-2024-9264/","md":"https://erroneo.us/security/cve/CVE-2024-9264/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.97138,"verdict":null,"product":"github.com/grafana/grafana (Go)"},{"id":"CVE-2024-40711","type":"cve","title":"CVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerability","date":"2024-10-17","url":"https://erroneo.us/security/cve/CVE-2024-40711/","md":"https://erroneo.us/security/cve/CVE-2024-40711/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.90369,"verdict":"act-now","product":"Veeam Backup & Replication"},{"id":"2024-10-17","type":"digest","title":"Security digest for October 17, 2024","date":"2024-10-17","url":"https://erroneo.us/security/2024-10-17/","md":"https://erroneo.us/security/2024-10-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-45216","type":"cve","title":"CVE-2024-45216: Improper Authentication vulnerability in Apache Solr","date":"2024-10-16","url":"https://erroneo.us/security/cve/CVE-2024-45216/","md":"https://erroneo.us/security/cve/CVE-2024-45216/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.92747,"verdict":null,"product":"org.apache.solr:solr (Maven)"},{"id":"2024-10-16","type":"digest","title":"Security digest for October 16, 2024","date":"2024-10-16","url":"https://erroneo.us/security/2024-10-16/","md":"https://erroneo.us/security/2024-10-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-9680","type":"cve","title":"CVE-2024-9680: Mozilla Firefox Use-After-Free Vulnerability","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-9680/","md":"https://erroneo.us/security/cve/CVE-2024-9680/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.23184,"verdict":null,"product":"Mozilla Firefox"},{"id":"CVE-2024-9486","type":"cve","title":"CVE-2024-9486: VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-9486/","md":"https://erroneo.us/security/cve/CVE-2024-9486/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02208,"verdict":null,"product":"github.com/kubernetes-sigs/image-builder (Go)"},{"id":"CVE-2024-48914","type":"cve","title":"CVE-2024-48914: Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-48914/","md":"https://erroneo.us/security/cve/CVE-2024-48914/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.60416,"verdict":null,"product":"@vendure/asset-server-plugin (npm)"},{"id":"CVE-2024-32651","type":"cve","title":"CVE-2024-32651: changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-32651/","md":"https://erroneo.us/security/cve/CVE-2024-32651/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.83601,"verdict":null,"product":"changedetection.io (PyPI)"},{"id":"CVE-2024-30088","type":"cve","title":"CVE-2024-30088: Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-30088/","md":"https://erroneo.us/security/cve/CVE-2024-30088/index.md","severity":"high","cvss":7,"kev":true,"epss":0.68202,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-28987","type":"cve","title":"CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability","date":"2024-10-15","url":"https://erroneo.us/security/cve/CVE-2024-28987/","md":"https://erroneo.us/security/cve/CVE-2024-28987/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.93299,"verdict":null,"product":"SolarWinds Web Help Desk"},{"id":"2024-10-15","type":"digest","title":"Security digest for October 15, 2024","date":"2024-10-15","url":"https://erroneo.us/security/2024-10-15/","md":"https://erroneo.us/security/2024-10-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":3}},{"id":"CVE-2024-47832","type":"cve","title":"CVE-2024-47832: SSOReady has an XML Signature Bypass via differential XML parsing","date":"2024-10-11","url":"https://erroneo.us/security/cve/CVE-2024-47832/","md":"https://erroneo.us/security/cve/CVE-2024-47832/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00401,"verdict":null,"product":"github.com/ssoready/ssoready (Go)"},{"id":"CVE-2024-42640","type":"cve","title":"CVE-2024-42640: angular-base64-upload vulnerable to unauthenticated remote code execution","date":"2024-10-11","url":"https://erroneo.us/security/cve/CVE-2024-42640/","md":"https://erroneo.us/security/cve/CVE-2024-42640/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.39951,"verdict":null,"product":"angular-base64-upload (npm)"},{"id":"CVE-2024-21534","type":"cve","title":"CVE-2024-21534: JSONPath Plus Remote Code Execution (RCE) Vulnerability","date":"2024-10-11","url":"https://erroneo.us/security/cve/CVE-2024-21534/","md":"https://erroneo.us/security/cve/CVE-2024-21534/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.09017,"verdict":null,"product":"org.webjars.npm:jsonpath-plus (Maven)"},{"id":"CVE-2023-25581","type":"cve","title":"CVE-2023-25581: pac4j-core affected by a Java deserialization vulnerability","date":"2024-10-11","url":"https://erroneo.us/security/cve/CVE-2023-25581/","md":"https://erroneo.us/security/cve/CVE-2023-25581/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01936,"verdict":null,"product":"org.pac4j:pac4j-core (Maven)"},{"id":"2024-10-11","type":"digest","title":"Security digest for October 11, 2024","date":"2024-10-11","url":"https://erroneo.us/security/2024-10-11/","md":"https://erroneo.us/security/2024-10-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2024-9380","type":"cve","title":"CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","date":"2024-10-09","url":"https://erroneo.us/security/cve/CVE-2024-9380/","md":"https://erroneo.us/security/cve/CVE-2024-9380/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.59651,"verdict":null,"product":"Ivanti Cloud Services Appliance (CSA)"},{"id":"CVE-2024-9379","type":"cve","title":"CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","date":"2024-10-09","url":"https://erroneo.us/security/cve/CVE-2024-9379/","md":"https://erroneo.us/security/cve/CVE-2024-9379/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.43782,"verdict":null,"product":"Ivanti Cloud Services Appliance (CSA)"},{"id":"CVE-2024-23113","type":"cve","title":"CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability","date":"2024-10-09","url":"https://erroneo.us/security/cve/CVE-2024-23113/","md":"https://erroneo.us/security/cve/CVE-2024-23113/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.61725,"verdict":null,"product":"Fortinet Multiple Products"},{"id":"2024-10-09","type":"digest","title":"Security digest for October 9, 2024","date":"2024-10-09","url":"https://erroneo.us/security/2024-10-09/","md":"https://erroneo.us/security/2024-10-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2024-43573","type":"cve","title":"CVE-2024-43573: Microsoft Windows MSHTML Platform Spoofing Vulnerability","date":"2024-10-08","url":"https://erroneo.us/security/cve/CVE-2024-43573/","md":"https://erroneo.us/security/cve/CVE-2024-43573/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.46109,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-43572","type":"cve","title":"CVE-2024-43572: Microsoft Windows Management Console Remote Code Execution Vulnerability","date":"2024-10-08","url":"https://erroneo.us/security/cve/CVE-2024-43572/","md":"https://erroneo.us/security/cve/CVE-2024-43572/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.66695,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-43047","type":"cve","title":"CVE-2024-43047: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date":"2024-10-08","url":"https://erroneo.us/security/cve/CVE-2024-43047/","md":"https://erroneo.us/security/cve/CVE-2024-43047/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00668,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"2024-10-08","type":"digest","title":"Security digest for October 8, 2024","date":"2024-10-08","url":"https://erroneo.us/security/2024-10-08/","md":"https://erroneo.us/security/2024-10-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2024-47850","type":"cve","title":"CVE-2024-47850: OpenPrinting CUPS, cups-browsed vulnerability","date":"2024-10-04","url":"https://erroneo.us/security/cve/CVE-2024-47850/","md":"https://erroneo.us/security/cve/CVE-2024-47850/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00853,"verdict":"check-exposure","product":"OpenPrinting CUPS, cups-browsed"},{"id":"CVE-2024-47561","type":"cve","title":"CVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)","date":"2024-10-03","url":"https://erroneo.us/security/cve/CVE-2024-47561/","md":"https://erroneo.us/security/cve/CVE-2024-47561/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.03256,"verdict":null,"product":"org.apache.avro:avro (Maven)"},{"id":"CVE-2024-45519","type":"cve","title":"CVE-2024-45519: Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","date":"2024-10-03","url":"https://erroneo.us/security/cve/CVE-2024-45519/","md":"https://erroneo.us/security/cve/CVE-2024-45519/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99907,"verdict":null,"product":"Synacor Zimbra Collaboration Suite (ZCS)"},{"id":"2024-10-03","type":"digest","title":"Security digest for October 3, 2024","date":"2024-10-03","url":"https://erroneo.us/security/2024-10-03/","md":"https://erroneo.us/security/2024-10-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-47807","type":"cve","title":"CVE-2024-47807: Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation","date":"2024-10-02","url":"https://erroneo.us/security/cve/CVE-2024-47807/","md":"https://erroneo.us/security/cve/CVE-2024-47807/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00632,"verdict":null,"product":"org.jenkins-ci.plugins:oic-auth (Maven)"},{"id":"CVE-2024-47806","type":"cve","title":"CVE-2024-47806: Jenkins OpenId Connect Authentication Plugin lacks audience claim validation","date":"2024-10-02","url":"https://erroneo.us/security/cve/CVE-2024-47806/","md":"https://erroneo.us/security/cve/CVE-2024-47806/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00632,"verdict":null,"product":"org.jenkins-ci.plugins:oic-auth (Maven)"},{"id":"CVE-2024-29824","type":"cve","title":"CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","date":"2024-10-02","url":"https://erroneo.us/security/cve/CVE-2024-29824/","md":"https://erroneo.us/security/cve/CVE-2024-29824/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.99938,"verdict":null,"product":"Ivanti Endpoint Manager (EPM)"},{"id":"2024-10-02","type":"digest","title":"Security digest for October 2, 2024","date":"2024-10-02","url":"https://erroneo.us/security/2024-10-02/","md":"https://erroneo.us/security/2024-10-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2023-25280","type":"cve","title":"CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability","date":"2024-09-30","url":"https://erroneo.us/security/cve/CVE-2023-25280/","md":"https://erroneo.us/security/cve/CVE-2023-25280/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97864,"verdict":null,"product":"D-Link DIR-820 Router"},{"id":"CVE-2020-15415","type":"cve","title":"CVE-2020-15415: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","date":"2024-09-30","url":"https://erroneo.us/security/cve/CVE-2020-15415/","md":"https://erroneo.us/security/cve/CVE-2020-15415/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.8448,"verdict":null,"product":"DrayTek Multiple Vigor Routers"},{"id":"CVE-2019-0344","type":"cve","title":"CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","date":"2024-09-30","url":"https://erroneo.us/security/cve/CVE-2019-0344/","md":"https://erroneo.us/security/cve/CVE-2019-0344/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.07079,"verdict":null,"product":"SAP Commerce Cloud"},{"id":"2024-09-30","type":"digest","title":"Security digest for September 30, 2024","date":"2024-09-30","url":"https://erroneo.us/security/2024-09-30/","md":"https://erroneo.us/security/2024-09-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"cups-browsed-rce-chain-cve-2024-47176","type":"brief","title":"CUPS cups-browsed RCE Chain: Real, but Needs a Print Job","date":"2024-09-26","url":"https://erroneo.us/security/briefs/cups-browsed-rce-chain-cve-2024-47176/","md":"https://erroneo.us/security/briefs/cups-browsed-rce-chain-cve-2024-47176/index.md","severity":"high","kev":false,"epss":0.79896,"verdict":"check-exposure","cves":["CVE-2024-47176","CVE-2024-47076","CVE-2024-47175","CVE-2024-47850"],"summary":"Not the internet-ending bug the pre-disclosure hype suggested: code runs only when someone prints to the rogue printer, as the unprivileged lp user; but nothing should expose UDP 631 to the internet, and exposed hosts can be abused for DDoS."},{"id":"CVE-2024-47176","type":"cve","title":"CVE-2024-47176: cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source","date":"2024-09-26","url":"https://erroneo.us/security/cve/CVE-2024-47176/","md":"https://erroneo.us/security/cve/CVE-2024-47176/index.md","severity":"medium","cvss":5.3,"kev":false,"epss":0.50605,"verdict":"check-exposure","product":"OpenPrinting cups-browsed"},{"id":"CVE-2024-47175","type":"cve","title":"CVE-2024-47175: libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer","date":"2024-09-26","url":"https://erroneo.us/security/cve/CVE-2024-47175/","md":"https://erroneo.us/security/cve/CVE-2024-47175/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.63607,"verdict":"check-exposure","product":"OpenPrinting libppd"},{"id":"CVE-2024-47169","type":"cve","title":"CVE-2024-47169: Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal","date":"2024-09-26","url":"https://erroneo.us/security/cve/CVE-2024-47169/","md":"https://erroneo.us/security/cve/CVE-2024-47169/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":0.00785,"verdict":null,"product":"agnai (npm)"},{"id":"CVE-2024-47076","type":"cve","title":"CVE-2024-47076: libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server","date":"2024-09-26","url":"https://erroneo.us/security/cve/CVE-2024-47076/","md":"https://erroneo.us/security/cve/CVE-2024-47076/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.79896,"verdict":"check-exposure","product":"OpenPrinting libcupsfilters"},{"id":"2024-09-26","type":"digest","title":"Security digest for September 26, 2024","date":"2024-09-26","url":"https://erroneo.us/security/2024-09-26/","md":"https://erroneo.us/security/2024-09-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2024-1728","type":"cve","title":"CVE-2024-1728: Gradio allows users to access arbitrary files","date":"2024-09-25","url":"https://erroneo.us/security/cve/CVE-2024-1728/","md":"https://erroneo.us/security/cve/CVE-2024-1728/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.85393,"verdict":null,"product":"gradio (PyPI)"},{"id":"2024-09-25","type":"digest","title":"Security digest for September 25, 2024","date":"2024-09-25","url":"https://erroneo.us/security/2024-09-25/","md":"https://erroneo.us/security/2024-09-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-7593","type":"cve","title":"CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","date":"2024-09-24","url":"https://erroneo.us/security/cve/CVE-2024-7593/","md":"https://erroneo.us/security/cve/CVE-2024-7593/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99999,"verdict":null,"product":"Ivanti Virtual Traffic Manager"},{"id":"CVE-2024-46957","type":"cve","title":"CVE-2024-46957: Mellium allows Authentication Bypass by Spoofing","date":"2024-09-24","url":"https://erroneo.us/security/cve/CVE-2024-46957/","md":"https://erroneo.us/security/cve/CVE-2024-46957/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00612,"verdict":null,"product":"mellium.im/xmpp (Go)"},{"id":"2024-09-24","type":"digest","title":"Security digest for September 24, 2024","date":"2024-09-24","url":"https://erroneo.us/security/2024-09-24/","md":"https://erroneo.us/security/2024-09-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-46997","type":"cve","title":"CVE-2024-46997: DataEase's H2 datasource has a remote command execution risk","date":"2024-09-23","url":"https://erroneo.us/security/cve/CVE-2024-46997/","md":"https://erroneo.us/security/cve/CVE-2024-46997/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01442,"verdict":null,"product":"io.dataease:common (Maven)"},{"id":"2024-09-23","type":"digest","title":"Security digest for September 23, 2024","date":"2024-09-23","url":"https://erroneo.us/security/2024-09-23/","md":"https://erroneo.us/security/2024-09-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-47062","type":"cve","title":"CVE-2024-47062: Navidrome has Multiple SQL Injections and ORM Leak","date":"2024-09-20","url":"https://erroneo.us/security/cve/CVE-2024-47062/","md":"https://erroneo.us/security/cve/CVE-2024-47062/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.04457,"verdict":null,"product":"github.com/navidrome/navidrome (Go)"},{"id":"2024-09-20","type":"digest","title":"Security digest for September 20, 2024","date":"2024-09-20","url":"https://erroneo.us/security/2024-09-20/","md":"https://erroneo.us/security/2024-09-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-8986","type":"cve","title":"CVE-2024-8986: Grafana plugin SDK Information Leakage","date":"2024-09-19","url":"https://erroneo.us/security/cve/CVE-2024-8986/","md":"https://erroneo.us/security/cve/CVE-2024-8986/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00519,"verdict":null,"product":"github.com/grafana/grafana-plugin-sdk-go (Go)"},{"id":"CVE-2024-8963","type":"cve","title":"CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","date":"2024-09-19","url":"https://erroneo.us/security/cve/CVE-2024-8963/","md":"https://erroneo.us/security/cve/CVE-2024-8963/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.98607,"verdict":null,"product":"Ivanti Cloud Services Appliance (CSA)"},{"id":"CVE-2024-45410","type":"cve","title":"CVE-2024-45410: HTTP client can manipulate custom HTTP headers that are added by Traefik","date":"2024-09-19","url":"https://erroneo.us/security/cve/CVE-2024-45410/","md":"https://erroneo.us/security/cve/CVE-2024-45410/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01513,"verdict":null,"product":"github.com/traefik/traefik/v3 (Go)"},{"id":"CVE-2023-27584","type":"cve","title":"CVE-2023-27584: Dragonfly2 has hard coded cyptographic key","date":"2024-09-19","url":"https://erroneo.us/security/cve/CVE-2023-27584/","md":"https://erroneo.us/security/cve/CVE-2023-27584/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.33874,"verdict":null,"product":"d7y.io/dragonfly/v2 (Go)"},{"id":"2024-09-19","type":"digest","title":"Security digest for September 19, 2024","date":"2024-09-19","url":"https://erroneo.us/security/2024-09-19/","md":"https://erroneo.us/security/2024-09-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2024-46946","type":"cve","title":"CVE-2024-46946: LangChain Experimental Eval Injection vulnerability","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2024-46946/","md":"https://erroneo.us/security/cve/CVE-2024-46946/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01387,"verdict":null,"product":"langchain-experimental (PyPI)"},{"id":"CVE-2024-27348","type":"cve","title":"CVE-2024-27348: Apache HugeGraph-Server Improper Access Control Vulnerability","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2024-27348/","md":"https://erroneo.us/security/cve/CVE-2024-27348/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.9921,"verdict":null,"product":"Apache HugeGraph-Server"},{"id":"CVE-2023-47105","type":"cve","title":"CVE-2023-47105: Chaosblade vulnerable to OS command execution","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2023-47105/","md":"https://erroneo.us/security/cve/CVE-2023-47105/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01669,"verdict":null,"product":"github.com/chaosblade-io/chaosblade (Go)"},{"id":"CVE-2022-21445","type":"cve","title":"CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2022-21445/","md":"https://erroneo.us/security/cve/CVE-2022-21445/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.62478,"verdict":null,"product":"Oracle ADF Faces"},{"id":"CVE-2020-14644","type":"cve","title":"CVE-2020-14644: Oracle WebLogic Server Remote Code Execution Vulnerability","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2020-14644/","md":"https://erroneo.us/security/cve/CVE-2020-14644/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.94548,"verdict":null,"product":"Oracle WebLogic Server"},{"id":"CVE-2020-0618","type":"cve","title":"CVE-2020-0618: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","date":"2024-09-18","url":"https://erroneo.us/security/cve/CVE-2020-0618/","md":"https://erroneo.us/security/cve/CVE-2020-0618/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99046,"verdict":null,"product":"Microsoft SQL Server"},{"id":"2024-09-18","type":"digest","title":"Security digest for September 18, 2024","date":"2024-09-18","url":"https://erroneo.us/security/2024-09-18/","md":"https://erroneo.us/security/2024-09-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":2}},{"id":"GHSA-2gh6-wc3m-g37f","type":"ghsa","title":"hermes-management is vulnerable to RCE due to Apache commons-jxpath","date":"2024-09-17","url":"https://erroneo.us/security/ghsa/GHSA-2gh6-wc3m-g37f/","md":"https://erroneo.us/security/ghsa/GHSA-2gh6-wc3m-g37f/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"pl.allegro.tech.hermes:hermes-management"},{"id":"CVE-2014-0502","type":"cve","title":"CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity","date":"2024-09-17","url":"https://erroneo.us/security/cve/CVE-2014-0502/","md":"https://erroneo.us/security/cve/CVE-2014-0502/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.24817,"verdict":null,"product":"Adobe Flash Player"},{"id":"CVE-2014-0497","type":"cve","title":"CVE-2014-0497: Adobe Flash Player Integer Underflow Vulnerablity","date":"2024-09-17","url":"https://erroneo.us/security/cve/CVE-2014-0497/","md":"https://erroneo.us/security/cve/CVE-2014-0497/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.99879,"verdict":null,"product":"Adobe Flash Player"},{"id":"CVE-2013-0648","type":"cve","title":"CVE-2013-0648: Adobe Flash Player Code Execution Vulnerability","date":"2024-09-17","url":"https://erroneo.us/security/cve/CVE-2013-0648/","md":"https://erroneo.us/security/cve/CVE-2013-0648/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.11094,"verdict":null,"product":"Adobe Flash Player"},{"id":"CVE-2013-0643","type":"cve","title":"CVE-2013-0643: Adobe Flash Player Incorrect Default Permissions Vulnerability","date":"2024-09-17","url":"https://erroneo.us/security/cve/CVE-2013-0643/","md":"https://erroneo.us/security/cve/CVE-2013-0643/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.10533,"verdict":null,"product":"Adobe Flash Player"},{"id":"2024-09-17","type":"digest","title":"Security digest for September 17, 2024","date":"2024-09-17","url":"https://erroneo.us/security/2024-09-17/","md":"https://erroneo.us/security/2024-09-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2024-6670","type":"cve","title":"CVE-2024-6670: Progress WhatsUp Gold SQL Injection Vulnerability","date":"2024-09-16","url":"https://erroneo.us/security/cve/CVE-2024-6670/","md":"https://erroneo.us/security/cve/CVE-2024-6670/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.93,"verdict":null,"product":"Progress WhatsUp Gold"},{"id":"CVE-2024-43461","type":"cve","title":"CVE-2024-43461: Microsoft Windows MSHTML Platform Spoofing Vulnerability","date":"2024-09-16","url":"https://erroneo.us/security/cve/CVE-2024-43461/","md":"https://erroneo.us/security/cve/CVE-2024-43461/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.54486,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-22399","type":"cve","title":"CVE-2024-22399: Apache Seata Deserialization of Untrusted Data vulnerability","date":"2024-09-16","url":"https://erroneo.us/security/cve/CVE-2024-22399/","md":"https://erroneo.us/security/cve/CVE-2024-22399/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.03286,"verdict":null,"product":"org.apache.seata:seata-core (Maven)"},{"id":"2024-09-16","type":"digest","title":"Security digest for September 16, 2024","date":"2024-09-16","url":"https://erroneo.us/security/2024-09-16/","md":"https://erroneo.us/security/2024-09-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-8190","type":"cve","title":"CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerability","date":"2024-09-13","url":"https://erroneo.us/security/cve/CVE-2024-8190/","md":"https://erroneo.us/security/cve/CVE-2024-8190/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.88535,"verdict":null,"product":"Ivanti Cloud Services Appliance"},{"id":"2024-09-13","type":"digest","title":"Security digest for September 13, 2024","date":"2024-09-13","url":"https://erroneo.us/security/2024-09-13/","md":"https://erroneo.us/security/2024-09-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-cvp8-5r8g-fhvq","type":"ghsa","title":"omniauth-saml vulnerable to Improper Verification of Cryptographic Signature","date":"2024-09-11","url":"https://erroneo.us/security/ghsa/GHSA-cvp8-5r8g-fhvq/","md":"https://erroneo.us/security/ghsa/GHSA-cvp8-5r8g-fhvq/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"omniauth-saml, omniauth-saml"},{"id":"CVE-2024-6091","type":"cve","title":"CVE-2024-6091: AutoGPT bypass of the shell commands denylist settings","date":"2024-09-11","url":"https://erroneo.us/security/cve/CVE-2024-6091/","md":"https://erroneo.us/security/cve/CVE-2024-6091/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00819,"verdict":null,"product":"agpt (PyPI)"},{"id":"2024-09-11","type":"digest","title":"Security digest for September 11, 2024","date":"2024-09-11","url":"https://erroneo.us/security/2024-09-11/","md":"https://erroneo.us/security/2024-09-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-45409","type":"cve","title":"CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector","date":"2024-09-10","url":"https://erroneo.us/security/cve/CVE-2024-45409/","md":"https://erroneo.us/security/cve/CVE-2024-45409/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.10684,"verdict":null,"product":"ruby-saml (RubyGems)"},{"id":"CVE-2024-38226","type":"cve","title":"CVE-2024-38226: Microsoft Publisher Protection Mechanism Failure Vulnerability","date":"2024-09-10","url":"https://erroneo.us/security/cve/CVE-2024-38226/","md":"https://erroneo.us/security/cve/CVE-2024-38226/index.md","severity":"high","cvss":7.3,"kev":true,"epss":0.02667,"verdict":null,"product":"Microsoft Publisher"},{"id":"CVE-2024-38217","type":"cve","title":"CVE-2024-38217: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","date":"2024-09-10","url":"https://erroneo.us/security/cve/CVE-2024-38217/","md":"https://erroneo.us/security/cve/CVE-2024-38217/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.10026,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38014","type":"cve","title":"CVE-2024-38014: Microsoft Windows Installer Improper Privilege Management Vulnerability","date":"2024-09-10","url":"https://erroneo.us/security/cve/CVE-2024-38014/","md":"https://erroneo.us/security/cve/CVE-2024-38014/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.06263,"verdict":null,"product":"Microsoft Windows"},{"id":"2024-09-10","type":"digest","title":"Security digest for September 10, 2024","date":"2024-09-10","url":"https://erroneo.us/security/2024-09-10/","md":"https://erroneo.us/security/2024-09-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2024-44902","type":"cve","title":"CVE-2024-44902: ThinkPHP deserialization vulnerability","date":"2024-09-09","url":"https://erroneo.us/security/cve/CVE-2024-44902/","md":"https://erroneo.us/security/cve/CVE-2024-44902/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.04208,"verdict":null,"product":"topthink/framework (Composer (PHP))"},{"id":"CVE-2024-40766","type":"cve","title":"CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability","date":"2024-09-09","url":"https://erroneo.us/security/cve/CVE-2024-40766/","md":"https://erroneo.us/security/cve/CVE-2024-40766/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.18379,"verdict":null,"product":"SonicWall SonicOS"},{"id":"CVE-2024-39205","type":"cve","title":"CVE-2024-39205: pyload-ng vulnerable to RCE with js2py sandbox escape","date":"2024-09-09","url":"https://erroneo.us/security/cve/CVE-2024-39205/","md":"https://erroneo.us/security/cve/CVE-2024-39205/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.16538,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2017-1000253","type":"cve","title":"CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability ","date":"2024-09-09","url":"https://erroneo.us/security/cve/CVE-2017-1000253/","md":"https://erroneo.us/security/cve/CVE-2017-1000253/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.10695,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2016-3714","type":"cve","title":"CVE-2016-3714: ImageMagick Improper Input Validation Vulnerability","date":"2024-09-09","url":"https://erroneo.us/security/cve/CVE-2016-3714/","md":"https://erroneo.us/security/cve/CVE-2016-3714/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.97485,"verdict":null,"product":"ImageMagick ImageMagick"},{"id":"2024-09-09","type":"digest","title":"Security digest for September 9, 2024","date":"2024-09-09","url":"https://erroneo.us/security/2024-09-09/","md":"https://erroneo.us/security/2024-09-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2024-45758","type":"cve","title":"CVE-2024-45758: H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL","date":"2024-09-06","url":"https://erroneo.us/security/cve/CVE-2024-45758/","md":"https://erroneo.us/security/cve/CVE-2024-45758/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00906,"verdict":null,"product":"ai.h2o:h2o-core (Maven)"},{"id":"2024-09-06","type":"digest","title":"Security digest for September 6, 2024","date":"2024-09-06","url":"https://erroneo.us/security/2024-09-06/","md":"https://erroneo.us/security/2024-09-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"veeam-backup-replication-rce-cve-2024-40711","type":"brief","title":"Veeam Backup & Replication RCE (CVE-2024-40711)","date":"2024-09-04","url":"https://erroneo.us/security/briefs/veeam-backup-replication-rce-cve-2024-40711/","md":"https://erroneo.us/security/briefs/veeam-backup-replication-rce-cve-2024-40711/index.md","severity":"critical","kev":true,"epss":0.90369,"verdict":"act-now","cves":["CVE-2024-40711"],"summary":"Ransomware crews have used this to take over backup servers; any Veeam Backup & Replication v12 server below 12.2 is an emergency, and backup servers should never be reachable from user or internet networks."},{"id":"2024-09-04","type":"digest","title":"Security digest for September 4, 2024","date":"2024-09-04","url":"https://erroneo.us/security/2024-09-04/","md":"https://erroneo.us/security/2024-09-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2024-7262","type":"cve","title":"CVE-2024-7262: Kingsoft WPS Office Path Traversal Vulnerability","date":"2024-09-03","url":"https://erroneo.us/security/cve/CVE-2024-7262/","md":"https://erroneo.us/security/cve/CVE-2024-7262/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.02937,"verdict":null,"product":"Kingsoft WPS Office"},{"id":"CVE-2021-20124","type":"cve","title":"CVE-2021-20124: Draytek VigorConnect Path Traversal Vulnerability ","date":"2024-09-03","url":"https://erroneo.us/security/cve/CVE-2021-20124/","md":"https://erroneo.us/security/cve/CVE-2021-20124/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.96308,"verdict":null,"product":"DrayTek VigorConnect"},{"id":"CVE-2021-20123","type":"cve","title":"CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability ","date":"2024-09-03","url":"https://erroneo.us/security/cve/CVE-2021-20123/","md":"https://erroneo.us/security/cve/CVE-2021-20123/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.90234,"verdict":null,"product":"DrayTek VigorConnect"},{"id":"2024-09-03","type":"digest","title":"Security digest for September 3, 2024","date":"2024-09-03","url":"https://erroneo.us/security/2024-09-03/","md":"https://erroneo.us/security/2024-09-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2024-7965","type":"cve","title":"CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability","date":"2024-08-28","url":"https://erroneo.us/security/cve/CVE-2024-7965/","md":"https://erroneo.us/security/cve/CVE-2024-7965/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.18528,"verdict":null,"product":"Google Chromium V8"},{"id":"2024-08-28","type":"digest","title":"Security digest for August 28, 2024","date":"2024-08-28","url":"https://erroneo.us/security/2024-08-28/","md":"https://erroneo.us/security/2024-08-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-38856","type":"cve","title":"CVE-2024-38856: Apache OFBiz Incorrect Authorization Vulnerability","date":"2024-08-27","url":"https://erroneo.us/security/cve/CVE-2024-38856/","md":"https://erroneo.us/security/cve/CVE-2024-38856/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.99427,"verdict":"act-now","product":"Apache OFBiz"},{"id":"2024-08-27","type":"digest","title":"Security digest for August 27, 2024","date":"2024-08-27","url":"https://erroneo.us/security/2024-08-27/","md":"https://erroneo.us/security/2024-08-27/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-7971","type":"cve","title":"CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability","date":"2024-08-26","url":"https://erroneo.us/security/cve/CVE-2024-7971/","md":"https://erroneo.us/security/cve/CVE-2024-7971/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.21103,"verdict":null,"product":"Google Chromium V8"},{"id":"2024-08-26","type":"digest","title":"Security digest for August 26, 2024","date":"2024-08-26","url":"https://erroneo.us/security/2024-08-26/","md":"https://erroneo.us/security/2024-08-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-39717","type":"cve","title":"CVE-2024-39717: Versa Director Dangerous File Type Upload Vulnerability","date":"2024-08-23","url":"https://erroneo.us/security/cve/CVE-2024-39717/","md":"https://erroneo.us/security/cve/CVE-2024-39717/index.md","severity":"medium","cvss":6.6,"kev":true,"epss":0.04006,"verdict":null,"product":"Versa Director"},{"id":"2024-08-23","type":"digest","title":"Security digest for August 23, 2024","date":"2024-08-23","url":"https://erroneo.us/security/2024-08-23/","md":"https://erroneo.us/security/2024-08-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-45201","type":"cve","title":"CVE-2024-45201: LlamaIndex includes an exec call for `import {cls_name}`","date":"2024-08-22","url":"https://erroneo.us/security/cve/CVE-2024-45201/","md":"https://erroneo.us/security/cve/CVE-2024-45201/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00533,"verdict":null,"product":"llama-index-core (PyPI)"},{"id":"CVE-2024-42490","type":"cve","title":"CVE-2024-42490: GoAuthentik vulnerable to Insufficient Authorization for several API endpoints","date":"2024-08-22","url":"https://erroneo.us/security/cve/CVE-2024-42490/","md":"https://erroneo.us/security/cve/CVE-2024-42490/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00477,"verdict":null,"product":"goauthentik.io (Go)"},{"id":"2024-08-22","type":"digest","title":"Security digest for August 22, 2024","date":"2024-08-22","url":"https://erroneo.us/security/2024-08-22/","md":"https://erroneo.us/security/2024-08-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2022-0185","type":"cve","title":"CVE-2022-0185: Linux Kernel Heap-Based Buffer Overflow Vulnerability","date":"2024-08-21","url":"https://erroneo.us/security/cve/CVE-2022-0185/","md":"https://erroneo.us/security/cve/CVE-2022-0185/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.25151,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2021-33045","type":"cve","title":"CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability","date":"2024-08-21","url":"https://erroneo.us/security/cve/CVE-2021-33045/","md":"https://erroneo.us/security/cve/CVE-2021-33045/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99593,"verdict":null,"product":"Dahua IP Camera Firmware"},{"id":"CVE-2021-33044","type":"cve","title":"CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability","date":"2024-08-21","url":"https://erroneo.us/security/cve/CVE-2021-33044/","md":"https://erroneo.us/security/cve/CVE-2021-33044/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99989,"verdict":null,"product":"Dahua IP Camera Firmware"},{"id":"CVE-2021-31196","type":"cve","title":"CVE-2021-31196: Microsoft Exchange Server Information Disclosure Vulnerability","date":"2024-08-21","url":"https://erroneo.us/security/cve/CVE-2021-31196/","md":"https://erroneo.us/security/cve/CVE-2021-31196/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.54056,"verdict":null,"product":"Microsoft Exchange Server"},{"id":"2024-08-21","type":"digest","title":"Security digest for August 21, 2024","date":"2024-08-21","url":"https://erroneo.us/security/2024-08-21/","md":"https://erroneo.us/security/2024-08-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":0}},{"id":"CVE-2024-43202","type":"cve","title":"CVE-2024-43202: Apache Dolphinscheduler Code Injection vulnerability","date":"2024-08-20","url":"https://erroneo.us/security/cve/CVE-2024-43202/","md":"https://erroneo.us/security/cve/CVE-2024-43202/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02149,"verdict":null,"product":"org.apache.dolphinscheduler:dolphinscheduler-task-api (Maven)"},{"id":"2024-08-20","type":"digest","title":"Security digest for August 20, 2024","date":"2024-08-20","url":"https://erroneo.us/security/2024-08-20/","md":"https://erroneo.us/security/2024-08-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-43401","type":"cve","title":"CVE-2024-43401: In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them","date":"2024-08-19","url":"https://erroneo.us/security/cve/CVE-2024-43401/","md":"https://erroneo.us/security/cve/CVE-2024-43401/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00677,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2024-43400","type":"cve","title":"CVE-2024-43400: XWiki Platform allows XSS through XClass name in string properties","date":"2024-08-19","url":"https://erroneo.us/security/cve/CVE-2024-43400/","md":"https://erroneo.us/security/cve/CVE-2024-43400/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00488,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"CVE-2024-23897","type":"cve","title":"CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","date":"2024-08-19","url":"https://erroneo.us/security/cve/CVE-2024-23897/","md":"https://erroneo.us/security/cve/CVE-2024-23897/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Jenkins Jenkins Command Line Interface (CLI)"},{"id":"2024-08-19","type":"digest","title":"Security digest for August 19, 2024","date":"2024-08-19","url":"https://erroneo.us/security/2024-08-19/","md":"https://erroneo.us/security/2024-08-19/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-32231","type":"cve","title":"CVE-2024-32231: SQL injection in github.com/stashapp/stash","date":"2024-08-15","url":"https://erroneo.us/security/cve/CVE-2024-32231/","md":"https://erroneo.us/security/cve/CVE-2024-32231/index.md","severity":"medium","cvss":6.3,"kev":false,"epss":0.0117,"verdict":null,"product":"github.com/stashapp/stash (Go)"},{"id":"CVE-2024-28986","type":"cve","title":"CVE-2024-28986: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","date":"2024-08-15","url":"https://erroneo.us/security/cve/CVE-2024-28986/","md":"https://erroneo.us/security/cve/CVE-2024-28986/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.84628,"verdict":null,"product":"SolarWinds Web Help Desk"},{"id":"2024-08-15","type":"digest","title":"Security digest for August 15, 2024","date":"2024-08-15","url":"https://erroneo.us/security/2024-08-15/","md":"https://erroneo.us/security/2024-08-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"windows-tcpip-ipv6-rce-cve-2024-38063","type":"brief","title":"Windows TCP/IP IPv6 Remote Code Execution (CVE-2024-38063)","date":"2024-08-13","url":"https://erroneo.us/security/briefs/windows-tcpip-ipv6-rce-cve-2024-38063/","md":"https://erroneo.us/security/briefs/windows-tcpip-ipv6-rce-cve-2024-38063/index.md","severity":"critical","kev":false,"epss":0.70564,"verdict":"patch-this-week","cves":["CVE-2024-38063"],"summary":"Serious on paper and worth patching promptly, but there is no known in-the-wild exploitation, public code is a flaky crash-oriented proof of concept, and any machine on August 2024 or later cumulative updates is already fixed."},{"id":"CVE-2024-42360","type":"cve","title":"CVE-2024-42360: Command Injection in sequenceserver","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-42360/","md":"https://erroneo.us/security/cve/CVE-2024-42360/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00584,"verdict":null,"product":"sequenceserver (RubyGems)"},{"id":"CVE-2024-38213","type":"cve","title":"CVE-2024-38213: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38213/","md":"https://erroneo.us/security/cve/CVE-2024-38213/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.13626,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38193","type":"cve","title":"CVE-2024-38193: Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38193/","md":"https://erroneo.us/security/cve/CVE-2024-38193/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.28739,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38189","type":"cve","title":"CVE-2024-38189: Microsoft Project Remote Code Execution Vulnerability ","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38189/","md":"https://erroneo.us/security/cve/CVE-2024-38189/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.08194,"verdict":null,"product":"Microsoft Project"},{"id":"CVE-2024-38178","type":"cve","title":"CVE-2024-38178: Microsoft Windows Scripting Engine Memory Corruption Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38178/","md":"https://erroneo.us/security/cve/CVE-2024-38178/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.4138,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38107","type":"cve","title":"CVE-2024-38107: Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38107/","md":"https://erroneo.us/security/cve/CVE-2024-38107/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01635,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38106","type":"cve","title":"CVE-2024-38106: Microsoft Windows Kernel Privilege Escalation Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38106/","md":"https://erroneo.us/security/cve/CVE-2024-38106/index.md","severity":"high","cvss":7,"kev":true,"epss":0.06337,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38063","type":"cve","title":"CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability","date":"2024-08-13","url":"https://erroneo.us/security/cve/CVE-2024-38063/","md":"https://erroneo.us/security/cve/CVE-2024-38063/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.70564,"verdict":"patch-this-week","product":"Microsoft Windows 10 Version 1809"},{"id":"2024-08-13","type":"digest","title":"Security digest for August 13, 2024","date":"2024-08-13","url":"https://erroneo.us/security/2024-08-13/","md":"https://erroneo.us/security/2024-08-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":6,"critical":1}},{"id":"CVE-2024-42480","type":"cve","title":"CVE-2024-42480: RBAC Roles for `etcd` created by Kamaji are not disjunct","date":"2024-08-12","url":"https://erroneo.us/security/cve/CVE-2024-42480/","md":"https://erroneo.us/security/cve/CVE-2024-42480/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00622,"verdict":null,"product":"github.com/clastix/kamaji (Go)"},{"id":"CVE-2024-38989","type":"cve","title":"CVE-2024-38989: Prototype pollution in izatop bunt","date":"2024-08-12","url":"https://erroneo.us/security/cve/CVE-2024-38989/","md":"https://erroneo.us/security/cve/CVE-2024-38989/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01104,"verdict":null,"product":"@bunt/app (npm)"},{"id":"2024-08-12","type":"digest","title":"Security digest for August 12, 2024","date":"2024-08-12","url":"https://erroneo.us/security/2024-08-12/","md":"https://erroneo.us/security/2024-08-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-42469","type":"cve","title":"CVE-2024-42469: CometVisu Backend for openHAB affected by RCE through path traversal","date":"2024-08-09","url":"https://erroneo.us/security/cve/CVE-2024-42469/","md":"https://erroneo.us/security/cve/CVE-2024-42469/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01211,"verdict":null,"product":"org.openhab.ui.bundles:org.openhab.ui.cometvisu (Maven)"},{"id":"2024-08-09","type":"digest","title":"Security digest for August 9, 2024","date":"2024-08-09","url":"https://erroneo.us/security/2024-08-09/","md":"https://erroneo.us/security/2024-08-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-42005","type":"cve","title":"CVE-2024-42005: Django SQL injection vulnerability","date":"2024-08-07","url":"https://erroneo.us/security/cve/CVE-2024-42005/","md":"https://erroneo.us/security/cve/CVE-2024-42005/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01503,"verdict":null,"product":"Django (PyPI)"},{"id":"CVE-2024-36971","type":"cve","title":"CVE-2024-36971: Android Kernel Remote Code Execution Vulnerability","date":"2024-08-07","url":"https://erroneo.us/security/cve/CVE-2024-36971/","md":"https://erroneo.us/security/cve/CVE-2024-36971/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.02701,"verdict":null,"product":"Android Kernel"},{"id":"CVE-2024-32113","type":"cve","title":"CVE-2024-32113: Apache OFBiz Path Traversal Vulnerability","date":"2024-08-07","url":"https://erroneo.us/security/cve/CVE-2024-32113/","md":"https://erroneo.us/security/cve/CVE-2024-32113/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.99919,"verdict":null,"product":"Apache OFBiz"},{"id":"2024-08-07","type":"digest","title":"Security digest for August 7, 2024","date":"2024-08-07","url":"https://erroneo.us/security/2024-08-07/","md":"https://erroneo.us/security/2024-08-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"apache-ofbiz-pre-auth-rce-cve-2024-38856","type":"brief","title":"Apache OFBiz: Unauthenticated RCE (CVE-2024-38856)","date":"2024-08-05","url":"https://erroneo.us/security/briefs/apache-ofbiz-pre-auth-rce-cve-2024-38856/","md":"https://erroneo.us/security/briefs/apache-ofbiz-pre-auth-rce-cve-2024-38856/index.md","severity":"critical","kev":true,"epss":0.99427,"verdict":"act-now","cves":["CVE-2024-38856"],"summary":"Any internet-reachable OFBiz older than 18.12.16 should be treated as compromised-until-proven-otherwise and upgraded immediately; this bug class has been exploited repeatedly."},{"id":"CVE-2024-6886","type":"cve","title":"CVE-2024-6886: Gitea Cross-site Scripting Vulnerability","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2024-6886/","md":"https://erroneo.us/security/cve/CVE-2024-6886/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.32968,"verdict":null,"product":"code.gitea.io/gitea (Go)"},{"id":"CVE-2024-34344","type":"cve","title":"CVE-2024-34344: Nuxt vulnerable to remote code execution via the browser when running the test locally","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2024-34344/","md":"https://erroneo.us/security/cve/CVE-2024-34344/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00828,"verdict":null,"product":"nuxt (npm)"},{"id":"CVE-2023-49785","type":"cve","title":"CVE-2023-49785: NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2023-49785/","md":"https://erroneo.us/security/cve/CVE-2023-49785/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.83163,"verdict":null,"product":"nextchat (npm)"},{"id":"CVE-2023-45146","type":"cve","title":"CVE-2023-45146: XXL-RPC Deserialization of Untrusted Data vulnerability","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2023-45146/","md":"https://erroneo.us/security/cve/CVE-2023-45146/index.md","severity":"critical","cvss":9.5,"kev":false,"epss":0.01255,"verdict":null,"product":"com.xuxueli:xxl-rpc-core (Maven)"},{"id":"CVE-2023-42809","type":"cve","title":"CVE-2023-42809: Redisson vulnerable to Deserialization of Untrusted Data","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2023-42809/","md":"https://erroneo.us/security/cve/CVE-2023-42809/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01101,"verdict":null,"product":"org.redisson:redisson (Maven)"},{"id":"CVE-2023-37469","type":"cve","title":"CVE-2023-37469: CasaOS Command Injection vulnerability","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2023-37469/","md":"https://erroneo.us/security/cve/CVE-2023-37469/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0158,"verdict":null,"product":"github.com/IceWhaleTech/CasaOS (Go)"},{"id":"CVE-2023-30625","type":"cve","title":"CVE-2023-30625: rudder-server is vulnerable to SQL injection","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2023-30625/","md":"https://erroneo.us/security/cve/CVE-2023-30625/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.85825,"verdict":null,"product":"github.com/rudderlabs/rudder-server (Go)"},{"id":"CVE-2018-0824","type":"cve","title":"CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","date":"2024-08-05","url":"https://erroneo.us/security/cve/CVE-2018-0824/","md":"https://erroneo.us/security/cve/CVE-2018-0824/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.73037,"verdict":null,"product":"Microsoft Windows"},{"id":"2024-08-05","type":"digest","title":"Security digest for August 5, 2024","date":"2024-08-05","url":"https://erroneo.us/security/2024-08-05/","md":"https://erroneo.us/security/2024-08-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":7}},{"id":"CVE-2024-39777","type":"cve","title":"CVE-2024-39777: Mattermost allows unsolicited invites to expose access to local channels","date":"2024-08-01","url":"https://erroneo.us/security/cve/CVE-2024-39777/","md":"https://erroneo.us/security/cve/CVE-2024-39777/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00363,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"CVE-2024-39274","type":"cve","title":"CVE-2024-39274: Mattermost failed to properly validate that the channel that comes from the sync message is a shared channel","date":"2024-08-01","url":"https://erroneo.us/security/cve/CVE-2024-39274/","md":"https://erroneo.us/security/cve/CVE-2024-39274/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00341,"verdict":null,"product":"github.com/mattermost/mattermost/server/v8 (Go)"},{"id":"2024-08-01","type":"digest","title":"Security digest for August 1, 2024","date":"2024-08-01","url":"https://erroneo.us/security/2024-08-01/","md":"https://erroneo.us/security/2024-08-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-41947","type":"cve","title":"CVE-2024-41947: XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution","date":"2024-07-31","url":"https://erroneo.us/security/cve/CVE-2024-41947/","md":"https://erroneo.us/security/cve/CVE-2024-41947/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01667,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2024-37901","type":"cve","title":"CVE-2024-37901: XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet","date":"2024-07-31","url":"https://erroneo.us/security/cve/CVE-2024-37901/","md":"https://erroneo.us/security/cve/CVE-2024-37901/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01057,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-search-ui (Maven)"},{"id":"2024-07-31","type":"digest","title":"Security digest for July 31, 2024","date":"2024-07-31","url":"https://erroneo.us/security/2024-07-31/","md":"https://erroneo.us/security/2024-07-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-wm25-j4gw-6vr3","type":"ghsa","title":"pREST vulnerable to jwt bypass + sql injection","date":"2024-07-30","url":"https://erroneo.us/security/ghsa/GHSA-wm25-j4gw-6vr3/","md":"https://erroneo.us/security/ghsa/GHSA-wm25-j4gw-6vr3/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/prest/prest"},{"id":"CVE-2024-41110","type":"cve","title":"CVE-2024-41110: Authz zero length regression","date":"2024-07-30","url":"https://erroneo.us/security/cve/CVE-2024-41110/","md":"https://erroneo.us/security/cve/CVE-2024-41110/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.16496,"verdict":null,"product":"github.com/docker/docker (Go)"},{"id":"CVE-2024-37085","type":"cve","title":"CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability","date":"2024-07-30","url":"https://erroneo.us/security/cve/CVE-2024-37085/","md":"https://erroneo.us/security/cve/CVE-2024-37085/index.md","severity":"medium","cvss":6.8,"kev":true,"epss":0.2677,"verdict":null,"product":"VMware ESXi"},{"id":"2024-07-30","type":"digest","title":"Security digest for July 30, 2024","date":"2024-07-30","url":"https://erroneo.us/security/2024-07-30/","md":"https://erroneo.us/security/2024-07-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-5217","type":"cve","title":"CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability","date":"2024-07-29","url":"https://erroneo.us/security/cve/CVE-2024-5217/","md":"https://erroneo.us/security/cve/CVE-2024-5217/index.md","severity":"critical","cvss":9.2,"kev":true,"epss":0.99628,"verdict":null,"product":"ServiceNow Utah, Vancouver, and Washington DC Now Platform"},{"id":"CVE-2024-4879","type":"cve","title":"CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability","date":"2024-07-29","url":"https://erroneo.us/security/cve/CVE-2024-4879/","md":"https://erroneo.us/security/cve/CVE-2024-4879/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99976,"verdict":null,"product":"ServiceNow Utah, Vancouver, and Washington DC Now Platform"},{"id":"CVE-2024-38529","type":"cve","title":"CVE-2024-38529: Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment","date":"2024-07-29","url":"https://erroneo.us/security/cve/CVE-2024-38529/","md":"https://erroneo.us/security/cve/CVE-2024-38529/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01245,"verdict":null,"product":"admidio/admidio (Composer (PHP))"},{"id":"CVE-2024-37906","type":"cve","title":"CVE-2024-37906: Admidio has Blind SQL Injection in ecard_send.php","date":"2024-07-29","url":"https://erroneo.us/security/cve/CVE-2024-37906/","md":"https://erroneo.us/security/cve/CVE-2024-37906/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00931,"verdict":null,"product":"admidio/admidio (Composer (PHP))"},{"id":"CVE-2023-45249","type":"cve","title":"CVE-2023-45249: Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","date":"2024-07-29","url":"https://erroneo.us/security/cve/CVE-2023-45249/","md":"https://erroneo.us/security/cve/CVE-2023-45249/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.53255,"verdict":null,"product":"Acronis Cyber Infrastructure (ACI)"},{"id":"2024-07-29","type":"digest","title":"Security digest for July 29, 2024","date":"2024-07-29","url":"https://erroneo.us/security/2024-07-29/","md":"https://erroneo.us/security/2024-07-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2024-41637","type":"cve","title":"CVE-2024-41637: RaspAP allows an attacker to escalate privileges","date":"2024-07-28","url":"https://erroneo.us/security/cve/CVE-2024-41637/","md":"https://erroneo.us/security/cve/CVE-2024-41637/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.0081,"verdict":null,"product":"billz/raspap-webgui (Composer (PHP))"},{"id":"2024-07-28","type":"digest","title":"Security digest for July 28, 2024","date":"2024-07-28","url":"https://erroneo.us/security/2024-07-28/","md":"https://erroneo.us/security/2024-07-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-37084","type":"cve","title":"CVE-2024-37084: Remote code execution in Spring Cloud Data Flow","date":"2024-07-25","url":"https://erroneo.us/security/cve/CVE-2024-37084/","md":"https://erroneo.us/security/cve/CVE-2024-37084/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.35211,"verdict":null,"product":"org.springframework.cloud:spring-cloud-skipper (Maven)"},{"id":"2024-07-25","type":"digest","title":"Security digest for July 25, 2024","date":"2024-07-25","url":"https://erroneo.us/security/2024-07-25/","md":"https://erroneo.us/security/2024-07-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-36536","type":"cve","title":"CVE-2024-36536: fabedge has insecure permissions","date":"2024-07-24","url":"https://erroneo.us/security/cve/CVE-2024-36536/","md":"https://erroneo.us/security/cve/CVE-2024-36536/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00476,"verdict":null,"product":"github.com/fabedge/fabedge (Go)"},{"id":"CVE-2024-36533","type":"cve","title":"CVE-2024-36533: Volcano has insecure permissions","date":"2024-07-24","url":"https://erroneo.us/security/cve/CVE-2024-36533/","md":"https://erroneo.us/security/cve/CVE-2024-36533/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00476,"verdict":null,"product":"github.com/volcano-sh/volcano (Go)"},{"id":"2024-07-24","type":"digest","title":"Security digest for July 24, 2024","date":"2024-07-24","url":"https://erroneo.us/security/2024-07-24/","md":"https://erroneo.us/security/2024-07-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-39891","type":"cve","title":"CVE-2024-39891: Twilio Authy Information Disclosure Vulnerability","date":"2024-07-23","url":"https://erroneo.us/security/cve/CVE-2024-39891/","md":"https://erroneo.us/security/cve/CVE-2024-39891/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.01669,"verdict":null,"product":"Twilio Authy"},{"id":"CVE-2012-4792","type":"cve","title":"CVE-2012-4792: Microsoft Internet Explorer Use-After-Free Vulnerability","date":"2024-07-23","url":"https://erroneo.us/security/cve/CVE-2012-4792/","md":"https://erroneo.us/security/cve/CVE-2012-4792/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.78823,"verdict":null,"product":"Microsoft Internet Explorer"},{"id":"2024-07-23","type":"digest","title":"Security digest for July 23, 2024","date":"2024-07-23","url":"https://erroneo.us/security/2024-07-23/","md":"https://erroneo.us/security/2024-07-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2024-28698","type":"cve","title":"CVE-2024-28698: CLSA Directory Traversal vulnerability","date":"2024-07-22","url":"https://erroneo.us/security/cve/CVE-2024-28698/","md":"https://erroneo.us/security/cve/CVE-2024-28698/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01493,"verdict":null,"product":"Csla (NuGet)"},{"id":"2024-07-22","type":"digest","title":"Security digest for July 22, 2024","date":"2024-07-22","url":"https://erroneo.us/security/2024-07-22/","md":"https://erroneo.us/security/2024-07-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-39907","type":"cve","title":"CVE-2024-39907: 1Panel has an SQL injection issue related to the orderBy clause","date":"2024-07-18","url":"https://erroneo.us/security/cve/CVE-2024-39907/","md":"https://erroneo.us/security/cve/CVE-2024-39907/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.29183,"verdict":null,"product":"github.com/1Panel-dev/1Panel (Go)"},{"id":"CVE-2024-35198","type":"cve","title":"CVE-2024-35198: TorchServe vulnerable to bypass of allowed_urls configuration","date":"2024-07-18","url":"https://erroneo.us/security/cve/CVE-2024-35198/","md":"https://erroneo.us/security/cve/CVE-2024-35198/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00799,"verdict":null,"product":"torchserve (PyPI)"},{"id":"2024-07-18","type":"digest","title":"Security digest for July 18, 2024","date":"2024-07-18","url":"https://erroneo.us/security/2024-07-18/","md":"https://erroneo.us/security/2024-07-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-34102","type":"cve","title":"CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","date":"2024-07-17","url":"https://erroneo.us/security/cve/CVE-2024-34102/","md":"https://erroneo.us/security/cve/CVE-2024-34102/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99994,"verdict":null,"product":"Adobe Commerce and Magento Open Source"},{"id":"CVE-2024-28995","type":"cve","title":"CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability ","date":"2024-07-17","url":"https://erroneo.us/security/cve/CVE-2024-28995/","md":"https://erroneo.us/security/cve/CVE-2024-28995/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.99614,"verdict":null,"product":"SolarWinds Serv-U"},{"id":"CVE-2023-7272","type":"cve","title":"CVE-2023-7272: Eclipse Parsson stack overflow when parsing deeply nested input","date":"2024-07-17","url":"https://erroneo.us/security/cve/CVE-2023-7272/","md":"https://erroneo.us/security/cve/CVE-2023-7272/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00588,"verdict":null,"product":"org.eclipse.parsson:parsson (Maven)"},{"id":"CVE-2022-22948","type":"cve","title":"CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability ","date":"2024-07-17","url":"https://erroneo.us/security/cve/CVE-2022-22948/","md":"https://erroneo.us/security/cve/CVE-2022-22948/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.13282,"verdict":null,"product":"VMware vCenter Server"},{"id":"2024-07-17","type":"digest","title":"Security digest for July 17, 2024","date":"2024-07-17","url":"https://erroneo.us/security/2024-07-17/","md":"https://erroneo.us/security/2024-07-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"GHSA-q5fm-55c2-v6j9","type":"ghsa","title":"Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib","date":"2024-07-16","url":"https://erroneo.us/security/ghsa/GHSA-q5fm-55c2-v6j9/","md":"https://erroneo.us/security/ghsa/GHSA-q5fm-55c2-v6j9/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"fiona"},{"id":"2024-07-16","type":"digest","title":"Security digest for July 16, 2024","date":"2024-07-16","url":"https://erroneo.us/security/2024-07-16/","md":"https://erroneo.us/security/2024-07-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-40624","type":"cve","title":"CVE-2024-40624: TorrentPier Deserialization of Untrusted Data vulnerability","date":"2024-07-15","url":"https://erroneo.us/security/cve/CVE-2024-40624/","md":"https://erroneo.us/security/cve/CVE-2024-40624/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00995,"verdict":null,"product":"torrentpier/torrentpier (Composer (PHP))"},{"id":"CVE-2024-36401","type":"cve","title":"CVE-2024-36401: OSGeo GeoServer GeoTools Eval Injection Vulnerability","date":"2024-07-15","url":"https://erroneo.us/security/cve/CVE-2024-36401/","md":"https://erroneo.us/security/cve/CVE-2024-36401/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.99813,"verdict":null,"product":"OSGeo GeoServer"},{"id":"2024-07-15","type":"digest","title":"Security digest for July 15, 2024","date":"2024-07-15","url":"https://erroneo.us/security/2024-07-15/","md":"https://erroneo.us/security/2024-07-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-21513","type":"cve","title":"CVE-2024-21513: langchain-experimental vulnerable to Arbitrary Code Execution","date":"2024-07-14","url":"https://erroneo.us/security/cve/CVE-2024-21513/","md":"https://erroneo.us/security/cve/CVE-2024-21513/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":0.01893,"verdict":null,"product":"langchain-experimental (PyPI)"},{"id":"2024-07-14","type":"digest","title":"Security digest for July 14, 2024","date":"2024-07-14","url":"https://erroneo.us/security/2024-07-14/","md":"https://erroneo.us/security/2024-07-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-39697","type":"cve","title":"CVE-2024-39697: panic on parsing crafted phonenumber inputs","date":"2024-07-09","url":"https://erroneo.us/security/cve/CVE-2024-39697/","md":"https://erroneo.us/security/cve/CVE-2024-39697/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00711,"verdict":null,"product":"phonenumber (crates.io (Rust))"},{"id":"CVE-2024-38112","type":"cve","title":"CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability","date":"2024-07-09","url":"https://erroneo.us/security/cve/CVE-2024-38112/","md":"https://erroneo.us/security/cve/CVE-2024-38112/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.84225,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-38080","type":"cve","title":"CVE-2024-38080: Microsoft Windows Hyper-V Privilege Escalation Vulnerability","date":"2024-07-09","url":"https://erroneo.us/security/cve/CVE-2024-38080/","md":"https://erroneo.us/security/cve/CVE-2024-38080/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.07115,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-35264","type":"cve","title":"CVE-2024-35264: Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability","date":"2024-07-09","url":"https://erroneo.us/security/cve/CVE-2024-35264/","md":"https://erroneo.us/security/cve/CVE-2024-35264/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.02565,"verdict":null,"product":"Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)"},{"id":"CVE-2024-23692","type":"cve","title":"CVE-2024-23692: Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","date":"2024-07-09","url":"https://erroneo.us/security/cve/CVE-2024-23692/","md":"https://erroneo.us/security/cve/CVE-2024-23692/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99485,"verdict":null,"product":"Rejetto HTTP File Server"},{"id":"2024-07-09","type":"digest","title":"Security digest for July 9, 2024","date":"2024-07-09","url":"https://erroneo.us/security/2024-07-09/","md":"https://erroneo.us/security/2024-07-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2024-39223","type":"cve","title":"CVE-2024-39223: Missing key verification in gost","date":"2024-07-03","url":"https://erroneo.us/security/cve/CVE-2024-39223/","md":"https://erroneo.us/security/cve/CVE-2024-39223/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00696,"verdict":null,"product":"github.com/ginuerzh/gost (Go)"},{"id":"2024-07-03","type":"digest","title":"Security digest for July 3, 2024","date":"2024-07-03","url":"https://erroneo.us/security/2024-07-03/","md":"https://erroneo.us/security/2024-07-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-20399","type":"cve","title":"CVE-2024-20399: Cisco NX-OS Command Injection Vulnerability","date":"2024-07-02","url":"https://erroneo.us/security/cve/CVE-2024-20399/","md":"https://erroneo.us/security/cve/CVE-2024-20399/index.md","severity":"medium","cvss":6,"kev":true,"epss":0.04306,"verdict":null,"product":"Cisco NX-OS"},{"id":"2024-07-02","type":"digest","title":"Security digest for July 2, 2024","date":"2024-07-02","url":"https://erroneo.us/security/2024-07-02/","md":"https://erroneo.us/security/2024-07-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"regresshion-openssh-signal-race-cve-2024-6387","type":"brief","title":"regreSSHion: OpenSSH sshd Signal Race RCE (CVE-2024-6387)","date":"2024-07-01","url":"https://erroneo.us/security/briefs/regresshion-openssh-signal-race-cve-2024-6387/","md":"https://erroneo.us/security/briefs/regresshion-openssh-signal-race-cve-2024-6387/index.md","severity":"high","kev":false,"epss":0.99506,"verdict":"patch-this-week","cves":["CVE-2024-6387"],"summary":"Serious on paper (unauthenticated root RCE in sshd), but the only demonstrated exploit needed a 32-bit glibc target and 6-8 hours of continuous connections in a lab, so patch promptly through your distro instead of panicking."},{"id":"CVE-2024-6387","type":"cve","title":"CVE-2024-6387: Openssh: regresshion - race condition in ssh allows rce/dos","date":"2024-07-01","url":"https://erroneo.us/security/cve/CVE-2024-6387/","md":"https://erroneo.us/security/cve/CVE-2024-6387/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.99506,"verdict":"patch-this-week","product":"OpenSSH"},{"id":"CVE-2024-39309","type":"cve","title":"CVE-2024-39309: ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability","date":"2024-07-01","url":"https://erroneo.us/security/cve/CVE-2024-39309/","md":"https://erroneo.us/security/cve/CVE-2024-39309/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.20171,"verdict":null,"product":"parse-server (npm)"},{"id":"CVE-2024-38513","type":"cve","title":"CVE-2024-38513: Session Middleware Token Injection Vulnerability","date":"2024-07-01","url":"https://erroneo.us/security/cve/CVE-2024-38513/","md":"https://erroneo.us/security/cve/CVE-2024-38513/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00692,"verdict":null,"product":"github.com/gofiber/fiber (Go)"},{"id":"2024-07-01","type":"digest","title":"Security digest for July 1, 2024","date":"2024-07-01","url":"https://erroneo.us/security/2024-07-01/","md":"https://erroneo.us/security/2024-07-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":3}},{"id":"CVE-2019-25211","type":"cve","title":"CVE-2019-25211: Gin mishandles a wildcard at the end of an origin string","date":"2024-06-28","url":"https://erroneo.us/security/cve/CVE-2019-25211/","md":"https://erroneo.us/security/cve/CVE-2019-25211/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00431,"verdict":null,"product":"github.com/gin-gonic/gin (Go)"},{"id":"2024-06-28","type":"digest","title":"Security digest for June 28, 2024","date":"2024-06-28","url":"https://erroneo.us/security/2024-06-28/","md":"https://erroneo.us/security/2024-06-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-5980","type":"cve","title":"CVE-2024-5980: pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint","date":"2024-06-27","url":"https://erroneo.us/security/cve/CVE-2024-5980/","md":"https://erroneo.us/security/cve/CVE-2024-5980/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01318,"verdict":null,"product":"lightning (PyPI)"},{"id":"CVE-2024-5826","type":"cve","title":"CVE-2024-5826: vanna vulnerable to remote code execution caused by prompt injection","date":"2024-06-27","url":"https://erroneo.us/security/cve/CVE-2024-5826/","md":"https://erroneo.us/security/cve/CVE-2024-5826/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00882,"verdict":null,"product":"vanna (PyPI)"},{"id":"CVE-2024-5751","type":"cve","title":"CVE-2024-5751: litellm vulnerable to remote code execution based on using eval unsafely","date":"2024-06-27","url":"https://erroneo.us/security/cve/CVE-2024-5751/","md":"https://erroneo.us/security/cve/CVE-2024-5751/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00882,"verdict":null,"product":"litellm (PyPI)"},{"id":"2024-06-27","type":"digest","title":"Security digest for June 27, 2024","date":"2024-06-27","url":"https://erroneo.us/security/2024-06-27/","md":"https://erroneo.us/security/2024-06-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2022-2586","type":"cve","title":"CVE-2022-2586: Linux Kernel Use-After-Free Vulnerability","date":"2024-06-26","url":"https://erroneo.us/security/cve/CVE-2022-2586/","md":"https://erroneo.us/security/cve/CVE-2022-2586/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.10202,"verdict":null,"product":"Linux Kernel"},{"id":"CVE-2022-24816","type":"cve","title":"CVE-2022-24816: OSGeo GeoServer JAI-EXT Code Injection Vulnerability","date":"2024-06-26","url":"https://erroneo.us/security/cve/CVE-2022-24816/","md":"https://erroneo.us/security/cve/CVE-2022-24816/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99911,"verdict":null,"product":"OSGeo JAI-EXT"},{"id":"CVE-2020-13965","type":"cve","title":"CVE-2020-13965: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","date":"2024-06-26","url":"https://erroneo.us/security/cve/CVE-2020-13965/","md":"https://erroneo.us/security/cve/CVE-2020-13965/index.md","severity":"medium","cvss":6.3,"kev":true,"epss":0.76596,"verdict":null,"product":"Roundcube Webmail"},{"id":"2024-06-26","type":"digest","title":"Security digest for June 26, 2024","date":"2024-06-26","url":"https://erroneo.us/security/2024-06-26/","md":"https://erroneo.us/security/2024-06-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"polyfill-io-cdn-supply-chain-compromise","type":"brief","title":"polyfill.io CDN Supply-Chain Compromise Hits 100K+ Sites","date":"2024-06-25","url":"https://erroneo.us/security/briefs/polyfill-io-cdn-supply-chain-compromise/","md":"https://erroneo.us/security/briefs/polyfill-io-cdn-supply-chain-compromise/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"The malicious domain has been suspended since June 27, 2024, but any page that still loads a script from polyfill.io or its sister domains is trusting an attacker-linked host and should be cleaned up."},{"id":"moveit-transfer-sftp-auth-bypass-cve-2024-5806","type":"brief","title":"MOVEit Transfer: SFTP Authentication Bypass (CVE-2024-5806)","date":"2024-06-25","url":"https://erroneo.us/security/briefs/moveit-transfer-sftp-auth-bypass-cve-2024-5806/","md":"https://erroneo.us/security/briefs/moveit-transfer-sftp-auth-bypass-cve-2024-5806/index.md","severity":"critical","kev":false,"epss":0.81474,"verdict":"act-now","cves":["CVE-2024-5806"],"summary":"If you run MOVEit Transfer with SFTP exposed and are not on a fixed build, treat it as urgent: exploit details went public on disclosure day and attempts followed within hours."},{"id":"CVE-2024-5806","type":"cve","title":"CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability","date":"2024-06-25","url":"https://erroneo.us/security/cve/CVE-2024-5806/","md":"https://erroneo.us/security/cve/CVE-2024-5806/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.81474,"verdict":"act-now","product":"Progress MOVEit Transfer"},{"id":"CVE-2024-37843","type":"cve","title":"CVE-2024-37843: Craft CMS SQL injection vulnerability via the GraphQL API endpoint","date":"2024-06-25","url":"https://erroneo.us/security/cve/CVE-2024-37843/","md":"https://erroneo.us/security/cve/CVE-2024-37843/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.53242,"verdict":null,"product":"craftcms/cms (Composer (PHP))"},{"id":"2024-06-25","type":"digest","title":"Security digest for June 25, 2024","date":"2024-06-25","url":"https://erroneo.us/security/2024-06-25/","md":"https://erroneo.us/security/2024-06-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":0,"critical":1}},{"id":"ollama-probllama-path-traversal-rce-cve-2024-37032","type":"brief","title":"Probllama: Ollama Path Traversal to RCE (CVE-2024-37032)","date":"2024-06-24","url":"https://erroneo.us/security/briefs/ollama-probllama-path-traversal-rce-cve-2024-37032/","md":"https://erroneo.us/security/briefs/ollama-probllama-path-traversal-rce-cve-2024-37032/index.md","severity":"high","kev":false,"epss":0.89633,"verdict":"check-exposure","cves":["CVE-2024-37032"],"summary":"The bug was fixed in May 2024, so anything current is patched; the lasting risk is Ollama servers left reachable from the internet with no authentication, which is still very common."},{"id":"CVE-2024-38369","type":"cve","title":"CVE-2024-38369: XWiki programming rights may be inherited by inclusion","date":"2024-06-24","url":"https://erroneo.us/security/cve/CVE-2024-38369/","md":"https://erroneo.us/security/cve/CVE-2024-38369/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00342,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-rendering-macro-include (Maven)"},{"id":"CVE-2024-29868","type":"cve","title":"CVE-2024-29868: Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation","date":"2024-06-24","url":"https://erroneo.us/security/cve/CVE-2024-29868/","md":"https://erroneo.us/security/cve/CVE-2024-29868/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.05995,"verdict":null,"product":"org.apache.streampipes:streampipes-resource-management (Maven)"},{"id":"2024-06-24","type":"digest","title":"Security digest for June 24, 2024","date":"2024-06-24","url":"https://erroneo.us/security/2024-06-24/","md":"https://erroneo.us/security/2024-06-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"CVE-2024-5443","type":"cve","title":"CVE-2024-5443: Remote Code Execution via path traversal bypass in lollms","date":"2024-06-22","url":"https://erroneo.us/security/cve/CVE-2024-5443/","md":"https://erroneo.us/security/cve/CVE-2024-5443/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01164,"verdict":null,"product":"lollms (PyPI)"},{"id":"2024-06-22","type":"digest","title":"Security digest for June 22, 2024","date":"2024-06-22","url":"https://erroneo.us/security/2024-06-22/","md":"https://erroneo.us/security/2024-06-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-37899","type":"cve","title":"CVE-2024-37899: XWiki Platform allows remote code execution from user account","date":"2024-06-20","url":"https://erroneo.us/security/cve/CVE-2024-37899/","md":"https://erroneo.us/security/cve/CVE-2024-37899/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00694,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"2024-06-20","type":"digest","title":"Security digest for June 20, 2024","date":"2024-06-20","url":"https://erroneo.us/security/2024-06-20/","md":"https://erroneo.us/security/2024-06-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-37902","type":"cve","title":"CVE-2024-37902: DeepJavaLibrary API absolute path traversal","date":"2024-06-17","url":"https://erroneo.us/security/cve/CVE-2024-37902/","md":"https://erroneo.us/security/cve/CVE-2024-37902/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00784,"verdict":null,"product":"ai.djl:api (Maven)"},{"id":"CVE-2024-36573","type":"cve","title":"CVE-2024-36573: obx Prototype Pollution","date":"2024-06-17","url":"https://erroneo.us/security/cve/CVE-2024-36573/","md":"https://erroneo.us/security/cve/CVE-2024-36573/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00693,"verdict":null,"product":"@almela/obx (npm)"},{"id":"CVE-2023-32191","type":"cve","title":"CVE-2023-32191: rke's credentials are stored in the RKE1 Cluster state ConfigMap","date":"2024-06-17","url":"https://erroneo.us/security/cve/CVE-2023-32191/","md":"https://erroneo.us/security/cve/CVE-2023-32191/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.0066,"verdict":null,"product":"github.com/rancher/rke (Go)"},{"id":"2024-06-17","type":"digest","title":"Security digest for June 17, 2024","date":"2024-06-17","url":"https://erroneo.us/security/2024-06-17/","md":"https://erroneo.us/security/2024-06-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-4358","type":"cve","title":"CVE-2024-4358: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","date":"2024-06-13","url":"https://erroneo.us/security/cve/CVE-2024-4358/","md":"https://erroneo.us/security/cve/CVE-2024-4358/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97482,"verdict":null,"product":"Progress Telerik Report Server"},{"id":"CVE-2024-34103","type":"cve","title":"CVE-2024-34103: Magento Open Source Improper Authentication vulnerability","date":"2024-06-13","url":"https://erroneo.us/security/cve/CVE-2024-34103/","md":"https://erroneo.us/security/cve/CVE-2024-34103/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0091,"verdict":null,"product":"magento/community-edition (Composer (PHP))"},{"id":"CVE-2024-32896","type":"cve","title":"CVE-2024-32896: Android Pixel Privilege Escalation Vulnerability","date":"2024-06-13","url":"https://erroneo.us/security/cve/CVE-2024-32896/","md":"https://erroneo.us/security/cve/CVE-2024-32896/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.02985,"verdict":null,"product":"Android Pixel"},{"id":"CVE-2024-26169","type":"cve","title":"CVE-2024-26169: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","date":"2024-06-13","url":"https://erroneo.us/security/cve/CVE-2024-26169/","md":"https://erroneo.us/security/cve/CVE-2024-26169/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.03981,"verdict":null,"product":"Microsoft Windows"},{"id":"2024-06-13","type":"digest","title":"Security digest for June 13, 2024","date":"2024-06-13","url":"https://erroneo.us/security/2024-06-13/","md":"https://erroneo.us/security/2024-06-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2024-4610","type":"cve","title":"CVE-2024-4610: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date":"2024-06-12","url":"https://erroneo.us/security/cve/CVE-2024-4610/","md":"https://erroneo.us/security/cve/CVE-2024-4610/index.md","severity":"high","cvss":7.4,"kev":true,"epss":0.00764,"verdict":null,"product":"Arm Mali GPU Kernel Driver"},{"id":"CVE-2024-4577","type":"cve","title":"CVE-2024-4577: PHP-CGI OS Command Injection Vulnerability","date":"2024-06-12","url":"https://erroneo.us/security/cve/CVE-2024-4577/","md":"https://erroneo.us/security/cve/CVE-2024-4577/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99987,"verdict":"act-now","product":"PHP Group PHP"},{"id":"CVE-2024-36265","type":"cve","title":"CVE-2024-36265: Apache Submarine Server Core Incorrect Authorization vulnerability","date":"2024-06-12","url":"https://erroneo.us/security/cve/CVE-2024-36265/","md":"https://erroneo.us/security/cve/CVE-2024-36265/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00744,"verdict":null,"product":"org.apache.submarine:submarine-server-core (Maven)"},{"id":"2024-06-12","type":"digest","title":"Security digest for June 12, 2024","date":"2024-06-12","url":"https://erroneo.us/security/2024-06-12/","md":"https://erroneo.us/security/2024-06-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-4315","type":"cve","title":"CVE-2024-4315: parisneo/lollms Local File Inclusion (LFI) attack","date":"2024-06-11","url":"https://erroneo.us/security/cve/CVE-2024-4315/","md":"https://erroneo.us/security/cve/CVE-2024-4315/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01024,"verdict":null,"product":"lollms (PyPI)"},{"id":"CVE-2024-35225","type":"cve","title":"CVE-2024-35225: Jupyter Server Proxy has a reflected XSS issue in host parameter","date":"2024-06-11","url":"https://erroneo.us/security/cve/CVE-2024-35225/","md":"https://erroneo.us/security/cve/CVE-2024-35225/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00446,"verdict":null,"product":"jupyter-server-proxy (PyPI)"},{"id":"2024-06-11","type":"digest","title":"Security digest for June 11, 2024","date":"2024-06-11","url":"https://erroneo.us/security/2024-06-11/","md":"https://erroneo.us/security/2024-06-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-x86x-qhf8-f37w","type":"ghsa","title":"willdurand/js-translation-bundle potential path traversal attack and remote code injection","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-x86x-qhf8-f37w/","md":"https://erroneo.us/security/ghsa/GHSA-x86x-qhf8-f37w/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"willdurand/js-translation-bundle"},{"id":"GHSA-v42g-7q2x-cw32","type":"ghsa","title":"Zendframework1 potential SQL injection vector using null byte for PDO (MsSql, SQLite)","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-v42g-7q2x-cw32/","md":"https://erroneo.us/security/ghsa/GHSA-v42g-7q2x-cw32/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework1"},{"id":"GHSA-qf36-fx9f-232x","type":"ghsa","title":"ZendFramework potential SQL Injection Vector When Using PDO_MySql","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-qf36-fx9f-232x/","md":"https://erroneo.us/security/ghsa/GHSA-qf36-fx9f-232x/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework1, zendframework/zendframework1"},{"id":"GHSA-qc7w-4567-84wv","type":"ghsa","title":"Zendframework vulnerable to XXE/XEE attacks","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-qc7w-4567-84wv/","md":"https://erroneo.us/security/ghsa/GHSA-qc7w-4567-84wv/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework, zendframework/zendframework"},{"id":"GHSA-mhpx-3rv8-wrjm","type":"ghsa","title":"ZendFramework potential XML eXternal Entity injection vectors","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-mhpx-3rv8-wrjm/","md":"https://erroneo.us/security/ghsa/GHSA-mhpx-3rv8-wrjm/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework1"},{"id":"GHSA-f4fj-q6m4-cc52","type":"ghsa","title":"ZendFramework vulnerable to XXE/XEE attacks","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-f4fj-q6m4-cc52/","md":"https://erroneo.us/security/ghsa/GHSA-f4fj-q6m4-cc52/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zend-xmlrpc, zendframework/zend-xmlrpc"},{"id":"GHSA-8x2v-pcg7-94f4","type":"ghsa","title":"Zend-JSON vulnerable to XXE/XEE attacks","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-8x2v-pcg7-94f4/","md":"https://erroneo.us/security/ghsa/GHSA-8x2v-pcg7-94f4/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zend-json, zendframework/zend-json"},{"id":"GHSA-6fqw-j3vm-7f66","type":"ghsa","title":"Zendframework1 Potential SQL injection in ORDER and GROUP functions","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-6fqw-j3vm-7f66/","md":"https://erroneo.us/security/ghsa/GHSA-6fqw-j3vm-7f66/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework1"},{"id":"GHSA-2x36-qhx3-7m5f","type":"ghsa","title":"ZendFramework1 Potential SQL injection in the ORDER implementation of Zend_Db_Select","date":"2024-06-07","url":"https://erroneo.us/security/ghsa/GHSA-2x36-qhx3-7m5f/","md":"https://erroneo.us/security/ghsa/GHSA-2x36-qhx3-7m5f/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"zendframework/zendframework1"},{"id":"2024-06-07","type":"digest","title":"Security digest for June 7, 2024","date":"2024-06-07","url":"https://erroneo.us/security/2024-06-07/","md":"https://erroneo.us/security/2024-06-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":9}},{"id":"php-cgi-windows-argument-injection-cve-2024-4577","type":"brief","title":"CVE-2024-4577: PHP-CGI Argument Injection RCE on Windows","date":"2024-06-06","url":"https://erroneo.us/security/briefs/php-cgi-windows-argument-injection-cve-2024-4577/","md":"https://erroneo.us/security/briefs/php-cgi-windows-argument-injection-cve-2024-4577/index.md","severity":"critical","kev":true,"epss":0.99987,"verdict":"act-now","cves":["CVE-2024-4577"],"summary":"If you run PHP on Windows behind Apache in CGI mode (including any default XAMPP install), treat it as compromised-until-proven-otherwise and patch or remove CGI today; everyone else can relax."},{"id":"CVE-2024-5452","type":"cve","title":"CVE-2024-5452: Remote code execution in pytorch lightning","date":"2024-06-06","url":"https://erroneo.us/security/cve/CVE-2024-5452/","md":"https://erroneo.us/security/cve/CVE-2024-5452/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.26831,"verdict":null,"product":"lightning (PyPI)"},{"id":"CVE-2024-0520","type":"cve","title":"CVE-2024-0520: Remote code execution in mlflow","date":"2024-06-06","url":"https://erroneo.us/security/cve/CVE-2024-0520/","md":"https://erroneo.us/security/cve/CVE-2024-0520/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.02401,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2024-06-06","type":"digest","title":"Security digest for June 6, 2024","date":"2024-06-06","url":"https://erroneo.us/security/2024-06-06/","md":"https://erroneo.us/security/2024-06-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"GHSA-gwfx-p7mr-f92v","type":"ghsa","title":"Missing Access Check in TYPO3 CMS","date":"2024-06-05","url":"https://erroneo.us/security/ghsa/GHSA-gwfx-p7mr-f92v/","md":"https://erroneo.us/security/ghsa/GHSA-gwfx-p7mr-f92v/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"typo3/cms, typo3/cms"},{"id":"GHSA-67wg-6j7r-mqh8","type":"ghsa","title":"Arbitrary Code Execution in TYPO3 CMS","date":"2024-06-05","url":"https://erroneo.us/security/ghsa/GHSA-67wg-6j7r-mqh8/","md":"https://erroneo.us/security/ghsa/GHSA-67wg-6j7r-mqh8/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"typo3/cms, typo3/cms"},{"id":"2024-06-05","type":"digest","title":"Security digest for June 5, 2024","date":"2024-06-05","url":"https://erroneo.us/security/2024-06-05/","md":"https://erroneo.us/security/2024-06-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-5262","type":"cve","title":"CVE-2024-5262: Files or Directories Accessible to External Parties in ProjectDiscovery","date":"2024-06-04","url":"https://erroneo.us/security/cve/CVE-2024-5262/","md":"https://erroneo.us/security/cve/CVE-2024-5262/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00632,"verdict":null,"product":"github.com/projectdiscovery/interactsh (Go)"},{"id":"CVE-2024-37273","type":"cve","title":"CVE-2024-37273: Jan path traversal vulnerability","date":"2024-06-04","url":"https://erroneo.us/security/cve/CVE-2024-37273/","md":"https://erroneo.us/security/cve/CVE-2024-37273/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00989,"verdict":null,"product":"@janhq/core (npm)"},{"id":"CVE-2024-36858","type":"cve","title":"CVE-2024-36858: Jan path traversal vulnerability","date":"2024-06-04","url":"https://erroneo.us/security/cve/CVE-2024-36858/","md":"https://erroneo.us/security/cve/CVE-2024-36858/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03035,"verdict":null,"product":"@janhq/core (npm)"},{"id":"CVE-2024-36400","type":"cve","title":"CVE-2024-36400: Unable to generate the correct character set","date":"2024-06-04","url":"https://erroneo.us/security/cve/CVE-2024-36400/","md":"https://erroneo.us/security/cve/CVE-2024-36400/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00754,"verdict":null,"product":"nano-id (crates.io (Rust))"},{"id":"2024-06-04","type":"digest","title":"Security digest for June 4, 2024","date":"2024-06-04","url":"https://erroneo.us/security/2024-06-04/","md":"https://erroneo.us/security/2024-06-04/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2024-3829","type":"cve","title":"CVE-2024-3829: qdrant input validation failure","date":"2024-06-03","url":"https://erroneo.us/security/cve/CVE-2024-3829/","md":"https://erroneo.us/security/cve/CVE-2024-3829/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00909,"verdict":null,"product":"qdrant-client (PyPI)"},{"id":"CVE-2017-3506","type":"cve","title":"CVE-2017-3506: Oracle WebLogic Server OS Command Injection Vulnerability","date":"2024-06-03","url":"https://erroneo.us/security/cve/CVE-2017-3506/","md":"https://erroneo.us/security/cve/CVE-2017-3506/index.md","severity":"high","cvss":7.4,"kev":true,"epss":0.95991,"verdict":null,"product":"Oracle WebLogic Server"},{"id":"2024-06-03","type":"digest","title":"Security digest for June 3, 2024","date":"2024-06-03","url":"https://erroneo.us/security/2024-06-03/","md":"https://erroneo.us/security/2024-06-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"snowflake-unc5537-customer-account-breaches","type":"brief","title":"Snowflake UNC5537: Customer Accounts Hit With Stolen Logins","date":"2024-06-02","url":"https://erroneo.us/security/briefs/snowflake-unc5537-customer-account-breaches/","md":"https://erroneo.us/security/briefs/snowflake-unc5537-customer-account-breaches/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"There was no Snowflake bug to patch; the lesson is that any cloud data platform reachable with a password alone will eventually be logged into by someone holding an infostealer log."},{"id":"CVE-2024-36042","type":"cve","title":"CVE-2024-36042: Silverpeas authentication bypass","date":"2024-06-02","url":"https://erroneo.us/security/cve/CVE-2024-36042/","md":"https://erroneo.us/security/cve/CVE-2024-36042/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00935,"verdict":null,"product":"org.silverpeas.core:silverpeas-core (Maven)"},{"id":"CVE-2024-3584","type":"cve","title":"CVE-2024-3584: qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint","date":"2024-06-02","url":"https://erroneo.us/security/cve/CVE-2024-3584/","md":"https://erroneo.us/security/cve/CVE-2024-3584/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00548,"verdict":null,"product":"qdrant (crates.io (Rust))"},{"id":"2024-06-02","type":"digest","title":"Security digest for June 2, 2024","date":"2024-06-02","url":"https://erroneo.us/security/2024-06-02/","md":"https://erroneo.us/security/2024-06-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"CVE-2024-5565","type":"cve","title":"CVE-2024-5565: Vanna prompt injection code execution","date":"2024-05-31","url":"https://erroneo.us/security/cve/CVE-2024-5565/","md":"https://erroneo.us/security/cve/CVE-2024-5565/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.15178,"verdict":null,"product":"vanna (PyPI)"},{"id":"CVE-2024-37032","type":"cve","title":"CVE-2024-37032: Ollama vulnerability","date":"2024-05-31","url":"https://erroneo.us/security/cve/CVE-2024-37032/","md":"https://erroneo.us/security/cve/CVE-2024-37032/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.89633,"verdict":"check-exposure","product":"Ollama"},{"id":"2024-05-31","type":"digest","title":"Security digest for May 31, 2024","date":"2024-05-31","url":"https://erroneo.us/security/2024-05-31/","md":"https://erroneo.us/security/2024-05-31/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-q3jm-v27q-jfww","type":"ghsa","title":"titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack","date":"2024-05-30","url":"https://erroneo.us/security/ghsa/GHSA-q3jm-v27q-jfww/","md":"https://erroneo.us/security/ghsa/GHSA-q3jm-v27q-jfww/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"titon/framework"},{"id":"GHSA-mmcv-fvq8-r9x3","type":"ghsa","title":"Symfony XML decoding attack vector through external entities","date":"2024-05-30","url":"https://erroneo.us/security/ghsa/GHSA-mmcv-fvq8-r9x3/","md":"https://erroneo.us/security/ghsa/GHSA-mmcv-fvq8-r9x3/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"symfony/symfony"},{"id":"GHSA-cc97-g92w-jm65","type":"ghsa","title":"TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution","date":"2024-05-30","url":"https://erroneo.us/security/ghsa/GHSA-cc97-g92w-jm65/","md":"https://erroneo.us/security/ghsa/GHSA-cc97-g92w-jm65/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"typo3/cms-core, typo3/cms-core"},{"id":"CVE-2024-24919","type":"cve","title":"CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability","date":"2024-05-30","url":"https://erroneo.us/security/cve/CVE-2024-24919/","md":"https://erroneo.us/security/cve/CVE-2024-24919/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.99978,"verdict":null,"product":"Check Point Quantum Security Gateways"},{"id":"CVE-2024-1086","type":"cve","title":"CVE-2024-1086: Linux Kernel Use-After-Free Vulnerability","date":"2024-05-30","url":"https://erroneo.us/security/cve/CVE-2024-1086/","md":"https://erroneo.us/security/cve/CVE-2024-1086/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.28058,"verdict":null,"product":"Linux Kernel"},{"id":"2024-05-30","type":"digest","title":"Security digest for May 30, 2024","date":"2024-05-30","url":"https://erroneo.us/security/2024-05-30/","md":"https://erroneo.us/security/2024-05-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"GHSA-j68w-pg49-f6vx","type":"ghsa","title":"Symfony XML decoding attack vector through external entities","date":"2024-05-29","url":"https://erroneo.us/security/ghsa/GHSA-j68w-pg49-f6vx/","md":"https://erroneo.us/security/ghsa/GHSA-j68w-pg49-f6vx/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"symfony/serializer"},{"id":"GHSA-4qpj-gxxg-jqg4","type":"ghsa","title":"Swiftmailer Sendmail transport arbitrary shell execution","date":"2024-05-29","url":"https://erroneo.us/security/ghsa/GHSA-4qpj-gxxg-jqg4/","md":"https://erroneo.us/security/ghsa/GHSA-4qpj-gxxg-jqg4/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"swiftmailer/swiftmailer"},{"id":"CVE-2024-4978","type":"cve","title":"CVE-2024-4978: Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","date":"2024-05-29","url":"https://erroneo.us/security/cve/CVE-2024-4978/","md":"https://erroneo.us/security/cve/CVE-2024-4978/index.md","severity":"high","cvss":8.7,"kev":true,"epss":0.26937,"verdict":null,"product":"Justice AV Solutions Viewer"},{"id":"2024-05-29","type":"digest","title":"Security digest for May 29, 2024","date":"2024-05-29","url":"https://erroneo.us/security/2024-05-29/","md":"https://erroneo.us/security/2024-05-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-5274","type":"cve","title":"CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability","date":"2024-05-28","url":"https://erroneo.us/security/cve/CVE-2024-5274/","md":"https://erroneo.us/security/cve/CVE-2024-5274/index.md","severity":"high","cvss":8.3,"kev":true,"epss":0.07472,"verdict":null,"product":"Google Chromium V8"},{"id":"CVE-2024-35374","type":"cve","title":"CVE-2024-35374: Mocodo vulnerable to SQL injection in `/web/generate.php`","date":"2024-05-28","url":"https://erroneo.us/security/cve/CVE-2024-35374/","md":"https://erroneo.us/security/cve/CVE-2024-35374/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02767,"verdict":null,"product":"mocodo (PyPI)"},{"id":"2024-05-28","type":"digest","title":"Security digest for May 28, 2024","date":"2024-05-28","url":"https://erroneo.us/security/2024-05-28/","md":"https://erroneo.us/security/2024-05-28/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-5315","type":"cve","title":"CVE-2024-5315: Dolibarr vulnerable to SQL Injection","date":"2024-05-24","url":"https://erroneo.us/security/cve/CVE-2024-5315/","md":"https://erroneo.us/security/cve/CVE-2024-5315/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.34522,"verdict":null,"product":"dolibarr/dolibarr (Composer (PHP))"},{"id":"CVE-2024-5314","type":"cve","title":"CVE-2024-5314: Dolibarr vulnerable to SQL Injection","date":"2024-05-24","url":"https://erroneo.us/security/cve/CVE-2024-5314/","md":"https://erroneo.us/security/cve/CVE-2024-5314/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00562,"verdict":null,"product":"dolibarr/dolibarr (Composer (PHP))"},{"id":"2024-05-24","type":"digest","title":"Security digest for May 24, 2024","date":"2024-05-24","url":"https://erroneo.us/security/2024-05-24/","md":"https://erroneo.us/security/2024-05-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-8v6m-7f5v-hhx6","type":"ghsa","title":"Silverstripe Brute force bypass on default admin","date":"2024-05-23","url":"https://erroneo.us/security/ghsa/GHSA-8v6m-7f5v-hhx6/","md":"https://erroneo.us/security/ghsa/GHSA-8v6m-7f5v-hhx6/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"silverstripe/framework, silverstripe/framework"},{"id":"CVE-2020-17519","type":"cve","title":"CVE-2020-17519: Apache Flink Improper Access Control Vulnerability","date":"2024-05-23","url":"https://erroneo.us/security/cve/CVE-2020-17519/","md":"https://erroneo.us/security/cve/CVE-2020-17519/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.97809,"verdict":null,"product":"Apache Flink"},{"id":"2024-05-23","type":"digest","title":"Security digest for May 23, 2024","date":"2024-05-23","url":"https://erroneo.us/security/2024-05-23/","md":"https://erroneo.us/security/2024-05-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-25738","type":"cve","title":"CVE-2024-25738: VuFind Server-Side Request Forgery (SSRF) vulnerability","date":"2024-05-22","url":"https://erroneo.us/security/cve/CVE-2024-25738/","md":"https://erroneo.us/security/cve/CVE-2024-25738/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00681,"verdict":null,"product":"vufind/vufind (Composer (PHP))"},{"id":"CVE-2024-25737","type":"cve","title":"CVE-2024-25737: VuFind Server-Side Request Forgery (SSRF) vulnerability","date":"2024-05-22","url":"https://erroneo.us/security/cve/CVE-2024-25737/","md":"https://erroneo.us/security/cve/CVE-2024-25737/index.md","severity":"medium","cvss":6.1,"kev":false,"epss":0.0045,"verdict":null,"product":"vufind/vufind (Composer (PHP))"},{"id":"2024-05-22","type":"digest","title":"Security digest for May 22, 2024","date":"2024-05-22","url":"https://erroneo.us/security/2024-05-22/","md":"https://erroneo.us/security/2024-05-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-q3g4-2vw9-xv27","type":"ghsa","title":"Shopware Remote Code Execution Vulnerability","date":"2024-05-21","url":"https://erroneo.us/security/ghsa/GHSA-q3g4-2vw9-xv27/","md":"https://erroneo.us/security/ghsa/GHSA-q3g4-2vw9-xv27/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"shopware/shopware, shopware/shopware"},{"id":"GHSA-83jv-4prm-34g7","type":"ghsa","title":"Shopware Remote Code Execution Vulnerability","date":"2024-05-21","url":"https://erroneo.us/security/ghsa/GHSA-83jv-4prm-34g7/","md":"https://erroneo.us/security/ghsa/GHSA-83jv-4prm-34g7/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"shopware/shopware"},{"id":"GHSA-7336-ghhp-f2qj","type":"ghsa","title":"Shopware Remote Code Execution Vulnerability","date":"2024-05-21","url":"https://erroneo.us/security/ghsa/GHSA-7336-ghhp-f2qj/","md":"https://erroneo.us/security/ghsa/GHSA-7336-ghhp-f2qj/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"shopware/shopware"},{"id":"CVE-2024-36039","type":"cve","title":"CVE-2024-36039: PyMySQL SQL Injection vulnerability","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-36039/","md":"https://erroneo.us/security/cve/CVE-2024-36039/index.md","severity":"medium","cvss":6.3,"kev":false,"epss":0.00691,"verdict":null,"product":"pymysql (PyPI)"},{"id":"CVE-2024-35059","type":"cve","title":"CVE-2024-35059: NASA AIT-Core vulnerable to remote code execution","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-35059/","md":"https://erroneo.us/security/cve/CVE-2024-35059/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00453,"verdict":null,"product":"ait-core (PyPI)"},{"id":"CVE-2024-35058","type":"cve","title":"CVE-2024-35058: NASA AIT-Core vulnerable to remote code execution","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-35058/","md":"https://erroneo.us/security/cve/CVE-2024-35058/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00443,"verdict":null,"product":"ait-core (PyPI)"},{"id":"CVE-2024-35057","type":"cve","title":"CVE-2024-35057: NASA AIT-Core vulnerable to remote code execution","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-35057/","md":"https://erroneo.us/security/cve/CVE-2024-35057/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00438,"verdict":null,"product":"ait-core (PyPI)"},{"id":"CVE-2024-35056","type":"cve","title":"CVE-2024-35056: NASA AIT-Core vulnerable to SQL Injection","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-35056/","md":"https://erroneo.us/security/cve/CVE-2024-35056/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00608,"verdict":null,"product":"ait-core (PyPI)"},{"id":"CVE-2024-31989","type":"cve","title":"CVE-2024-31989: ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache","date":"2024-05-21","url":"https://erroneo.us/security/cve/CVE-2024-31989/","md":"https://erroneo.us/security/cve/CVE-2024-31989/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01479,"verdict":null,"product":"github.com/argoproj/argo-cd/v2 (Go)"},{"id":"2024-05-21","type":"digest","title":"Security digest for May 21, 2024","date":"2024-05-21","url":"https://erroneo.us/security/2024-05-21/","md":"https://erroneo.us/security/2024-05-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":9}},{"id":"GHSA-7vw7-qx38-37vr","type":"ghsa","title":"Propel2 SQL injection possible with limit() on MySQL","date":"2024-05-20","url":"https://erroneo.us/security/ghsa/GHSA-7vw7-qx38-37vr/","md":"https://erroneo.us/security/ghsa/GHSA-7vw7-qx38-37vr/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"propel/propel"},{"id":"GHSA-7g7c-qhf3-x59p","type":"ghsa","title":"propel/propel1 SQL injection possible with limit() on MySQL","date":"2024-05-20","url":"https://erroneo.us/security/ghsa/GHSA-7g7c-qhf3-x59p/","md":"https://erroneo.us/security/ghsa/GHSA-7g7c-qhf3-x59p/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"propel/propel1"},{"id":"CVE-2024-4947","type":"cve","title":"CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability","date":"2024-05-20","url":"https://erroneo.us/security/cve/CVE-2024-4947/","md":"https://erroneo.us/security/cve/CVE-2024-4947/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.15236,"verdict":null,"product":"Google Chromium V8"},{"id":"CVE-2024-24294","type":"cve","title":"CVE-2024-24294: Blackprint @blackprint/engine Prototype Pollution issue","date":"2024-05-20","url":"https://erroneo.us/security/cve/CVE-2024-24294/","md":"https://erroneo.us/security/cve/CVE-2024-24294/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00782,"verdict":null,"product":"@blackprint/engine (npm)"},{"id":"CVE-2023-43208","type":"cve","title":"CVE-2023-43208: NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","date":"2024-05-20","url":"https://erroneo.us/security/cve/CVE-2023-43208/","md":"https://erroneo.us/security/cve/CVE-2023-43208/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.82708,"verdict":null,"product":"NextGen Healthcare Mirth Connect"},{"id":"2024-05-20","type":"digest","title":"Security digest for May 20, 2024","date":"2024-05-20","url":"https://erroneo.us/security/2024-05-20/","md":"https://erroneo.us/security/2024-05-20/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"GHSA-rq6q-hjvh-5mwh","type":"ghsa","title":"Flow Swift Mailer package Remote code execution","date":"2024-05-17","url":"https://erroneo.us/security/ghsa/GHSA-rq6q-hjvh-5mwh/","md":"https://erroneo.us/security/ghsa/GHSA-rq6q-hjvh-5mwh/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"neos/swiftmailer"},{"id":"GHSA-4rr6-gf59-ggw5","type":"ghsa","title":"namshi/jose - Verification bypass","date":"2024-05-17","url":"https://erroneo.us/security/ghsa/GHSA-4rr6-gf59-ggw5/","md":"https://erroneo.us/security/ghsa/GHSA-4rr6-gf59-ggw5/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"namshi/jose"},{"id":"2024-05-17","type":"digest","title":"Security digest for May 17, 2024","date":"2024-05-17","url":"https://erroneo.us/security/2024-05-17/","md":"https://erroneo.us/security/2024-05-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-5023","type":"cve","title":"CVE-2024-5023: ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command","date":"2024-05-16","url":"https://erroneo.us/security/cve/CVE-2024-5023/","md":"https://erroneo.us/security/cve/CVE-2024-5023/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00936,"verdict":null,"product":"consoleme (PyPI)"},{"id":"CVE-2024-4761","type":"cve","title":"CVE-2024-4761: Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","date":"2024-05-16","url":"https://erroneo.us/security/cve/CVE-2024-4761/","md":"https://erroneo.us/security/cve/CVE-2024-4761/index.md","severity":"high","cvss":8.3,"kev":true,"epss":0.11007,"verdict":null,"product":"Google Chromium V8"},{"id":"CVE-2021-40655","type":"cve","title":"CVE-2021-40655: D-Link DIR-605 Router Information Disclosure Vulnerability","date":"2024-05-16","url":"https://erroneo.us/security/cve/CVE-2021-40655/","md":"https://erroneo.us/security/cve/CVE-2021-40655/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.86659,"verdict":null,"product":"D-Link DIR-605 Router"},{"id":"CVE-2014-100005","type":"cve","title":"CVE-2014-100005: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","date":"2024-05-16","url":"https://erroneo.us/security/cve/CVE-2014-100005/","md":"https://erroneo.us/security/cve/CVE-2014-100005/index.md","severity":"high","cvss":8,"kev":true,"epss":0.43456,"verdict":null,"product":"D-Link DIR-600 Router"},{"id":"2024-05-16","type":"digest","title":"Security digest for May 16, 2024","date":"2024-05-16","url":"https://erroneo.us/security/2024-05-16/","md":"https://erroneo.us/security/2024-05-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"GHSA-wxxw-5gq6-j2g5","type":"ghsa","title":"contao/core Insufficient input validation allows for code injection and remote execution","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-wxxw-5gq6-j2g5/","md":"https://erroneo.us/security/ghsa/GHSA-wxxw-5gq6-j2g5/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":null,"verdict":null,"product":"contao/core, contao/core"},{"id":"GHSA-qm5c-m76r-2hfr","type":"ghsa","title":"Laravel RCE vulnerability in \"cookie\" session driver","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-qm5c-m76r-2hfr/","md":"https://erroneo.us/security/ghsa/GHSA-qm5c-m76r-2hfr/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"laravel/framework, laravel/framework"},{"id":"GHSA-prpf-cj87-hwvr","type":"ghsa","title":"Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-prpf-cj87-hwvr/","md":"https://erroneo.us/security/ghsa/GHSA-prpf-cj87-hwvr/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition"},{"id":"GHSA-jjx7-8462-w4m4","type":"ghsa","title":"Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-jjx7-8462-w4m4/","md":"https://erroneo.us/security/ghsa/GHSA-jjx7-8462-w4m4/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"drupal/drupal, drupal/drupal"},{"id":"GHSA-jf8c-36vw-98x4","type":"ghsa","title":"Drupal core Remote Code Execution","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-jf8c-36vw-98x4/","md":"https://erroneo.us/security/ghsa/GHSA-jf8c-36vw-98x4/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"drupal/drupal, drupal/drupal"},{"id":"GHSA-h63c-xvpf-264j","type":"ghsa","title":"ADOdb SQL injection vulnerability","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-h63c-xvpf-264j/","md":"https://erroneo.us/security/ghsa/GHSA-h63c-xvpf-264j/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"adodb/adodb-php"},{"id":"GHSA-h533-5v22-8vcp","type":"ghsa","title":"firebase/php-jwt: \"None\" Algorithm treated as valid on tokens","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-h533-5v22-8vcp/","md":"https://erroneo.us/security/ghsa/GHSA-h533-5v22-8vcp/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"firebase/php-jwt"},{"id":"GHSA-cv25-3pxr-4q7x","type":"ghsa","title":"Magento Open Source Security Advisory: Patch SUPEE-10975","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-cv25-3pxr-4q7x/","md":"https://erroneo.us/security/ghsa/GHSA-cv25-3pxr-4q7x/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition"},{"id":"GHSA-9gxv-x7rp-r2hc","type":"ghsa","title":"gree/jose - \"None\" Algorithm treated as valid in tokens","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-9gxv-x7rp-r2hc/","md":"https://erroneo.us/security/ghsa/GHSA-9gxv-x7rp-r2hc/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"gree/jose"},{"id":"GHSA-8j7c-682x-r9f2","type":"ghsa","title":"Magento RCE,XSS and other vulnerabilities","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-8j7c-682x-r9f2/","md":"https://erroneo.us/security/ghsa/GHSA-8j7c-682x-r9f2/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition, magento/community-edition"},{"id":"GHSA-7v68-3pr5-h3cr","type":"ghsa","title":"Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-7v68-3pr5-h3cr/","md":"https://erroneo.us/security/ghsa/GHSA-7v68-3pr5-h3cr/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"drupal/core, drupal/core"},{"id":"GHSA-6wm4-3rjj-c8xx","type":"ghsa","title":"Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-6wm4-3rjj-c8xx/","md":"https://erroneo.us/security/ghsa/GHSA-6wm4-3rjj-c8xx/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition"},{"id":"GHSA-6q9v-4hq6-5m67","type":"ghsa","title":"Doctrine SQL injection vulnerability","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-6q9v-4hq6-5m67/","md":"https://erroneo.us/security/ghsa/GHSA-6q9v-4hq6-5m67/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"doctrine/orm, doctrine/orm"},{"id":"GHSA-6mgp-v5cm-ghg5","type":"ghsa","title":"Drupal core Remote Code Execution","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-6mgp-v5cm-ghg5/","md":"https://erroneo.us/security/ghsa/GHSA-6mgp-v5cm-ghg5/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"drupal/core, drupal/core"},{"id":"GHSA-5gmh-85x8-5cx7","type":"ghsa","title":"Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-5gmh-85x8-5cx7/","md":"https://erroneo.us/security/ghsa/GHSA-5gmh-85x8-5cx7/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition, magento/community-edition"},{"id":"GHSA-2ffv-r4r9-r8xr","type":"ghsa","title":"Laravel RCE vulnerability in \"cookie\" session driver","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-2ffv-r4r9-r8xr/","md":"https://erroneo.us/security/ghsa/GHSA-2ffv-r4r9-r8xr/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"illuminate/cookie, illuminate/cookie"},{"id":"GHSA-27qr-636m-wxg2","type":"ghsa","title":"codeigniter/framework SQL injection in ODBC database driver","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-27qr-636m-wxg2/","md":"https://erroneo.us/security/ghsa/GHSA-27qr-636m-wxg2/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"codeigniter/framework"},{"id":"GHSA-26hq-7286-mg8f","type":"ghsa","title":"Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability","date":"2024-05-15","url":"https://erroneo.us/security/ghsa/GHSA-26hq-7286-mg8f/","md":"https://erroneo.us/security/ghsa/GHSA-26hq-7286-mg8f/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"magento/community-edition"},{"id":"CVE-2024-32888","type":"cve","title":"CVE-2024-32888: Amazon JDBC Driver for Redshift SQL Injection via line comment generation","date":"2024-05-15","url":"https://erroneo.us/security/cve/CVE-2024-32888/","md":"https://erroneo.us/security/cve/CVE-2024-32888/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00778,"verdict":null,"product":"com.amazon.redshift:redshift-jdbc42 (Maven)"},{"id":"CVE-2020-35125","type":"cve","title":"CVE-2020-35125: Mautic is vulnerable to XSS vulnerability","date":"2024-05-15","url":"https://erroneo.us/security/cve/CVE-2020-35125/","md":"https://erroneo.us/security/cve/CVE-2020-35125/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.02694,"verdict":null,"product":"mautic/core (Composer (PHP))"},{"id":"2024-05-15","type":"digest","title":"Security digest for May 15, 2024","date":"2024-05-15","url":"https://erroneo.us/security/2024-05-15/","md":"https://erroneo.us/security/2024-05-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":20}},{"id":"CVE-2024-4825","type":"cve","title":"CVE-2024-4825: Cockpit CMS contains an arbitrary file upload vulenrability","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2024-4825/","md":"https://erroneo.us/security/cve/CVE-2024-4825/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00719,"verdict":null,"product":"cockpit-hq/cockpit (Composer (PHP))"},{"id":"CVE-2024-34716","type":"cve","title":"CVE-2024-34716: PrestaShop cross-site scripting via customer contact form in FO, through file upload","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2024-34716/","md":"https://erroneo.us/security/cve/CVE-2024-34716/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.56445,"verdict":null,"product":"prestashop/prestashop (Composer (PHP))"},{"id":"CVE-2024-34365","type":"cve","title":"CVE-2024-34365: Apache Karaf Cave: Cave SSRF and arbitrary file access","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2024-34365/","md":"https://erroneo.us/security/cve/CVE-2024-34365/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01161,"verdict":null,"product":"org.apache.karaf:cave (Maven)"},{"id":"CVE-2024-30051","type":"cve","title":"CVE-2024-30051:  Microsoft DWM Core Library Privilege Escalation Vulnerability","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2024-30051/","md":"https://erroneo.us/security/cve/CVE-2024-30051/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.05687,"verdict":null,"product":"Microsoft DWM Core Library"},{"id":"CVE-2024-30040","type":"cve","title":"CVE-2024-30040: Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2024-30040/","md":"https://erroneo.us/security/cve/CVE-2024-30040/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.03939,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2022-39328","type":"cve","title":"CVE-2022-39328: Grafana Race condition allowing privilege escalation","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2022-39328/","md":"https://erroneo.us/security/cve/CVE-2022-39328/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01085,"verdict":null,"product":"github.com/grafana/grafana (Go)"},{"id":"CVE-2021-41244","type":"cve","title":"CVE-2021-41244: Grafana Fine-grained access control vulnerability","date":"2024-05-14","url":"https://erroneo.us/security/cve/CVE-2021-41244/","md":"https://erroneo.us/security/cve/CVE-2021-41244/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02888,"verdict":null,"product":"github.com/grafana/grafana (Go)"},{"id":"2024-05-14","type":"digest","title":"Security digest for May 14, 2024","date":"2024-05-14","url":"https://erroneo.us/security/2024-05-14/","md":"https://erroneo.us/security/2024-05-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":5}},{"id":"CVE-2024-4671","type":"cve","title":"CVE-2024-4671: Google Chromium Visuals Use-After-Free Vulnerability","date":"2024-05-13","url":"https://erroneo.us/security/cve/CVE-2024-4671/","md":"https://erroneo.us/security/cve/CVE-2024-4671/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.08348,"verdict":null,"product":"Google Chromium"},{"id":"CVE-2024-34706","type":"cve","title":"CVE-2024-34706: @valtimo/components exposes access token to form.io","date":"2024-05-13","url":"https://erroneo.us/security/cve/CVE-2024-34706/","md":"https://erroneo.us/security/cve/CVE-2024-34706/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01057,"verdict":null,"product":"@valtimo/components (npm)"},{"id":"CVE-2024-34359","type":"cve","title":"CVE-2024-34359: llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata","date":"2024-05-13","url":"https://erroneo.us/security/cve/CVE-2024-34359/","md":"https://erroneo.us/security/cve/CVE-2024-34359/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.26001,"verdict":null,"product":"llama-cpp-python (PyPI)"},{"id":"2024-05-13","type":"digest","title":"Security digest for May 13, 2024","date":"2024-05-13","url":"https://erroneo.us/security/2024-05-13/","md":"https://erroneo.us/security/2024-05-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-34070","type":"cve","title":"CVE-2024-34070: Blind XSS Leading to Froxlor Application Compromise","date":"2024-05-10","url":"https://erroneo.us/security/cve/CVE-2024-34070/","md":"https://erroneo.us/security/cve/CVE-2024-34070/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00971,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2024-32964","type":"cve","title":"CVE-2024-32964: lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability","date":"2024-05-10","url":"https://erroneo.us/security/cve/CVE-2024-32964/","md":"https://erroneo.us/security/cve/CVE-2024-32964/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.52964,"verdict":null,"product":"@lobehub/chat (npm)"},{"id":"2024-05-10","type":"digest","title":"Security digest for May 10, 2024","date":"2024-05-10","url":"https://erroneo.us/security/2024-05-10/","md":"https://erroneo.us/security/2024-05-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-4701","type":"cve","title":"CVE-2024-4701: Genie Path Traversal vulnerability via File Uploads","date":"2024-05-09","url":"https://erroneo.us/security/cve/CVE-2024-4701/","md":"https://erroneo.us/security/cve/CVE-2024-4701/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.24629,"verdict":null,"product":"com.netflix.genie:genie-web (Maven)"},{"id":"CVE-2024-32874","type":"cve","title":"CVE-2024-32874: Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service","date":"2024-05-09","url":"https://erroneo.us/security/cve/CVE-2024-32874/","md":"https://erroneo.us/security/cve/CVE-2024-32874/index.md","severity":"medium","cvss":6.8,"kev":false,"epss":0.00774,"verdict":null,"product":"frigate (PyPI)"},{"id":"2024-05-09","type":"digest","title":"Security digest for May 9, 2024","date":"2024-05-09","url":"https://erroneo.us/security/2024-05-09/","md":"https://erroneo.us/security/2024-05-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-32980","type":"cve","title":"CVE-2024-32980: Spin applications with specific configuration vulnerable to potential network sandbox escape","date":"2024-05-08","url":"https://erroneo.us/security/cve/CVE-2024-32980/","md":"https://erroneo.us/security/cve/CVE-2024-32980/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00489,"verdict":null,"product":"spin-sdk (crates.io (Rust))"},{"id":"CVE-2024-26579","type":"cve","title":"CVE-2024-26579: Apache Inlong Deserialization of Untrusted Data vulnerability","date":"2024-05-08","url":"https://erroneo.us/security/cve/CVE-2024-26579/","md":"https://erroneo.us/security/cve/CVE-2024-26579/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01139,"verdict":null,"product":"org.apache.inlong:manager-pojo (Maven)"},{"id":"2024-05-08","type":"digest","title":"Security digest for May 8, 2024","date":"2024-05-08","url":"https://erroneo.us/security/2024-05-08/","md":"https://erroneo.us/security/2024-05-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-33434","type":"cve","title":"CVE-2024-33434: tiagorlampert CHAOS vulnerable to arbitrary code execution","date":"2024-05-07","url":"https://erroneo.us/security/cve/CVE-2024-33434/","md":"https://erroneo.us/security/cve/CVE-2024-33434/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01354,"verdict":null,"product":"github.com/tiagorlampert/CHAOS (Go)"},{"id":"2024-05-07","type":"digest","title":"Security digest for May 7, 2024","date":"2024-05-07","url":"https://erroneo.us/security/2024-05-07/","md":"https://erroneo.us/security/2024-05-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-34252","type":"cve","title":"CVE-2024-34252: pywasm3 contains a global buffer overflow which leads to segmentation fault","date":"2024-05-06","url":"https://erroneo.us/security/cve/CVE-2024-34252/","md":"https://erroneo.us/security/cve/CVE-2024-34252/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00632,"verdict":null,"product":"pywasm3 (PyPI)"},{"id":"CVE-2024-34249","type":"cve","title":"CVE-2024-34249: pywasm3 contains a heap buffer overflow which leads to segmentation fault","date":"2024-05-06","url":"https://erroneo.us/security/cve/CVE-2024-34249/","md":"https://erroneo.us/security/cve/CVE-2024-34249/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00706,"verdict":null,"product":"pywasm3 (PyPI)"},{"id":"2024-05-06","type":"digest","title":"Security digest for May 6, 2024","date":"2024-05-06","url":"https://erroneo.us/security/2024-05-06/","md":"https://erroneo.us/security/2024-05-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-vhxv-fg4m-p2w8","type":"ghsa","title":"Some CORS middleware allow untrusted origins","date":"2024-05-03","url":"https://erroneo.us/security/ghsa/GHSA-vhxv-fg4m-p2w8/","md":"https://erroneo.us/security/ghsa/GHSA-vhxv-fg4m-p2w8/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/jub0bs/cors"},{"id":"GHSA-v84h-653v-4pq9","type":"ghsa","title":"Some CORS middleware allow untrusted origins","date":"2024-05-03","url":"https://erroneo.us/security/ghsa/GHSA-v84h-653v-4pq9/","md":"https://erroneo.us/security/ghsa/GHSA-v84h-653v-4pq9/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":null,"verdict":null,"product":"github.com/jub0bs/fcors"},{"id":"CVE-2024-34461","type":"cve","title":"CVE-2024-34461: Zenario uses Twig filters insecurely in the Twig Snippet plugin","date":"2024-05-03","url":"https://erroneo.us/security/cve/CVE-2024-34461/","md":"https://erroneo.us/security/cve/CVE-2024-34461/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00954,"verdict":null,"product":"tribalsystems/zenario (Composer (PHP))"},{"id":"2024-05-03","type":"digest","title":"Security digest for May 3, 2024","date":"2024-05-03","url":"https://erroneo.us/security/2024-05-03/","md":"https://erroneo.us/security/2024-05-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-3955","type":"cve","title":"CVE-2024-3955: CraftBeerPi 4 allows arbitrary code execution","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-3955/","md":"https://erroneo.us/security/cve/CVE-2024-3955/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01149,"verdict":null,"product":"cbpi4 (PyPI)"},{"id":"CVE-2024-34394","type":"cve","title":"CVE-2024-34394: libxmljs2 vulnerable to type confusion when parsing specially crafted XML","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-34394/","md":"https://erroneo.us/security/cve/CVE-2024-34394/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.00989,"verdict":null,"product":"libxmljs2 (npm)"},{"id":"CVE-2024-34393","type":"cve","title":"CVE-2024-34393: libxmljs2 type confusion vulnerability when parsing specially crafted XML","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-34393/","md":"https://erroneo.us/security/cve/CVE-2024-34393/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.0096,"verdict":null,"product":"libxmljs2 (npm)"},{"id":"CVE-2024-34392","type":"cve","title":"CVE-2024-34392: libxmljs vulnerable to type confusion when parsing specially crafted XML","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-34392/","md":"https://erroneo.us/security/cve/CVE-2024-34392/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01136,"verdict":null,"product":"libxmljs (npm)"},{"id":"CVE-2024-34391","type":"cve","title":"CVE-2024-34391: libxmljs vulnerable to type confusion when parsing specially crafted XML","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-34391/","md":"https://erroneo.us/security/cve/CVE-2024-34391/index.md","severity":"critical","cvss":9.2,"kev":false,"epss":0.01103,"verdict":null,"product":"libxmljs (npm)"},{"id":"CVE-2024-32971","type":"cve","title":"CVE-2024-32971: Apollo Router vulnerable to Critical Regression In Query Plan Cache","date":"2024-05-02","url":"https://erroneo.us/security/cve/CVE-2024-32971/","md":"https://erroneo.us/security/cve/CVE-2024-32971/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00727,"verdict":null,"product":"apollo-router (crates.io (Rust))"},{"id":"2024-05-02","type":"digest","title":"Security digest for May 2, 2024","date":"2024-05-02","url":"https://erroneo.us/security/2024-05-02/","md":"https://erroneo.us/security/2024-05-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"CVE-2024-32962","type":"cve","title":"CVE-2024-32962: xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing","date":"2024-05-01","url":"https://erroneo.us/security/cve/CVE-2024-32962/","md":"https://erroneo.us/security/cve/CVE-2024-32962/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00833,"verdict":null,"product":"xml-crypto (npm)"},{"id":"CVE-2023-7028","type":"cve","title":"CVE-2023-7028: GitLab Community and Enterprise Editions Improper Access Control Vulnerability","date":"2024-05-01","url":"https://erroneo.us/security/cve/CVE-2023-7028/","md":"https://erroneo.us/security/cve/CVE-2023-7028/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.94458,"verdict":"act-now","product":"GitLab GitLab CE/EE"},{"id":"2024-05-01","type":"digest","title":"Security digest for May 1, 2024","date":"2024-05-01","url":"https://erroneo.us/security/2024-05-01/","md":"https://erroneo.us/security/2024-05-01/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-29988","type":"cve","title":"CVE-2024-29988: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","date":"2024-04-30","url":"https://erroneo.us/security/cve/CVE-2024-29988/","md":"https://erroneo.us/security/cve/CVE-2024-29988/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.45151,"verdict":null,"product":"Microsoft SmartScreen Prompt"},{"id":"2024-04-30","type":"digest","title":"Security digest for April 30, 2024","date":"2024-04-30","url":"https://erroneo.us/security/2024-04-30/","md":"https://erroneo.us/security/2024-04-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-346h-749j-r28w","type":"ghsa","title":"PHPECC vulnerable to multiple cryptographic side-channel attacks","date":"2024-04-25","url":"https://erroneo.us/security/ghsa/GHSA-346h-749j-r28w/","md":"https://erroneo.us/security/ghsa/GHSA-346h-749j-r28w/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"mdanter/ecc"},{"id":"CVE-2024-33663","type":"cve","title":"CVE-2024-33663: python-jose algorithm confusion with OpenSSH ECDSA keys","date":"2024-04-25","url":"https://erroneo.us/security/cve/CVE-2024-33663/","md":"https://erroneo.us/security/cve/CVE-2024-33663/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00307,"verdict":null,"product":"python-jose (PyPI)"},{"id":"2024-04-25","type":"digest","title":"Security digest for April 25, 2024","date":"2024-04-25","url":"https://erroneo.us/security/2024-04-25/","md":"https://erroneo.us/security/2024-04-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-4040","type":"cve","title":"CVE-2024-4040: CrushFTP VFS Sandbox Escape Vulnerability","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2024-4040/","md":"https://erroneo.us/security/cve/CVE-2024-4040/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99539,"verdict":null,"product":"CrushFTP CrushFTP"},{"id":"CVE-2024-32880","type":"cve","title":"CVE-2024-32880: pyLoad allows upload to arbitrary folder lead to RCE","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2024-32880/","md":"https://erroneo.us/security/cve/CVE-2024-32880/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01354,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2024-20359","type":"cve","title":"CVE-2024-20359: Cisco ASA and FTD Privilege Escalation Vulnerability","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2024-20359/","md":"https://erroneo.us/security/cve/CVE-2024-20359/index.md","severity":"medium","cvss":6,"kev":true,"epss":0.19434,"verdict":null,"product":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)"},{"id":"CVE-2024-20353","type":"cve","title":"CVE-2024-20353: Cisco ASA and FTD Denial of Service Vulnerability","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2024-20353/","md":"https://erroneo.us/security/cve/CVE-2024-20353/index.md","severity":"high","cvss":8.6,"kev":true,"epss":0.70686,"verdict":null,"product":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)"},{"id":"CVE-2020-28991","type":"cve","title":"CVE-2020-28991: Improper Access Control in Gitea","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2020-28991/","md":"https://erroneo.us/security/cve/CVE-2020-28991/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01736,"verdict":null,"product":"github.com/go-gitea/gitea (Go)"},{"id":"CVE-2020-14316","type":"cve","title":"CVE-2020-14316: Privilege Escalation in kubevirt","date":"2024-04-24","url":"https://erroneo.us/security/cve/CVE-2020-14316/","md":"https://erroneo.us/security/cve/CVE-2020-14316/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.01576,"verdict":null,"product":"kubevirt.io/kubevirt (Go)"},{"id":"2024-04-24","type":"digest","title":"Security digest for April 24, 2024","date":"2024-04-24","url":"https://erroneo.us/security/2024-04-24/","md":"https://erroneo.us/security/2024-04-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":3}},{"id":"CVE-2024-28253","type":"cve","title":"CVE-2024-28253: OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)","date":"2024-04-23","url":"https://erroneo.us/security/cve/CVE-2024-28253/","md":"https://erroneo.us/security/cve/CVE-2024-28253/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.12527,"verdict":null,"product":"org.open-metadata:openmetadata-service (Maven)"},{"id":"CVE-2022-38028","type":"cve","title":"CVE-2022-38028: Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","date":"2024-04-23","url":"https://erroneo.us/security/cve/CVE-2022-38028/","md":"https://erroneo.us/security/cve/CVE-2022-38028/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.14949,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2018-7602","type":"cve","title":"CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability","date":"2024-04-23","url":"https://erroneo.us/security/cve/CVE-2018-7602/","md":"https://erroneo.us/security/cve/CVE-2018-7602/index.md","severity":"high","cvss":8.1,"kev":false,"epss":0.99172,"verdict":null,"product":"drupal/core (Composer (PHP))"},{"id":"CVE-2014-8089","type":"cve","title":"CVE-2014-8089: Zend Framework SQL injection vulnerability","date":"2024-04-23","url":"https://erroneo.us/security/cve/CVE-2014-8089/","md":"https://erroneo.us/security/cve/CVE-2014-8089/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0255,"verdict":null,"product":"zendframework/zendframework1 (Composer (PHP))"},{"id":"2024-04-23","type":"digest","title":"Security digest for April 23, 2024","date":"2024-04-23","url":"https://erroneo.us/security/2024-04-23/","md":"https://erroneo.us/security/2024-04-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2024-21511","type":"cve","title":"CVE-2024-21511: MySQL2 for Node Arbitrary Code Injection","date":"2024-04-22","url":"https://erroneo.us/security/cve/CVE-2024-21511/","md":"https://erroneo.us/security/cve/CVE-2024-21511/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01034,"verdict":null,"product":"mysql2 (npm)"},{"id":"2024-04-22","type":"digest","title":"Security digest for April 22, 2024","date":"2024-04-22","url":"https://erroneo.us/security/2024-04-22/","md":"https://erroneo.us/security/2024-04-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-30564","type":"cve","title":"CVE-2024-30564: @andrei-tatar/nora-firebase-common Prototype Pollution vulnerability","date":"2024-04-18","url":"https://erroneo.us/security/cve/CVE-2024-30564/","md":"https://erroneo.us/security/cve/CVE-2024-30564/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01158,"verdict":null,"product":"@andrei-tatar/nora-firebase-common (npm)"},{"id":"2024-04-18","type":"digest","title":"Security digest for April 18, 2024","date":"2024-04-18","url":"https://erroneo.us/security/2024-04-18/","md":"https://erroneo.us/security/2024-04-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-v6rw-hhgg-wc4x","type":"ghsa","title":"Evmos vulnerable to DOS and transaction fee expropiation through Authz exploit","date":"2024-04-17","url":"https://erroneo.us/security/ghsa/GHSA-v6rw-hhgg-wc4x/","md":"https://erroneo.us/security/ghsa/GHSA-v6rw-hhgg-wc4x/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/evmos/evmos/v11"},{"id":"CVE-2024-3817","type":"cve","title":"CVE-2024-3817: HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches","date":"2024-04-17","url":"https://erroneo.us/security/cve/CVE-2024-3817/","md":"https://erroneo.us/security/cve/CVE-2024-3817/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01329,"verdict":null,"product":"github.com/hashicorp/go-getter (Go)"},{"id":"2024-04-17","type":"digest","title":"Security digest for April 17, 2024","date":"2024-04-17","url":"https://erroneo.us/security/2024-04-17/","md":"https://erroneo.us/security/2024-04-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-3660","type":"cve","title":"CVE-2024-3660: Keras code injection vulnerability","date":"2024-04-16","url":"https://erroneo.us/security/cve/CVE-2024-3660/","md":"https://erroneo.us/security/cve/CVE-2024-3660/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01745,"verdict":null,"product":"keras (PyPI)"},{"id":"2024-04-16","type":"digest","title":"Security digest for April 16, 2024","date":"2024-04-16","url":"https://erroneo.us/security/2024-04-16/","md":"https://erroneo.us/security/2024-04-16/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-3573","type":"cve","title":"CVE-2024-3573: mlflow vulnerable to Path Traversal","date":"2024-04-15","url":"https://erroneo.us/security/cve/CVE-2024-3573/","md":"https://erroneo.us/security/cve/CVE-2024-3573/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00733,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2024-3271","type":"cve","title":"CVE-2024-3271: llama-index-core Command Injection vulnerability","date":"2024-04-15","url":"https://erroneo.us/security/cve/CVE-2024-3271/","md":"https://erroneo.us/security/cve/CVE-2024-3271/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02886,"verdict":null,"product":"llama-index-core (PyPI)"},{"id":"CVE-2024-2912","type":"cve","title":"CVE-2024-2912: Insecure deserialization in BentoML","date":"2024-04-15","url":"https://erroneo.us/security/cve/CVE-2024-2912/","md":"https://erroneo.us/security/cve/CVE-2024-2912/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01509,"verdict":null,"product":"bentoml (PyPI)"},{"id":"CVE-2024-28056","type":"cve","title":"CVE-2024-28056: AWS Amplify CLI has incorrect trust policy management","date":"2024-04-15","url":"https://erroneo.us/security/cve/CVE-2024-28056/","md":"https://erroneo.us/security/cve/CVE-2024-28056/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01665,"verdict":null,"product":"@aws-amplify/cli (npm)"},{"id":"CVE-2024-2083","type":"cve","title":"CVE-2024-2083: Directory traversal in zenml","date":"2024-04-15","url":"https://erroneo.us/security/cve/CVE-2024-2083/","md":"https://erroneo.us/security/cve/CVE-2024-2083/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.37487,"verdict":null,"product":"zenml (PyPI)"},{"id":"2024-04-15","type":"digest","title":"Security digest for April 15, 2024","date":"2024-04-15","url":"https://erroneo.us/security/2024-04-15/","md":"https://erroneo.us/security/2024-04-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"pan-os-globalprotect-cve-2024-3400","type":"brief","title":"PAN-OS GlobalProtect Zero-Day RCE (CVE-2024-3400)","date":"2024-04-12","url":"https://erroneo.us/security/briefs/pan-os-globalprotect-cve-2024-3400/","md":"https://erroneo.us/security/briefs/pan-os-globalprotect-cve-2024-3400/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"act-now","cves":["CVE-2024-3400"],"summary":"Any PAN-OS 10.2, 11.0 or 11.1 firewall with a GlobalProtect gateway or portal that is not on a fixed hotfix is exposed to unauthenticated root code execution and should be patched and checked immediately."},{"id":"CVE-2024-3400","type":"cve","title":"CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability","date":"2024-04-12","url":"https://erroneo.us/security/cve/CVE-2024-3400/","md":"https://erroneo.us/security/cve/CVE-2024-3400/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Palo Alto Networks PAN-OS"},{"id":"2024-04-12","type":"digest","title":"Security digest for April 12, 2024","date":"2024-04-12","url":"https://erroneo.us/security/2024-04-12/","md":"https://erroneo.us/security/2024-04-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":0}},{"id":"CVE-2024-3273","type":"cve","title":"CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability","date":"2024-04-11","url":"https://erroneo.us/security/cve/CVE-2024-3273/","md":"https://erroneo.us/security/cve/CVE-2024-3273/index.md","severity":"high","cvss":7.3,"kev":true,"epss":0.99995,"verdict":null,"product":"D-Link Multiple NAS Devices"},{"id":"CVE-2024-3272","type":"cve","title":"CVE-2024-3272: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","date":"2024-04-11","url":"https://erroneo.us/security/cve/CVE-2024-3272/","md":"https://erroneo.us/security/cve/CVE-2024-3272/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98109,"verdict":null,"product":"D-Link Multiple NAS Devices"},{"id":"2024-04-11","type":"digest","title":"Security digest for April 11, 2024","date":"2024-04-11","url":"https://erroneo.us/security/2024-04-11/","md":"https://erroneo.us/security/2024-04-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2024-32644","type":"cve","title":"CVE-2024-32644: Evmos transaction execution not accounting for all state transition after interaction with precompiles","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-32644/","md":"https://erroneo.us/security/cve/CVE-2024-32644/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00943,"verdict":null,"product":"github.com/evmos/evmos/v16 (Go)"},{"id":"CVE-2024-31997","type":"cve","title":"CVE-2024-31997: XWiki Platform remote code execution from account through UIExtension parameters","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31997/","md":"https://erroneo.us/security/cve/CVE-2024-31997/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.73925,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-uiextension-api (Maven)"},{"id":"CVE-2024-31996","type":"cve","title":"CVE-2024-31996: XWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31996/","md":"https://erroneo.us/security/cve/CVE-2024-31996/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02104,"verdict":null,"product":"org.xwiki.commons:xwiki-commons-velocity (Maven)"},{"id":"CVE-2024-31988","type":"cve","title":"CVE-2024-31988: XWiki Platform CSRF remote code execution through the realtime HTML Converter API","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31988/","md":"https://erroneo.us/security/cve/CVE-2024-31988/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00696,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-realtime-ui (Maven)"},{"id":"CVE-2024-31987","type":"cve","title":"CVE-2024-31987: XWiki Platform remote code execution from account via custom skins support","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31987/","md":"https://erroneo.us/security/cve/CVE-2024-31987/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01447,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"CVE-2024-31986","type":"cve","title":"CVE-2024-31986: XWiki Platform CSRF remote code execution through scheduler job's document reference","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31986/","md":"https://erroneo.us/security/cve/CVE-2024-31986/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00549,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-scheduler-ui (Maven)"},{"id":"CVE-2024-31984","type":"cve","title":"CVE-2024-31984: XWiki Platform: Remote code execution through space title and Solr space facet","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31984/","md":"https://erroneo.us/security/cve/CVE-2024-31984/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.82996,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-search-solr-ui (Maven)"},{"id":"CVE-2024-31983","type":"cve","title":"CVE-2024-31983: XWiki Platform: Remote code execution from edit in multilingual wikis via translations","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31983/","md":"https://erroneo.us/security/cve/CVE-2024-31983/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01447,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-localization-source-wiki (Maven)"},{"id":"CVE-2024-31982","type":"cve","title":"CVE-2024-31982: XWiki Platform: Remote code execution as guest via DatabaseSearch","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31982/","md":"https://erroneo.us/security/cve/CVE-2024-31982/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.3452,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-search-ui (Maven)"},{"id":"CVE-2024-31981","type":"cve","title":"CVE-2024-31981: XWiki Platform: Privilege escalation (PR) from user registration through PDFClass","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31981/","md":"https://erroneo.us/security/cve/CVE-2024-31981/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01447,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"CVE-2024-31819","type":"cve","title":"CVE-2024-31819: WWBN AVideo Remote Code Execution","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31819/","md":"https://erroneo.us/security/cve/CVE-2024-31819/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.15635,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2024-31465","type":"cve","title":"CVE-2024-31465: XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-31465/","md":"https://erroneo.us/security/cve/CVE-2024-31465/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.75575,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-search-ui (Maven)"},{"id":"CVE-2024-3098","type":"cve","title":"CVE-2024-3098: llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-3098/","md":"https://erroneo.us/security/cve/CVE-2024-3098/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00959,"verdict":null,"product":"llama-index-core (PyPI)"},{"id":"CVE-2024-2952","type":"cve","title":"CVE-2024-2952: LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-2952/","md":"https://erroneo.us/security/cve/CVE-2024-2952/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01267,"verdict":null,"product":"litellm (PyPI)"},{"id":"CVE-2024-2195","type":"cve","title":"CVE-2024-2195: Aim Web API vulnerable to Remote Code Execution","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-2195/","md":"https://erroneo.us/security/cve/CVE-2024-2195/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01815,"verdict":null,"product":"aim (PyPI)"},{"id":"CVE-2024-21508","type":"cve","title":"CVE-2024-21508: mysql2 Remote Code Execution (RCE) via the readCodeFor function","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-21508/","md":"https://erroneo.us/security/cve/CVE-2024-21508/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02554,"verdict":null,"product":"mysql2 (npm)"},{"id":"CVE-2024-2029","type":"cve","title":"CVE-2024-2029: LocalAI Command Injection in audioToWav","date":"2024-04-10","url":"https://erroneo.us/security/cve/CVE-2024-2029/","md":"https://erroneo.us/security/cve/CVE-2024-2029/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02879,"verdict":null,"product":"github.com/go-skynet/LocalAI (Go)"},{"id":"2024-04-10","type":"digest","title":"Security digest for April 10, 2024","date":"2024-04-10","url":"https://erroneo.us/security/2024-04-10/","md":"https://erroneo.us/security/2024-04-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":17}},{"id":"CVE-2024-31866","type":"cve","title":"CVE-2024-31866: Improper escaping in Apache Zeppelin","date":"2024-04-09","url":"https://erroneo.us/security/cve/CVE-2024-31866/","md":"https://erroneo.us/security/cve/CVE-2024-31866/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01427,"verdict":null,"product":"org.apache.zeppelin:zeppelin-interpreter (Maven)"},{"id":"CVE-2024-31864","type":"cve","title":"CVE-2024-31864: Apache Zeppelin remote code execution by adding malicious JDBC connection string","date":"2024-04-09","url":"https://erroneo.us/security/cve/CVE-2024-31864/","md":"https://erroneo.us/security/cve/CVE-2024-31864/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01257,"verdict":null,"product":"org.apache.zeppelin:zeppelin-jdbc (Maven)"},{"id":"2024-04-09","type":"digest","title":"Security digest for April 9, 2024","date":"2024-04-09","url":"https://erroneo.us/security/2024-04-09/","md":"https://erroneo.us/security/2024-04-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-j496-crgh-34mx","type":"ghsa","title":"ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks","date":"2024-04-05","url":"https://erroneo.us/security/ghsa/GHSA-j496-crgh-34mx/","md":"https://erroneo.us/security/ghsa/GHSA-j496-crgh-34mx/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/cosmos/ibc-go/v4, github.com/cosmos/ibc-go/v5"},{"id":"2024-04-05","type":"digest","title":"Security digest for April 5, 2024","date":"2024-04-05","url":"https://erroneo.us/security/2024-04-05/","md":"https://erroneo.us/security/2024-04-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-29748","type":"cve","title":"CVE-2024-29748: Android Pixel Privilege Escalation Vulnerability","date":"2024-04-04","url":"https://erroneo.us/security/cve/CVE-2024-29748/","md":"https://erroneo.us/security/cve/CVE-2024-29748/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00676,"verdict":null,"product":"Android Pixel"},{"id":"CVE-2024-29745","type":"cve","title":"CVE-2024-29745: Android Pixel Information Disclosure Vulnerability","date":"2024-04-04","url":"https://erroneo.us/security/cve/CVE-2024-29745/","md":"https://erroneo.us/security/cve/CVE-2024-29745/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.00486,"verdict":null,"product":"Android Pixel"},{"id":"CVE-2024-27448","type":"cve","title":"CVE-2024-27448: MailDev Remote Code Execution","date":"2024-04-04","url":"https://erroneo.us/security/cve/CVE-2024-27448/","md":"https://erroneo.us/security/cve/CVE-2024-27448/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00904,"verdict":null,"product":"maildev (npm)"},{"id":"2024-04-04","type":"digest","title":"Security digest for April 4, 2024","date":"2024-04-04","url":"https://erroneo.us/security/2024-04-04/","md":"https://erroneo.us/security/2024-04-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2021-27312","type":"cve","title":"CVE-2021-27312: Gleez Cms Server Side Request Forgery (SSRF) vulnerability","date":"2024-04-02","url":"https://erroneo.us/security/cve/CVE-2021-27312/","md":"https://erroneo.us/security/cve/CVE-2021-27312/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.01031,"verdict":null,"product":"gleez/cms (Composer (PHP))"},{"id":"2024-04-02","type":"digest","title":"Security digest for April 2, 2024","date":"2024-04-02","url":"https://erroneo.us/security/2024-04-02/","md":"https://erroneo.us/security/2024-04-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"xz-utils-backdoor","type":"brief","title":"xz-utils Backdoor in liblzma 5.6.0/5.6.1 (CVE-2024-3094)","date":"2024-03-29","url":"https://erroneo.us/security/briefs/xz-utils-backdoor/","md":"https://erroneo.us/security/briefs/xz-utils-backdoor/index.md","severity":"critical","kev":false,"epss":0.909,"verdict":"check-exposure","cves":["CVE-2024-3094"],"summary":"The backdoor only reached rolling and pre-release distributions for a few weeks before discovery; stable enterprise releases never shipped it, but any machine that ran xz 5.6.0 or 5.6.1 should be checked."},{"id":"CVE-2024-3094","type":"cve","title":"CVE-2024-3094: Xz: malicious code in distributed source","date":"2024-03-29","url":"https://erroneo.us/security/cve/CVE-2024-3094/","md":"https://erroneo.us/security/cve/CVE-2024-3094/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.909,"verdict":"check-exposure","product":"xz"},{"id":"2024-03-29","type":"digest","title":"Security digest for March 29, 2024","date":"2024-03-29","url":"https://erroneo.us/security/2024-03-29/","md":"https://erroneo.us/security/2024-03-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"shadowray-ray-jobs-api-cve-2023-48022","type":"brief","title":"ShadowRay: Exposed Ray Clusters Hijacked (CVE-2023-48022)","date":"2024-03-26","url":"https://erroneo.us/security/briefs/shadowray-ray-jobs-api-cve-2023-48022/","md":"https://erroneo.us/security/briefs/shadowray-ray-jobs-api-cve-2023-48022/index.md","severity":"critical","kev":false,"epss":0.83942,"verdict":"check-exposure","cves":["CVE-2023-48022"],"summary":"There is no patch to install: if any Ray dashboard, Jobs or Client port is reachable from an untrusted network, anyone who can reach it can run code on your cluster."},{"id":"CVE-2024-28335","type":"cve","title":"CVE-2024-28335: Lektor does not sanitize database path traversal","date":"2024-03-26","url":"https://erroneo.us/security/cve/CVE-2024-28335/","md":"https://erroneo.us/security/cve/CVE-2024-28335/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00849,"verdict":null,"product":"Lektor (PyPI)"},{"id":"CVE-2023-24955","type":"cve","title":"CVE-2023-24955: Microsoft SharePoint Server Code Injection Vulnerability","date":"2024-03-26","url":"https://erroneo.us/security/cve/CVE-2023-24955/","md":"https://erroneo.us/security/cve/CVE-2023-24955/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.84974,"verdict":null,"product":"Microsoft SharePoint Server"},{"id":"2024-03-26","type":"digest","title":"Security digest for March 26, 2024","date":"2024-03-26","url":"https://erroneo.us/security/2024-03-26/","md":"https://erroneo.us/security/2024-03-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2024-29650","type":"cve","title":"CVE-2024-29650: @thi.ng/paths Prototype Pollution vulnerability","date":"2024-03-25","url":"https://erroneo.us/security/cve/CVE-2024-29650/","md":"https://erroneo.us/security/cve/CVE-2024-29650/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01404,"verdict":null,"product":"@thi.ng/paths (npm)"},{"id":"CVE-2024-27280","type":"cve","title":"CVE-2024-27280: StringIO buffer overread vulnerability","date":"2024-03-25","url":"https://erroneo.us/security/cve/CVE-2024-27280/","md":"https://erroneo.us/security/cve/CVE-2024-27280/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02364,"verdict":null,"product":"stringio (RubyGems)"},{"id":"CVE-2023-48788","type":"cve","title":"CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Vulnerability","date":"2024-03-25","url":"https://erroneo.us/security/cve/CVE-2023-48788/","md":"https://erroneo.us/security/cve/CVE-2023-48788/index.md","severity":"critical","cvss":9.3,"kev":true,"epss":0.98446,"verdict":null,"product":"Fortinet FortiClient EMS"},{"id":"CVE-2021-44529","type":"cve","title":"CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","date":"2024-03-25","url":"https://erroneo.us/security/cve/CVE-2021-44529/","md":"https://erroneo.us/security/cve/CVE-2021-44529/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99105,"verdict":null,"product":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)"},{"id":"CVE-2019-7256","type":"cve","title":"CVE-2019-7256: Nice Linear eMerge E3-Series OS Command Injection Vulnerability","date":"2024-03-25","url":"https://erroneo.us/security/cve/CVE-2019-7256/","md":"https://erroneo.us/security/cve/CVE-2019-7256/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97081,"verdict":null,"product":"Nice Linear eMerge E3-Series"},{"id":"2024-03-25","type":"digest","title":"Security digest for March 25, 2024","date":"2024-03-25","url":"https://erroneo.us/security/2024-03-25/","md":"https://erroneo.us/security/2024-03-25/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":2}},{"id":"CVE-2024-28179","type":"cve","title":"CVE-2024-28179: Jupyter Server Proxy's Websocket Proxying does not require authentication","date":"2024-03-20","url":"https://erroneo.us/security/cve/CVE-2024-28179/","md":"https://erroneo.us/security/cve/CVE-2024-28179/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0103,"verdict":null,"product":"jupyter-server-proxy (PyPI)"},{"id":"2024-03-20","type":"digest","title":"Security digest for March 20, 2024","date":"2024-03-20","url":"https://erroneo.us/security/2024-03-20/","md":"https://erroneo.us/security/2024-03-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-29027","type":"cve","title":"CVE-2024-29027: Server crashes on invalid Cloud Function or Cloud Job name","date":"2024-03-19","url":"https://erroneo.us/security/cve/CVE-2024-29027/","md":"https://erroneo.us/security/cve/CVE-2024-29027/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01188,"verdict":null,"product":"parse-server (npm)"},{"id":"2024-03-19","type":"digest","title":"Security digest for March 19, 2024","date":"2024-03-19","url":"https://erroneo.us/security/2024-03-19/","md":"https://erroneo.us/security/2024-03-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-28125","type":"cve","title":"CVE-2024-28125: FitNesse allows execution of arbitrary OS commands","date":"2024-03-18","url":"https://erroneo.us/security/cve/CVE-2024-28125/","md":"https://erroneo.us/security/cve/CVE-2024-28125/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00992,"verdict":null,"product":"org.fitnesse:fitnesse (Maven)"},{"id":"CVE-2024-21652","type":"cve","title":"CVE-2024-21652: Bypassing Brute Force Protection via Application Crash and In-Memory Data Loss","date":"2024-03-18","url":"https://erroneo.us/security/cve/CVE-2024-21652/","md":"https://erroneo.us/security/cve/CVE-2024-21652/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00751,"verdict":null,"product":"github.com/argoproj/argo-cd/v2 (Go)"},{"id":"2024-03-18","type":"digest","title":"Security digest for March 18, 2024","date":"2024-03-18","url":"https://erroneo.us/security/2024-03-18/","md":"https://erroneo.us/security/2024-03-18/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2024-28752","type":"cve","title":"CVE-2024-28752: SSRF vulnerability using the Aegis DataBinding in Apache CXF","date":"2024-03-15","url":"https://erroneo.us/security/cve/CVE-2024-28752/","md":"https://erroneo.us/security/cve/CVE-2024-28752/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.02468,"verdict":null,"product":"org.apache.cxf:cxf-rt-databinding-aegis (Maven)"},{"id":"CVE-2024-28175","type":"cve","title":"CVE-2024-28175: Cross-site scripting on application summary component","date":"2024-03-15","url":"https://erroneo.us/security/cve/CVE-2024-28175/","md":"https://erroneo.us/security/cve/CVE-2024-28175/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00654,"verdict":null,"product":"github.com/argoproj/argo-cd/v2 (Go)"},{"id":"CVE-2024-27102","type":"cve","title":"CVE-2024-27102: Pterodactyl Wings vulnerable to improper isolation of server file access","date":"2024-03-15","url":"https://erroneo.us/security/cve/CVE-2024-27102/","md":"https://erroneo.us/security/cve/CVE-2024-27102/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00545,"verdict":null,"product":"github.com/pterodactyl/wings (Go)"},{"id":"2024-03-15","type":"digest","title":"Security digest for March 15, 2024","date":"2024-03-15","url":"https://erroneo.us/security/2024-03-15/","md":"https://erroneo.us/security/2024-03-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-22205","type":"cve","title":"CVE-2024-22205: Whoogle Search Server-Side Request Forgery vulnerability","date":"2024-03-14","url":"https://erroneo.us/security/cve/CVE-2024-22205/","md":"https://erroneo.us/security/cve/CVE-2024-22205/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00988,"verdict":null,"product":"whoogle-search (PyPI)"},{"id":"CVE-2024-22203","type":"cve","title":"CVE-2024-22203: Whoogle Search Path Traversal vulnerability","date":"2024-03-14","url":"https://erroneo.us/security/cve/CVE-2024-22203/","md":"https://erroneo.us/security/cve/CVE-2024-22203/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01011,"verdict":null,"product":"whoogle-search (PyPI)"},{"id":"CVE-2023-28102","type":"cve","title":"CVE-2023-28102: discordrb OS Command Injection vulnerability","date":"2024-03-14","url":"https://erroneo.us/security/cve/CVE-2023-28102/","md":"https://erroneo.us/security/cve/CVE-2023-28102/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.02567,"verdict":null,"product":"discordrb (RubyGems)"},{"id":"2024-03-14","type":"digest","title":"Security digest for March 14, 2024","date":"2024-03-14","url":"https://erroneo.us/security/2024-03-14/","md":"https://erroneo.us/security/2024-03-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-27317","type":"cve","title":"CVE-2024-27317: Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification","date":"2024-03-12","url":"https://erroneo.us/security/cve/CVE-2024-27317/","md":"https://erroneo.us/security/cve/CVE-2024-27317/index.md","severity":"high","cvss":8.4,"kev":false,"epss":0.56934,"verdict":null,"product":"org.apache.pulsar:pulsar-functions-worker (Maven)"},{"id":"2024-03-12","type":"digest","title":"Security digest for March 12, 2024","date":"2024-03-12","url":"https://erroneo.us/security/2024-03-12/","md":"https://erroneo.us/security/2024-03-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-27198","type":"cve","title":"CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability","date":"2024-03-07","url":"https://erroneo.us/security/cve/CVE-2024-27198/","md":"https://erroneo.us/security/cve/CVE-2024-27198/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99938,"verdict":null,"product":"JetBrains TeamCity"},{"id":"CVE-2024-2044","type":"cve","title":"CVE-2024-2044: pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user","date":"2024-03-07","url":"https://erroneo.us/security/cve/CVE-2024-2044/","md":"https://erroneo.us/security/cve/CVE-2024-2044/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.79465,"verdict":null,"product":"pgAdmin4 (PyPI)"},{"id":"CVE-2024-0917","type":"cve","title":"CVE-2024-0917: PaddlePaddle vulnerable to remote code execution","date":"2024-03-07","url":"https://erroneo.us/security/cve/CVE-2024-0917/","md":"https://erroneo.us/security/cve/CVE-2024-0917/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01652,"verdict":null,"product":"paddlepaddle (PyPI)"},{"id":"CVE-2024-0818","type":"cve","title":"CVE-2024-0818: PaddlePaddle Path Traversal vulnerability","date":"2024-03-07","url":"https://erroneo.us/security/cve/CVE-2024-0818/","md":"https://erroneo.us/security/cve/CVE-2024-0818/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01058,"verdict":null,"product":"paddlepaddle (PyPI)"},{"id":"2024-03-07","type":"digest","title":"Security digest for March 7, 2024","date":"2024-03-07","url":"https://erroneo.us/security/2024-03-07/","md":"https://erroneo.us/security/2024-03-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":3}},{"id":"CVE-2024-28213","type":"cve","title":"CVE-2024-28213: nGrinder vulnerable to unsafe Java objects deserialization","date":"2024-03-06","url":"https://erroneo.us/security/cve/CVE-2024-28213/","md":"https://erroneo.us/security/cve/CVE-2024-28213/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01189,"verdict":null,"product":"org.ngrinder:ngrinder-core (Maven)"},{"id":"CVE-2024-26580","type":"cve","title":"CVE-2024-26580: Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability","date":"2024-03-06","url":"https://erroneo.us/security/cve/CVE-2024-26580/","md":"https://erroneo.us/security/cve/CVE-2024-26580/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0122,"verdict":null,"product":"org.apache.inlong:manager-common (Maven)"},{"id":"CVE-2024-23296","type":"cve","title":"CVE-2024-23296: Apple Multiple Products Memory Corruption Vulnerability","date":"2024-03-06","url":"https://erroneo.us/security/cve/CVE-2024-23296/","md":"https://erroneo.us/security/cve/CVE-2024-23296/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01411,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2024-23225","type":"cve","title":"CVE-2024-23225: Apple Multiple Products Memory Corruption Vulnerability","date":"2024-03-06","url":"https://erroneo.us/security/cve/CVE-2024-23225/","md":"https://erroneo.us/security/cve/CVE-2024-23225/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01481,"verdict":null,"product":"Apple Multiple Products"},{"id":"2024-03-06","type":"digest","title":"Security digest for March 6, 2024","date":"2024-03-06","url":"https://erroneo.us/security/2024-03-06/","md":"https://erroneo.us/security/2024-03-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2024-27922","type":"cve","title":"CVE-2024-27922: HTTP Handling Vulnerability in the Bare server","date":"2024-03-05","url":"https://erroneo.us/security/cve/CVE-2024-27922/","md":"https://erroneo.us/security/cve/CVE-2024-27922/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00823,"verdict":null,"product":"@tomphttp/bare-server-node (npm)"},{"id":"CVE-2023-21237","type":"cve","title":"CVE-2023-21237: Android Pixel Information Disclosure Vulnerability ","date":"2024-03-05","url":"https://erroneo.us/security/cve/CVE-2023-21237/","md":"https://erroneo.us/security/cve/CVE-2023-21237/index.md","severity":"medium","cvss":6.2,"kev":true,"epss":0.00266,"verdict":null,"product":"Android Pixel"},{"id":"CVE-2021-36380","type":"cve","title":"CVE-2021-36380: Sunhillo SureLine OS Command Injection Vulnerablity","date":"2024-03-05","url":"https://erroneo.us/security/cve/CVE-2021-36380/","md":"https://erroneo.us/security/cve/CVE-2021-36380/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97832,"verdict":null,"product":"Sunhillo SureLine"},{"id":"2024-03-05","type":"digest","title":"Security digest for March 5, 2024","date":"2024-03-05","url":"https://erroneo.us/security/2024-03-05/","md":"https://erroneo.us/security/2024-03-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-27307","type":"cve","title":"CVE-2024-27307: JSONata expression can pollute the \"Object\" prototype","date":"2024-03-04","url":"https://erroneo.us/security/cve/CVE-2024-27307/","md":"https://erroneo.us/security/cve/CVE-2024-27307/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01422,"verdict":null,"product":"jsonata (npm)"},{"id":"CVE-2024-27302","type":"cve","title":"CVE-2024-27302: Authorization Bypass Through User-Controlled Key in go-zero","date":"2024-03-04","url":"https://erroneo.us/security/cve/CVE-2024-27302/","md":"https://erroneo.us/security/cve/CVE-2024-27302/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00774,"verdict":null,"product":"github.com/zeromicro/go-zero (Go)"},{"id":"CVE-2024-21338","type":"cve","title":"CVE-2024-21338: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","date":"2024-03-04","url":"https://erroneo.us/security/cve/CVE-2024-21338/","md":"https://erroneo.us/security/cve/CVE-2024-21338/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.5981,"verdict":null,"product":"Microsoft Windows"},{"id":"2024-03-04","type":"digest","title":"Security digest for March 4, 2024","date":"2024-03-04","url":"https://erroneo.us/security/2024-03-04/","md":"https://erroneo.us/security/2024-03-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"GHSA-4g2x-vq5p-5vj6","type":"ghsa","title":"Budibase affected by VM2 Constructor Escape Vulnerability","date":"2024-03-01","url":"https://erroneo.us/security/ghsa/GHSA-4g2x-vq5p-5vj6/","md":"https://erroneo.us/security/ghsa/GHSA-4g2x-vq5p-5vj6/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"@budibase/server"},{"id":"CVE-2024-27298","type":"cve","title":"CVE-2024-27298: ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection","date":"2024-03-01","url":"https://erroneo.us/security/cve/CVE-2024-27298/","md":"https://erroneo.us/security/cve/CVE-2024-27298/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0103,"verdict":null,"product":"parse-server (npm)"},{"id":"2024-03-01","type":"digest","title":"Security digest for March 1, 2024","date":"2024-03-01","url":"https://erroneo.us/security/2024-03-01/","md":"https://erroneo.us/security/2024-03-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-29360","type":"cve","title":"CVE-2023-29360: Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","date":"2024-02-29","url":"https://erroneo.us/security/cve/CVE-2023-29360/","md":"https://erroneo.us/security/cve/CVE-2023-29360/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.2162,"verdict":null,"product":"Microsoft Streaming Service"},{"id":"2024-02-29","type":"digest","title":"Security digest for February 29, 2024","date":"2024-02-29","url":"https://erroneo.us/security/2024-02-29/","md":"https://erroneo.us/security/2024-02-29/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-25128","type":"cve","title":"CVE-2024-25128: Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID","date":"2024-02-28","url":"https://erroneo.us/security/cve/CVE-2024-25128/","md":"https://erroneo.us/security/cve/CVE-2024-25128/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00857,"verdict":null,"product":"Flask-AppBuilder (PyPI)"},{"id":"2024-02-28","type":"digest","title":"Security digest for February 28, 2024","date":"2024-02-28","url":"https://erroneo.us/security/2024-02-28/","md":"https://erroneo.us/security/2024-02-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"hugging-face-malicious-pickle-models","type":"brief","title":"Malicious Hugging Face Models: Pickle Code Execution","date":"2024-02-27","url":"https://erroneo.us/security/briefs/hugging-face-malicious-pickle-models/","md":"https://erroneo.us/security/briefs/hugging-face-malicious-pickle-models/index.md","severity":"high","kev":false,"epss":null,"verdict":"check-exposure","cves":[],"summary":"This is a standing risk, not a one-off bug: loading a pickle-based model from an untrusted repo is running that author's code, so check how your pipelines load third-party weights."},{"id":"GHSA-x5r5-2qrx-rqj8","type":"ghsa","title":"Transparent TLS may not be applied to Marbles with certain manifest configurations","date":"2024-02-27","url":"https://erroneo.us/security/ghsa/GHSA-x5r5-2qrx-rqj8/","md":"https://erroneo.us/security/ghsa/GHSA-x5r5-2qrx-rqj8/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"github.com/edgelesssys/marblerun"},{"id":"CVE-2023-51518","type":"cve","title":"CVE-2023-51518: Apache James server: Privilege escalation via JMX pre-authentication deserialization","date":"2024-02-27","url":"https://erroneo.us/security/cve/CVE-2023-51518/","md":"https://erroneo.us/security/cve/CVE-2023-51518/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01189,"verdict":null,"product":"org.apache.james:james-server (Maven)"},{"id":"2024-02-27","type":"digest","title":"Security digest for February 27, 2024","date":"2024-02-27","url":"https://erroneo.us/security/2024-02-27/","md":"https://erroneo.us/security/2024-02-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"GHSA-hx5q-v6pj-533r","type":"ghsa","title":"SAML authentication bypass due to missing validation on unsigned SAML messages","date":"2024-02-26","url":"https://erroneo.us/security/ghsa/GHSA-hx5q-v6pj-533r/","md":"https://erroneo.us/security/ghsa/GHSA-hx5q-v6pj-533r/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"com.linecorp.centraldogma:centraldogma-server-auth-saml"},{"id":"GHSA-84c3-j8r2-mcm8","type":"ghsa","title":"@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys","date":"2024-02-26","url":"https://erroneo.us/security/ghsa/GHSA-84c3-j8r2-mcm8/","md":"https://erroneo.us/security/ghsa/GHSA-84c3-j8r2-mcm8/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":null,"verdict":null,"product":"@nfid/embed"},{"id":"CVE-2024-27444","type":"cve","title":"CVE-2024-27444: LangChain Experimental vulnerable to arbitrary code execution","date":"2024-02-26","url":"https://erroneo.us/security/cve/CVE-2024-27444/","md":"https://erroneo.us/security/cve/CVE-2024-27444/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00773,"verdict":"check-exposure","product":"langchain-experimental (PyPI)"},{"id":"CVE-2024-1735","type":"cve","title":"CVE-2024-1735: Armeria SAML authentication bypass due to missing validation on unsigned SAML messages","date":"2024-02-26","url":"https://erroneo.us/security/cve/CVE-2024-1735/","md":"https://erroneo.us/security/cve/CVE-2024-1735/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00834,"verdict":null,"product":"com.linecorp.armeria:armeria-saml (Maven)"},{"id":"2024-02-26","type":"digest","title":"Security digest for February 26, 2024","date":"2024-02-26","url":"https://erroneo.us/security/2024-02-26/","md":"https://erroneo.us/security/2024-02-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2024-27133","type":"cve","title":"CVE-2024-27133: MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution","date":"2024-02-23","url":"https://erroneo.us/security/cve/CVE-2024-27133/","md":"https://erroneo.us/security/cve/CVE-2024-27133/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00656,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2024-27132","type":"cve","title":"CVE-2024-27132: Cross-site Scripting in MLFlow","date":"2024-02-23","url":"https://erroneo.us/security/cve/CVE-2024-27132/","md":"https://erroneo.us/security/cve/CVE-2024-27132/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.00878,"verdict":null,"product":"mlflow (PyPI)"},{"id":"2024-02-23","type":"digest","title":"Security digest for February 23, 2024","date":"2024-02-23","url":"https://erroneo.us/security/2024-02-23/","md":"https://erroneo.us/security/2024-02-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"GHSA-97m3-52wr-xvv2","type":"ghsa","title":"Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE","date":"2024-02-22","url":"https://erroneo.us/security/ghsa/GHSA-97m3-52wr-xvv2/","md":"https://erroneo.us/security/ghsa/GHSA-97m3-52wr-xvv2/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"phenx/php-svg-lib"},{"id":"CVE-2024-25124","type":"cve","title":"CVE-2024-25124: Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials","date":"2024-02-22","url":"https://erroneo.us/security/cve/CVE-2024-25124/","md":"https://erroneo.us/security/cve/CVE-2024-25124/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00655,"verdict":null,"product":"github.com/gofiber/fiber/v2 (Go)"},{"id":"CVE-2024-1709","type":"cve","title":"CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability","date":"2024-02-22","url":"https://erroneo.us/security/cve/CVE-2024-1709/","md":"https://erroneo.us/security/cve/CVE-2024-1709/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.9998,"verdict":"act-now","product":"ConnectWise ScreenConnect"},{"id":"2024-02-22","type":"digest","title":"Security digest for February 22, 2024","date":"2024-02-22","url":"https://erroneo.us/security/2024-02-22/","md":"https://erroneo.us/security/2024-02-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2024-23346","type":"cve","title":"CVE-2024-23346: pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string","date":"2024-02-21","url":"https://erroneo.us/security/cve/CVE-2024-23346/","md":"https://erroneo.us/security/cve/CVE-2024-23346/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.03816,"verdict":null,"product":"pymatgen (PyPI)"},{"id":"CVE-2024-1597","type":"cve","title":"CVE-2024-1597: org.postgresql:postgresql vulnerable to SQL Injection via line comment generation","date":"2024-02-21","url":"https://erroneo.us/security/cve/CVE-2024-1597/","md":"https://erroneo.us/security/cve/CVE-2024-1597/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.0481,"verdict":null,"product":"org.postgresql:postgresql (Maven)"},{"id":"CVE-2023-47795","type":"cve","title":"CVE-2023-47795: Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting","date":"2024-02-21","url":"https://erroneo.us/security/cve/CVE-2023-47795/","md":"https://erroneo.us/security/cve/CVE-2023-47795/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00614,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"2024-02-21","type":"digest","title":"Security digest for February 21, 2024","date":"2024-02-21","url":"https://erroneo.us/security/2024-02-21/","md":"https://erroneo.us/security/2024-02-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-26269","type":"cve","title":"CVE-2024-26269: Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-26269/","md":"https://erroneo.us/security/cve/CVE-2024-26269/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00555,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-26266","type":"cve","title":"CVE-2024-26266: Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-26266/","md":"https://erroneo.us/security/cve/CVE-2024-26266/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00558,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25610","type":"cve","title":"CVE-2024-25610: Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25610/","md":"https://erroneo.us/security/cve/CVE-2024-25610/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00517,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25603","type":"cve","title":"CVE-2024-25603: Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25603/","md":"https://erroneo.us/security/cve/CVE-2024-25603/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00558,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25602","type":"cve","title":"CVE-2024-25602: Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25602/","md":"https://erroneo.us/security/cve/CVE-2024-25602/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00614,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25601","type":"cve","title":"CVE-2024-25601: Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25601/","md":"https://erroneo.us/security/cve/CVE-2024-25601/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00558,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25152","type":"cve","title":"CVE-2024-25152: Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25152/","md":"https://erroneo.us/security/cve/CVE-2024-25152/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00558,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25147","type":"cve","title":"CVE-2024-25147: Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25147/","md":"https://erroneo.us/security/cve/CVE-2024-25147/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00555,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-25141","type":"cve","title":"CVE-2024-25141: Improper Certificate Validation in apache airflow mongo hook","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-25141/","md":"https://erroneo.us/security/cve/CVE-2024-25141/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00625,"verdict":null,"product":"apache-airflow-providers-mongo (PyPI)"},{"id":"CVE-2024-1631","type":"cve","title":"CVE-2024-1631: agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2024-1631/","md":"https://erroneo.us/security/cve/CVE-2024-1631/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00882,"verdict":null,"product":"@dfinity/identity (npm)"},{"id":"CVE-2023-49109","type":"cve","title":"CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2023-49109/","md":"https://erroneo.us/security/cve/CVE-2023-49109/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02301,"verdict":null,"product":"org.apache.dolphinscheduler:dolphinscheduler (Maven)"},{"id":"CVE-2023-42498","type":"cve","title":"CVE-2023-42498: Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2023-42498/","md":"https://erroneo.us/security/cve/CVE-2023-42498/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00611,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2023-42496","type":"cve","title":"CVE-2023-42496: Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2023-42496/","md":"https://erroneo.us/security/cve/CVE-2023-42496/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00611,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2023-40191","type":"cve","title":"CVE-2023-40191: Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting","date":"2024-02-20","url":"https://erroneo.us/security/cve/CVE-2023-40191/","md":"https://erroneo.us/security/cve/CVE-2023-40191/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.0062,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"2024-02-20","type":"digest","title":"Security digest for February 20, 2024","date":"2024-02-20","url":"https://erroneo.us/security/2024-02-20/","md":"https://erroneo.us/security/2024-02-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":14}},{"id":"connectwise-screenconnect-auth-bypass-cve-2024-1709","type":"brief","title":"ScreenConnect Auth Bypass CVE-2024-1709 (CVSS 10)","date":"2024-02-19","url":"https://erroneo.us/security/briefs/connectwise-screenconnect-auth-bypass-cve-2024-1709/","md":"https://erroneo.us/security/briefs/connectwise-screenconnect-auth-bypass-cve-2024-1709/index.md","severity":"critical","kev":true,"epss":0.9998,"verdict":"act-now","cves":["CVE-2024-1709","CVE-2024-1708"],"summary":"Any on-premises ScreenConnect server still below 23.9.8 should be treated as compromised until proven otherwise; cloud-hosted customers were patched by ConnectWise."},{"id":"CVE-2024-1651","type":"cve","title":"CVE-2024-1651: Deserialization of Untrusted Data in Torrentpier","date":"2024-02-19","url":"https://erroneo.us/security/cve/CVE-2024-1651/","md":"https://erroneo.us/security/cve/CVE-2024-1651/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.34235,"verdict":null,"product":"torrentpier/torrentpier (Composer (PHP))"},{"id":"2024-02-19","type":"digest","title":"Security digest for February 19, 2024","date":"2024-02-19","url":"https://erroneo.us/security/2024-02-19/","md":"https://erroneo.us/security/2024-02-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2024-21410","type":"cve","title":"CVE-2024-21410: Microsoft Exchange Server Privilege Escalation Vulnerability","date":"2024-02-15","url":"https://erroneo.us/security/cve/CVE-2024-21410/","md":"https://erroneo.us/security/cve/CVE-2024-21410/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.12561,"verdict":null,"product":"Microsoft Exchange Server"},{"id":"CVE-2020-3259","type":"cve","title":"CVE-2020-3259: Cisco ASA and FTD Information Disclosure Vulnerability","date":"2024-02-15","url":"https://erroneo.us/security/cve/CVE-2020-3259/","md":"https://erroneo.us/security/cve/CVE-2020-3259/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.715,"verdict":null,"product":"Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)"},{"id":"2024-02-15","type":"digest","title":"Security digest for February 15, 2024","date":"2024-02-15","url":"https://erroneo.us/security/2024-02-15/","md":"https://erroneo.us/security/2024-02-15/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2024-22024","type":"cve","title":"CVE-2024-22024: Ivanti ICS vulnerability","date":"2024-02-13","url":"https://erroneo.us/security/cve/CVE-2024-22024/","md":"https://erroneo.us/security/cve/CVE-2024-22024/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.94721,"verdict":"act-now","product":"Ivanti ICS"},{"id":"CVE-2024-21412","type":"cve","title":"CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","date":"2024-02-13","url":"https://erroneo.us/security/cve/CVE-2024-21412/","md":"https://erroneo.us/security/cve/CVE-2024-21412/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.9941,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-21351","type":"cve","title":"CVE-2024-21351: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date":"2024-02-13","url":"https://erroneo.us/security/cve/CVE-2024-21351/","md":"https://erroneo.us/security/cve/CVE-2024-21351/index.md","severity":"high","cvss":7.6,"kev":true,"epss":0.27798,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2024-0057","type":"cve","title":"CVE-2024-0057: NuGet Client Security Feature Bypass Vulnerability","date":"2024-02-13","url":"https://erroneo.us/security/cve/CVE-2024-0057/","md":"https://erroneo.us/security/cve/CVE-2024-0057/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02778,"verdict":null,"product":"NuGet.CommandLine (NuGet)"},{"id":"2024-02-13","type":"digest","title":"Security digest for February 13, 2024","date":"2024-02-13","url":"https://erroneo.us/security/2024-02-13/","md":"https://erroneo.us/security/2024-02-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2024-25108","type":"cve","title":"CVE-2024-25108: Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions","date":"2024-02-12","url":"https://erroneo.us/security/cve/CVE-2024-25108/","md":"https://erroneo.us/security/cve/CVE-2024-25108/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00678,"verdict":null,"product":"pixelfed/pixelfed (Composer (PHP))"},{"id":"CVE-2023-43770","type":"cve","title":"CVE-2023-43770: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","date":"2024-02-12","url":"https://erroneo.us/security/cve/CVE-2023-43770/","md":"https://erroneo.us/security/cve/CVE-2023-43770/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.6366,"verdict":null,"product":"Roundcube Webmail"},{"id":"2024-02-12","type":"digest","title":"Security digest for February 12, 2024","date":"2024-02-12","url":"https://erroneo.us/security/2024-02-12/","md":"https://erroneo.us/security/2024-02-12/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2024-25718","type":"cve","title":"CVE-2024-25718: Samly access control vulnerability","date":"2024-02-10","url":"https://erroneo.us/security/cve/CVE-2024-25718/","md":"https://erroneo.us/security/cve/CVE-2024-25718/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00664,"verdict":null,"product":"Samly (Hex (Erlang/Elixir))"},{"id":"2024-02-10","type":"digest","title":"Security digest for February 10, 2024","date":"2024-02-10","url":"https://erroneo.us/security/2024-02-10/","md":"https://erroneo.us/security/2024-02-10/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-21762","type":"cve","title":"CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability","date":"2024-02-09","url":"https://erroneo.us/security/cve/CVE-2024-21762/","md":"https://erroneo.us/security/cve/CVE-2024-21762/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.83428,"verdict":"act-now","product":"Fortinet FortiOS"},{"id":"2024-02-09","type":"digest","title":"Security digest for February 9, 2024","date":"2024-02-09","url":"https://erroneo.us/security/2024-02-09/","md":"https://erroneo.us/security/2024-02-09/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"fortios-ssl-vpn-out-of-bounds-write-rce","type":"brief","title":"FortiOS SSL VPN Pre-Auth RCE (CVE-2024-21762)","date":"2024-02-08","url":"https://erroneo.us/security/briefs/fortios-ssl-vpn-out-of-bounds-write-rce/","md":"https://erroneo.us/security/briefs/fortios-ssl-vpn-out-of-bounds-write-rce/index.md","severity":"critical","kev":true,"epss":0.83428,"verdict":"act-now","cves":["CVE-2024-21762"],"summary":"Any FortiGate or FortiProxy with SSL VPN enabled on an unfixed build is exposed to unauthenticated remote code execution that has been exploited; upgrade or disable SSL VPN today."},{"id":"CVE-2024-24825","type":"cve","title":"CVE-2024-24825: DIRAC's TokenManager does not check permissions on cached tokens","date":"2024-02-08","url":"https://erroneo.us/security/cve/CVE-2024-24825/","md":"https://erroneo.us/security/cve/CVE-2024-24825/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00534,"verdict":null,"product":"DIRAC (PyPI)"},{"id":"2024-02-08","type":"digest","title":"Security digest for February 8, 2024","date":"2024-02-08","url":"https://erroneo.us/security/2024-02-08/","md":"https://erroneo.us/security/2024-02-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2024-25145","type":"cve","title":"CVE-2024-25145: Liferay Portal stored cross-site scripting (XSS) vulnerability","date":"2024-02-07","url":"https://erroneo.us/security/cve/CVE-2024-25145/","md":"https://erroneo.us/security/cve/CVE-2024-25145/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00563,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2024-24811","type":"cve","title":"CVE-2024-24811: SQLAlchemyDA unauthenticated arbitrary SQL query execution","date":"2024-02-07","url":"https://erroneo.us/security/cve/CVE-2024-24811/","md":"https://erroneo.us/security/cve/CVE-2024-24811/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00889,"verdict":null,"product":"Products.SQLAlchemyDA (PyPI)"},{"id":"CVE-2024-24563","type":"cve","title":"CVE-2024-24563: Vyper negative array index bounds checks","date":"2024-02-07","url":"https://erroneo.us/security/cve/CVE-2024-24563/","md":"https://erroneo.us/security/cve/CVE-2024-24563/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01539,"verdict":null,"product":"vyper (PyPI)"},{"id":"2024-02-07","type":"digest","title":"Security digest for February 7, 2024","date":"2024-02-07","url":"https://erroneo.us/security/2024-02-07/","md":"https://erroneo.us/security/2024-02-07/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2023-4762","type":"cve","title":"CVE-2023-4762: Google Chromium V8 Type Confusion Vulnerability","date":"2024-02-06","url":"https://erroneo.us/security/cve/CVE-2023-4762/","md":"https://erroneo.us/security/cve/CVE-2023-4762/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.41375,"verdict":null,"product":"Google Chromium V8"},{"id":"2024-02-06","type":"digest","title":"Security digest for February 6, 2024","date":"2024-02-06","url":"https://erroneo.us/security/2024-02-06/","md":"https://erroneo.us/security/2024-02-06/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-24398","type":"cve","title":"CVE-2024-24398: Stimulsoft Dashboard.JS directory traversal vulnerability","date":"2024-02-05","url":"https://erroneo.us/security/cve/CVE-2024-24398/","md":"https://erroneo.us/security/cve/CVE-2024-24398/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02024,"verdict":null,"product":"stimulsoft-dashboards-js (npm)"},{"id":"2024-02-05","type":"digest","title":"Security digest for February 5, 2024","date":"2024-02-05","url":"https://erroneo.us/security/2024-02-05/","md":"https://erroneo.us/security/2024-02-05/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"GHSA-q73f-w3h7-7wcc","type":"ghsa","title":"Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result","date":"2024-02-02","url":"https://erroneo.us/security/ghsa/GHSA-q73f-w3h7-7wcc/","md":"https://erroneo.us/security/ghsa/GHSA-q73f-w3h7-7wcc/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"ckb"},{"id":"GHSA-84x2-2qv6-qg56","type":"ghsa","title":"Nervos CKB P2P DoS Attacks","date":"2024-02-02","url":"https://erroneo.us/security/ghsa/GHSA-84x2-2qv6-qg56/","md":"https://erroneo.us/security/ghsa/GHSA-84x2-2qv6-qg56/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"ckb"},{"id":"CVE-2024-1143","type":"cve","title":"CVE-2024-1143: Central Dogma Authentication Bypass Vulnerability via Session Leakage","date":"2024-02-02","url":"https://erroneo.us/security/cve/CVE-2024-1143/","md":"https://erroneo.us/security/cve/CVE-2024-1143/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00491,"verdict":null,"product":"com.linecorp.centraldogma:centraldogma-server (Maven)"},{"id":"2024-02-02","type":"digest","title":"Security digest for February 2, 2024","date":"2024-02-02","url":"https://erroneo.us/security/2024-02-02/","md":"https://erroneo.us/security/2024-02-02/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-24561","type":"cve","title":"CVE-2024-24561: Vyper's bounds check on built-in `slice()` function can be overflowed","date":"2024-02-01","url":"https://erroneo.us/security/cve/CVE-2024-24561/","md":"https://erroneo.us/security/cve/CVE-2024-24561/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00902,"verdict":null,"product":"vyper (PyPI)"},{"id":"CVE-2024-22533","type":"cve","title":"CVE-2024-22533: Beetl Server-Side Template Injection vulnerability","date":"2024-02-01","url":"https://erroneo.us/security/cve/CVE-2024-22533/","md":"https://erroneo.us/security/cve/CVE-2024-22533/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01028,"verdict":null,"product":"com.ibeetl:beetl-core (Maven)"},{"id":"2024-02-01","type":"digest","title":"Security digest for February 1, 2024","date":"2024-02-01","url":"https://erroneo.us/security/2024-02-01/","md":"https://erroneo.us/security/2024-02-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"runc-leaky-vessels-container-escape","type":"brief","title":"Leaky Vessels: runc Container Escape (CVE-2024-21626)","date":"2024-01-31","url":"https://erroneo.us/security/briefs/runc-leaky-vessels-container-escape/","md":"https://erroneo.us/security/briefs/runc-leaky-vessels-container-escape/index.md","severity":"high","kev":false,"epss":0.18923,"verdict":"patch-this-week","cves":["CVE-2024-21626","CVE-2024-23651","CVE-2024-23652","CVE-2024-23653"],"summary":"A real container escape, but it needs you to run an attacker-controlled image or a crafted exec; patch runc everywhere promptly, urgently where untrusted images or multi-tenant builds run."},{"id":"CVE-2024-23653","type":"cve","title":"CVE-2024-23653: Buildkit's interactive containers API does not validate entitlements check","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-23653/","md":"https://erroneo.us/security/cve/CVE-2024-23653/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03446,"verdict":"patch-this-week","product":"github.com/moby/buildkit (Go)"},{"id":"CVE-2024-23652","type":"cve","title":"CVE-2024-23652: BuildKit vulnerable to possible host system access from mount stub cleaner","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-23652/","md":"https://erroneo.us/security/cve/CVE-2024-23652/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.02464,"verdict":"patch-this-week","product":"github.com/moby/buildkit (Go)"},{"id":"CVE-2024-23651","type":"cve","title":"CVE-2024-23651: BuildKit possible race condition with accessing subpaths from cache mounts","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-23651/","md":"https://erroneo.us/security/cve/CVE-2024-23651/index.md","severity":"high","cvss":8.7,"kev":false,"epss":0.00911,"verdict":"patch-this-week","product":"moby buildkit"},{"id":"CVE-2024-21893","type":"cve","title":"CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-21893/","md":"https://erroneo.us/security/cve/CVE-2024-21893/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Ivanti Connect Secure, Policy Secure, and Neurons"},{"id":"CVE-2024-21888","type":"cve","title":"CVE-2024-21888: Ivanti ICS vulnerability","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-21888/","md":"https://erroneo.us/security/cve/CVE-2024-21888/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.85418,"verdict":"act-now","product":"Ivanti ICS"},{"id":"CVE-2024-21626","type":"cve","title":"CVE-2024-21626: runc container breakout through process.cwd trickery and leaked fds","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2024-21626/","md":"https://erroneo.us/security/cve/CVE-2024-21626/index.md","severity":"high","cvss":8.6,"kev":false,"epss":0.18923,"verdict":"patch-this-week","product":"opencontainers runc"},{"id":"CVE-2022-48618","type":"cve","title":"CVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerability","date":"2024-01-31","url":"https://erroneo.us/security/cve/CVE-2022-48618/","md":"https://erroneo.us/security/cve/CVE-2022-48618/index.md","severity":"high","cvss":7,"kev":true,"epss":0.00487,"verdict":null,"product":"Apple Multiple Products"},{"id":"2024-01-31","type":"digest","title":"Security digest for January 31, 2024","date":"2024-01-31","url":"https://erroneo.us/security/2024-01-31/","md":"https://erroneo.us/security/2024-01-31/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":2}},{"id":"CVE-2020-10661","type":"cve","title":"CVE-2020-10661: HashiCorp Vault Improper Privilege Management","date":"2024-01-30","url":"https://erroneo.us/security/cve/CVE-2020-10661/","md":"https://erroneo.us/security/cve/CVE-2020-10661/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01116,"verdict":null,"product":"github.com/hashicorp/vault (Go)"},{"id":"2024-01-30","type":"digest","title":"Security digest for January 30, 2024","date":"2024-01-30","url":"https://erroneo.us/security/2024-01-30/","md":"https://erroneo.us/security/2024-01-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-23827","type":"cve","title":"CVE-2024-23827: Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature","date":"2024-01-29","url":"https://erroneo.us/security/cve/CVE-2024-23827/","md":"https://erroneo.us/security/cve/CVE-2024-23827/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00705,"verdict":null,"product":"github.com/0xJacky/Nginx-UI (Go)"},{"id":"CVE-2023-51839","type":"cve","title":"CVE-2023-51839: DeviceFarmer stf uses DES-ECB","date":"2024-01-29","url":"https://erroneo.us/security/cve/CVE-2023-51839/","md":"https://erroneo.us/security/cve/CVE-2023-51839/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00376,"verdict":null,"product":"@devicefarmer/stf (npm)"},{"id":"CVE-2023-51837","type":"cve","title":"CVE-2023-51837: Ylianst MeshCentral Missing SSL Certificate Validation","date":"2024-01-29","url":"https://erroneo.us/security/cve/CVE-2023-51837/","md":"https://erroneo.us/security/cve/CVE-2023-51837/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00467,"verdict":null,"product":"meshcentral (npm)"},{"id":"2024-01-29","type":"digest","title":"Security digest for January 29, 2024","date":"2024-01-29","url":"https://erroneo.us/security/2024-01-29/","md":"https://erroneo.us/security/2024-01-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2024-0937","type":"cve","title":"CVE-2024-0937: Deserialization of untrusted data in synthcity","date":"2024-01-26","url":"https://erroneo.us/security/cve/CVE-2024-0937/","md":"https://erroneo.us/security/cve/CVE-2024-0937/index.md","severity":"medium","cvss":6.3,"kev":false,"epss":0.00684,"verdict":null,"product":"synthcity (PyPI)"},{"id":"2024-01-26","type":"digest","title":"Security digest for January 26, 2024","date":"2024-01-26","url":"https://erroneo.us/security/2024-01-26/","md":"https://erroneo.us/security/2024-01-26/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"jenkins-cli-args4j-arbitrary-file-read","type":"brief","title":"Jenkins CLI Arbitrary File Read (CVE-2024-23897)","date":"2024-01-24","url":"https://erroneo.us/security/briefs/jenkins-cli-args4j-arbitrary-file-read/","md":"https://erroneo.us/security/briefs/jenkins-cli-args4j-arbitrary-file-read/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"act-now","cves":["CVE-2024-23897","CVE-2024-23898"],"summary":"An unpatched Jenkins controller reachable by untrusted users leaks files and secrets that can lead to full takeover; upgrade now or disable the CLI."},{"id":"CVE-2024-23898","type":"cve","title":"CVE-2024-23898: Jenkins Project Jenkins vulnerability","date":"2024-01-24","url":"https://erroneo.us/security/cve/CVE-2024-23898/","md":"https://erroneo.us/security/cve/CVE-2024-23898/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.67151,"verdict":"act-now","product":"Jenkins Project Jenkins"},{"id":"CVE-2023-22527","type":"cve","title":"CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability","date":"2024-01-24","url":"https://erroneo.us/security/cve/CVE-2023-22527/","md":"https://erroneo.us/security/cve/CVE-2023-22527/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99984,"verdict":null,"product":"Atlassian Confluence Data Center and Server"},{"id":"2024-01-24","type":"digest","title":"Security digest for January 24, 2024","date":"2024-01-24","url":"https://erroneo.us/security/2024-01-24/","md":"https://erroneo.us/security/2024-01-24/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":1}},{"id":"CVE-2024-23636","type":"cve","title":"CVE-2024-23636: Remote Command Execution in SOFARPC","date":"2024-01-23","url":"https://erroneo.us/security/cve/CVE-2024-23636/","md":"https://erroneo.us/security/cve/CVE-2024-23636/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00799,"verdict":null,"product":"com.alipay.sofa:rpc-sofa-boot-starter (Maven)"},{"id":"CVE-2024-23222","type":"cve","title":"CVE-2024-23222: Apple Multiple Products WebKit Type Confusion Vulnerability","date":"2024-01-23","url":"https://erroneo.us/security/cve/CVE-2024-23222/","md":"https://erroneo.us/security/cve/CVE-2024-23222/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.10593,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2023-49657","type":"cve","title":"CVE-2023-49657: Cross-site Scripting in Apache superset","date":"2024-01-23","url":"https://erroneo.us/security/cve/CVE-2023-49657/","md":"https://erroneo.us/security/cve/CVE-2023-49657/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00837,"verdict":null,"product":"apache-superset (PyPI)"},{"id":"2024-01-23","type":"digest","title":"Security digest for January 23, 2024","date":"2024-01-23","url":"https://erroneo.us/security/2024-01-23/","md":"https://erroneo.us/security/2024-01-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2023-34048","type":"cve","title":"CVE-2023-34048: VMware vCenter Server Out-of-Bounds Write Vulnerability","date":"2024-01-22","url":"https://erroneo.us/security/cve/CVE-2023-34048/","md":"https://erroneo.us/security/cve/CVE-2023-34048/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99428,"verdict":null,"product":"VMware vCenter Server"},{"id":"2024-01-22","type":"digest","title":"Security digest for January 22, 2024","date":"2024-01-22","url":"https://erroneo.us/security/2024-01-22/","md":"https://erroneo.us/security/2024-01-22/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-23752","type":"cve","title":"CVE-2024-23752: Code execution in pandasai","date":"2024-01-21","url":"https://erroneo.us/security/cve/CVE-2024-23752/","md":"https://erroneo.us/security/cve/CVE-2024-23752/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01015,"verdict":null,"product":"pandasai (PyPI)"},{"id":"CVE-2024-23751","type":"cve","title":"CVE-2024-23751: SQL injection in llama-index","date":"2024-01-21","url":"https://erroneo.us/security/cve/CVE-2024-23751/","md":"https://erroneo.us/security/cve/CVE-2024-23751/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0066,"verdict":null,"product":"llama-index (PyPI)"},{"id":"CVE-2024-23731","type":"cve","title":"CVE-2024-23731: Code execution in Embedchain","date":"2024-01-21","url":"https://erroneo.us/security/cve/CVE-2024-23731/","md":"https://erroneo.us/security/cve/CVE-2024-23731/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01059,"verdict":null,"product":"embedchain (PyPI)"},{"id":"CVE-2024-23730","type":"cve","title":"CVE-2024-23730: Unsafe yaml deserialization in llama-hub","date":"2024-01-21","url":"https://erroneo.us/security/cve/CVE-2024-23730/","md":"https://erroneo.us/security/cve/CVE-2024-23730/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01202,"verdict":null,"product":"llama-hub (PyPI)"},{"id":"CVE-2017-20189","type":"cve","title":"CVE-2017-20189: Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization","date":"2024-01-21","url":"https://erroneo.us/security/cve/CVE-2017-20189/","md":"https://erroneo.us/security/cve/CVE-2017-20189/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01332,"verdict":null,"product":"org.clojure:clojure (Maven)"},{"id":"2024-01-21","type":"digest","title":"Security digest for January 21, 2024","date":"2024-01-21","url":"https://erroneo.us/security/2024-01-21/","md":"https://erroneo.us/security/2024-01-21/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"CVE-2024-0521","type":"cve","title":"CVE-2024-0521: Code Injection in paddlepaddle","date":"2024-01-20","url":"https://erroneo.us/security/cve/CVE-2024-0521/","md":"https://erroneo.us/security/cve/CVE-2024-0521/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0046,"verdict":null,"product":"paddlepaddle (PyPI)"},{"id":"2024-01-20","type":"digest","title":"Security digest for January 20, 2024","date":"2024-01-20","url":"https://erroneo.us/security/2024-01-20/","md":"https://erroneo.us/security/2024-01-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-22416","type":"cve","title":"CVE-2024-22416: Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation","date":"2024-01-19","url":"https://erroneo.us/security/cve/CVE-2024-22416/","md":"https://erroneo.us/security/cve/CVE-2024-22416/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00948,"verdict":null,"product":"pyload-ng (PyPI)"},{"id":"CVE-2023-50447","type":"cve","title":"CVE-2023-50447: Arbitrary Code Execution in Pillow","date":"2024-01-19","url":"https://erroneo.us/security/cve/CVE-2023-50447/","md":"https://erroneo.us/security/cve/CVE-2023-50447/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01703,"verdict":null,"product":"Pillow (PyPI)"},{"id":"2024-01-19","type":"digest","title":"Security digest for January 19, 2024","date":"2024-01-19","url":"https://erroneo.us/security/2024-01-19/","md":"https://erroneo.us/security/2024-01-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-35082","type":"cve","title":"CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","date":"2024-01-18","url":"https://erroneo.us/security/cve/CVE-2023-35082/","md":"https://erroneo.us/security/cve/CVE-2023-35082/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99999,"verdict":null,"product":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core"},{"id":"2024-01-18","type":"digest","title":"Security digest for January 18, 2024","date":"2024-01-18","url":"https://erroneo.us/security/2024-01-18/","md":"https://erroneo.us/security/2024-01-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-22406","type":"cve","title":"CVE-2024-22406: Blind SQL injection in shopware","date":"2024-01-17","url":"https://erroneo.us/security/cve/CVE-2024-22406/","md":"https://erroneo.us/security/cve/CVE-2024-22406/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0064,"verdict":null,"product":"shopware/core (Composer (PHP))"},{"id":"CVE-2024-0519","type":"cve","title":"CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","date":"2024-01-17","url":"https://erroneo.us/security/cve/CVE-2024-0519/","md":"https://erroneo.us/security/cve/CVE-2024-0519/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.03802,"verdict":null,"product":"Google Chromium V8"},{"id":"CVE-2023-6549","type":"cve","title":"CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","date":"2024-01-17","url":"https://erroneo.us/security/cve/CVE-2023-6549/","md":"https://erroneo.us/security/cve/CVE-2023-6549/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.57633,"verdict":null,"product":"Citrix NetScaler ADC and NetScaler Gateway"},{"id":"CVE-2023-6548","type":"cve","title":"CVE-2023-6548: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","date":"2024-01-17","url":"https://erroneo.us/security/cve/CVE-2023-6548/","md":"https://erroneo.us/security/cve/CVE-2023-6548/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.03191,"verdict":null,"product":"Citrix NetScaler ADC and NetScaler Gateway"},{"id":"2024-01-17","type":"digest","title":"Security digest for January 17, 2024","date":"2024-01-17","url":"https://erroneo.us/security/2024-01-17/","md":"https://erroneo.us/security/2024-01-17/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2018-15133","type":"cve","title":"CVE-2018-15133: Laravel Deserialization of Untrusted Data Vulnerability","date":"2024-01-16","url":"https://erroneo.us/security/cve/CVE-2018-15133/","md":"https://erroneo.us/security/cve/CVE-2018-15133/index.md","severity":"high","cvss":8.1,"kev":true,"epss":0.7657,"verdict":null,"product":"Laravel Laravel Framework"},{"id":"2024-01-16","type":"digest","title":"Security digest for January 16, 2024","date":"2024-01-16","url":"https://erroneo.us/security/2024-01-16/","md":"https://erroneo.us/security/2024-01-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2024-22206","type":"cve","title":"CVE-2024-22206: @clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)","date":"2024-01-12","url":"https://erroneo.us/security/cve/CVE-2024-22206/","md":"https://erroneo.us/security/cve/CVE-2024-22206/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00682,"verdict":null,"product":"@clerk/nextjs (npm)"},{"id":"CVE-2023-46943","type":"cve","title":"CVE-2023-46943: EverShop at risk to unauthorized access via weak HMAC secret","date":"2024-01-12","url":"https://erroneo.us/security/cve/CVE-2023-46943/","md":"https://erroneo.us/security/cve/CVE-2023-46943/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00498,"verdict":null,"product":"@evershop/evershop (npm)"},{"id":"2024-01-12","type":"digest","title":"Security digest for January 12, 2024","date":"2024-01-12","url":"https://erroneo.us/security/2024-01-12/","md":"https://erroneo.us/security/2024-01-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"gitlab-password-reset-account-takeover","type":"brief","title":"GitLab Password Reset Flaw Enables Account Takeover","date":"2024-01-11","url":"https://erroneo.us/security/briefs/gitlab-password-reset-account-takeover/","md":"https://erroneo.us/security/briefs/gitlab-password-reset-account-takeover/index.md","severity":"critical","kev":true,"epss":0.94458,"verdict":"act-now","cves":["CVE-2023-7028"],"summary":"Any self-managed GitLab still on 16.1 through 16.7.1 lets anyone take over accounts without 2FA by email alone; upgrade immediately and turn on 2FA."},{"id":"CVE-2024-22199","type":"cve","title":"CVE-2024-22199: Django Template Engine Vulnerable to XSS","date":"2024-01-11","url":"https://erroneo.us/security/cve/CVE-2024-22199/","md":"https://erroneo.us/security/cve/CVE-2024-22199/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00484,"verdict":null,"product":"github.com/gofiber/template/django/v3 (Go)"},{"id":"CVE-2019-6342","type":"cve","title":"CVE-2019-6342: Drupal Improper Access Control","date":"2024-01-11","url":"https://erroneo.us/security/cve/CVE-2019-6342/","md":"https://erroneo.us/security/cve/CVE-2019-6342/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02202,"verdict":null,"product":"drupal/core (Composer (PHP))"},{"id":"2024-01-11","type":"digest","title":"Security digest for January 11, 2024","date":"2024-01-11","url":"https://erroneo.us/security/2024-01-11/","md":"https://erroneo.us/security/2024-01-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":2}},{"id":"ivanti-connect-secure-auth-bypass-command-injection","type":"brief","title":"Ivanti Connect Secure Zero-Day Chain: Unauthenticated RCE","date":"2024-01-10","url":"https://erroneo.us/security/briefs/ivanti-connect-secure-auth-bypass-command-injection/","md":"https://erroneo.us/security/briefs/ivanti-connect-secure-auth-bypass-command-injection/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"act-now","cves":["CVE-2023-46805","CVE-2024-21887","CVE-2024-21893","CVE-2024-21888","CVE-2024-22024"],"summary":"This chain was exploited as a zero-day by a suspected nation-state actor and then mass-exploited; any unpatched appliance should be assumed compromised, not just patched."},{"id":"CVE-2024-21887","type":"cve","title":"CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","date":"2024-01-10","url":"https://erroneo.us/security/cve/CVE-2024-21887/","md":"https://erroneo.us/security/cve/CVE-2024-21887/index.md","severity":"critical","cvss":9.1,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Ivanti Connect Secure and Policy Secure"},{"id":"CVE-2023-49599","type":"cve","title":"CVE-2023-49599: WWBN AVideo Insufficient Entropy vulnerbaility","date":"2024-01-10","url":"https://erroneo.us/security/cve/CVE-2023-49599/","md":"https://erroneo.us/security/cve/CVE-2023-49599/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00958,"verdict":null,"product":"wwbn/avideo (Composer (PHP))"},{"id":"CVE-2023-49569","type":"cve","title":"CVE-2023-49569: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients","date":"2024-01-10","url":"https://erroneo.us/security/cve/CVE-2023-49569/","md":"https://erroneo.us/security/cve/CVE-2023-49569/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0151,"verdict":null,"product":"github.com/go-git/go-git/v5 (Go)"},{"id":"CVE-2023-46805","type":"cve","title":"CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","date":"2024-01-10","url":"https://erroneo.us/security/cve/CVE-2023-46805/","md":"https://erroneo.us/security/cve/CVE-2023-46805/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.99986,"verdict":"act-now","product":"Ivanti Connect Secure and Policy Secure"},{"id":"CVE-2023-29357","type":"cve","title":"CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability","date":"2024-01-10","url":"https://erroneo.us/security/cve/CVE-2023-29357/","md":"https://erroneo.us/security/cve/CVE-2023-29357/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99984,"verdict":null,"product":"Microsoft SharePoint Server"},{"id":"2024-01-10","type":"digest","title":"Security digest for January 10, 2024","date":"2024-01-10","url":"https://erroneo.us/security/2024-01-10/","md":"https://erroneo.us/security/2024-01-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":3,"critical":2}},{"id":"CVE-2024-21669","type":"cve","title":"CVE-2024-21669: Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC","date":"2024-01-09","url":"https://erroneo.us/security/cve/CVE-2024-21669/","md":"https://erroneo.us/security/cve/CVE-2024-21669/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00632,"verdict":null,"product":"aries-cloudagent (PyPI)"},{"id":"2024-01-09","type":"digest","title":"Security digest for January 9, 2024","date":"2024-01-09","url":"https://erroneo.us/security/2024-01-09/","md":"https://erroneo.us/security/2024-01-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2024-21650","type":"cve","title":"CVE-2024-21650: XWiki Remote Code Execution Vulnerability via User Registration","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2024-21650/","md":"https://erroneo.us/security/cve/CVE-2024-21650/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.9348,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-administration-ui (Maven)"},{"id":"CVE-2023-41990","type":"cve","title":"CVE-2023-41990: Apple Multiple Products Code Execution Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2023-41990/","md":"https://erroneo.us/security/cve/CVE-2023-41990/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.01388,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2023-38203","type":"cve","title":"CVE-2023-38203: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2023-38203/","md":"https://erroneo.us/security/cve/CVE-2023-38203/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.97074,"verdict":null,"product":"Adobe ColdFusion"},{"id":"CVE-2023-29300","type":"cve","title":"CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2023-29300/","md":"https://erroneo.us/security/cve/CVE-2023-29300/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99991,"verdict":null,"product":"Adobe ColdFusion"},{"id":"CVE-2023-27524","type":"cve","title":"CVE-2023-27524: Apache Superset Insecure Default Initialization of Resource Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2023-27524/","md":"https://erroneo.us/security/cve/CVE-2023-27524/index.md","severity":"high","cvss":8.9,"kev":true,"epss":0.97405,"verdict":null,"product":"Apache Superset"},{"id":"CVE-2023-23752","type":"cve","title":"CVE-2023-23752: Joomla! Improper Access Control Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2023-23752/","md":"https://erroneo.us/security/cve/CVE-2023-23752/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.99827,"verdict":null,"product":"Joomla! Joomla!"},{"id":"CVE-2022-3328","type":"cve","title":"CVE-2022-3328: snapd Race Condition vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2022-3328/","md":"https://erroneo.us/security/cve/CVE-2022-3328/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":0.00384,"verdict":null,"product":"github.com/snapcore/snapd (Go)"},{"id":"CVE-2016-20017","type":"cve","title":"CVE-2016-20017: D-Link DSL-2750B Devices Command Injection Vulnerability","date":"2024-01-08","url":"https://erroneo.us/security/cve/CVE-2016-20017/","md":"https://erroneo.us/security/cve/CVE-2016-20017/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.66583,"verdict":null,"product":"D-Link DSL-2750B Devices"},{"id":"2024-01-08","type":"digest","title":"Security digest for January 8, 2024","date":"2024-01-08","url":"https://erroneo.us/security/2024-01-08/","md":"https://erroneo.us/security/2024-01-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":2}},{"id":"CVE-2023-7080","type":"cve","title":"CVE-2023-7080: Arbitrary remote code execution within `wrangler dev` Workers sandbox","date":"2024-01-03","url":"https://erroneo.us/security/cve/CVE-2023-7080/","md":"https://erroneo.us/security/cve/CVE-2023-7080/index.md","severity":"high","cvss":8.5,"kev":false,"epss":0.0063,"verdict":null,"product":"wrangler (npm)"},{"id":"CVE-2023-52314","type":"cve","title":"CVE-2023-52314: PaddlePaddle command injection in convert_shape_compare","date":"2024-01-03","url":"https://erroneo.us/security/cve/CVE-2023-52314/","md":"https://erroneo.us/security/cve/CVE-2023-52314/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01182,"verdict":null,"product":"PaddlePaddle (PyPI)"},{"id":"CVE-2023-52311","type":"cve","title":"CVE-2023-52311: PaddlePaddle command injection in _wget_download","date":"2024-01-03","url":"https://erroneo.us/security/cve/CVE-2023-52311/","md":"https://erroneo.us/security/cve/CVE-2023-52311/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01182,"verdict":null,"product":"PaddlePaddle (PyPI)"},{"id":"CVE-2023-52310","type":"cve","title":"CVE-2023-52310: PaddlePaddle command injection in get_online_pass_interval","date":"2024-01-03","url":"https://erroneo.us/security/cve/CVE-2023-52310/","md":"https://erroneo.us/security/cve/CVE-2023-52310/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01182,"verdict":null,"product":"PaddlePaddle (PyPI)"},{"id":"CVE-2023-51784","type":"cve","title":"CVE-2023-51784: Apache InLong Manager Remote Code Execution vulnerability","date":"2024-01-03","url":"https://erroneo.us/security/cve/CVE-2023-51784/","md":"https://erroneo.us/security/cve/CVE-2023-51784/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0162,"verdict":null,"product":"org.apache.inlong:manager-pojo (Maven)"},{"id":"2024-01-03","type":"digest","title":"Security digest for January 3, 2024","date":"2024-01-03","url":"https://erroneo.us/security/2024-01-03/","md":"https://erroneo.us/security/2024-01-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":5}},{"id":"CVE-2023-7101","type":"cve","title":"CVE-2023-7101: Spreadsheet::ParseExcel Remote Code Execution Vulnerability","date":"2024-01-02","url":"https://erroneo.us/security/cve/CVE-2023-7101/","md":"https://erroneo.us/security/cve/CVE-2023-7101/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.18959,"verdict":null,"product":"Spreadsheet::ParseExcel Spreadsheet::ParseExcel"},{"id":"CVE-2023-7024","type":"cve","title":"CVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerability","date":"2024-01-02","url":"https://erroneo.us/security/cve/CVE-2023-7024/","md":"https://erroneo.us/security/cve/CVE-2023-7024/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.06671,"verdict":null,"product":"Google Chromium WebRTC"},{"id":"CVE-2023-46308","type":"cve","title":"CVE-2023-46308: plotly.js prototype pollution vulnerability","date":"2024-01-02","url":"https://erroneo.us/security/cve/CVE-2023-46308/","md":"https://erroneo.us/security/cve/CVE-2023-46308/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00936,"verdict":null,"product":"plotly/plotly.js (Composer (PHP))"},{"id":"2024-01-02","type":"digest","title":"Security digest for January 2, 2024","date":"2024-01-02","url":"https://erroneo.us/security/2024-01-02/","md":"https://erroneo.us/security/2024-01-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2023-41544","type":"cve","title":"CVE-2023-41544: JeecgBoot server-side template injection","date":"2023-12-29","url":"https://erroneo.us/security/cve/CVE-2023-41544/","md":"https://erroneo.us/security/cve/CVE-2023-41544/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02679,"verdict":null,"product":"org.jeecgframework.boot:jeecg-boot-common (Maven)"},{"id":"CVE-2023-41543","type":"cve","title":"CVE-2023-41543: Jeecg Boot SQL Injection","date":"2023-12-29","url":"https://erroneo.us/security/cve/CVE-2023-41543/","md":"https://erroneo.us/security/cve/CVE-2023-41543/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0093,"verdict":null,"product":"org.jeecgframework.boot:jeecg-boot-common (Maven)"},{"id":"CVE-2023-41542","type":"cve","title":"CVE-2023-41542: Jeecg Boot SQL injection vulnerability","date":"2023-12-29","url":"https://erroneo.us/security/cve/CVE-2023-41542/","md":"https://erroneo.us/security/cve/CVE-2023-41542/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00857,"verdict":null,"product":"org.jeecgframework.boot:jeecg-boot-common (Maven)"},{"id":"2023-12-29","type":"digest","title":"Security digest for December 29, 2023","date":"2023-12-29","url":"https://erroneo.us/security/2023-12-29/","md":"https://erroneo.us/security/2023-12-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2023-51084","type":"cve","title":"CVE-2023-51084: hyavijava stack overflow vulnerability","date":"2023-12-27","url":"https://erroneo.us/security/cve/CVE-2023-51084/","md":"https://erroneo.us/security/cve/CVE-2023-51084/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00691,"verdict":null,"product":"com.github:hyavijava (Maven)"},{"id":"2023-12-27","type":"digest","title":"Security digest for December 27, 2023","date":"2023-12-27","url":"https://erroneo.us/security/2023-12-27/","md":"https://erroneo.us/security/2023-12-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-51656","type":"cve","title":"CVE-2023-51656: Apache IoTDB: Unsafe deserialize map in Sync Tool","date":"2023-12-21","url":"https://erroneo.us/security/cve/CVE-2023-51656/","md":"https://erroneo.us/security/cve/CVE-2023-51656/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01035,"verdict":null,"product":"org.apache.iotdb:iotdb-parent (Maven)"},{"id":"CVE-2023-50475","type":"cve","title":"CVE-2023-50475: bsock uses weak hashing algorithms","date":"2023-12-21","url":"https://erroneo.us/security/cve/CVE-2023-50475/","md":"https://erroneo.us/security/cve/CVE-2023-50475/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0054,"verdict":null,"product":"bsock (npm)"},{"id":"CVE-2023-49897","type":"cve","title":"CVE-2023-49897: FXC AE1021, AE1021PE OS Command Injection Vulnerability","date":"2023-12-21","url":"https://erroneo.us/security/cve/CVE-2023-49897/","md":"https://erroneo.us/security/cve/CVE-2023-49897/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.50447,"verdict":null,"product":"FXC AE1021, AE1021PE"},{"id":"CVE-2023-47565","type":"cve","title":"CVE-2023-47565: QNAP VioStor NVR OS Command Injection Vulnerability","date":"2023-12-21","url":"https://erroneo.us/security/cve/CVE-2023-47565/","md":"https://erroneo.us/security/cve/CVE-2023-47565/index.md","severity":"high","cvss":8,"kev":true,"epss":0.73277,"verdict":null,"product":"QNAP VioStor NVR"},{"id":"2023-12-21","type":"digest","title":"Security digest for December 21, 2023","date":"2023-12-21","url":"https://erroneo.us/security/2023-12-21/","md":"https://erroneo.us/security/2023-12-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":2}},{"id":"CVE-2023-6975","type":"cve","title":"CVE-2023-6975: MLFlow Path Traversal Vulnerability","date":"2023-12-19","url":"https://erroneo.us/security/cve/CVE-2023-6975/","md":"https://erroneo.us/security/cve/CVE-2023-6975/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0203,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-6974","type":"cve","title":"CVE-2023-6974: MLflow Server-Side Request Forgery (SSRF)","date":"2023-12-19","url":"https://erroneo.us/security/cve/CVE-2023-6974/","md":"https://erroneo.us/security/cve/CVE-2023-6974/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01519,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-6730","type":"cve","title":"CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability","date":"2023-12-19","url":"https://erroneo.us/security/cve/CVE-2023-6730/","md":"https://erroneo.us/security/cve/CVE-2023-6730/index.md","severity":"critical","cvss":9.0,"kev":false,"epss":0.00928,"verdict":null,"product":"transformers (PyPI)"},{"id":"CVE-2019-25158","type":"cve","title":"CVE-2019-25158: Pedroetb TTS-API OS Command Injection","date":"2023-12-19","url":"https://erroneo.us/security/cve/CVE-2019-25158/","md":"https://erroneo.us/security/cve/CVE-2019-25158/index.md","severity":"medium","cvss":5.5,"kev":false,"epss":0.02115,"verdict":null,"product":"tts-api (npm)"},{"id":"2023-12-19","type":"digest","title":"Security digest for December 19, 2023","date":"2023-12-19","url":"https://erroneo.us/security/2023-12-19/","md":"https://erroneo.us/security/2023-12-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2023-50723","type":"cve","title":"CVE-2023-50723: Remote code execution/programming rights with configuration section from any user account","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-50723/","md":"https://erroneo.us/security/cve/CVE-2023-50723/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01188,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-administration-ui (Maven)"},{"id":"CVE-2023-50722","type":"cve","title":"CVE-2023-50722: XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-50722/","md":"https://erroneo.us/security/cve/CVE-2023-50722/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00657,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-administration-ui (Maven)"},{"id":"CVE-2023-50721","type":"cve","title":"CVE-2023-50721: Remote code execution from account through SearchAdmin","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-50721/","md":"https://erroneo.us/security/cve/CVE-2023-50721/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.78812,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-search-ui (Maven)"},{"id":"CVE-2023-49898","type":"cve","title":"CVE-2023-49898: Apache StreamPark: Authenticated system users could trigger remote command execution","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-49898/","md":"https://erroneo.us/security/cve/CVE-2023-49898/index.md","severity":"critical","cvss":null,"kev":false,"epss":0.02299,"verdict":null,"product":"org.apache.streampark:streampark (Maven)"},{"id":"CVE-2023-46279","type":"cve","title":"CVE-2023-46279: Apache Dubbo: Bypass deny serialize list check in Apache Dubbo","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-46279/","md":"https://erroneo.us/security/cve/CVE-2023-46279/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01666,"verdict":null,"product":"org.apache.dubbo:dubbo (Maven)"},{"id":"CVE-2023-29234","type":"cve","title":"CVE-2023-29234: Bypass serialize checks in Apache Dubbo","date":"2023-12-15","url":"https://erroneo.us/security/cve/CVE-2023-29234/","md":"https://erroneo.us/security/cve/CVE-2023-29234/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.07401,"verdict":null,"product":"org.apache.dubbo:dubbo (Maven)"},{"id":"2023-12-15","type":"digest","title":"Security digest for December 15, 2023","date":"2023-12-15","url":"https://erroneo.us/security/2023-12-15/","md":"https://erroneo.us/security/2023-12-15/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":6}},{"id":"GHSA-cfxh-frx4-9gjg","type":"ghsa","title":"Cross-site Scripting in @spscommerce/ds-react","date":"2023-12-14","url":"https://erroneo.us/security/ghsa/GHSA-cfxh-frx4-9gjg/","md":"https://erroneo.us/security/ghsa/GHSA-cfxh-frx4-9gjg/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"@spscommerce/ds-react"},{"id":"CVE-2023-6831","type":"cve","title":"CVE-2023-6831: Path traversal in MLflow","date":"2023-12-14","url":"https://erroneo.us/security/cve/CVE-2023-6831/","md":"https://erroneo.us/security/cve/CVE-2023-6831/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.0329,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-6572","type":"cve","title":"CVE-2023-6572: Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability","date":"2023-12-14","url":"https://erroneo.us/security/cve/CVE-2023-6572/","md":"https://erroneo.us/security/cve/CVE-2023-6572/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.01676,"verdict":null,"product":"gradio (PyPI)"},{"id":"CVE-2023-6569","type":"cve","title":"CVE-2023-6569: External Control of File Name or Path in h2oai/h2o-3","date":"2023-12-14","url":"https://erroneo.us/security/cve/CVE-2023-6569/","md":"https://erroneo.us/security/cve/CVE-2023-6569/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00721,"verdict":null,"product":"h2o (PyPI)"},{"id":"2023-12-14","type":"digest","title":"Security digest for December 14, 2023","date":"2023-12-14","url":"https://erroneo.us/security/2023-12-14/","md":"https://erroneo.us/security/2023-12-14/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"CVE-2023-50424","type":"cve","title":"CVE-2023-50424: Improper Privilege Management in github.com/sap/cloud-security-client-go","date":"2023-12-13","url":"https://erroneo.us/security/cve/CVE-2023-50424/","md":"https://erroneo.us/security/cve/CVE-2023-50424/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01127,"verdict":null,"product":"github.com/sap/cloud-security-client-go (Go)"},{"id":"CVE-2023-50423","type":"cve","title":"CVE-2023-50423: Improper Privilege Management in sap-xssec","date":"2023-12-13","url":"https://erroneo.us/security/cve/CVE-2023-50423/","md":"https://erroneo.us/security/cve/CVE-2023-50423/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01109,"verdict":null,"product":"sap-xssec (PyPI)"},{"id":"CVE-2023-50422","type":"cve","title":"CVE-2023-50422: Improper JWT Signature Validation in SAP Security Services Library","date":"2023-12-13","url":"https://erroneo.us/security/cve/CVE-2023-50422/","md":"https://erroneo.us/security/cve/CVE-2023-50422/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01355,"verdict":null,"product":"com.sap.cloud.security:java-security (Maven)"},{"id":"2023-12-13","type":"digest","title":"Security digest for December 13, 2023","date":"2023-12-13","url":"https://erroneo.us/security/2023-12-13/","md":"https://erroneo.us/security/2023-12-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2023-50245","type":"cve","title":"CVE-2023-50245: memory overflow vulnerability in OpenEXR-viewer","date":"2023-12-12","url":"https://erroneo.us/security/cve/CVE-2023-50245/","md":"https://erroneo.us/security/cve/CVE-2023-50245/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0105,"verdict":null,"product":"afichet/openexr-viewer (GitHub Actions)"},{"id":"2023-12-12","type":"digest","title":"Security digest for December 12, 2023","date":"2023-12-12","url":"https://erroneo.us/security/2023-12-12/","md":"https://erroneo.us/security/2023-12-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-6448","type":"cve","title":"CVE-2023-6448: Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","date":"2023-12-11","url":"https://erroneo.us/security/cve/CVE-2023-6448/","md":"https://erroneo.us/security/cve/CVE-2023-6448/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.02089,"verdict":null,"product":"Unitronics Vision PLC and HMI"},{"id":"CVE-2023-49583","type":"cve","title":"CVE-2023-49583: Escalation of privileges in @sap/xssec","date":"2023-12-11","url":"https://erroneo.us/security/cve/CVE-2023-49583/","md":"https://erroneo.us/security/cve/CVE-2023-49583/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01085,"verdict":null,"product":"@sap/xssec (npm)"},{"id":"2023-12-11","type":"digest","title":"Security digest for December 11, 2023","date":"2023-12-11","url":"https://erroneo.us/security/2023-12-11/","md":"https://erroneo.us/security/2023-12-11/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":1}},{"id":"CVE-2023-46498","type":"cve","title":"CVE-2023-46498: Code execution in evershop","date":"2023-12-08","url":"https://erroneo.us/security/cve/CVE-2023-46498/","md":"https://erroneo.us/security/cve/CVE-2023-46498/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01285,"verdict":null,"product":"@evershop/evershop (npm)"},{"id":"2023-12-08","type":"digest","title":"Security digest for December 8, 2023","date":"2023-12-08","url":"https://erroneo.us/security/2023-12-08/","md":"https://erroneo.us/security/2023-12-08/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-50164","type":"cve","title":"CVE-2023-50164: Apache Struts vulnerable to path traversal","date":"2023-12-07","url":"https://erroneo.us/security/cve/CVE-2023-50164/","md":"https://erroneo.us/security/cve/CVE-2023-50164/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.80819,"verdict":null,"product":"org.apache.struts:struts2-core (Maven)"},{"id":"CVE-2023-41266","type":"cve","title":"CVE-2023-41266: Qlik Sense Path Traversal Vulnerability","date":"2023-12-07","url":"https://erroneo.us/security/cve/CVE-2023-41266/","md":"https://erroneo.us/security/cve/CVE-2023-41266/index.md","severity":"high","cvss":8.2,"kev":true,"epss":0.84843,"verdict":null,"product":"Qlik Sense"},{"id":"CVE-2023-41265","type":"cve","title":"CVE-2023-41265: Qlik Sense HTTP Tunneling Vulnerability","date":"2023-12-07","url":"https://erroneo.us/security/cve/CVE-2023-41265/","md":"https://erroneo.us/security/cve/CVE-2023-41265/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.88215,"verdict":null,"product":"Qlik Sense"},{"id":"2023-12-07","type":"digest","title":"Security digest for December 7, 2023","date":"2023-12-07","url":"https://erroneo.us/security/2023-12-07/","md":"https://erroneo.us/security/2023-12-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":1}},{"id":"CVE-2023-49291","type":"cve","title":"CVE-2023-49291: tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection","date":"2023-12-05","url":"https://erroneo.us/security/cve/CVE-2023-49291/","md":"https://erroneo.us/security/cve/CVE-2023-49291/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.01448,"verdict":null,"product":"tj-actions/branch-names (GitHub Actions)"},{"id":"CVE-2023-33107","type":"cve","title":"CVE-2023-33107: Qualcomm Multiple Chipsets Integer Overflow Vulnerability","date":"2023-12-05","url":"https://erroneo.us/security/cve/CVE-2023-33107/","md":"https://erroneo.us/security/cve/CVE-2023-33107/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.00739,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2023-33106","type":"cve","title":"CVE-2023-33106: Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","date":"2023-12-05","url":"https://erroneo.us/security/cve/CVE-2023-33106/","md":"https://erroneo.us/security/cve/CVE-2023-33106/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.00788,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2023-33063","type":"cve","title":"CVE-2023-33063: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date":"2023-12-05","url":"https://erroneo.us/security/cve/CVE-2023-33063/","md":"https://erroneo.us/security/cve/CVE-2023-33063/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00672,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"CVE-2022-22071","type":"cve","title":"CVE-2022-22071: Qualcomm Multiple Chipsets Use-After-Free Vulnerability","date":"2023-12-05","url":"https://erroneo.us/security/cve/CVE-2022-22071/","md":"https://erroneo.us/security/cve/CVE-2022-22071/index.md","severity":"high","cvss":8.4,"kev":true,"epss":0.00411,"verdict":null,"product":"Qualcomm Multiple Chipsets"},{"id":"2023-12-05","type":"digest","title":"Security digest for December 5, 2023","date":"2023-12-05","url":"https://erroneo.us/security/2023-12-05/","md":"https://erroneo.us/security/2023-12-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":4,"critical":1}},{"id":"CVE-2023-49093","type":"cve","title":"CVE-2023-49093: HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL","date":"2023-12-04","url":"https://erroneo.us/security/cve/CVE-2023-49093/","md":"https://erroneo.us/security/cve/CVE-2023-49093/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.02358,"verdict":null,"product":"org.htmlunit:htmlunit (Maven)"},{"id":"CVE-2023-48967","type":"cve","title":"CVE-2023-48967: Solon is vulnerable to Deserialization of Untrusted Data","date":"2023-12-04","url":"https://erroneo.us/security/cve/CVE-2023-48967/","md":"https://erroneo.us/security/cve/CVE-2023-48967/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00916,"verdict":null,"product":"org.noear:solon (Maven)"},{"id":"CVE-2023-48910","type":"cve","title":"CVE-2023-48910: Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download","date":"2023-12-04","url":"https://erroneo.us/security/cve/CVE-2023-48910/","md":"https://erroneo.us/security/cve/CVE-2023-48910/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01005,"verdict":null,"product":"io.github.microcks:microcks (Maven)"},{"id":"CVE-2023-42917","type":"cve","title":"CVE-2023-42917: Apple Multiple Products WebKit Memory Corruption Vulnerability","date":"2023-12-04","url":"https://erroneo.us/security/cve/CVE-2023-42917/","md":"https://erroneo.us/security/cve/CVE-2023-42917/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.09295,"verdict":null,"product":"Apple Multiple Products"},{"id":"CVE-2023-42916","type":"cve","title":"CVE-2023-42916: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","date":"2023-12-04","url":"https://erroneo.us/security/cve/CVE-2023-42916/","md":"https://erroneo.us/security/cve/CVE-2023-42916/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.17823,"verdict":null,"product":"Apple Multiple Products"},{"id":"2023-12-04","type":"digest","title":"Security digest for December 4, 2023","date":"2023-12-04","url":"https://erroneo.us/security/2023-12-04/","md":"https://erroneo.us/security/2023-12-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"CVE-2023-49371","type":"cve","title":"CVE-2023-49371: RuoYi vulnerable to SQL injection vulnerability","date":"2023-12-01","url":"https://erroneo.us/security/cve/CVE-2023-49371/","md":"https://erroneo.us/security/cve/CVE-2023-49371/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.03655,"verdict":null,"product":"com.ruoyi:ruoyi (Maven)"},{"id":"CVE-2023-48887","type":"cve","title":"CVE-2023-48887: Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request","date":"2023-12-01","url":"https://erroneo.us/security/cve/CVE-2023-48887/","md":"https://erroneo.us/security/cve/CVE-2023-48887/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01552,"verdict":null,"product":"org.jupiter-rpc:jupiter-rpc (Maven)"},{"id":"2023-12-01","type":"digest","title":"Security digest for December 1, 2023","date":"2023-12-01","url":"https://erroneo.us/security/2023-12-01/","md":"https://erroneo.us/security/2023-12-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-6345","type":"cve","title":"CVE-2023-6345: Google Skia Integer Overflow Vulnerability","date":"2023-11-30","url":"https://erroneo.us/security/cve/CVE-2023-6345/","md":"https://erroneo.us/security/cve/CVE-2023-6345/index.md","severity":"critical","cvss":9.6,"kev":true,"epss":0.16468,"verdict":null,"product":"Google Chromium Skia"},{"id":"CVE-2023-6026","type":"cve","title":"CVE-2023-6026: PHPMemcachedAdmin Path Traversal vulnerability","date":"2023-11-30","url":"https://erroneo.us/security/cve/CVE-2023-6026/","md":"https://erroneo.us/security/cve/CVE-2023-6026/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00864,"verdict":null,"product":"elijaa/phpmemcacheadmin (Composer (PHP))"},{"id":"CVE-2023-49733","type":"cve","title":"CVE-2023-49733: Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability","date":"2023-11-30","url":"https://erroneo.us/security/cve/CVE-2023-49733/","md":"https://erroneo.us/security/cve/CVE-2023-49733/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01292,"verdict":null,"product":"org.apache.cocoon:cocoon (Maven)"},{"id":"CVE-2023-49103","type":"cve","title":"CVE-2023-49103: ownCloud graphapi Information Disclosure Vulnerability","date":"2023-11-30","url":"https://erroneo.us/security/cve/CVE-2023-49103/","md":"https://erroneo.us/security/cve/CVE-2023-49103/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.78428,"verdict":null,"product":"ownCloud ownCloud graphapi"},{"id":"CVE-2022-45135","type":"cve","title":"CVE-2022-45135: Apache Cocoon SQL Injection vulnerability","date":"2023-11-30","url":"https://erroneo.us/security/cve/CVE-2022-45135/","md":"https://erroneo.us/security/cve/CVE-2022-45135/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01102,"verdict":null,"product":"org.apache.cocoon:cocoon (Maven)"},{"id":"2023-11-30","type":"digest","title":"Security digest for November 30, 2023","date":"2023-11-30","url":"https://erroneo.us/security/2023-11-30/","md":"https://erroneo.us/security/2023-11-30/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":3}},{"id":"CVE-2023-44382","type":"cve","title":"CVE-2023-44382: October CMS safe mode bypass using Twig sandbox escape","date":"2023-11-29","url":"https://erroneo.us/security/cve/CVE-2023-44382/","md":"https://erroneo.us/security/cve/CVE-2023-44382/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00873,"verdict":null,"product":"october/system (Composer (PHP))"},{"id":"2023-11-29","type":"digest","title":"Security digest for November 29, 2023","date":"2023-11-29","url":"https://erroneo.us/security/2023-11-29/","md":"https://erroneo.us/security/2023-11-29/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-48022","type":"cve","title":"CVE-2023-48022: Ray has arbitrary code execution via jobs submission API","date":"2023-11-28","url":"https://erroneo.us/security/cve/CVE-2023-48022/","md":"https://erroneo.us/security/cve/CVE-2023-48022/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.83942,"verdict":"check-exposure","product":"ray (PyPI)"},{"id":"2023-11-28","type":"digest","title":"Security digest for November 28, 2023","date":"2023-11-28","url":"https://erroneo.us/security/2023-11-28/","md":"https://erroneo.us/security/2023-11-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-48312","type":"cve","title":"CVE-2023-48312: Capsule Proxy Authentication bypass using an empty token","date":"2023-11-24","url":"https://erroneo.us/security/cve/CVE-2023-48312/","md":"https://erroneo.us/security/cve/CVE-2023-48312/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00574,"verdict":null,"product":"github.com/projectcapsule/capsule-proxy (Go)"},{"id":"CVE-2023-46575","type":"cve","title":"CVE-2023-46575: SQL injection vulnerability in Meshery","date":"2023-11-24","url":"https://erroneo.us/security/cve/CVE-2023-46575/","md":"https://erroneo.us/security/cve/CVE-2023-46575/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01276,"verdict":null,"product":"github.com/layer5io/meshery (Go)"},{"id":"2023-11-24","type":"digest","title":"Security digest for November 24, 2023","date":"2023-11-24","url":"https://erroneo.us/security/2023-11-24/","md":"https://erroneo.us/security/2023-11-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-49210","type":"cve","title":"CVE-2023-49210: openssl npm package vulnerable to command execution","date":"2023-11-23","url":"https://erroneo.us/security/cve/CVE-2023-49210/","md":"https://erroneo.us/security/cve/CVE-2023-49210/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01909,"verdict":null,"product":"openssl (npm)"},{"id":"2023-11-23","type":"digest","title":"Security digest for November 23, 2023","date":"2023-11-23","url":"https://erroneo.us/security/2023-11-23/","md":"https://erroneo.us/security/2023-11-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-37924","type":"cve","title":"CVE-2023-37924: SQL injection in Apache Submarine","date":"2023-11-22","url":"https://erroneo.us/security/cve/CVE-2023-37924/","md":"https://erroneo.us/security/cve/CVE-2023-37924/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.07225,"verdict":null,"product":"apache-submarine (PyPI)"},{"id":"2023-11-22","type":"digest","title":"Security digest for November 22, 2023","date":"2023-11-22","url":"https://erroneo.us/security/2023-11-22/","md":"https://erroneo.us/security/2023-11-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-4911","type":"cve","title":"CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability","date":"2023-11-21","url":"https://erroneo.us/security/cve/CVE-2023-4911/","md":"https://erroneo.us/security/cve/CVE-2023-4911/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.63769,"verdict":null,"product":"GNU GNU C Library"},{"id":"2023-11-21","type":"digest","title":"Security digest for November 21, 2023","date":"2023-11-21","url":"https://erroneo.us/security/2023-11-21/","md":"https://erroneo.us/security/2023-11-21/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2023-48292","type":"cve","title":"CVE-2023-48292: Run Shell Command allows Cross-Site Request Forgery","date":"2023-11-20","url":"https://erroneo.us/security/cve/CVE-2023-48292/","md":"https://erroneo.us/security/cve/CVE-2023-48292/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.22938,"verdict":null,"product":"org.xwiki.contrib:xwiki-application-admintools (Maven)"},{"id":"CVE-2023-48240","type":"cve","title":"CVE-2023-48240: Cookies are sent to external images in rendered diff (and server side request forgery)","date":"2023-11-20","url":"https://erroneo.us/security/cve/CVE-2023-48240/","md":"https://erroneo.us/security/cve/CVE-2023-48240/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0071,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-diff-xml (Maven)"},{"id":"CVE-2023-46302","type":"cve","title":"CVE-2023-46302: Deserialization of Untrusted Data in apache-submarine","date":"2023-11-20","url":"https://erroneo.us/security/cve/CVE-2023-46302/","md":"https://erroneo.us/security/cve/CVE-2023-46302/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01761,"verdict":null,"product":"apache-submarine (PyPI)"},{"id":"CVE-2022-46337","type":"cve","title":"CVE-2022-46337: Apache Derby: LDAP injection vulnerability in authenticator","date":"2023-11-20","url":"https://erroneo.us/security/cve/CVE-2022-46337/","md":"https://erroneo.us/security/cve/CVE-2022-46337/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01418,"verdict":null,"product":"org.apache.derby:derby (Maven)"},{"id":"2023-11-20","type":"digest","title":"Security digest for November 20, 2023","date":"2023-11-20","url":"https://erroneo.us/security/2023-11-20/","md":"https://erroneo.us/security/2023-11-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":4}},{"id":"GHSA-x563-6hqv-26mr","type":"ghsa","title":"Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file","date":"2023-11-17","url":"https://erroneo.us/security/ghsa/GHSA-x563-6hqv-26mr/","md":"https://erroneo.us/security/ghsa/GHSA-x563-6hqv-26mr/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"ibis-framework"},{"id":"2023-11-17","type":"digest","title":"Security digest for November 17, 2023","date":"2023-11-17","url":"https://erroneo.us/security/2023-11-17/","md":"https://erroneo.us/security/2023-11-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-6038","type":"cve","title":"CVE-2023-6038: H2O local file inclusion vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6038/","md":"https://erroneo.us/security/cve/CVE-2023-6038/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.0434,"verdict":null,"product":"ai.h2o:h2o-core (Maven)"},{"id":"CVE-2023-6021","type":"cve","title":"CVE-2023-6021: Ray Path Traversal vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6021/","md":"https://erroneo.us/security/cve/CVE-2023-6021/index.md","severity":"high","cvss":7.5,"kev":false,"epss":0.37076,"verdict":null,"product":"ray (PyPI)"},{"id":"CVE-2023-6020","type":"cve","title":"CVE-2023-6020: Ray Missing Authorization vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6020/","md":"https://erroneo.us/security/cve/CVE-2023-6020/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.14652,"verdict":null,"product":"ray (PyPI)"},{"id":"CVE-2023-6019","type":"cve","title":"CVE-2023-6019: Ray OS Command Injection vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6019/","md":"https://erroneo.us/security/cve/CVE-2023-6019/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.7463,"verdict":null,"product":"ray (PyPI)"},{"id":"CVE-2023-6018","type":"cve","title":"CVE-2023-6018: Remote Code Execution due to Full Controled File Write in mlflow","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6018/","md":"https://erroneo.us/security/cve/CVE-2023-6018/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.47874,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-6015","type":"cve","title":"CVE-2023-6015: MLflow allowed arbitrary files to be PUT onto the server","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6015/","md":"https://erroneo.us/security/cve/CVE-2023-6015/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.04444,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-6014","type":"cve","title":"CVE-2023-6014: MLflow authentication requirement bypass can allow a user to arbitrarily create an account","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-6014/","md":"https://erroneo.us/security/cve/CVE-2023-6014/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01167,"verdict":null,"product":"mlflow (PyPI)"},{"id":"CVE-2023-47797","type":"cve","title":"CVE-2023-47797: Liferay Portal XSS with `p_l_back_url_title` on edit content page","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-47797/","md":"https://erroneo.us/security/cve/CVE-2023-47797/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.0065,"verdict":null,"product":"com.liferay.portal:release.portal.bom (Maven)"},{"id":"CVE-2023-36584","type":"cve","title":"CVE-2023-36584: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-36584/","md":"https://erroneo.us/security/cve/CVE-2023-36584/index.md","severity":"medium","cvss":5.4,"kev":true,"epss":0.03251,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2023-1671","type":"cve","title":"CVE-2023-1671: Sophos Web Appliance Command Injection Vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2023-1671/","md":"https://erroneo.us/security/cve/CVE-2023-1671/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99999,"verdict":null,"product":"Sophos Web Appliance"},{"id":"CVE-2020-2551","type":"cve","title":"CVE-2020-2551: Oracle Fusion Middleware Unspecified Vulnerability","date":"2023-11-16","url":"https://erroneo.us/security/cve/CVE-2020-2551/","md":"https://erroneo.us/security/cve/CVE-2020-2551/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.92817,"verdict":null,"product":"Oracle Fusion Middleware"},{"id":"2023-11-16","type":"digest","title":"Security digest for November 16, 2023","date":"2023-11-16","url":"https://erroneo.us/security/2023-11-16/","md":"https://erroneo.us/security/2023-11-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":8}},{"id":"CVE-2023-36036","type":"cve","title":"CVE-2023-36036: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","date":"2023-11-14","url":"https://erroneo.us/security/cve/CVE-2023-36036/","md":"https://erroneo.us/security/cve/CVE-2023-36036/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.1667,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2023-36033","type":"cve","title":"CVE-2023-36033: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","date":"2023-11-14","url":"https://erroneo.us/security/cve/CVE-2023-36033/","md":"https://erroneo.us/security/cve/CVE-2023-36033/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.10945,"verdict":null,"product":"Microsoft Windows"},{"id":"CVE-2023-36025","type":"cve","title":"CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","date":"2023-11-14","url":"https://erroneo.us/security/cve/CVE-2023-36025/","md":"https://erroneo.us/security/cve/CVE-2023-36025/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.88085,"verdict":null,"product":"Microsoft Windows"},{"id":"2023-11-14","type":"digest","title":"Security digest for November 14, 2023","date":"2023-11-14","url":"https://erroneo.us/security/2023-11-14/","md":"https://erroneo.us/security/2023-11-14/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":0}},{"id":"CVE-2023-47246","type":"cve","title":"CVE-2023-47246: SysAid Server Path Traversal Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-47246/","md":"https://erroneo.us/security/cve/CVE-2023-47246/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.98851,"verdict":null,"product":"SysAid SysAid Server"},{"id":"CVE-2023-36851","type":"cve","title":"CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-36851/","md":"https://erroneo.us/security/cve/CVE-2023-36851/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.01123,"verdict":null,"product":"Juniper Junos OS"},{"id":"CVE-2023-36847","type":"cve","title":"CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-36847/","md":"https://erroneo.us/security/cve/CVE-2023-36847/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.83455,"verdict":null,"product":"Juniper Junos OS"},{"id":"CVE-2023-36846","type":"cve","title":"CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-36846/","md":"https://erroneo.us/security/cve/CVE-2023-36846/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.93473,"verdict":null,"product":"Juniper Junos OS"},{"id":"CVE-2023-36845","type":"cve","title":"CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-36845/","md":"https://erroneo.us/security/cve/CVE-2023-36845/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.9507,"verdict":null,"product":"Juniper Junos OS"},{"id":"CVE-2023-36844","type":"cve","title":"CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","date":"2023-11-13","url":"https://erroneo.us/security/cve/CVE-2023-36844/","md":"https://erroneo.us/security/cve/CVE-2023-36844/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.89958,"verdict":null,"product":"Juniper Junos OS"},{"id":"2023-11-13","type":"digest","title":"Security digest for November 13, 2023","date":"2023-11-13","url":"https://erroneo.us/security/2023-11-13/","md":"https://erroneo.us/security/2023-11-13/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":6,"critical":0}},{"id":"CVE-2023-47128","type":"cve","title":"CVE-2023-47128: piccolo SQL Injection via named transaction savepoints","date":"2023-11-12","url":"https://erroneo.us/security/cve/CVE-2023-47128/","md":"https://erroneo.us/security/cve/CVE-2023-47128/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00782,"verdict":null,"product":"piccolo (PyPI)"},{"id":"2023-11-12","type":"digest","title":"Security digest for November 12, 2023","date":"2023-11-12","url":"https://erroneo.us/security/2023-11-12/","md":"https://erroneo.us/security/2023-11-12/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-6069","type":"cve","title":"CVE-2023-6069: Froxlor Improper Input Validation vulnerability","date":"2023-11-09","url":"https://erroneo.us/security/cve/CVE-2023-6069/","md":"https://erroneo.us/security/cve/CVE-2023-6069/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":0.00829,"verdict":null,"product":"froxlor/froxlor (Composer (PHP))"},{"id":"CVE-2023-47248","type":"cve","title":"CVE-2023-47248: PyArrow: Arbitrary code execution when loading a malicious data file","date":"2023-11-09","url":"https://erroneo.us/security/cve/CVE-2023-47248/","md":"https://erroneo.us/security/cve/CVE-2023-47248/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.14528,"verdict":null,"product":"pyarrow (PyPI)"},{"id":"CVE-2023-43791","type":"cve","title":"CVE-2023-43791: Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens","date":"2023-11-09","url":"https://erroneo.us/security/cve/CVE-2023-43791/","md":"https://erroneo.us/security/cve/CVE-2023-43791/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01241,"verdict":null,"product":"label-studio (PyPI)"},{"id":"2023-11-09","type":"digest","title":"Security digest for November 9, 2023","date":"2023-11-09","url":"https://erroneo.us/security/2023-11-09/","md":"https://erroneo.us/security/2023-11-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2023-46732","type":"cve","title":"CVE-2023-46732: XWiki Platform vulnerable to  reflected cross-site scripting through revision parameter in content menu","date":"2023-11-08","url":"https://erroneo.us/security/cve/CVE-2023-46732/","md":"https://erroneo.us/security/cve/CVE-2023-46732/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.02191,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-flamingo-skin-resources (Maven)"},{"id":"CVE-2023-46731","type":"cve","title":"CVE-2023-46731: XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest","date":"2023-11-08","url":"https://erroneo.us/security/cve/CVE-2023-46731/","md":"https://erroneo.us/security/cve/CVE-2023-46731/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.88534,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-administration-ui (Maven)"},{"id":"CVE-2023-29552","type":"cve","title":"CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability","date":"2023-11-08","url":"https://erroneo.us/security/cve/CVE-2023-29552/","md":"https://erroneo.us/security/cve/CVE-2023-29552/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.63975,"verdict":null,"product":"IETF Service Location Protocol (SLP)"},{"id":"2023-11-08","type":"digest","title":"Security digest for November 8, 2023","date":"2023-11-08","url":"https://erroneo.us/security/2023-11-08/","md":"https://erroneo.us/security/2023-11-08/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"CVE-2023-46244","type":"cve","title":"CVE-2023-46244: XWiki Platform privilege escalation from script right to programming right through title displayer","date":"2023-11-07","url":"https://erroneo.us/security/cve/CVE-2023-46244/","md":"https://erroneo.us/security/cve/CVE-2023-46244/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.0079,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-display-api (Maven)"},{"id":"CVE-2023-46242","type":"cve","title":"CVE-2023-46242: XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token","date":"2023-11-07","url":"https://erroneo.us/security/cve/CVE-2023-46242/","md":"https://erroneo.us/security/cve/CVE-2023-46242/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.00381,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-oldcore (Maven)"},{"id":"CVE-2023-22518","type":"cve","title":"CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","date":"2023-11-07","url":"https://erroneo.us/security/cve/CVE-2023-22518/","md":"https://erroneo.us/security/cve/CVE-2023-22518/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Atlassian Confluence Data Center and Server"},{"id":"2023-11-07","type":"digest","title":"Security digest for November 7, 2023","date":"2023-11-07","url":"https://erroneo.us/security/2023-11-07/","md":"https://erroneo.us/security/2023-11-07/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"GHSA-v6xp-ccvx-w52m","type":"ghsa","title":"Json response for search reveals Solr credentials","date":"2023-11-03","url":"https://erroneo.us/security/ghsa/GHSA-v6xp-ccvx-w52m/","md":"https://erroneo.us/security/ghsa/GHSA-v6xp-ccvx-w52m/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"ibexa/solr"},{"id":"GHSA-7crc-r3wg-cfgf","type":"ghsa","title":"Json response for search reveals Solr credentials","date":"2023-11-03","url":"https://erroneo.us/security/ghsa/GHSA-7crc-r3wg-cfgf/","md":"https://erroneo.us/security/ghsa/GHSA-7crc-r3wg-cfgf/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"ezsystems/ezplatform-solr-search-engine, ezsystems/ezplatform-solr-search-engine"},{"id":"2023-11-03","type":"digest","title":"Security digest for November 3, 2023","date":"2023-11-03","url":"https://erroneo.us/security/2023-11-03/","md":"https://erroneo.us/security/2023-11-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-46604","type":"cve","title":"CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","date":"2023-11-02","url":"https://erroneo.us/security/cve/CVE-2023-46604/","md":"https://erroneo.us/security/cve/CVE-2023-46604/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99891,"verdict":null,"product":"Apache ActiveMQ"},{"id":"2023-11-02","type":"digest","title":"Security digest for November 2, 2023","date":"2023-11-02","url":"https://erroneo.us/security/2023-11-02/","md":"https://erroneo.us/security/2023-11-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2023-47204","type":"cve","title":"CVE-2023-47204: transmute-core unsafe YAML deserialization vulnerability","date":"2023-11-01","url":"https://erroneo.us/security/cve/CVE-2023-47204/","md":"https://erroneo.us/security/cve/CVE-2023-47204/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00802,"verdict":null,"product":"transmute-core (PyPI)"},{"id":"2023-11-01","type":"digest","title":"Security digest for November 1, 2023","date":"2023-11-01","url":"https://erroneo.us/security/2023-11-01/","md":"https://erroneo.us/security/2023-11-01/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"confluence-improper-authorization-cve-2023-22518","type":"brief","title":"Confluence CVE-2023-22518: Unauthenticated Reset to Admin","date":"2023-10-31","url":"https://erroneo.us/security/briefs/confluence-improper-authorization-cve-2023-22518/","md":"https://erroneo.us/security/briefs/confluence-improper-authorization-cve-2023-22518/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"act-now","cves":["CVE-2023-22518"],"summary":"Any self-hosted Confluence that is reachable from the internet and not on a fixed release can be wiped and taken over by an unauthenticated request; patch or pull it offline, and Atlassian Cloud users have nothing to do."},{"id":"CVE-2023-46748","type":"cve","title":"CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability","date":"2023-10-31","url":"https://erroneo.us/security/cve/CVE-2023-46748/","md":"https://erroneo.us/security/cve/CVE-2023-46748/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.04468,"verdict":null,"product":"F5 BIG-IP Configuration Utility"},{"id":"CVE-2023-46747","type":"cve","title":"CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","date":"2023-10-31","url":"https://erroneo.us/security/cve/CVE-2023-46747/","md":"https://erroneo.us/security/cve/CVE-2023-46747/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.96515,"verdict":null,"product":"F5 BIG-IP Configuration Utility"},{"id":"2023-10-31","type":"digest","title":"Security digest for October 31, 2023","date":"2023-10-31","url":"https://erroneo.us/security/2023-10-31/","md":"https://erroneo.us/security/2023-10-31/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":2,"critical":0}},{"id":"CVE-2023-46502","type":"cve","title":"CVE-2023-46502: OpenCRX allows a remote attacker to execute arbitrary code via a crafted request","date":"2023-10-30","url":"https://erroneo.us/security/cve/CVE-2023-46502/","md":"https://erroneo.us/security/cve/CVE-2023-46502/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00721,"verdict":null,"product":"org.opencrx:opencrx-client (Maven)"},{"id":"2023-10-30","type":"digest","title":"Security digest for October 30, 2023","date":"2023-10-30","url":"https://erroneo.us/security/2023-10-30/","md":"https://erroneo.us/security/2023-10-30/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-4967","type":"cve","title":"CVE-2023-4967: Denial of service","date":"2023-10-27","url":"https://erroneo.us/security/cve/CVE-2023-4967/","md":"https://erroneo.us/security/cve/CVE-2023-4967/index.md","severity":"high","cvss":8.2,"kev":false,"epss":0.0109,"verdict":"act-now","product":"Cloud Software Group NetScaler ADC"},{"id":"2023-10-27","type":"digest","title":"Security digest for October 27, 2023","date":"2023-10-27","url":"https://erroneo.us/security/2023-10-27/","md":"https://erroneo.us/security/2023-10-27/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-5631","type":"cve","title":"CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","date":"2023-10-26","url":"https://erroneo.us/security/cve/CVE-2023-5631/","md":"https://erroneo.us/security/cve/CVE-2023-5631/index.md","severity":"medium","cvss":6.1,"kev":true,"epss":0.76901,"verdict":null,"product":"Roundcube Webmail"},{"id":"2023-10-26","type":"digest","title":"Security digest for October 26, 2023","date":"2023-10-26","url":"https://erroneo.us/security/2023-10-26/","md":"https://erroneo.us/security/2023-10-26/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2023-46233","type":"cve","title":"CVE-2023-46233: crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-46233/","md":"https://erroneo.us/security/cve/CVE-2023-46233/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00635,"verdict":null,"product":"crypto-js (npm)"},{"id":"CVE-2023-46133","type":"cve","title":"CVE-2023-46133: crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-46133/","md":"https://erroneo.us/security/cve/CVE-2023-46133/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00446,"verdict":null,"product":"crypto-es (npm)"},{"id":"CVE-2023-45137","type":"cve","title":"CVE-2023-45137: XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-45137/","md":"https://erroneo.us/security/cve/CVE-2023-45137/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.00623,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2023-45136","type":"cve","title":"CVE-2023-45136: XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-45136/","md":"https://erroneo.us/security/cve/CVE-2023-45136/index.md","severity":"critical","cvss":9.7,"kev":false,"epss":0.05124,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2023-45135","type":"cve","title":"CVE-2023-45135: XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-45135/","md":"https://erroneo.us/security/cve/CVE-2023-45135/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01741,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2023-45134","type":"cve","title":"CVE-2023-45134: XWiki Platform XSS vulnerability from account in the create page form via template provider","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-45134/","md":"https://erroneo.us/security/cve/CVE-2023-45134/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01834,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-web-templates (Maven)"},{"id":"CVE-2023-44794","type":"cve","title":"CVE-2023-44794: SaToken privilege escalation vulnerability","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-44794/","md":"https://erroneo.us/security/cve/CVE-2023-44794/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00964,"verdict":null,"product":"cn.dev33:sa-token-core (Maven)"},{"id":"CVE-2023-37913","type":"cve","title":"CVE-2023-37913: org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-37913/","md":"https://erroneo.us/security/cve/CVE-2023-37913/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01076,"verdict":null,"product":"org.xwiki.platform:xwiki-platform-office-importer (Maven)"},{"id":"CVE-2023-37908","type":"cve","title":"CVE-2023-37908: org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-37908/","md":"https://erroneo.us/security/cve/CVE-2023-37908/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01058,"verdict":null,"product":"org.xwiki.rendering:xwiki-rendering-xml (Maven)"},{"id":"CVE-2023-31581","type":"cve","title":"CVE-2023-31581: Sureness uses hardcoded key","date":"2023-10-25","url":"https://erroneo.us/security/cve/CVE-2023-31581/","md":"https://erroneo.us/security/cve/CVE-2023-31581/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.00808,"verdict":null,"product":"com.usthe.sureness:sureness-core (Maven)"},{"id":"2023-10-25","type":"digest","title":"Security digest for October 25, 2023","date":"2023-10-25","url":"https://erroneo.us/security/2023-10-25/","md":"https://erroneo.us/security/2023-10-25/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":10}},{"id":"CVE-2023-20273","type":"cve","title":"CVE-2023-20273: Cisco IOS XE Web UI Command Injection Vulnerability","date":"2023-10-23","url":"https://erroneo.us/security/cve/CVE-2023-20273/","md":"https://erroneo.us/security/cve/CVE-2023-20273/index.md","severity":"high","cvss":7.2,"kev":true,"epss":0.92992,"verdict":"act-now","product":"Cisco Cisco IOS XE Web UI"},{"id":"2023-10-23","type":"digest","title":"Security digest for October 23, 2023","date":"2023-10-23","url":"https://erroneo.us/security/2023-10-23/","md":"https://erroneo.us/security/2023-10-23/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"CVE-2023-5688","type":"cve","title":"CVE-2023-5688: modoboa Cross-site Scripting vulnerability","date":"2023-10-20","url":"https://erroneo.us/security/cve/CVE-2023-5688/","md":"https://erroneo.us/security/cve/CVE-2023-5688/index.md","severity":"critical","cvss":9.3,"kev":false,"epss":0.00655,"verdict":null,"product":"modoboa (PyPI)"},{"id":"CVE-2023-32785","type":"cve","title":"CVE-2023-32785: Langchain SQL Injection vulnerability","date":"2023-10-20","url":"https://erroneo.us/security/cve/CVE-2023-32785/","md":"https://erroneo.us/security/cve/CVE-2023-32785/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":null,"verdict":null,"product":"langchain (PyPI)"},{"id":"2023-10-20","type":"digest","title":"Security digest for October 20, 2023","date":"2023-10-20","url":"https://erroneo.us/security/2023-10-20/","md":"https://erroneo.us/security/2023-10-20/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"CVE-2023-45278","type":"cve","title":"CVE-2023-45278: Yamcs API Directory Traversal vulnerability","date":"2023-10-19","url":"https://erroneo.us/security/cve/CVE-2023-45278/","md":"https://erroneo.us/security/cve/CVE-2023-45278/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.01831,"verdict":null,"product":"org.yamcs:yamcs (Maven)"},{"id":"2023-10-19","type":"digest","title":"Security digest for October 19, 2023","date":"2023-10-19","url":"https://erroneo.us/security/2023-10-19/","md":"https://erroneo.us/security/2023-10-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":1}},{"id":"CVE-2023-4966","type":"cve","title":"CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","date":"2023-10-18","url":"https://erroneo.us/security/cve/CVE-2023-4966/","md":"https://erroneo.us/security/cve/CVE-2023-4966/index.md","severity":"critical","cvss":9.4,"kev":true,"epss":0.99999,"verdict":"act-now","product":"Citrix NetScaler ADC and NetScaler Gateway"},{"id":"CVE-2023-38546","type":"cve","title":"CVE-2023-38546: curl curl vulnerability","date":"2023-10-18","url":"https://erroneo.us/security/cve/CVE-2023-38546/","md":"https://erroneo.us/security/cve/CVE-2023-38546/index.md","severity":null,"cvss":null,"kev":false,"epss":0.05956,"verdict":"most-can-relax","product":"curl curl"},{"id":"CVE-2023-38545","type":"cve","title":"CVE-2023-38545: curl curl vulnerability","date":"2023-10-18","url":"https://erroneo.us/security/cve/CVE-2023-38545/","md":"https://erroneo.us/security/cve/CVE-2023-38545/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.78689,"verdict":"most-can-relax","product":"curl curl"},{"id":"2023-10-18","type":"digest","title":"Security digest for October 18, 2023","date":"2023-10-18","url":"https://erroneo.us/security/2023-10-18/","md":"https://erroneo.us/security/2023-10-18/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-rc4v-99cr-pjcm","type":"ghsa","title":"Prototype Pollution in ali-security/mongoose","date":"2023-10-17","url":"https://erroneo.us/security/ghsa/GHSA-rc4v-99cr-pjcm/","md":"https://erroneo.us/security/ghsa/GHSA-rc4v-99cr-pjcm/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":null,"verdict":null,"product":"@seal-security/mongoose-fixed"},{"id":"GHSA-7p92-x423-vwj6","type":"ghsa","title":"Plonk verifier KZG multi point verification","date":"2023-10-17","url":"https://erroneo.us/security/ghsa/GHSA-7p92-x423-vwj6/","md":"https://erroneo.us/security/ghsa/GHSA-7p92-x423-vwj6/index.md","severity":"critical","cvss":null,"kev":false,"epss":null,"verdict":null,"product":"github.com/consensys/gnark"},{"id":"CVE-2023-45144","type":"cve","title":"CVE-2023-45144: XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-45144/","md":"https://erroneo.us/security/cve/CVE-2023-45144/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.01235,"verdict":null,"product":"com.xwiki.identity-oauth:identity-oauth-ui (Maven)"},{"id":"CVE-2023-45128","type":"cve","title":"CVE-2023-45128: CSRF Token Reuse Vulnerability","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-45128/","md":"https://erroneo.us/security/cve/CVE-2023-45128/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.00364,"verdict":null,"product":"github.com/gofiber/fiber/v2 (Go)"},{"id":"CVE-2023-44311","type":"cve","title":"CVE-2023-44311: Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-44311/","md":"https://erroneo.us/security/cve/CVE-2023-44311/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00568,"verdict":null,"product":"com.liferay:com.liferay.oauth2.provider.rest (Maven)"},{"id":"CVE-2023-44310","type":"cve","title":"CVE-2023-44310: Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-44310/","md":"https://erroneo.us/security/cve/CVE-2023-44310/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00575,"verdict":null,"product":"com.liferay:com.liferay.layout.impl (Maven)"},{"id":"CVE-2023-44309","type":"cve","title":"CVE-2023-44309: Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-44309/","md":"https://erroneo.us/security/cve/CVE-2023-44309/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.00575,"verdict":null,"product":"com.liferay:com.liferay.fragment.entry.processor.impl (Maven)"},{"id":"CVE-2023-42629","type":"cve","title":"CVE-2023-42629: Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-42629/","md":"https://erroneo.us/security/cve/CVE-2023-42629/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.02784,"verdict":null,"product":"com.liferay:com.liferay.asset.categories.admin.web (Maven)"},{"id":"CVE-2023-42628","type":"cve","title":"CVE-2023-42628: Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-42628/","md":"https://erroneo.us/security/cve/CVE-2023-42628/index.md","severity":"critical","cvss":9,"kev":false,"epss":0.02784,"verdict":null,"product":"com.liferay:com.liferay.wiki.web (Maven)"},{"id":"CVE-2023-42627","type":"cve","title":"CVE-2023-42627: Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-42627/","md":"https://erroneo.us/security/cve/CVE-2023-42627/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.02785,"verdict":null,"product":"com.liferay.commerce:com.liferay.commerce.address.content.web (Maven)"},{"id":"CVE-2023-42497","type":"cve","title":"CVE-2023-42497: Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page","date":"2023-10-17","url":"https://erroneo.us/security/cve/CVE-2023-42497/","md":"https://erroneo.us/security/cve/CVE-2023-42497/index.md","severity":"critical","cvss":9.6,"kev":false,"epss":0.00568,"verdict":null,"product":"com.liferay:com.liferay.translation.web (Maven)"},{"id":"2023-10-17","type":"digest","title":"Security digest for October 17, 2023","date":"2023-10-17","url":"https://erroneo.us/security/2023-10-17/","md":"https://erroneo.us/security/2023-10-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":11}},{"id":"cisco-ios-xe-web-ui-cve-2023-20198","type":"brief","title":"Cisco IOS XE Web UI Zero-Day Chain Implants Devices","date":"2023-10-16","url":"https://erroneo.us/security/briefs/cisco-ios-xe-web-ui-cve-2023-20198/","md":"https://erroneo.us/security/briefs/cisco-ios-xe-web-ui-cve-2023-20198/index.md","severity":"critical","kev":true,"epss":0.99609,"verdict":"act-now","cves":["CVE-2023-20198","CVE-2023-20273"],"summary":"If any IOS XE device has its HTTP or HTTPS server reachable from an untrusted network and is not on a fixed release, treat it as compromised until proven otherwise; devices with the web UI disabled were never exposed."},{"id":"CVE-2023-45138","type":"cve","title":"CVE-2023-45138: XWiki Change Request Application UI XSS and remote code execution through change request title","date":"2023-10-16","url":"https://erroneo.us/security/cve/CVE-2023-45138/","md":"https://erroneo.us/security/cve/CVE-2023-45138/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.71744,"verdict":null,"product":"org.xwiki.contrib.changerequest:application-changerequest-ui (Maven)"},{"id":"CVE-2023-45133","type":"cve","title":"CVE-2023-45133: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code","date":"2023-10-16","url":"https://erroneo.us/security/cve/CVE-2023-45133/","md":"https://erroneo.us/security/cve/CVE-2023-45133/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00525,"verdict":null,"product":"@babel/traverse (npm)"},{"id":"CVE-2023-43668","type":"cve","title":"CVE-2023-43668: Authorization Bypass in Apache InLong","date":"2023-10-16","url":"https://erroneo.us/security/cve/CVE-2023-43668/","md":"https://erroneo.us/security/cve/CVE-2023-43668/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.0143,"verdict":null,"product":"org.apache.inlong:manager-pojo (Maven)"},{"id":"CVE-2023-43661","type":"cve","title":"CVE-2023-43661: Cachet vulnerable to Authenticated Remote Code Execution","date":"2023-10-16","url":"https://erroneo.us/security/cve/CVE-2023-43661/","md":"https://erroneo.us/security/cve/CVE-2023-43661/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.51481,"verdict":null,"product":"cachethq/cachet (Composer (PHP))"},{"id":"CVE-2023-20198","type":"cve","title":"CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation Vulnerability","date":"2023-10-16","url":"https://erroneo.us/security/cve/CVE-2023-20198/","md":"https://erroneo.us/security/cve/CVE-2023-20198/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99609,"verdict":"act-now","product":"Cisco IOS XE Web UI"},{"id":"2023-10-16","type":"digest","title":"Security digest for October 16, 2023","date":"2023-10-16","url":"https://erroneo.us/security/2023-10-16/","md":"https://erroneo.us/security/2023-10-16/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":1,"critical":4}},{"id":"CVE-2023-5572","type":"cve","title":"CVE-2023-5572: Server-Side Request Forgery (SSRF) in vriteio/vrite","date":"2023-10-13","url":"https://erroneo.us/security/cve/CVE-2023-5572/","md":"https://erroneo.us/security/cve/CVE-2023-5572/index.md","severity":"critical","cvss":10.0,"kev":false,"epss":0.01007,"verdict":null,"product":"@vrite/sdk (npm)"},{"id":"CVE-2023-45853","type":"cve","title":"CVE-2023-45853: pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency","date":"2023-10-13","url":"https://erroneo.us/security/cve/CVE-2023-45853/","md":"https://erroneo.us/security/cve/CVE-2023-45853/index.md","severity":"high","cvss":8.8,"kev":false,"epss":0.03448,"verdict":null,"product":"pyminizip (PyPI)"},{"id":"2023-10-13","type":"digest","title":"Security digest for October 13, 2023","date":"2023-10-13","url":"https://erroneo.us/security/2023-10-13/","md":"https://erroneo.us/security/2023-10-13/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":2}},{"id":"curl-socks5-heap-overflow-cve-2023-38545","type":"brief","title":"curl SOCKS5 Heap Overflow: Hyped, but Narrow in Practice","date":"2023-10-11","url":"https://erroneo.us/security/briefs/curl-socks5-heap-overflow-cve-2023-38545/","md":"https://erroneo.us/security/briefs/curl-socks5-heap-overflow-cve-2023-38545/index.md","severity":"high","kev":false,"epss":0.78689,"verdict":"most-can-relax","cves":["CVE-2023-38545","CVE-2023-38546"],"summary":"Pre-announced as the worst curl flaw in a long time, the bug only bites when libcurl uses a SOCKS5 proxy with remote name resolution and an attacker can supply a very long hostname; take 8.4.0 or later in normal patching, and hurry only if that proxy setup applies to you."},{"id":"CVE-2023-44981","type":"cve","title":"CVE-2023-44981: Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper","date":"2023-10-11","url":"https://erroneo.us/security/cve/CVE-2023-44981/","md":"https://erroneo.us/security/cve/CVE-2023-44981/index.md","severity":"critical","cvss":9.1,"kev":false,"epss":0.02221,"verdict":null,"product":"org.apache.zookeeper:zookeeper (Maven)"},{"id":"2023-10-11","type":"digest","title":"Security digest for October 11, 2023","date":"2023-10-11","url":"https://erroneo.us/security/2023-10-11/","md":"https://erroneo.us/security/2023-10-11/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"http2-rapid-reset-ddos-cve-2023-44487","type":"brief","title":"HTTP/2 Rapid Reset: Record DDoS Flaw in HTTP/2 Servers","date":"2023-10-10","url":"https://erroneo.us/security/briefs/http2-rapid-reset-ddos-cve-2023-44487/","md":"https://erroneo.us/security/briefs/http2-rapid-reset-ddos-cve-2023-44487/index.md","severity":"high","kev":true,"epss":0.99999,"verdict":"check-exposure","cves":["CVE-2023-44487"],"summary":"This is availability-only and was exploited at record scale, but if your HTTP/2 traffic terminates at a major CDN or cloud load balancer the provider already absorbed it; check what terminates HTTP/2 on your own servers."},{"id":"citrix-bleed-netscaler-cve-2023-4966","type":"brief","title":"Citrix Bleed: NetScaler Gateway Leaks Session Tokens","date":"2023-10-10","url":"https://erroneo.us/security/briefs/citrix-bleed-netscaler-cve-2023-4966/","md":"https://erroneo.us/security/briefs/citrix-bleed-netscaler-cve-2023-4966/index.md","severity":"critical","kev":true,"epss":0.99999,"verdict":"act-now","cves":["CVE-2023-4966","CVE-2023-4967"],"summary":"If a NetScaler configured as a Gateway or AAA server is still on a vulnerable build, assume it is being probed and patch, kill every session, and hunt; patching alone does not evict an attacker holding a stolen session."},{"id":"CVE-2023-44487","type":"cve","title":"CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability","date":"2023-10-10","url":"https://erroneo.us/security/cve/CVE-2023-44487/","md":"https://erroneo.us/security/cve/CVE-2023-44487/index.md","severity":"high","cvss":7.5,"kev":true,"epss":0.99999,"verdict":"check-exposure","product":"IETF HTTP/2"},{"id":"CVE-2023-41763","type":"cve","title":"CVE-2023-41763: Microsoft Skype for Business Privilege Escalation Vulnerability","date":"2023-10-10","url":"https://erroneo.us/security/cve/CVE-2023-41763/","md":"https://erroneo.us/security/cve/CVE-2023-41763/index.md","severity":"medium","cvss":5.3,"kev":true,"epss":0.90547,"verdict":null,"product":"Microsoft Skype for Business"},{"id":"CVE-2023-36563","type":"cve","title":"CVE-2023-36563: Microsoft WordPad Information Disclosure Vulnerability","date":"2023-10-10","url":"https://erroneo.us/security/cve/CVE-2023-36563/","md":"https://erroneo.us/security/cve/CVE-2023-36563/index.md","severity":"medium","cvss":6.5,"kev":true,"epss":0.20318,"verdict":null,"product":"Microsoft WordPad"},{"id":"CVE-2023-21608","type":"cve","title":"CVE-2023-21608: Adobe Acrobat and Reader Use-After-Free Vulnerability","date":"2023-10-10","url":"https://erroneo.us/security/cve/CVE-2023-21608/","md":"https://erroneo.us/security/cve/CVE-2023-21608/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.59427,"verdict":null,"product":"Adobe Acrobat and Reader"},{"id":"CVE-2023-20109","type":"cve","title":"CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","date":"2023-10-10","url":"https://erroneo.us/security/cve/CVE-2023-20109/","md":"https://erroneo.us/security/cve/CVE-2023-20109/index.md","severity":"medium","cvss":6.6,"kev":true,"epss":0.02484,"verdict":null,"product":"Cisco IOS and IOS XE"},{"id":"2023-10-10","type":"digest","title":"Security digest for October 10, 2023","date":"2023-10-10","url":"https://erroneo.us/security/2023-10-10/","md":"https://erroneo.us/security/2023-10-10/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":2,"kev":5,"critical":0}},{"id":"langchain-palchain-prompt-injection-rce-cve-2023-44467","type":"brief","title":"LangChain PALChain: Prompt Injection to RCE (CVE-2023-44467)","date":"2023-10-09","url":"https://erroneo.us/security/briefs/langchain-palchain-prompt-injection-rce-cve-2023-44467/","md":"https://erroneo.us/security/briefs/langchain-palchain-prompt-injection-rce-cve-2023-44467/index.md","severity":"critical","kev":false,"epss":0.01039,"verdict":"check-exposure","cves":["CVE-2023-44467","CVE-2024-27444"],"summary":"Only apps that feed untrusted text into PALChain (or similar LLM-to-Python chains) are at risk, but for them it is full code execution, and blocklist fixes kept getting bypassed, so remove the pattern rather than trust the patch."},{"id":"CVE-2023-44467","type":"cve","title":"CVE-2023-44467: langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method","date":"2023-10-09","url":"https://erroneo.us/security/cve/CVE-2023-44467/","md":"https://erroneo.us/security/cve/CVE-2023-44467/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01039,"verdict":"check-exposure","product":"langchain-experimental (PyPI)"},{"id":"2023-10-09","type":"digest","title":"Security digest for October 9, 2023","date":"2023-10-09","url":"https://erroneo.us/security/2023-10-09/","md":"https://erroneo.us/security/2023-10-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":1}},{"id":"CVE-2023-5214","type":"cve","title":"CVE-2023-5214: Puppet Bolt privilege escalation vulnerability","date":"2023-10-06","url":"https://erroneo.us/security/cve/CVE-2023-5214/","md":"https://erroneo.us/security/cve/CVE-2023-5214/index.md","severity":"medium","cvss":6.5,"kev":false,"epss":0.00447,"verdict":null,"product":"bolt (RubyGems)"},{"id":"CVE-2023-45311","type":"cve","title":"CVE-2023-45311: Code injection in fsevents","date":"2023-10-06","url":"https://erroneo.us/security/cve/CVE-2023-45311/","md":"https://erroneo.us/security/cve/CVE-2023-45311/index.md","severity":"critical","cvss":9.8,"kev":false,"epss":0.01704,"verdict":null,"product":"fsevents (npm)"},{"id":"CVE-2023-32188","type":"cve","title":"CVE-2023-32188: JWT token compromise can allow malicious actions including Remote Code Execution (RCE)","date":"2023-10-06","url":"https://erroneo.us/security/cve/CVE-2023-32188/","md":"https://erroneo.us/security/cve/CVE-2023-32188/index.md","severity":"critical","cvss":9.4,"kev":false,"epss":0.00588,"verdict":null,"product":"github.com/neuvector/neuvector (Go)"},{"id":"2023-10-06","type":"digest","title":"Security digest for October 6, 2023","date":"2023-10-06","url":"https://erroneo.us/security/2023-10-06/","md":"https://erroneo.us/security/2023-10-06/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":0,"critical":3}},{"id":"CVE-2023-42824","type":"cve","title":"CVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","date":"2023-10-05","url":"https://erroneo.us/security/cve/CVE-2023-42824/","md":"https://erroneo.us/security/cve/CVE-2023-42824/index.md","severity":"high","cvss":7.8,"kev":true,"epss":0.00971,"verdict":null,"product":"Apple iOS and iPadOS"},{"id":"CVE-2023-40044","type":"cve","title":"CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","date":"2023-10-05","url":"https://erroneo.us/security/cve/CVE-2023-40044/","md":"https://erroneo.us/security/cve/CVE-2023-40044/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.90355,"verdict":null,"product":"Progress WS_FTP Server"},{"id":"CVE-2023-26153","type":"cve","title":"CVE-2023-26153: geokit-rails Command Injection vulnerability","date":"2023-10-05","url":"https://erroneo.us/security/cve/CVE-2023-26153/","md":"https://erroneo.us/security/cve/CVE-2023-26153/index.md","severity":"high","cvss":8.3,"kev":false,"epss":0.03847,"verdict":null,"product":"geokit-rails (RubyGems)"},{"id":"CVE-2023-22515","type":"cve","title":"CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","date":"2023-10-05","url":"https://erroneo.us/security/cve/CVE-2023-22515/","md":"https://erroneo.us/security/cve/CVE-2023-22515/index.md","severity":"critical","cvss":10,"kev":true,"epss":0.99223,"verdict":null,"product":"Atlassian Confluence Data Center and Server"},{"id":"2023-10-05","type":"digest","title":"Security digest for October 5, 2023","date":"2023-10-05","url":"https://erroneo.us/security/2023-10-05/","md":"https://erroneo.us/security/2023-10-05/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":3,"critical":1}},{"id":"CVE-2023-42793","type":"cve","title":"CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability","date":"2023-10-04","url":"https://erroneo.us/security/cve/CVE-2023-42793/","md":"https://erroneo.us/security/cve/CVE-2023-42793/index.md","severity":"critical","cvss":9.8,"kev":true,"epss":0.99987,"verdict":null,"product":"JetBrains TeamCity"},{"id":"CVE-2023-28229","type":"cve","title":"CVE-2023-28229: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","date":"2023-10-04","url":"https://erroneo.us/security/cve/CVE-2023-28229/","md":"https://erroneo.us/security/cve/CVE-2023-28229/index.md","severity":"high","cvss":7,"kev":true,"epss":0.01671,"verdict":null,"product":"Microsoft Windows CNG Key Isolation Service"},{"id":"2023-10-04","type":"digest","title":"Security digest for October 4, 2023","date":"2023-10-04","url":"https://erroneo.us/security/2023-10-04/","md":"https://erroneo.us/security/2023-10-04/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":2,"critical":0}},{"id":"CVE-2023-4211","type":"cve","title":"CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date":"2023-10-03","url":"https://erroneo.us/security/cve/CVE-2023-4211/","md":"https://erroneo.us/security/cve/CVE-2023-4211/index.md","severity":"medium","cvss":5.5,"kev":true,"epss":0.01098,"verdict":null,"product":"Arm Mali GPU Kernel Driver"},{"id":"2023-10-03","type":"digest","title":"Security digest for October 3, 2023","date":"2023-10-03","url":"https://erroneo.us/security/2023-10-03/","md":"https://erroneo.us/security/2023-10-03/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":0}},{"id":"GHSA-4mqg-h5jf-j9m7","type":"ghsa","title":"TorchServe Pre-Auth Remote Code Execution","date":"2023-10-02","url":"https://erroneo.us/security/ghsa/GHSA-4mqg-h5jf-j9m7/","md":"https://erroneo.us/security/ghsa/GHSA-4mqg-h5jf-j9m7/index.md","severity":"critical","cvss":9.9,"kev":false,"epss":null,"verdict":null,"product":"torchserve"},{"id":"CVE-2023-5217","type":"cve","title":"CVE-2023-5217: Google Chromium libvpx Heap Buffer Overflow Vulnerability","date":"2023-10-02","url":"https://erroneo.us/security/cve/CVE-2023-5217/","md":"https://erroneo.us/security/cve/CVE-2023-5217/index.md","severity":"high","cvss":8.8,"kev":true,"epss":0.49013,"verdict":null,"product":"Google Chromium libvpx"},{"id":"CVE-2023-43654","type":"cve","title":"CVE-2023-43654: TorchServe Server-Side Request Forgery vulnerability","date":"2023-10-02","url":"https://erroneo.us/security/cve/CVE-2023-43654/","md":"https://erroneo.us/security/cve/CVE-2023-43654/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.42495,"verdict":null,"product":"torchserve (PyPI)"},{"id":"2023-10-02","type":"digest","title":"Security digest for October 2, 2023","date":"2023-10-02","url":"https://erroneo.us/security/2023-10-02/","md":"https://erroneo.us/security/2023-10-02/index.md","severity":null,"kev":true,"epss":null,"verdict":null,"counts":{"briefs":0,"kev":1,"critical":2}},{"id":"knx-bcu-key-lockout-cve-2023-4346","type":"brief","title":"KNX CVE-2023-4346: Building Automation BCU Key Lockout","date":"2023-08-24","url":"https://erroneo.us/security/briefs/knx-bcu-key-lockout-cve-2023-4346/","md":"https://erroneo.us/security/briefs/knx-bcu-key-lockout-cve-2023-4346/index.md","severity":"high","kev":true,"epss":0.01294,"verdict":"check-exposure","cves":["CVE-2023-4346"],"summary":"Only buildings with KNX devices that have no BCU key set and a network path to the KNX bus are at risk, but there is no patch and a lockout can mean physically replacing devices."},{"id":"2023-08-24","type":"digest","title":"Security digest for August 24, 2023","date":"2023-08-24","url":"https://erroneo.us/security/2023-08-24/","md":"https://erroneo.us/security/2023-08-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"CVE-2023-22621","type":"cve","title":"CVE-2023-22621: Strapi vulnerability","date":"2023-04-19","url":"https://erroneo.us/security/cve/CVE-2023-22621/","md":"https://erroneo.us/security/cve/CVE-2023-22621/index.md","severity":"critical","cvss":10,"kev":false,"epss":0.706,"verdict":"check-exposure","product":"Strapi"},{"id":"strapi-cve-2023-22894-private-field-leak-kev","type":"brief","title":"Strapi CVE-2023-22894: 2023 Password-Hash Leak Now in KEV","date":"2023-04-17","url":"https://erroneo.us/security/briefs/strapi-cve-2023-22894-private-field-leak-kev/","md":"https://erroneo.us/security/briefs/strapi-cve-2023-22894-private-field-leak-kev/index.md","severity":"high","kev":true,"epss":0.706,"verdict":"check-exposure","cves":["CVE-2023-22894","CVE-2023-22621"],"summary":"Only Strapi builds older than 4.8.0 (March 2023) are affected, but on those an unauthenticated attacker can take over the super admin, so any you find should be upgraded or taken offline today."},{"id":"2023-04-17","type":"digest","title":"Security digest for April 17, 2023","date":"2023-04-17","url":"https://erroneo.us/security/2023-04-17/","md":"https://erroneo.us/security/2023-04-17/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"ajaxpro-deserialization-rce-cve-2021-23758","type":"brief","title":"AjaxPro CVE-2021-23758: Old ASP.NET RCE Now in CISA KEV","date":"2021-12-03","url":"https://erroneo.us/security/briefs/ajaxpro-deserialization-rce-cve-2021-23758/","md":"https://erroneo.us/security/briefs/ajaxpro-deserialization-rce-cve-2021-23758/index.md","severity":"critical","kev":true,"epss":0.82578,"verdict":"check-exposure","cves":["CVE-2021-23758"],"summary":"If an ASP.NET app you run still ships AjaxPro, treat it as an unauthenticated RCE and upgrade or remove the library now; if you never used AjaxPro, there is nothing to do."},{"id":"2021-12-03","type":"digest","title":"Security digest for December 3, 2021","date":"2021-12-03","url":"https://erroneo.us/security/2021-12-03/","md":"https://erroneo.us/security/2021-12-03/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"dd-wrt-upnp-ssdp-overflow-cve-2021-27137","type":"brief","title":"DD-WRT CVE-2021-27137: UPnP Overflow Used by C0XMO Botnet","date":"2021-03-24","url":"https://erroneo.us/security/briefs/dd-wrt-upnp-ssdp-overflow-cve-2021-27137/","md":"https://erroneo.us/security/briefs/dd-wrt-upnp-ssdp-overflow-cve-2021-27137/index.md","severity":"high","kev":true,"epss":0.03995,"verdict":"check-exposure","cves":["CVE-2021-27137"],"summary":"Only routers running an old DD-WRT build with UPnP turned on are at risk; find any you own, update or retire them, and switch UPnP off where nobody needs it."},{"id":"2021-03-24","type":"digest","title":"Security digest for March 24, 2021","date":"2021-03-24","url":"https://erroneo.us/security/2021-03-24/","md":"https://erroneo.us/security/2021-03-24/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"onlyoffice-document-server-path-traversal-cve-2021-3199","type":"brief","title":"ONLYOFFICE Docs CVE-2021-3199: Old Upload RCE Now in KEV","date":"2021-01-22","url":"https://erroneo.us/security/briefs/onlyoffice-document-server-path-traversal-cve-2021-3199/","md":"https://erroneo.us/security/briefs/onlyoffice-document-server-path-traversal-cve-2021-3199/index.md","severity":"critical","kev":true,"epss":0.20136,"verdict":"check-exposure","cves":["CVE-2021-3199"],"summary":"Only Document Server installs older than 5.6.3, a release from August 2020, are at risk, but any you find should be treated as exposed and upgraded or pulled offline today."},{"id":"2021-01-22","type":"digest","title":"Security digest for January 22, 2021","date":"2021-01-22","url":"https://erroneo.us/security/2021-01-22/","md":"https://erroneo.us/security/2021-01-22/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"microsoft-sql-server-cve-2019-1068-authenticated-rce-kev","type":"brief","title":"SQL Server CVE-2019-1068: 2019 RCE Added to CISA KEV","date":"2019-07-09","url":"https://erroneo.us/security/briefs/microsoft-sql-server-cve-2019-1068-authenticated-rce-kev/","md":"https://erroneo.us/security/briefs/microsoft-sql-server-cve-2019-1068-authenticated-rce-kev/index.md","severity":"high","kev":true,"epss":0.57273,"verdict":"check-exposure","cves":["CVE-2019-1068"],"summary":"Any SQL Server 2014, 2016 or 2017 instance updated since July 2019 already has the fix; the real work is finding the instances that never got it, now that CISA says attackers are exploiting the bug, and patching or retiring them."},{"id":"2019-07-09","type":"digest","title":"Security digest for July 9, 2019","date":"2019-07-09","url":"https://erroneo.us/security/2019-07-09/","md":"https://erroneo.us/security/2019-07-09/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"apache-struts-s2-032-cve-2016-3081-dmi-rce","type":"brief","title":"Apache Struts S2-032 (CVE-2016-3081): 2016 RCE Now in KEV","date":"2016-04-19","url":"https://erroneo.us/security/briefs/apache-struts-s2-032-cve-2016-3081-dmi-rce/","md":"https://erroneo.us/security/briefs/apache-struts-s2-032-cve-2016-3081-dmi-rce/index.md","severity":"high","kev":true,"epss":0.96052,"verdict":"check-exposure","cves":["CVE-2016-3081"],"summary":"Only Struts 2.3.20 to 2.3.28 apps with Dynamic Method Invocation turned on are exposed, but any Struts 2.3.x you find is end-of-life, open to worse KEV-listed bugs, and should be fixed or pulled now."},{"id":"2016-04-19","type":"digest","title":"Security digest for April 19, 2016","date":"2016-04-19","url":"https://erroneo.us/security/2016-04-19/","md":"https://erroneo.us/security/2016-04-19/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"abrt-symlink-privilege-escalation-cve-2015-5287","type":"brief","title":"ABRT CVE-2015-5287: 2015 RHEL 7 Local Root Bug Now in KEV","date":"2015-11-23","url":"https://erroneo.us/security/briefs/abrt-symlink-privilege-escalation-cve-2015-5287/","md":"https://erroneo.us/security/briefs/abrt-symlink-privilege-escalation-cve-2015-5287/index.md","severity":"high","kev":true,"epss":0.05003,"verdict":"most-can-relax","cves":["CVE-2015-5287"],"summary":"This is a ten-year-old local root bug that any RHEL 7 or CentOS 7 host updated since late 2015 already has fixed; the KEV listing matters only for forgotten, never-patched machines, and those have bigger problems."},{"id":"2015-11-23","type":"digest","title":"Security digest for November 23, 2015","date":"2015-11-23","url":"https://erroneo.us/security/2015-11-23/","md":"https://erroneo.us/security/2015-11-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"bind-tkey-assertion-dos-cve-2015-5477","type":"brief","title":"BIND CVE-2015-5477: 2015 TKEY DNS Crash Bug Now in KEV","date":"2015-07-28","url":"https://erroneo.us/security/briefs/bind-tkey-assertion-dos-cve-2015-5477/","md":"https://erroneo.us/security/briefs/bind-tkey-assertion-dos-cve-2015-5477/index.md","severity":"high","kev":true,"epss":0.99409,"verdict":"check-exposure","cves":["CVE-2015-5477"],"summary":"Any BIND release from the past decade is fixed, so most teams have nothing to do; the real risk is forgotten DNS servers and appliances still running pre-mid-2015 BIND, which one packet can knock offline."},{"id":"2015-07-28","type":"digest","title":"Security digest for July 28, 2015","date":"2015-07-28","url":"https://erroneo.us/security/2015-07-28/","md":"https://erroneo.us/security/2015-07-28/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}},{"id":"libuser-userhelper-passwd-race-cve-2015-3246","type":"brief","title":"libuser CVE-2015-3246: 2015 Linux Root Bug Lands in KEV","date":"2015-07-23","url":"https://erroneo.us/security/briefs/libuser-userhelper-passwd-race-cve-2015-3246/","md":"https://erroneo.us/security/briefs/libuser-userhelper-passwd-race-cve-2015-3246/index.md","severity":"high","kev":true,"epss":0.08503,"verdict":"most-can-relax","cves":["CVE-2015-3246"],"summary":"Any RHEL or CentOS 6 or 7 host that has taken updates since July 2015 is already fixed; the real risk is forgotten legacy Linux servers, where this is one of several old root exploits attackers now chain after a web compromise."},{"id":"2015-07-23","type":"digest","title":"Security digest for July 23, 2015","date":"2015-07-23","url":"https://erroneo.us/security/2015-07-23/","md":"https://erroneo.us/security/2015-07-23/index.md","severity":null,"kev":false,"epss":null,"verdict":null,"counts":{"briefs":1,"kev":0,"critical":0}}]}