---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A Use-After-Free vulnerability in the SVG implementation of Google Chrome allows for potential arbitrary code execution.

Executive Summary:
A high-severity Use-After-Free vulnerability in Google Chrome's SVG implementation could allow a remote attacker to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-7906

Affected Software: Google Chrome

Affected Versions: See vendor advisory for affected versions

Vulnerability: This is a Use-After-Free vulnerability within the Scalable Vector Graphics (SVG) rendering engine. An attacker can trigger this flaw by providing a specially crafted SVG file or webpage to a user, resulting in arbitrary code execution.

Business Impact

The vulnerability poses a severe threat, as it allows attackers to execute arbitrary code upon user interaction with malicious content. The CVSS score of 8.8 justifies an urgent response, as SVG rendering is a common and necessary feature of modern web browsing, making it a frequent attack vector.

Remediation Plan

Immediate Action: Update all Google Chrome installations to version 148 or later immediately.

Proactive Monitoring: Review web filtering logs to identify access to suspicious domains or unusual SVG file requests.

Compensating Controls: Utilize endpoint security solutions capable of detecting memory-based attacks and unauthorized code execution attempts within the browser process.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 7, 2026, there is no public information indicating active exploitation of this vulnerability. Nonetheless, due to the nature of SVG processing, the risk of exploitation remains high.

Analyst Recommendation

Given the prevalence of SVG content on the web, this vulnerability is highly accessible to attackers. Immediate patching is critical to protect users from potential remote code execution attacks targeting the browser's rendering engine.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A Use-After-Free vulnerability in the ANGLE graphics engine of Google Chrome on Mac allows for potential arbitrary code execution.

Executive Summary:
A high-severity Use-After-Free vulnerability in Google Chrome's ANGLE component on Mac could allow a remote attacker to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-7901

Affected Software: Google Chrome

Affected Versions: See vendor advisory for affected versions

Vulnerability: The vulnerability is a Use-After-Free flaw within the ANGLE graphics engine. An attacker could exploit this by enticing a user to visit a malicious website, leading to memory corruption and potential code execution.

Business Impact

Successful exploitation could allow an attacker to gain control over the browser process on Mac systems, potentially leading to data exfiltration or further system compromise. The CVSS score of 8.8 reflects the high danger of this flaw, as it targets a critical graphics rendering component used by the browser.

Remediation Plan

Immediate Action: Update Google Chrome on all Mac systems to version 148 or later immediately.

Proactive Monitoring: Monitor for browser-related crashes or unexpected spikes in CPU/GPU usage which may indicate exploitation attempts.

Compensating Controls: Maintain updated endpoint security software on all Mac devices to detect and block malicious payloads associated with browser exploitation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, memory corruption flaws in graphics engines are high-value targets for attackers.

Analyst Recommendation

This vulnerability represents a significant risk to Mac users in the enterprise. Security teams must enforce immediate updates to the latest version of Chrome to ensure protection against potential exploitation of the ANGLE component.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A Use-After-Free vulnerability in the Chromoting component of Google Chrome for Linux allows for potential arbitrary code execution.

Executive Summary:
A high-severity Use-After-Free vulnerability in Google Chrome's Chromoting component on Linux could allow a remote attacker to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-7898

Affected Software: Google Chrome

Affected Versions: See vendor advisory for affected versions

Vulnerability: This is a Use-After-Free memory corruption vulnerability located in the Chromoting feature. It requires user interaction, such as visiting a malicious site, to trigger the flaw and execute arbitrary code.

Business Impact

Exploitation of this vulnerability could lead to system compromise on Linux workstations running the affected version of Chrome. With a CVSS score of 8.8, this vulnerability represents a significant risk to organizational assets, as successful exploitation could provide an attacker with a foothold within the corporate network.

Remediation Plan

Immediate Action: Update Google Chrome on all Linux systems to version 148 or higher.

Proactive Monitoring: Audit browser usage logs and maintain active EDR monitoring on Linux endpoints to detect anomalous process behavior.

Compensating Controls: Implement strict network egress filtering to prevent compromised browsers from communicating with known malicious command-and-control infrastructure.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 7, 2026, there is no public information indicating active exploitation of this vulnerability. Given the technical complexity, developers are encouraged to prioritize the update process.

Analyst Recommendation

The severity of this flaw necessitates an immediate update cycle for all Linux-based Chrome environments. Failure to patch may expose workstations to arbitrary code execution, undermining the overall security posture of the affected systems.

---METADATA---
VENDOR: Qwibit
PRODUCT: NanoClaw
AFFECTED_VERSIONS: 0 through 1.2.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper limitation of a pathname to a restricted directory (path traversal) exists in Qwibit NanoClaw, potentially allowing unauthorized file access.

Executive Summary:
A path traversal vulnerability in Qwibit NanoClaw allows authenticated local attackers to access restricted files, posing a risk of system-wide data exposure.

Vulnerability Details

CVE-ID: CVE-2026-7875

Affected Software: Qwibit NanoClaw

Affected Versions: 0 through 1.2.0

Vulnerability: This is a path traversal vulnerability (CWE-22) that allows an attacker with low-level access to navigate the filesystem outside of the intended directory. This vulnerability requires authenticated access to the system.

Business Impact

The vulnerability allows for unauthorized access to sensitive files on the host system, which could lead to information disclosure or further privilege escalation. With a CVSS score of 8.8, this represents a significant risk to the integrity and confidentiality of the server environment.

Remediation Plan

Immediate Action: Update to the version that includes the fix for commit 7814e45570edf0024a1a5c2ba9fbc9cb3a49f7f7.

Proactive Monitoring: Monitor file system access logs for attempts to access directories outside of the application's expected working path.

Compensating Controls: Implement file system permissions (e.g., chroot or restricted user accounts) to limit the damage an authenticated attacker can perform if they successfully exploit this path traversal flaw.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 30, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently exploitable by users who can influence file paths within the application.

Analyst Recommendation

This vulnerability should be treated with high urgency due to the presence of a proof-of-concept. Users of NanoClaw must upgrade to the latest version or apply the upstream fix immediately to mitigate the risk of unauthorized file access.

---METADATA---
VENDOR: IBM
PRODUCT: Langflow OSS
AFFECTED_VERSIONS: 1.0.0 through 1.10.0
---END_METADATA---

Description Summary:
IBM Langflow OSS is susceptible to arbitrary OS command execution and unauthorized file access. Authenticated attackers can leverage this to achieve full system compromise.

Executive Summary:
A critical remote code execution vulnerability in IBM Langflow OSS allows authenticated attackers to gain full control over the underlying host system.

Vulnerability Details

CVE-ID: CVE-2026-7873

Affected Software: IBM Langflow OSS

Affected Versions: 1.0.0 through 1.10.0

Vulnerability: The application fails to properly sanitize input, allowing authenticated attackers to execute arbitrary OS commands. This flaw also permits the unauthorized reading of sensitive files, including system credentials.

Business Impact

With a CVSS score of 9.9, this vulnerability represents an existential threat to the integrity and confidentiality of the host environment. A successful exploit grants the attacker complete system-level access, facilitating lateral movement within the network and total data exfiltration.

Remediation Plan

Immediate Action: Patch the affected IBM Langflow OSS installation to the latest version provided by the vendor.

Proactive Monitoring: Monitor system logs for the execution of unauthorized shells or unusual file access patterns by the service user.

Compensating Controls: Ensure the application is running with the principle of least privilege in a containerized or sandboxed environment to restrict the impact of potential command execution.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ability to execute arbitrary commands makes this a high-priority target for malicious actors.

Analyst Recommendation

This vulnerability carries a near-maximum severity rating and must be addressed with the highest level of urgency. Organizations must apply the vendor's security update immediately to prevent full system compromise and potential lateral movement.

---METADATA---
VENDOR: IBM
PRODUCT: Langflow OSS
AFFECTED_VERSIONS: 1.0.0 through 1.10.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
IBM Langflow OSS contains a path traversal vulnerability that could allow an unauthenticated attacker to access restricted files on the system.

Executive Summary:
A path traversal vulnerability in IBM Langflow OSS allows unauthenticated remote attackers to access unauthorized files, posing a high risk to system security.

Vulnerability Details

CVE-ID: CVE-2026-7872

Affected Software: IBM Langflow OSS

Affected Versions: 1.0.0 through 1.10.0

Vulnerability: This is a path traversal vulnerability (CWE-22) that fails to properly sanitize user input, allowing attackers to access files outside of the intended directory. This vulnerability is accessible to unauthenticated attackers over the network.

Business Impact

Successful exploitation allows an attacker to read sensitive configuration files or system data, which can lead to a total system compromise. With a CVSS score of 7.5, this vulnerability represents a significant risk to the integrity and confidentiality of the host environment.

Remediation Plan

Immediate Action: Upgrade the Langflow OSS installation to version 1.10.1 immediately to patch the path traversal vulnerability.

Proactive Monitoring: Monitor file system access logs for abnormal requests that include directory traversal sequences such as double dots.

Compensating Controls: Deploy a WAF configured to block requests containing directory traversal patterns (e.g., "../") to prevent exploitation while the upgrade is being planned.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Path traversal flaws are historically easy to weaponize, making prompt remediation a priority.

Analyst Recommendation

The severity of path traversal vulnerabilities necessitates immediate action to prevent unauthorized file access. Administrators should upgrade to version 1.10.1 as soon as possible and audit their current deployments for any signs of suspicious file access attempts.

---METADATA---
VENDOR: IBM
PRODUCT: Langflow OSS
AFFECTED_VERSIONS: 1.0.0 through 1.10.0
---END_METADATA---

Description Summary:
IBM Langflow OSS is susceptible to arbitrary code execution by authenticated users with Redis access, leading to full application compromise.

Executive Summary:
IBM Langflow OSS is affected by a critical vulnerability that allows authenticated users with access to Redis to execute arbitrary code with full system privileges.

Vulnerability Details

CVE-ID: CVE-2026-7871

Affected Software: IBM Langflow OSS

Affected Versions: 1.0.0 through 1.10.0

Vulnerability: The vulnerability allows an authenticated user who has access to the Redis instance to bypass security constraints and execute arbitrary code. This grants the attacker full privileges over the application, including access to all sensitive secrets and data.

Business Impact

The ability for an attacker to execute arbitrary code with full application privileges constitutes a catastrophic security failure. With a CVSS score of 9.8, this vulnerability risks the total compromise of data integrity and confidentiality, potentially leading to unauthorized access to enterprise secrets and systemic failure of the Langflow platform.

Remediation Plan

Immediate Action: Upgrade to the latest version of IBM Langflow OSS immediately to address the underlying access and execution flaw.

Proactive Monitoring: Review Redis access logs and application audit logs for unauthorized configuration changes or anomalous command execution.

Compensating Controls: Restrict access to the Redis instance to only authorized, internal services and ensure it is not exposed to the public network.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Due to the critical 9.8 CVSS score, immediate remediation is required to prevent total system compromise. IT teams should ensure that access to the Redis backend is strictly controlled and that the application is updated to the latest version to eliminate the risk of arbitrary code execution.

---METADATA---
VENDOR: IBM
PRODUCT: IBM i
AFFECTED_VERSIONS: IBM i 7.6, 7.5, 7.4, and 7.3
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in IBM i allows unauthorized users to execute code with administrator privileges via an unqualified library call.

Executive Summary:
A privilege escalation flaw in IBM i 7.x could allow a malicious actor to gain unauthorized administrative control over the system.

Vulnerability Details

CVE-ID: CVE-2026-7870

Affected Software: IBM i

Affected Versions: IBM i 7.6, 7.5, 7.4, and 7.3

Vulnerability: The vulnerability stems from an unqualified library call within the system. This allows an authenticated user to manipulate the environment to run user-controlled code with elevated administrator privileges.

Business Impact

With a CVSS score of 8.8, this vulnerability is classified as High. The ability for a lower-privileged user to escalate to administrator status presents a severe risk to system security, potentially enabling total system compromise, unauthorized data access, and the modification of critical system configurations.

Remediation Plan

Immediate Action: Consult the official IBM security bulletin and apply the relevant security PTFs (Program Temporary Fixes) for your specific IBM i version.

Proactive Monitoring: Audit system logs for unexpected privilege changes or unauthorized execution of system-level utilities.

Compensating Controls: Restrict user permissions and enforce the principle of least privilege to minimize the potential impact if a local account is compromised.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Privilege escalation vulnerabilities are highly prized by attackers for maintaining persistence and expanding access. Administrators should prioritize applying the necessary IBM security updates to mitigate this risk and ensure that only authorized users maintain administrative capabilities.

---METADATA---
VENDOR: Eupago
PRODUCT: Eupago Gateway For Woocommerce
AFFECTED_VERSIONS: 0 up to (excluding) 4.7.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper access control vulnerability (CWE-284) in the Eupago Gateway For Woocommerce WordPress plugin allows unauthenticated attackers to perform unauthorized actions.

Executive Summary:
An improper access control flaw in the Eupago Gateway For Woocommerce plugin allows unauthenticated attackers to potentially perform sensitive operations on the WordPress site.

Vulnerability Details

CVE-ID: CVE-2026-7862

Affected Software: Eupago Gateway For Woocommerce (WordPress Plugin)

Affected Versions: 0 up to (excluding) 4.7.2

Vulnerability: The plugin contains a vulnerability related to improper access control, allowing unauthenticated users to trigger functions that should be restricted. This bypasses security checks necessary for plugin operation.

Business Impact

Successful exploitation could allow an attacker to disrupt payment processing, manipulate gateway configurations, or potentially access sensitive transaction data. This poses a direct threat to the financial integrity and reputation of the e-commerce store. The CVSS score of 8.6 underscores the urgency of addressing this flaw.

Remediation Plan

Immediate Action: Update the Eupago Gateway For Woocommerce plugin to version 4.7.2 or higher immediately.

Proactive Monitoring: Review WooCommerce transaction logs and plugin configuration settings for any unauthorized changes or anomalous activity since the exposure began.

Compensating Controls: If an immediate update is not possible, disable the plugin temporarily to prevent exploitation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 29, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is highly accessible as it does not require authentication.

Analyst Recommendation

Given the ease of exploitability and the potential impact on payment systems, administrators must update the plugin to the latest version immediately. Failure to patch may result in the compromise of financial data and site functionality.

---METADATA---
VENDOR: Dassault Systèmes (No Magic / CATIA)
PRODUCT: Teamwork Cloud / Magic Collaboration Studio
AFFECTED_VERSIONS: Teamwork Cloud 2022x-2026x; Magic Collaboration Studio 2022x-2026x
---END_METADATA---

Description Summary:
A deserialization vulnerability in Teamwork Cloud and Magic Collaboration Studio allows unauthenticated remote code execution.

Executive Summary:
An unauthenticated remote code execution vulnerability in Teamwork Cloud and Magic Collaboration Studio threatens the integrity and security of collaborative modeling environments.

Vulnerability Details

CVE-ID: CVE-2026-7858

Affected Software: Dassault Systèmes Teamwork Cloud and Magic Collaboration Studio

Affected Versions: Teamwork Cloud 2022x through 2026x; Magic Collaboration Studio 2022x through 2026x

Vulnerability: This vulnerability involves the deserialization of untrusted data, which can be triggered by an unauthenticated attacker to execute arbitrary code remotely on the affected server.

Business Impact

Successful exploitation allows an attacker to gain full control over the server, leading to intellectual property theft or the disruption of critical engineering and design workflows. With a CVSS score of 9.8, this flaw represents a maximum-severity risk to organizations relying on these tools for sensitive project data.

Remediation Plan

Immediate Action: Update Teamwork Cloud and Magic Collaboration Studio to the latest released versions that include the security fix.

Proactive Monitoring: Review system and application logs for unusual inbound network connections or unexpected child processes spawned by the application service.

Compensating Controls: Restrict network access to the application management interface to trusted internal segments only and employ WAF filtering for serialized object streams.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The vulnerability allows for unauthenticated remote code execution, which is one of the most severe threat vectors. It is imperative that organizations running the affected software versions perform an immediate update to eliminate the risk of total system compromise.

---METADATA---
VENDOR: D-Link
PRODUCT: DI-8100
AFFECTED_VERSIONS: 16.07.26A1
---END_METADATA---

Description Summary:
A buffer overflow vulnerability in the D-Link DI-8100 POST parameter handler allows remote attackers to execute arbitrary code via the url_rule.asp function.

Executive Summary:
A critical buffer overflow vulnerability in D-Link DI-8100 routers poses a severe risk of remote code execution and full device compromise.

Vulnerability Details

CVE-ID: CVE-2026-7854

Affected Software: D-Link DI-8100

Affected Versions: 16.07.26A1

Vulnerability: The vulnerability exists within the url_rule_asp function of the /url_rule.asp component. An unauthenticated remote attacker can trigger a buffer overflow by sending a maliciously crafted POST request to the device.

Business Impact

With a CVSS score of 9.8, this vulnerability represents a critical threat to organizational infrastructure. Successful exploitation grants an attacker full control over the affected gateway, potentially enabling lateral movement, traffic interception, and the complete compromise of internal network security.

Remediation Plan

Immediate Action: Update the firmware of the D-Link DI-8100 device to the latest version provided by the manufacturer.

Proactive Monitoring: Inspect network traffic for anomalous POST requests directed at the /url_rule.asp path and review device logs for signs of unauthorized configuration changes.

Compensating Controls: Implement a Web Application Firewall (WAF) or ingress filtering to block malicious POST payloads targeting the vulnerable URL until firmware can be applied.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of May 5, 2026, public exploits for this vulnerability are available and actively circulating. Given the critical severity and ease of remote exploitation, immediate patching is required to prevent unauthorized access.

Analyst Recommendation

This vulnerability is critical and poses an immediate threat to the perimeter of any network utilizing the affected D-Link hardware. Administrators must prioritize the application of the vendor-supplied security update to neutralize the risk of remote code execution.

---METADATA---
VENDOR: D-Link
PRODUCT: DI-8100
AFFECTED_VERSIONS: 16.07.26A1
---END_METADATA---

Description Summary:
D-Link DI-8100 is vulnerable to a remote buffer overflow in the sprintf function within the HTTP Handler's /auto_reboot.asp script.

Executive Summary:
A critical buffer overflow in the D-Link DI-8100 router allows remote unauthenticated attackers to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-7853

Affected Software: D-Link DI-8100

Affected Versions: 16.07.26A1

Vulnerability: The vulnerability is a buffer overflow occurring in the sprintf function within the /auto_reboot.asp file of the HTTP Handler component, triggered by improper handling of the enable/time argument.

Business Impact

With a CVSS score of 9.8, this flaw allows for Remote Code Execution. Exploitation can lead to full router compromise, providing the attacker with persistent access to the network, the ability to intercept traffic, or redirecting users to malicious sites.

Remediation Plan

Immediate Action: Update the device firmware to the latest version. If no update is available, disable the web-based management interface.

Proactive Monitoring: Monitor logs for abnormal reboot requests or suspicious HTTP traffic directed at the router's management interface.

Compensating Controls: Use firewall rules to restrict access to the web management interface to trusted internal IP addresses only.

Exploitation Status

Public Exploit Available: Yes

Analyst Notes: The exploit for this vulnerability is publicly available, which significantly increases the urgency for remediation. Immediate action is required to secure the device.

Analyst Recommendation

Due to the public availability of exploit code, this router is at extreme risk. If a firmware update cannot be applied immediately, the router's management interface must be taken offline or restricted to trusted networks to prevent compromise.

---METADATA---
VENDOR: Limatek System
PRODUCT: LimRAD NAC
AFFECTED_VERSIONS: before 5.5.7.3.9
---END_METADATA---

Description Summary:
Limatek System LimRAD NAC contains an unrestricted file upload vulnerability that allows for remote code inclusion and arbitrary code execution.

Executive Summary:
A critical remote code execution vulnerability in Limatek System LimRAD NAC poses a severe risk to organizational infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-7852

Affected Software: Limatek System LimRAD NAC

Affected Versions: before 5.5.7.3.9

Vulnerability: This vulnerability, categorized as CWE-434, involves the unrestricted upload of dangerous file types, which enables remote code inclusion. An attacker can leverage this flaw to execute arbitrary code on the underlying system.

Business Impact

With a CVSS score of 9.8, this vulnerability is classified as Critical. Successful exploitation could lead to a total compromise of the affected system, resulting in unauthorized access to internal network management functions, exfiltration of sensitive configuration data, and potential lateral movement within the environment.

Remediation Plan

Immediate Action: Upgrade LimRAD NAC to version 5.5.7.3.9 or higher immediately to address the file upload restriction flaw.

Proactive Monitoring: Review system logs for unauthorized file uploads or anomalous HTTP requests to the NAC management interface.

Compensating Controls: Implement Web Application Firewall (WAF) rules to inspect and block suspicious file extensions and MIME types uploaded to the web interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this remote code execution vulnerability necessitates immediate attention. Administrators must prioritize updating the LimRAD NAC software to version 5.5.7.3.9 to eliminate the attack vector, as failure to do so leaves the network infrastructure exposed to complete takeover.

---METADATA---
VENDOR: Phoenix Contact
PRODUCT: CHARX SEC-3150, SEC-3100, SEC-3050, SEC-3000
AFFECTED_VERSIONS: 1.0.0 up to (excluding) 1.9.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper command neutralization vulnerability allows an unauthenticated remote attacker to execute arbitrary commands as root on the system.

Executive Summary:
A critical command injection vulnerability in Phoenix Contact charging controllers allows unauthenticated attackers to execute arbitrary code with root-level privileges.

Vulnerability Details

CVE-ID: CVE-2026-7849

Affected Software: Phoenix Contact CHARX SEC-3150, SEC-3100, SEC-3050, SEC-3000

Affected Versions: 1.0.0 up to (excluding) 1.9.1

Vulnerability: This is a command injection (CWE-77) flaw where input is not properly sanitized before being passed to a system command. An unauthenticated attacker can inject malicious commands, which the system then executes with root permissions.

Business Impact

The CVSS score of 9.8 underscores the extreme severity of this flaw. Full root access grants an attacker the ability to manipulate charging parameters, install persistent malware, or disable safety mechanisms, which could have catastrophic impacts on both physical equipment and operational safety.

Remediation Plan

Immediate Action: Update the affected Phoenix Contact CHARX controller firmware to version 1.9.1 or later to implement proper input sanitization.

Proactive Monitoring: Audit system logs for anomalous command execution patterns or unexpected changes to system configuration files.

Compensating Controls: Implement strict network ingress filtering to ensure that only authorized traffic can reach the configuration interfaces of the charging controllers.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Command injection remains one of the most dangerous vulnerability classes due to the ease of achieving arbitrary code execution.

Analyst Recommendation

Command injection vulnerabilities are high-priority targets for attackers. It is imperative that all affected CHARX controllers are updated to version 1.9.1 immediately to close this vector and prevent unauthorized root access to the underlying operating system.

---METADATA---
VENDOR: GeoVision
PRODUCT: GV-ASWeb
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A remote code execution vulnerability exists in the Notification Settings of GeoVision GV-ASWeb 6.

Executive Summary:
A critical remote code execution flaw in GeoVision GV-ASWeb 6 allows unauthenticated attackers to gain full system control.

Vulnerability Details

CVE-ID: CVE-2026-7841

Affected Software: GeoVision GV-ASWeb 6

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This remote code execution (RCE) vulnerability resides within the Notification Settings module. It allows an attacker to execute arbitrary code on the underlying system, likely without requiring prior authentication.

Business Impact

The CVSS score of 8.8 underscores the High severity of this vulnerability. Compromise of an access control or web management system can lead to total system takeover, unauthorized physical access, and potential pivot points into the internal network.

Remediation Plan

Immediate Action: Immediately restrict access to the GV-ASWeb interface to trusted internal networks and apply the latest security patches from GeoVision.

Proactive Monitoring: Review system logs for suspicious process creation or unusual outbound network traffic from the GV-ASWeb server.

Compensating Controls: Use a Web Application Firewall (WAF) with rules configured to block suspicious input patterns targeting notification settings.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. Nevertheless, RCE vulnerabilities are critical and require immediate remediation.

Analyst Recommendation

This vulnerability is exceptionally dangerous as it permits remote code execution. Systems running GeoVision GV-ASWeb must be isolated from the public internet immediately and patched to prevent potential exploitation.

---METADATA---
VENDOR: uvnc
PRODUCT: UltraVNC
AFFECTED_VERSIONS: Through 1.8.2.2
---END_METADATA---

Description Summary:
UltraVNC repeater contains a global buffer overflow in its HTTP administration server, allowing unauthenticated remote code execution via a crafted URI.

Executive Summary:
A critical buffer overflow vulnerability in the UltraVNC repeater allows unauthenticated remote attackers to execute arbitrary code on the host system.

Vulnerability Details

CVE-ID: CVE-2026-7840

Affected Software: uvnc UltraVNC

Affected Versions: Repeater through 1.8.2.2

Vulnerability: A global buffer overflow exists in the repeater's HTTP administration server, triggered by unchecked sprintf calls when processing HTTP request URIs. Because the vulnerability occurs before authentication, an unauthenticated attacker can trigger this overflow to corrupt memory and achieve remote code execution.

Business Impact

The severity of this vulnerability is extreme, justified by its CVSS score of 9.8. Exploitation grants an attacker full control over the repeater host, which could be used to pivot into internal networks or intercept VNC traffic, resulting in complete system compromise and loss of operational control.

Remediation Plan

Immediate Action: Update the UltraVNC repeater component to the latest patched version provided by the vendor.

Proactive Monitoring: Monitor network traffic to the repeater’s HTTP port (default 80) for unusually large or malformed HTTP requests that exceed standard URI length expectations.

Compensating Controls: Restrict access to the UltraVNC repeater's HTTP interface using firewall rules or VPNs to ensure only authorized management IP addresses can communicate with the service.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given that this vulnerability allows for pre-authentication remote code execution, it represents an immediate and high-priority threat. Administrators must apply the vendor-supplied patch without delay and ensure the management interface is not exposed to the public internet.

---METADATA---
VENDOR: UltraVNC
PRODUCT: UltraVNC Repeater
AFFECTED_VERSIONS: Through 1.8.2.2
---END_METADATA---

Description Summary:
UltraVNC Repeater initializes its HTTP administration interface with a hardcoded default password, allowing unauthenticated remote attackers to gain full administrative control.

Executive Summary:
A critical hardcoded credential vulnerability in UltraVNC Repeater allows remote attackers to bypass authentication and gain full administrative control over the service.

Vulnerability Details

CVE-ID: CVE-2026-7839

Affected Software: UltraVNC Repeater

Affected Versions: Through 1.8.2.2

Vulnerability: The application utilizes a hardcoded password ("adminadmi2") for the HTTP administration interface when the configuration file is missing. This flaw allows any remote, unauthenticated attacker to bypass authentication and modify repeater settings or intercept session traffic.

Business Impact

The ability for an attacker to gain administrative access to the VNC repeater poses a severe risk to organizational operations. Successful exploitation could lead to unauthorized access to internal remote desktop sessions, manipulation of access control lists, and full compromise of the communication infrastructure, justifying the 9.1 CVSS score.

Remediation Plan

Immediate Action: Update UltraVNC Repeater to the latest available version provided by the vendor to remove the hardcoded credential.

Proactive Monitoring: Review access logs for the HTTP administration port (default TCP 80) for suspicious login attempts or unauthorized modifications.

Compensating Controls: Restrict network access to the UltraVNC Repeater HTTP management interface to trusted management subnets using firewall rules.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the trivial nature of the flaw—using a well-known hardcoded password—the potential for exploitation is extremely high.

Analyst Recommendation

This vulnerability represents a significant security oversight that effectively leaves the administration interface open to the public internet on default installations. Administrators must verify their current version and immediately apply the vendor-supplied update to eliminate the hardcoded password risk.

---METADATA---
VENDOR: UltraVNC
PRODUCT: Viewer
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
UltraVNC Viewer is susceptible to a high-severity vulnerability that may allow for unauthorized system interaction or remote code execution.

Executive Summary:
The UltraVNC Viewer contains a high-severity security flaw that poses a significant risk of unauthorized access or system compromise to host environments.

Vulnerability Details

CVE-ID: CVE-2026-7838

Affected Software: UltraVNC Viewer

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a critical flaw in the UltraVNC Viewer application, potentially allowing an attacker to manipulate memory or execute arbitrary code. The authentication requirements remain undefined, necessitating a cautious approach assuming unauthenticated access is possible.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the viewer host, enabling attackers to gain unauthorized access to remote systems managed via the VNC protocol. Given the CVSS score of 8.8, this vulnerability represents a significant risk to operational integrity, potentially resulting in data exfiltration or the deployment of persistent malware.

Remediation Plan

Immediate Action: Consult the official UltraVNC security portal to identify and apply the latest security patches or software updates.

Proactive Monitoring: Review VNC access logs for anomalous connection patterns, unauthorized source IPs, or unusual command-line activity originating from the viewer software.

Compensating Controls: Restrict access to VNC ports at the network perimeter and ensure that VNC traffic is encapsulated within an encrypted VPN tunnel to prevent exposure to untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, this vulnerability should be treated with urgency. Administrators are advised to prioritize the identification of affected UltraVNC Viewer instances and apply the necessary vendor patches as soon as they become available to mitigate the risk of remote system compromise.

---METADATA---
VENDOR: EFM
PRODUCT: ipTIME NAS1dual
AFFECTED_VERSIONS: 1.5.24
---END_METADATA---

Description Summary:
The EFM ipTIME NAS1dual device is vulnerable to a remote stack-based buffer overflow via the get_csrf_whites function in misc_main.cgi.

Executive Summary:
A critical stack-based buffer overflow in the EFM ipTIME NAS1dual allows remote unauthenticated attackers to execute arbitrary code on the device.

Vulnerability Details

CVE-ID: CVE-2026-7834

Affected Software: EFM ipTIME NAS1dual

Affected Versions: 1.5.24

Vulnerability: The vulnerability is a stack-based buffer overflow triggered by improper handling of input within the get_csrf_whites function in the /cgi/advanced/misc_main.cgi script, reachable by remote attackers.

Business Impact

The CVSS score of 9.8 indicates a critical severity, as this flaw allows for Remote Code Execution on the storage device. Successful exploitation could lead to total device takeover, unauthorized access to stored data, and the potential for the device to be used as a pivot point for further network attacks.

Remediation Plan

Immediate Action: Apply the latest firmware update provided by EFM. If no update is available, restrict network access to the device management interface to trusted internal segments only.

Proactive Monitoring: Monitor device logs for unusual crashes or attempts to access administrative CGI scripts from unauthorized external sources.

Compensating Controls: Utilize a firewall or Access Control List (ACL) to restrict access to the web management interface of the NAS1dual to known, secure management IP addresses.

Exploitation Status

Public Exploit Available: Yes

Analyst Notes: The exploit for this vulnerability has been disclosed publicly; therefore, the risk of active exploitation is significantly elevated. Immediate mitigation is required.

Analyst Recommendation

Public availability of exploit code necessitates immediate action. If a firmware update is not currently available, the device must be isolated from the public internet immediately to prevent compromise.

---METADATA---
VENDOR: EFM
PRODUCT: ipTIME C200
AFFECTED_VERSIONS: Up to version 1
---END_METADATA---

Description Summary:
A security weakness has been identified in the EFM ipTIME C200 camera, potentially allowing for unauthorized access or system manipulation.

Executive Summary:
A high-severity security weakness in the EFM ipTIME C200 requires immediate firmware updates to mitigate the risk of unauthorized system access.

Vulnerability Details

CVE-ID: CVE-2026-7833

Affected Software: EFM ipTIME C200

Affected Versions: Up to version 1

Vulnerability: This vulnerability involves a security weakness within the EFM ipTIME C200 device. While technical details are limited, such weaknesses often involve authentication bypasses or insecure default configurations that allow an attacker to gain control over the device.

Business Impact

With a CVSS score of 7.2, this vulnerability poses a significant risk of unauthorized surveillance or loss of control over the affected security cameras. This could lead to a breach of privacy and physical security, causing reputational and operational damage.

Remediation Plan

Immediate Action: Update the firmware of all EFM ipTIME C200 devices to the latest available version provided by EFM.

Proactive Monitoring: Review the activity logs of the cameras for any unauthorized connections or suspicious configuration changes.

Compensating Controls: Place the cameras on an isolated VLAN and restrict access to the web management interface using strong, unique passwords and IP-based access lists.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security cameras are high-value targets for attackers. Users should prioritize updating these devices immediately and ensure that remote access is restricted to authorized personnel only.

---METADATA---
VENDOR: UltraVNC
PRODUCT: UltraVNC Viewer
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
UltraVNC viewer contains a vulnerability that may allow for unauthorized memory access or arbitrary code execution through improper input handling.

Executive Summary:
The UltraVNC viewer is susceptible to a high-severity vulnerability that could enable remote code execution or system compromise if exploited by a malicious actor.

Vulnerability Details

CVE-ID: CVE-2026-7831

Affected Software: UltraVNC Viewer

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from improper handling of data within the viewer, which may lead to memory corruption when processing specially crafted packets. Exploitation likely requires the attacker to entice a user to connect to a malicious VNC server or intercept a legitimate connection.

Business Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the user running the UltraVNC viewer, leading to total workstation compromise and potential lateral movement within the network. The CVSS score of 7.5 underscores the high risk of this vulnerability to endpoint security and sensitive internal data.

Remediation Plan

Immediate Action: Update the UltraVNC viewer software to the latest version provided by the vendor to eliminate the underlying flaw.

Proactive Monitoring: Review application logs for unusual connection attempts and monitor endpoint behavior for unauthorized process execution following a remote session.

Compensating Controls: Use a VPN or SSH tunnel to wrap VNC traffic, ensuring that only trusted sources can establish connections to the viewer.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing UltraVNC for remote administration must prioritize patching this vulnerability across all endpoints. Until updates are applied, restrict the use of the viewer to trusted internal networks and remain vigilant against unauthorized remote connection requests.

---METADATA---
VENDOR: Totolink
PRODUCT: A8000RU
AFFECTED_VERSIONS: 7.1cu.643_b20200521
---END_METADATA---

Description Summary:
A remote OS command injection vulnerability in the Totolink A8000RU allows unauthenticated attackers to execute arbitrary commands via the setAppFilterCfg function.

Executive Summary:
A critical remote OS command injection vulnerability in Totolink A8000RU allows unauthenticated attackers to gain full control of the device.

Vulnerability Details

CVE-ID: CVE-2026-7823

Affected Software: Totolink A8000RU

Affected Versions: 7.1cu.643_b20200521

Vulnerability: The function setAppFilterCfg in /cgi-bin/cstecgi.cgi fails to sanitize the enable argument, leading to OS command injection. This allows an unauthenticated, remote attacker to execute arbitrary commands with system-level privileges.

Business Impact

A CVSS score of 9.8 highlights the extreme risk posed by this vulnerability. Total device compromise can lead to complete loss of network visibility, interception of sensitive data, and the use of the router as a foothold for further attacks against the internal network.

Remediation Plan

Immediate Action: Apply the latest firmware update provided by Totolink to patch the command injection flaw.

Proactive Monitoring: Monitor for unusual system processes or unexpected network traffic emanating from the router, which may indicate persistent command execution.

Compensating Controls: Restrict access to the router's web interface to trusted internal IP addresses only, preventing external exposure of the vulnerable CGI script.

Exploitation Status

Public Exploit Available: Yes

Analyst Notes: As of May 5, 2026, public exploits for this vulnerability are available, significantly increasing the risk of active exploitation.

Analyst Recommendation

The combination of RCE capability and public exploit availability makes this a high-priority threat. Administrators must act immediately to patch the affected devices or restrict network access to the management interface to neutralize the risk of exploitation.

---METADATA---
VENDOR: pgAdmin
PRODUCT: pgAdmin 4
AFFECTED_VERSIONS: 0 up to (excluding) 9.15
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A symbolic-link path traversal vulnerability in the pgAdmin 4 File Manager allows authenticated users to access or manipulate unauthorized files.

Executive Summary:
A path traversal vulnerability in pgAdmin 4 exposes the application to unauthorized file system access, potentially leading to critical data integrity issues.

Vulnerability Details

CVE-ID: CVE-2026-7819

Affected Software: pgAdmin pgAdmin 4

Affected Versions: 0 up to (excluding) 9.15

Vulnerability: This is a path traversal vulnerability (CWE-22, CWE-61) within the File Manager component. It requires the attacker to have low-level privileges (PR:L) to interact with the file management functions, where they can manipulate symbolic links to bypass directory restrictions.

Business Impact

The vulnerability carries a CVSS score of 8.1 (High), primarily due to the potential for significant impact on file integrity and availability. An attacker successfully exploiting this flaw could read or overwrite sensitive configuration or database files, leading to unauthorized data exposure or complete service disruption.

Remediation Plan

Immediate Action: Update pgAdmin 4 to version 9.15 or later immediately.

Proactive Monitoring: Review application logs for unusual file access patterns or attempts to traverse outside of designated directories.

Compensating Controls: Ensure that the service account running pgAdmin 4 follows the principle of least privilege, restricting its file system access to only the necessary directories required for operation.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any authenticated user with access to the File Manager interface.

Analyst Recommendation

Given the severity of this vulnerability, organizations should prioritize patching their pgAdmin 4 instances to version 9.15. Failure to address this flaw leaves the underlying database environment vulnerable to unauthorized file system manipulation by authenticated users.

---METADATA---
VENDOR: pgAdmin
PRODUCT: pgAdmin 4
AFFECTED_VERSIONS: 0 up to 9.15
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A deserialization of untrusted data vulnerability in the FileBackedSessionManager of pgAdmin 4 allows for potential unauthorized system impact.

Executive Summary:
A deserialization vulnerability in pgAdmin 4 versions prior to 9.15 could allow an authenticated attacker to achieve total system impact.

Vulnerability Details

CVE-ID: CVE-2026-7818

Affected Software: pgAdmin pgAdmin 4

Affected Versions: 0 up to 9.15

Vulnerability: This is a deserialization of untrusted data vulnerability (CWE-502) within the FileBackedSessionManager component. The CVSS vector (PR:L) indicates that an attacker must possess low privileges (authenticated) to successfully exploit this flaw.

Business Impact

With a CVSS score of 7.0, this vulnerability poses a significant risk to the integrity and availability of the database management environment. Exploitation could lead to unauthorized code execution or system compromise, potentially exposing sensitive database credentials and administrative access.

Remediation Plan

Immediate Action: Update pgAdmin 4 to version 9.15 or later immediately.

Proactive Monitoring: Monitor application logs for suspicious session activity or unauthorized modifications to temporary session storage files.

Compensating Controls: Restrict access to the pgAdmin management interface to trusted internal networks and enforce multi-factor authentication for all users.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit in available data)

Analyst Notes: As of May 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires authenticated access, the potential for total system impact necessitates rapid patching.

Analyst Recommendation

The severity of this deserialization flaw mandates an immediate update to version 9.15. Administrators should ensure that all instances of pgAdmin 4 are patched to prevent potential privilege escalation or unauthorized command execution.

---METADATA---
VENDOR: pgAdmin
PRODUCT: pgAdmin 4
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An OS command injection vulnerability exists within the pgAdmin 4 Import/Export query export functionality.

Executive Summary:
A critical OS command injection vulnerability in pgAdmin 4 could allow an attacker to execute arbitrary commands on the host server.

Vulnerability Details

CVE-ID: CVE-2026-7816

Affected Software: pgAdmin 4

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability, classified as CWE-78, exists in the Import/Export query export feature. It allows an authenticated user to inject malicious OS commands that will be executed by the underlying server operating system.

Business Impact

Successful exploitation allows an attacker to gain full control over the server hosting pgAdmin 4. Given that pgAdmin is often used to manage sensitive database environments, this could lead to massive data theft, database corruption, or complete host takeover. The 8.8 CVSS score signifies a high urgency.

Remediation Plan

Immediate Action: Update pgAdmin 4 to the latest version that includes the fix for this command injection vulnerability.

Proactive Monitoring: Audit database and application logs for suspicious command-line activity or unexpected process spawning from the pgAdmin user.

Compensating Controls: Restrict access to the pgAdmin web interface to trusted internal networks and enforce strict user permissions within the application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical due to the potential for OS-level compromise. Administrators must update their pgAdmin installations immediately and review access logs for any evidence of prior exploitation attempts.

---METADATA---
VENDOR: pgAdmin
PRODUCT: pgAdmin 4
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the pgAdmin 4 Maintenance Tool allows attackers to manipulate database queries.

Executive Summary:
A critical SQL injection vulnerability in the pgAdmin 4 Maintenance Tool could allow unauthorized database access and manipulation.

Vulnerability Details

CVE-ID: CVE-2026-7815

Affected Software: pgAdmin 4

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability resides in the Maintenance Tool component of pgAdmin 4. It enables an attacker to inject arbitrary SQL commands, potentially bypassing authentication or data access controls to retrieve or modify backend database content.

Business Impact

With a CVSS score of 8.8, this flaw poses a severe threat to data confidentiality and integrity. Successful exploitation could lead to the unauthorized disclosure of sensitive PII, financial records, or credentials stored within the managed databases, resulting in major regulatory and reputational damage.

Remediation Plan

Immediate Action: Update the pgAdmin 4 installation to the latest available version provided by the vendor.

Proactive Monitoring: Enable and review database query logs for anomalous syntax or unexpected access patterns originating from the pgAdmin service.

Compensating Controls: Implement strict firewall rules to ensure that only authorized administrative workstations can access the pgAdmin server interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing pgAdmin 4 must prioritize this update to prevent potential data breaches. Administrators should verify their current version and apply the patch as soon as it is released to mitigate the risk of SQL injection.

---METADATA---
VENDOR: pgAdmin
PRODUCT: pgAdmin 4
AFFECTED_VERSIONS: Before 9.15
---END_METADATA---

Description Summary:
An authorization flaw in pgAdmin 4 allows authenticated users to access private server data and execute arbitrary commands by manipulating object IDs and bypassing access controls.

Executive Summary:
A critical authorization vulnerability in pgAdmin 4 allows authenticated users to escalate privileges and execute arbitrary commands, posing a severe risk to database management security.

Vulnerability Details

CVE-ID: CVE-2026-7813

Affected Software: pgAdmin pgAdmin 4

Affected Versions: Before 9.15

Vulnerability: This is an authorization bypass and privilege escalation vulnerability occurring within the server mode modules. An authenticated user can leverage insecure API endpoints to access unauthorized objects and execute arbitrary shell commands via writable configuration fields.

Business Impact

The potential for unauthorized access to sensitive database credentials, combined with the ability to execute arbitrary system commands, represents a catastrophic risk to organizational data integrity. With a CVSS score of 9.9, this vulnerability could lead to total compromise of the pgAdmin server and any connected database environments, potentially resulting in massive data exfiltration and complete system takeover.

Remediation Plan

Immediate Action: Upgrade all instances of pgAdmin 4 to version 9.15 or later immediately to implement the centralized access control framework.

Proactive Monitoring: Review application access logs for unusual patterns of object ID requests or attempts to access server configurations outside of a user's assigned scope.

Compensating Controls: Restrict access to the pgAdmin management interface to trusted internal networks and implement robust multi-factor authentication for all users.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the critical nature of the flaw and the ease of exploitation, the potential for malicious activity is extremely high.

Analyst Recommendation

Given the severity of this vulnerability, administrators should prioritize patching pgAdmin 4 environments immediately. The ability for non-privileged users to execute arbitrary commands makes this an urgent security priority that requires non-disruptive but immediate remediation.

---METADATA---
VENDOR: SmarterTools
PRODUCT: SmarterMail
AFFECTED_VERSIONS: SmarterMail build 9560 and earlier
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
SmarterTools SmarterMail contains a path traversal vulnerability in the API that allows authenticated users to read arbitrary files on the server.

Executive Summary:
A path traversal vulnerability in SmarterTools SmarterMail allows authenticated attackers to read sensitive files from the underlying server filesystem.

Vulnerability Details

CVE-ID: CVE-2026-7807

Affected Software: SmarterTools SmarterMail

Affected Versions: SmarterTools Inc. SmarterMail: 0 up to (excluding) 9560

Vulnerability: This is a Local File Inclusion (LFI) / Path Traversal vulnerability (CWE-22) residing in the /api/v1/report/summary/{type} endpoint. The vulnerability requires the attacker to be an authenticated user to successfully manipulate path parameters and access unauthorized files.

Business Impact

The ability for an authenticated user to read arbitrary files poses a severe risk to confidentiality. An attacker could potentially extract sensitive configuration files, system credentials, or user data, leading to full system compromise or lateral movement within the network. With a CVSS score of 8.1, this is a high-severity flaw that could result in significant data exfiltration.

Remediation Plan

Immediate Action: Upgrade SmarterMail to build 9560 or later, as provided in the vendor security release.

Proactive Monitoring: Review access logs for the /api/v1/report/summary/ endpoint for unusual patterns, such as directory traversal sequences (e.g., "../").

Compensating Controls: Ensure that the service account running SmarterMail follows the principle of least privilege, restricting its ability to access files outside of the application's intended directory.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires authentication, the impact is high, and internal users or compromised accounts could leverage this flaw to gain deeper access to the host.

Analyst Recommendation

Given the potential for unauthorized file access, administrators should prioritize updating SmarterMail to build 9560. This patch effectively closes the directory traversal vector, preventing attackers from escalating their level of access beyond their authorized scope.

---METADATA---
VENDOR: IBM
PRODUCT: Langflow OSS
AFFECTED_VERSIONS: 1.0.0 through 1.10.0
---END_METADATA---

Description Summary:
IBM Langflow OSS contains a vulnerability where improper validation of flow nodes allows for arbitrary code execution. This occurs when component type fields are missing or empty.

Executive Summary:
A critical vulnerability in IBM Langflow OSS allows attackers to achieve arbitrary code execution by exploiting improper input validation within flow node processing.

Vulnerability Details

CVE-ID: CVE-2026-7803

Affected Software: IBM Langflow OSS

Affected Versions: 1.0.0 through 1.10.0

Vulnerability: This vulnerability arises from insufficient validation of flow nodes, specifically when component type fields are missing or empty. This allows attackers to bypass security checks and execute code on the server.

Business Impact

The CVSS score of 9.8 reflects the severe risk of arbitrary code execution, which can lead to complete system compromise. This poses a significant threat to business operations, data security, and the overall stability of the infrastructure hosting the Langflow environment.

Remediation Plan

Immediate Action: Upgrade to the latest version of IBM Langflow OSS to ensure the proper validation logic for flow nodes is implemented.

Proactive Monitoring: Inspect application logs for unusual node creation requests or unexpected code execution events.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious payloads targeting the flow node input parameters if immediate patching is not feasible.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. Nevertheless, the risk of code execution necessitates immediate action.

Analyst Recommendation

This vulnerability is critical and poses a severe threat to system security. Security teams should prioritize applying the vendor-provided patch immediately to mitigate the risk of arbitrary code execution and ensure the integrity of the application environment.

---METADATA---
VENDOR: DynamiApps
PRODUCT: Frontend Admin by DynamiApps
AFFECTED_VERSIONS: 0 through 3.29.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A missing authorization vulnerability in the Frontend Admin by DynamiApps WordPress plugin allows authenticated users to bypass access controls.

Executive Summary:
An authorization bypass vulnerability in the Frontend Admin by DynamiApps plugin for WordPress allows authenticated attackers to perform unauthorized actions.

Vulnerability Details

CVE-ID: CVE-2026-7802

Affected Software: DynamiApps Frontend Admin

Affected Versions: 0 through 3.29.2

Vulnerability: The plugin suffers from a missing authorization flaw (CWE-862). This vulnerability requires the attacker to have at least low-level authenticated access to the WordPress environment to successfully bypass security checks.

Business Impact

With a CVSS score of 8.8, this vulnerability allows an authenticated user to perform actions they are not authorized to access, potentially leading to unauthorized data modification or administrative privilege escalation. This represents a significant risk to site integrity and data security, particularly in multi-user WordPress environments.

Remediation Plan

Immediate Action: Update the "Frontend Admin by DynamiApps" plugin to version 3.29.3 or later immediately.

Proactive Monitoring: Review WordPress user activity logs for suspicious actions performed by lower-privileged accounts that deviate from standard operational behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block suspicious requests targeting plugin-specific PHP files and administrative functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. However, the flaw's existence in a widely used plugin type necessitates prompt remediation.

Analyst Recommendation

Administrators must update the affected plugin to version 3.29.3 immediately to close the authorization gap. Failure to do so exposes the site to potential unauthorized actions by authenticated users who may abuse the missing capability checks.

---METADATA---
VENDOR: Jinan USR IOT Technology Limited
PRODUCT: USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
AFFECTED_VERSIONS: 7.03T.07
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Jinan USR-W610 converter firmware contains hardcoded plaintext administrative credentials that can be extracted to gain unauthorized access to the device.

Executive Summary:
A critical vulnerability in the Jinan USR-W610 converter firmware allows unauthorized administrative access due to the inclusion of hardcoded credentials.

Vulnerability Details

CVE-ID: CVE-2026-7786

Affected Software: Jinan USR-W610 RS232/485 to Wi-Fi/Ethernet Converter

Affected Versions: 7.03T.07

Vulnerability: This is an improper neutralization of hardcoded credentials (CWE-798) vulnerability. An unauthenticated attacker can extract these credentials from the firmware image to gain full administrative control over the device.

Business Impact

The presence of hardcoded credentials poses a severe risk to operational technology environments where these converters are deployed. Successful exploitation, rated at 9.8 (Critical), grants an attacker full administrative access, potentially leading to unauthorized control of industrial processes, data interception, or the permanent bricking of hardware.

Remediation Plan

Immediate Action: Update the firmware of the USR-W610 device to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor network traffic for unauthorized administrative logins to the converter and review system logs for anomalies originating from the device.

Compensating Controls: Isolate the converter device within a restricted VLAN and restrict administrative interface access to known, secure management IP addresses.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a significant security oversight that provides attackers with a direct path to device compromise. Administrators must prioritize updating the firmware to remediate the hardcoded credentials and prevent unauthorized access to these critical industrial assets.