Critical vulnerabilities, curated daily for security professionals
Saturday's disclosures center on three CVSS 10.0 remote code execution flaws affecting SimpleHelp remote support software (CVE-2026-48558), the Aqara IAM/SSO smart-home gateway (CVE-2026-50086), and the vm2 JavaScript sandbox (CVE-2026-47131). Critical-severity vulnerabilities rose 50% to 18, while high-priority issues fell 49% to 31 across 49 total CVEs. Additional critical entries include CVE-2026-54133 (CVSS 9.8) in the jmespath.php library, CVE-2026-50084 (CVSS 9.6) in the Aqara Cloud Production API, and CVE-2026-11849 (CVSS 9.8) in IEI Integration's iRM remote management appliance. The disclosures skew toward sandbox escape, server-side RCE, and IoT/cloud gateway compromise, with several flaws reachable pre-authentication. No fixes were available at disclosure (0% patch availability), and seven CVEs across Ivanti Sentry, Check Point, Oracle PeopleSoft, and Cisco SD-WAN carry confirmed active exploitation.
Immediate action: Prioritize SimpleHelp remote support servers, Aqara IAM/SSO and cloud API gateways, and any applications bundling the vm2 sandbox or jmespath.php library, as these carry maximum-severity remote code execution risk. With no patches yet available, restrict network exposure of affected services and apply vendor mitigations as released; separately, expedite remediation of the seven actively exploited CVEs affecting Ivanti Sentry, Check Point, Oracle PeopleSoft, and Cisco SD-WAN.
CVSS score (e.g. 9.1) — severity from 0–10. Red marks critical (9+), orange high (7–8.9).
Exploitability — how hard the flaw is to attack, read from the CVSS vector:
The lower the bar on all three, the easier to exploit at scale — “Network · No privileges · No interaction” is the worst case: hit from anywhere, no credentials, no victim action.
🔴 Actively exploited — confirmed under attack in the wild (CISA’s Known Exploited Vulnerabilities catalog). Prioritize these regardless of score.
EPSS · Nth percentile — FIRST.org’s estimated chance a flaw is exploited within 30 days. We flag it only in the top 10% — a statistical signal it’s unusually likely to be targeted, separate from whether attacks are confirmed.
Check Point Security Gateway is affected by an improper authentication vulnerability that is currently being exploited in the wild.
A critical OS command injection vulnerability in Ivanti Sentry allows remote unauthenticated users to achieve root-level remote code execution.
An unauthenticated, easily exploitable vulnerability in the PeopleSoft Updates Environment Management component allows for complete system takeover via HTTP.
LiteLLM contains a command injection vulnerability in its MCP server test endpoints that, when chained with a host header bypass, enables unauthenticated remote code execution.
An out-of-bounds read and write vulnerability in the V8 JavaScript engine allows remote attackers to execute arbitrary code via a crafted HTML page.
Arista Extensible Operating System is affected by an incomplete comparison vulnerability, currently tracked in the CISA KEV catalog.
A command injection and privilege escalation vulnerability exists in the CLI of Cisco Catalyst SD-WAN Manager due to insufficient input validation.
The jmespath.php library fails to sanitize input when using the compiler runtime, allowing for remote code execution via crafted JMESPath expressions.
Amasty Order Attributes for Magento 2 contains an unauthenticated arbitrary file upload vulnerability allowing remote code execution.
IEI Integration Corp's iRM-IEI Remote Management system contains hardcoded credentials, allowing unauthenticated remote access to the database.
The sanitize-html library contains a sanitizer bypass vulnerability that can lead to stored XSS in applications rendering user-controlled content.
The Yarbo mobile application and cloud infrastructure contain hardcoded MQTT credentials, allowing unauthorized access to global robot telemetry and command functions.
SimpleHelp contains an authentication bypass in the OIDC flow, allowing unauthenticated attackers to forge tokens and gain full technician access without multi-factor authentication.
The Aqara IAM/SSO gateway contains a critical flaw that exposes cryptographic signing keys, allowing unauthenticated attackers to perform unauthorized operations.
The Aqara Cloud Production API suffers from a missing authorization vulnerability, allowing any valid developer token to access any user account.
The Pause+ Mobile App contains an authentication bypass vulnerability due to improper restriction of excessive authentication attempts.
A sandbox escape vulnerability in vm2 allows unauthenticated attackers to execute arbitrary code on the host system via prototype mutation.
An improper security check implementation in vm2 allows unauthenticated attackers to bypass sandbox restrictions and achieve remote code execution.
An incomplete denylist of Node.js builtins in vm2 allows unauthenticated attackers to escape the sandbox and execute code in the host process.
A sandbox breakout vulnerability in vm2 allows unauthenticated attackers to execute arbitrary commands on the host system via promise manipulation.
Nezha Monitoring contains a vulnerability where a low-privileged user can trigger arbitrary commands across all monitored servers, resulting in cross-tenant remote code execution.
The vm2 sandbox for Node.js is vulnerable to a sandbox escape that allows arbitrary code execution in the host process when using WebAssembly JSPI.
Naxclow devices use a hard-coded, platform-wide salt for request signing, allowing unauthenticated attackers to forge requests and impersonate users across the platform.
OpenClaw contains a state mutation vulnerability in node pairing that allows attackers to bypass approval restrictions and elevate node authority.
A redirect bypass vulnerability in the Aqara Cloud OAuth endpoint allows attackers to perform credential theft and phishing by exploiting weak domain validation.
A use-after-free vulnerability in the Views component of Google Chrome on Windows allows for potential memory corruption and arbitrary code execution.
A use-after-free vulnerability in the Network component of Google Chrome allows for potential memory corruption and unauthorized code execution.
The @apostrophecms/seo package fails to sanitize Google Analytics and Tag Manager IDs, leading to stored XSS via JavaScript template literal injection.
A privilege escalation vulnerability in Apache OFBiz allows authenticated users to obtain higher privileges by bypassing authorization checks on specific API operations.
A double free memory corruption vulnerability in the AWS Common Runtime aws-c-http library may lead to arbitrary code execution when processing crafted HTTP/2 HEADERS frames.
A flaw in the Naxclow IoT onboarding workflow allows attackers to replay binding sequences to silently hijack device ownership.
The Aqara IAM/SSO gateway contains an overly permissive Cross-Origin Resource Sharing (CORS) policy, allowing unauthorized cross-origin requests.
The iVEC-IEI Virtualization Edge Computer contains an arbitrary file deletion vulnerability that can be triggered by authenticated remote attackers.
A Vimscript code injection vulnerability exists in the netrw plugin, allowing arbitrary command execution via crafted directory names.
Mattermost fails to enforce role-management authorization on group syncable link and patch endpoints, allowing for unauthorized privilege escalation.
A vulnerability in OpenClaw allows unauthorized users to obtain cached operator.admin authority on WebSocket connections to execute admin-gated Gateway RPCs.
A command injection vulnerability in OpenClaw allows attackers to manipulate command arguments post-approval, enabling the execution of unauthorized shell commands.
An authorization bypass in OpenClaw allows authenticated users to execute restricted, owner-only native commands by circumventing policy enforcement.
OpenClaw is vulnerable to an allowlist bypass in PowerShell command parsing, allowing remote authenticated operators to execute arbitrary commands using abbreviated flag aliases.
A mass-assignment vulnerability in Flowise allows authenticated users to move assistants between workspaces, resulting in cross-workspace takeover.
Netty's DnsResolveContext fails to validate the origin of CNAME records, making applications using the framework vulnerable to DNS Cache Poisoning (Bailiwick Bypass).
The vm2 library contains a sandbox escape vulnerability caused by incomplete overrides of the global Symbol.for function and flaws in proxy-based bridge write-trap handlers.
The WEOLL platform contains an unrestricted file upload vulnerability and fails to properly constrain access to functionality via ACLs.
Netty's DnsResolveContext insufficiently validates NS record bailiwicks, enabling DNS Cache Poisoning attacks.
A vulnerability in the vm2 library's NodeVM component allows attackers to bypass network exclusions and perform SSRF-style attacks via the wildcard '*' option.
The vm2 library is susceptible to a sandbox escape due to a flaw in the BaseHandler.set method which incorrectly ignores the receiver parameter.
The Aqara Board service (op-test) allows unauthenticated remote attackers to send arbitrary MQTT command payloads to the HiveMQ broker.
A high-severity vulnerability exists in OpenClaw, details of which are currently limited.
The Aqara Developer Portal exhibits a permissive cross-origin resource sharing (CORS) policy, allowing unauthorized cross-domain access.
Adobe Dreamweaver Desktop contains an improper access control vulnerability that allows for arbitrary file system read when opening a malicious file.
Keras versions prior to 3.14.0 are susceptible to a path traversal vulnerability during archive extraction, potentially allowing arbitrary file writes.
A security vulnerability has been identified in Perry software products, requiring immediate investigation and remediation.
An authenticated administrator in SolidInvoice can upload an SVG file containing embedded JavaScript, resulting in stored cross-site scripting (XSS).
SolidInvoice stores API tokens in plaintext within the database, risking full credential compromise if the database is exposed or accessed by an unauthorized party.
A high-severity vulnerability has been reported in the Netty network application framework, which is used for developing protocol servers and clients.
Certain devices running UniFi OS contain an improper access control vulnerability that allows a network-adjacent attacker to perform unauthorized changes.