Overview of incoming advisories.
1553 results found
A security vulnerability exists in Fastify versions before 5.12.2 related to incomplete HTTP header name normalization. The framework lowercases header names in route schemas but fails to apply this transformation to trigger and dependent names inside JSON Schema Draft 7 'dependencies' keywords. Because Node.js stores request header names in lowercase, conditional header dependencies never match, causing presence assertions to be silently skipped. This allows an unauthenticated remote client to send a privilege-activating header while omitting the required authentication header, effectively bypassing conditional security checks. The vulnerability can lead to unauthorized access to privileged functionality. No authentication is required to exploit this flaw remotely. Users are advised to upgrade to Fastify 5.12.2 or later to remediate the issue.
View original advisory →A missing authorization vulnerability has been discovered in SourceCodester Class and Exam Timetabling System version 1.0. The flaw exists in the file /admin/session.php, where manipulation of the argument ID bypasses authorization checks. The vulnerability can be exploited remotely without requiring local access. A public exploit has already been released, increasing the risk of active exploitation. The affected product is a web-based academic scheduling application. The vulnerability has been assigned CVE-2026-85512 and documented on NVD and VulDB. No patch or mitigation details are currently mentioned in the article. The public availability of the exploit raises the criticality level significantly.
View original advisory →excel-mcp-server version 0.1.8 contains a path confinement enforcement failure in stdio mode when the EXCEL_FILES_PATH environment variable is unset. This vulnerability allows attackers to supply unchecked file paths to read and write tools, enabling access to any file accessible to the process. The flaw effectively bypasses intended file access restrictions, resulting in arbitrary file read and write capabilities. The issue is tracked as CVE-2026-85661 and was reported via GitHub issue #149. A fix or mitigation requires proper path validation and confinement enforcement regardless of environment variable configuration. The vulnerability affects the server.py and validation.py components of the package. It poses a significant risk in environments where the MCP server is exposed to untrusted input.
View original advisory →A missing authorization vulnerability has been identified in SourceCodester Class and Exam Timetabling System version 1.0. The flaw resides in the file /admin/session.php, where manipulation of the 'ID' argument bypasses authorization checks. The vulnerability can be exploited remotely without requiring physical access to the system. A public exploit has already been released, increasing the risk of active exploitation. The issue is tracked as CVE-2026-85512 and is listed on NVD and VulDB. Affected systems running this version of the timetabling software are at risk of unauthorized access to administrative sessions. Users are advised to apply patches or mitigations as soon as they become available.
View original advisory →A SQL injection vulnerability has been identified in code-projects Hospital Information System version 1.0. The flaw resides in the getSinglePresp function within the file includes/presp/PrespController.php, where manipulation of the 'ID' argument leads to SQL injection. The vulnerability can be exploited remotely without requiring physical access to the system. A public exploit has already been released, increasing the risk of active exploitation. The affected product is a hospital management web application, making the impact potentially critical due to sensitive patient data exposure. The vulnerability is tracked as CVE-2026-85399 and has been documented across multiple security databases including NVD and VulDB.
View original advisory →A vulnerability exists in undici's BalancedPool constructor where the options object is deep-cloned via JSON serialization, causing function-valued TLS options such as checkServerIdentity callbacks and custom connectors to be silently discarded. This results in TLS certificate validation bypass, where peers with certificates that should be rejected by custom logic are instead accepted if they pass Node's default hostname and chain checks. The flaw affects only BalancedPool; Client, Pool, and Agent dispatchers are not impacted. Affected versions include undici 7.24.1 up to 7.29.1 and 8.0.0 up to 8.10.2. The vulnerability is only triggered when function-valued connect or tls options are supplied to BalancedPool. Users are advised to upgrade to undici 7.29.1 or 8.10.2 to remediate the issue.
View original advisory →A server-side request forgery (SSRF) vulnerability exists in jina-ai/reader where URL validation is only applied to the initial request and not to subsequent HTTP redirect hops. Attackers can exploit this by crafting a publicly accessible URL that redirects to internal network addresses or cloud metadata endpoints such as AWS IMDSv1. The server fetches and returns the response body of the redirected target to the attacker, potentially exposing sensitive internal data. The vulnerable code paths are identified in curl.ts and puppeteer.ts within the reader service. This bypass allows attackers to enumerate and access internal infrastructure that would otherwise be protected by the initial URL validation logic. The issue has been reported and tracked in the project's GitHub issue tracker. An advisory has also been published by VulnCheck detailing the attack vector and impact. This vulnerability poses a high risk especially in cloud-hosted deployments where metadata endpoints are accessible.
View original advisory →TEN Framework version 0.11.71 is affected by critical unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can exploit the /api/designer/v1/file-content endpoints via POST and PUT HTTP requests without any authentication. This allows reading of arbitrary files from the system or writing malicious content to sensitive system paths. Exploitation can lead to remote code execution through manipulation of authorized_keys files, cron jobs, or executable graph files. No credentials or prior access are required to exploit these vulnerabilities. The vulnerabilities are documented in the TEN Framework GitHub repository and tracked under CVE-2026-85688. The issue has been reported via a GitHub issue and a VulnCheck advisory. Organizations running TEN Framework 0.11.71 should treat this as a high-priority remediation.
View original advisory →CVE-2026-85525 describes a critical flaw in Snowflake's Python, Go, JDBC, and Node.js drivers where improper OCSP response validation allowed revoked TLS certificates to be accepted as valid. The vulnerability stemmed from OCSP responses not being reliably bound to the certificate under validation, and definitive verification failures being treated as transient errors. A man-in-the-middle attacker possessing a revoked certificate and its private key for a Snowflake or stage hostname could intercept TLS sessions. This would allow the attacker to read and modify data transmitted within the intercepted connection. Successful exploitation requires an on-path network position and the corresponding private key for a revoked certificate. Impact is scoped to data carried within the intercepted TLS connection. Patches are available across affected driver versions and users must manually upgrade to remediate the issue.
View original advisory →OpenPanel versions before 2.3.0 are affected by an unauthenticated server-side request forgery (SSRF) vulnerability. The vulnerability exists in the /misc/favicon and /misc/og endpoints, which accept an attacker-supplied url parameter without sufficient validation. Attackers can exploit this flaw to force the API to fetch arbitrary internal hosts and cloud metadata endpoints. Because small responses are returned verbatim to the attacker, this enables credential theft and internal service enumeration. No authentication is required to exploit this vulnerability, significantly raising its risk. Cloud environments are particularly at risk due to exposure of metadata services such as AWS IMDSv1. The issue is resolved in OpenPanel version 2.3.0. Users are strongly advised to upgrade immediately. References include the NVD entry, a GitHub security advisory, and a VulnCheck advisory.
View original advisory →Chroma version 1.5.9 contains a vulnerability where the HNSW index parameters max_neighbors, ef_construction, and ef_search lack maximum bounds validation in collection-create requests. Unauthenticated attackers can exploit this by supplying arbitrarily large parameter values, leading to server memory exhaustion. The denial of service condition is triggered during index compaction operations. No authentication is required to exploit this vulnerability, significantly increasing its risk. The vulnerability is tracked as CVE-2026-85664 and affects the Rust-based frontend and types components of the Chroma vector database. A GitHub issue and VulnCheck advisory have been published referencing this flaw. Organizations running Chroma 1.5.9 should assess exposure and apply mitigations or patches promptly.
View original advisory →A path traversal vulnerability (CVE-2026-85684) exists in the marker application through version 2.0.0. The vulnerability resides in the FastAPI /marker/upload handler, which fails to sanitize the file.filename parameter. Unauthenticated attackers can exploit this flaw by supplying filenames containing directory traversal sequences (e.g., '../'). Successful exploitation allows attackers to write arbitrary files to any location on the system or delete existing files. The vulnerability requires no authentication, significantly lowering the barrier for exploitation. The affected code is located in marker/scripts/server.py. Users are advised to upgrade beyond version 2.0.0 or apply mitigations to sanitize uploaded filenames. The issue has been tracked and discussed in the marker GitHub repository issue #1047.
View original advisory →A privilege escalation vulnerability exists in DirectIo64.sys, a kernel driver used by PassMark PerformanceTest, BurnInTest, and OSForensics. The flaw stems from missing validation of the physical address parameter in an exposed IOCTL handler. Local attackers can obtain a device handle and supply an arbitrary 64-bit physical address with a bit index to invoke MmMapIoSpace, allowing them to clear arbitrary bits at any physical memory address. This can be leveraged to corrupt kernel code pages or page table entries, enabling local privilege escalation or full system compromise. Affected versions include PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016. Fixed builds have been released by PassMark for all three products. The vulnerability is particularly concerning as it affects widely used benchmarking and forensics tools that install kernel-level drivers. No active exploitation in the wild has been reported at the time of disclosure.
View original advisory →cli-mcp-server version 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function. The vulnerability is triggered when ALLOW_SHELL_OPERATORS is enabled, allowing attackers to use shell command substitution syntax such as $(...) or backticks to execute commands not included in the ALLOWED_COMMANDS allowlist. This effectively bypasses the intended security validation check designed to restrict which commands can be executed. The flaw resides in the server.py source file of the cli-mcp-server package. It has been documented in a GitHub issue and reported via VulnCheck advisories. Exploitation could allow unauthorized command execution in environments relying on the allowlist as a security boundary. Users are advised to review configurations and apply available patches or mitigations.
View original advisory →A critical vulnerability (CVE-2026-80118) exists in the DirectIo64.sys kernel driver used by PassMark PerformanceTest, BurnInTest, and OSForensics. Unprivileged local users can trigger an unauthenticated IOCTL handler that dumps all physical memory to a caller-supplied file path running in SYSTEM context. This allows standard users to write files to restricted locations and read memory from other processes. The memory dump header exposes the kernel loaded-module list, active-process list, and PFN database pointers, effectively defeating KASLR. Additionally, the same handler dereferences a kernel-structure locator return value without a NULL check, which can cause a kernel crash (BSOD) on certain code paths. Affected versions are PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016. Patches have been released by PassMark for all three products.
View original advisory →CVE-2026-61699 affects nebula-mesh, a self-hosted control plane for Slack Nebula mesh VPN, in versions prior to 0.7.1. The vulnerability stems from a flawed revocation mechanism where blocklist entries are never propagated to peers' config.yml files. This allows a blocked or offboarded host to retain full overlay network reachability for up to 30 days (agent) or 365 days (mobile). An attacker who has exfiltrated a host's private key and certificate can bypass the revocation by running the stock Nebula client and ignoring 403/410 HTTP responses from the control plane. The operator-facing UI falsely shows the host as blocked, creating a misleading security posture. The vulnerability enables persistent unauthorized access to internal mesh services even after explicit revocation. A patch has been issued in version 0.7.1 of nebula-mesh.
View original advisory →A vulnerability exists in Fastify versions before 5.12.2 where the framework incorrectly treats the object resolved by a successful Ajv async validator as a custom validator compiler result protocol. If an incoming request body contains a root-level property named 'value', Fastify replaces the entire request body with that property's value before passing it to the route handler. This means the handler receives a different object than the one that was validated against the route schema. An authenticated low-privilege attacker can exploit this to bypass schema-based authorization controls, causing unauthorized state changes and potential data disclosure. The vulnerability requires authentication but can be triggered by any low-privilege user. The issue has been patched in Fastify version 5.12.2. Users are strongly advised to upgrade immediately to mitigate the risk of privilege escalation and data exposure.
View original advisory →CVE-2026-82923 affects the AI Website Builder WordPress plugin (GitHub build) version 1.0.0. The plugin fails to perform any authorization or nonce checks on its REST API routes, allowing unauthenticated attackers to perform a wide range of malicious actions. These include installing and activating arbitrary plugins and themes, importing content from attacker-controlled URLs, writing arbitrary files to the uploads directory, and deleting site content and media. On servers that execute PHP files from the uploads directory, the arbitrary file write capability constitutes remote code execution (RCE). The vulnerability is critical due to its unauthenticated nature and the potential for full site compromise. No authentication or security tokens are required to exploit this flaw.
View original advisory →PowerJob Worker version 5.1.2 and likely earlier versions contain a critical unauthenticated remote code execution vulnerability. The /worker/deployContainer HTTP endpoint is exposed without any authentication on the default transport port. A remote attacker can exploit this endpoint to execute arbitrary code on the affected system. The vulnerability requires no credentials or special privileges to exploit. The issue resides in the WorkerActor and OmsContainerFactory components of the powerjob-worker module. This represents a critical security risk for any deployment of PowerJob Worker that is network-accessible. Users are advised to review the SECURITY.md guidance provided by the PowerJob project. The vulnerability has been assigned CVE-2026-75430 and is tracked in the NVD.
View original advisory →SiYuan versions before v3.8.2 contain an unbounded resource consumption vulnerability in the request-concurrency middleware. The middleware retains mutex entries for every unique request path without any eviction mechanism. Unauthenticated attackers can exploit this by sending numerous unique request paths to the application. This causes permanent increases in process memory usage and synchronization overhead. The vulnerability degrades service availability, effectively functioning as a denial-of-service attack vector. No authentication is required to exploit this vulnerability, making it accessible to any remote attacker. The issue has been addressed in SiYuan v3.8.2. The vulnerability is tracked as CVE-2026-85585 and has been assigned a high criticality rating. Details are available via GitHub Security Advisories and VulnCheck.
View original advisory →