---METADATA---
VENDOR: MLflow
PRODUCT: MLflow
AFFECTED_VERSIONS: Up to (excluding) 3.10.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A cross-origin validation error in the MLflow Assistant allows remote attackers to execute arbitrary commands on a user's local machine via malicious web pages.

Executive Summary:
A critical origin validation vulnerability in the MLflow Assistant allows remote attackers to bypass security controls and execute arbitrary commands on local systems, necessitating an immediate upgrade.

Vulnerability Details

CVE-ID: CVE-2026-2611

Affected Software: MLflow

Affected Versions: Up to (excluding) 3.10.0

Vulnerability: This vulnerability (CWE-346) stems from improper origin validation within the MLflow Assistant’s /ajax-api endpoints. By exploiting cross-origin requests, a remote attacker can trick a user's browser into interacting with the local MLflow instance, modifying configuration settings to enable full access and executing commands via the Claude Code sub-agent.

Business Impact

The CVSS score of 9.6 highlights a critical risk to local workstations and integrated development environments. A successful exploit could lead to the theft of sensitive API keys, source code, or internal data, as well as the execution of arbitrary commands in the context of the user’s machine. This is particularly dangerous for developers and data scientists who utilize MLflow for local model development.

Remediation Plan

Immediate Action: Upgrade MLflow to version 3.10.0 or later immediately to resolve the origin validation errors.

Proactive Monitoring: Review browser logs and network traffic for suspicious cross-origin requests directed toward local MLflow instances.

Compensating Controls: Use browser extensions or firewall policies to restrict cross-origin requests and disable the MLflow Assistant feature if it is not required for current workflows.

Exploitation Status

Public Exploit Available: Yes (Proof-of-Concept)

Analyst Notes: As of May 19, 2026, proof-of-concept code is available for this vulnerability. Given the ease with which local systems can be targeted via malicious web content, the urgency for remediation is high.

Analyst Recommendation

Organizations using MLflow for local development must upgrade to version 3.10.0 immediately. The presence of a proof-of-concept exploit significantly increases the risk of successful targeting; applying the update is the only effective way to mitigate the risk of arbitrary code execution.

---METADATA---
VENDOR: Fortinet
PRODUCT: FortiSandbox
AFFECTED_VERSIONS: FortiSandbox 5.0.0-5.0.1, 4.4.0-4.4.8; FortiSandbox Cloud 5.0.2-5.0.5; FortiSandbox PaaS (various)
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A missing authorization vulnerability in multiple FortiSandbox versions allows unauthenticated attackers to execute arbitrary code or commands via crafted HTTP requests.

Executive Summary:
Critical missing authorization in Fortinet FortiSandbox allows unauthenticated remote code execution, posing a severe risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-26083

Affected Software: Fortinet FortiSandbox

Affected Versions: FortiSandbox 5.0.0 through 5.0.1, 4.4.0 through 4.4.8; FortiSandbox Cloud 5.0.2 through 5.0.5; various FortiSandbox PaaS versions.

Vulnerability: This is a missing authorization flaw where the application fails to validate the identity of a requester. An unauthenticated attacker can leverage this to execute unauthorized code or commands on the host system via malicious HTTP requests.

Business Impact

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level. Successful exploitation would grant an attacker complete control over the security appliance, potentially leading to unauthorized data exfiltration, lateral movement within the network, or complete service disruption.

Remediation Plan

Immediate Action: Apply the latest firmware patches provided by Fortinet immediately to all affected FortiSandbox and PaaS instances.

Proactive Monitoring: Inspect web access logs for unusual HTTP requests or unexpected command execution patterns targeting the management interface.

Compensating Controls: Restrict access to the FortiSandbox management interface to trusted IP addresses only using firewall rules or Access Control Lists (ACLs).

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of May 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS score and the ability for unauthenticated remote code execution, organizations must prioritize patching this vulnerability. Failure to remediate exposes the internal network to significant risk; ensure all FortiSandbox environments are updated to the latest vendor-released version without delay.

---METADATA---
VENDOR: Unknown
PRODUCT: OCPP Charging Infrastructure
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Unauthenticated attackers can exploit missing authentication in WebSocket endpoints to impersonate charging stations and manipulate backend data via the OCPP protocol.

Executive Summary:
Critical authentication bypass vulnerabilities in OCPP WebSocket endpoints allow unauthenticated attackers to impersonate EV charging stations and manipulate infrastructure data.

Vulnerability Details

CVE-ID: CVE-2026-26051

Affected Software: OCPP-based Charging Management Systems

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The software fails to implement proper authentication mechanisms for WebSocket connections. An unauthenticated attacker can use a discovered charging station identifier to connect to the OCPP endpoint and issue unauthorized commands or receive sensitive backend data.

Business Impact

This vulnerability poses a severe threat to electric vehicle (EV) charging networks, potentially leading to unauthorized control of physical infrastructure and financial fraud through data manipulation. The CVSS score of 9.4 reflects the critical risk of privilege escalation and the potential for large-scale disruption of charging services and corruption of billing reporting.

Remediation Plan

Immediate Action: Update the affected charging management software to the latest version and ensure that WebSocket authentication is strictly enforced for all station identifiers.

Proactive Monitoring: Monitor network traffic for unauthorized WebSocket connections and audit charging station logs for anomalous command patterns or unexpected disconnection/reconnection events.

Compensating Controls: Deploy network-level access control lists (ACLs) or VPNs to restrict access to the OCPP WebSocket endpoints to known, authorized IP addresses of charging stations.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, the lack of authentication on public-facing endpoints makes this a high-value target for attackers looking to disrupt critical infrastructure.

Analyst Recommendation

Organizations operating EV charging networks must prioritize the remediation of this flaw due to the potential for physical infrastructure manipulation. Immediate application of vendor-provided patches and the implementation of strong authentication for all OCPP communications are mandatory to maintain system integrity.

---METADATA---
VENDOR: Unknown
PRODUCT: Wi-Fi Router
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A Wi-Fi router is vulnerable to de-authentication attacks because it does not support Management Frame Protection (MFP), allowing attackers to disconnect users.

Executive Summary:
The absence of Management Frame Protection allows unauthenticated attackers to launch denial-of-service attacks by forcing wireless clients to disconnect from the network.

Vulnerability Details

CVE-ID: CVE-2026-26048

Affected Software: Wi-Fi Router

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The router fails to implement protected management frames (IEEE 802.11w). This allows an unauthenticated attacker within radio range to forge de-authentication and disassociation frames to disrupt wireless connectivity.

Business Impact

This vulnerability allows for persistent Denial of Service (DoS) against wireless infrastructure, leading to lost productivity and disruption of business operations. With a CVSS score of 7.5, the flaw is easily exploitable and can be used as a precursor to more advanced attacks, such as "Evil Twin" phishing.

Remediation Plan

Immediate Action: Check for a firmware update that enables Management Frame Protection (MFP/802.11w) and enable it in the router's security settings.

Proactive Monitoring: Use wireless intrusion detection systems (WIDS) to alert on high frequencies of de-authentication frames in the environment.

Compensating Controls: Shift critical business operations to wired connections where possible to mitigate the risk of wireless disruption.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 22, 2026, there is no public information indicating active exploitation. However, de-authentication tools are widely available and require minimal technical skill to operate.

Analyst Recommendation

Wireless availability is critical for modern business. Administrators should verify that all deployed wireless access points support and require Management Frame Protection to defend against these common and disruptive attacks.

---METADATA---
VENDOR: Moodle
PRODUCT: Moodle (TeX filter)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Insufficient input sanitization in the Moodle TeX filter administrative settings allows for command injection, potentially leading to remote code execution by an administrative user.

Executive Summary:
An administrative command injection vulnerability in Moodle’s TeX filter configuration could allow an authenticated attacker to execute arbitrary commands on the underlying server.

Vulnerability Details

CVE-ID: CVE-2026-26046

Affected Software: Moodle

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the administrative configuration interface for the TeX filter. An authenticated attacker with administrative privileges can input malicious strings into configuration fields which, due to a lack of sanitization, are executed by the system shell.

Business Impact

The potential for remote code execution (RCE) represents a critical risk to the host operating system. While the attack requires administrative access, a compromised admin account could lead to full system takeover, lateral movement within the network, and total loss of data confidentiality. The CVSS score of 7.2 underscores the high impact of the vulnerability despite the requirement for high-level authentication.

Remediation Plan

Immediate Action: Update Moodle to the latest version to apply the necessary sanitization logic to the TeX filter administrative settings.

Proactive Monitoring: Audit administrative activity logs for changes to filter configurations and monitor for suspicious shell activity originating from the web server user.

Compensating Controls: Implement the principle of least privilege by limiting the number of users with site-wide administrative access and use endpoint detection and response (EDR) tools to block unauthorized process execution.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 22, 2026, there is no public information indicating active exploitation of this vulnerability. Command injection flaws in administrative panels are frequently targeted by advanced persistent threats (APTs) following initial credential compromise.

Analyst Recommendation

This vulnerability should be treated with urgency, as it provides a direct path from application-level access to OS-level control. Organizations must apply the vendor-provided security updates immediately. Furthermore, ensure that the web server is running with the lowest possible privileges to mitigate the impact of any successful injection.

---METADATA---
VENDOR: Moodle
PRODUCT: Moodle
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A validation flaw in Moodle’s backup restore functionality allows for the processing of specially crafted backup files, potentially leading to unauthorized data manipulation or system compromise.

Executive Summary:
A high-severity validation flaw in Moodle’s backup restoration process could allow authenticated users to compromise system integrity via malicious backup files.

Vulnerability Details

CVE-ID: CVE-2026-26045

Affected Software: Moodle

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a failure to properly validate backup files during the restore process within the Moodle platform. An authenticated attacker with permissions to upload and restore backups can leverage specially crafted files to bypass security checks, potentially leading to arbitrary file writes or insecure deserialization.

Business Impact

A successful exploit poses a significant risk to the confidentiality and integrity of the educational platform. Attackers could potentially gain unauthorized access to sensitive student data, modify course content, or escalate privileges within the application. The CVSS score of 7.2 reflects a High severity rating, as the flaw targets a core administrative function that manages large datasets and system configurations.

Remediation Plan

Immediate Action: Administrators should apply the latest security patches provided by Moodle immediately to ensure backup files are strictly validated before processing.

Proactive Monitoring: Review system logs for unusual backup restoration activities, particularly those initiated by accounts that do not typically perform administrative maintenance.

Compensating Controls: Restrict backup and restore capabilities to a minimal set of highly trusted administrative users and implement a Web Application Firewall (WAF) to inspect multi-part form data uploads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and its location in a critical functional component, the potential for exploitation remains high once technical details are reverse-engineered.

Analyst Recommendation

The severity of this vulnerability necessitates immediate patching of all production Moodle environments. Because the backup restoration process is a powerful feature, leaving this flaw unaddressed exposes the organization to significant data integrity risks. Prioritize the update and verify the integrity of recent backup activities.

---METADATA---
VENDOR: Microsoft
PRODUCT: Semantic Kernel Python SDK
AFFECTED_VERSIONS: Versions prior to 1.39.4
---END_METADATA---

Description Summary:
A remote code execution vulnerability exists in Microsoft’s Semantic Kernel Python SDK due to improper filtering in the InMemoryVectorStore component. Attackers can execute arbitrary code.

Executive Summary:
A critical remote code execution vulnerability in Microsoft's Semantic Kernel Python SDK allows unauthenticated attackers to compromise systems using the InMemoryVectorStore functionality.

Vulnerability Details

CVE-ID: CVE-2026-26030

Affected Software: Microsoft Semantic Kernel Python SDK

Affected Versions: Versions prior to 1.39.4

Vulnerability: This flaw is a remote code execution (RCE) vulnerability located within the InMemoryVectorStore filter functionality. An unauthenticated attacker can exploit this logic to execute arbitrary commands within the context of the application using the SDK.

Business Impact

A successful exploit allows for full system compromise, potentially leading to the theft of sensitive AI models, data exfiltration, or lateral movement within the corporate network. With a CVSS score of 9.9, this vulnerability represents a near-maximum technical risk, as it requires no user interaction and provides high-impact execution capabilities.

Remediation Plan

Immediate Action: Update the Semantic Kernel Python SDK to version 1.39.4 or higher immediately to patch the vulnerable filter logic.

Proactive Monitoring: Review application logs for unusual filter queries or unexpected process executions originating from the Python environment.

Compensating Controls: As an immediate workaround, organizations should avoid using the InMemoryVectorStore component in production environments until the patch is applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Feb 19, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the popularity of the SDK in AI development, the potential for exploitation is high.

Analyst Recommendation

The severity of this RCE vulnerability cannot be overstated, particularly for organizations integrating AI capabilities into their workflows. It is strongly recommended that development teams prioritize the update to version 1.39.4 to eliminate the risk of remote compromise.

---METADATA---
VENDOR: GLPI
PRODUCT: GLPI
AFFECTED_VERSIONS: 11.0.0 to 11.0.5
---END_METADATA---

Description Summary:
GLPI is vulnerable to template injection by administrators, leading to remote code execution.

Executive Summary:
An administrative template injection vulnerability in GLPI allows for remote code execution, posing a significant risk to the IT management environment.

Vulnerability Details

CVE-ID: CVE-2026-26026

Affected Software: GLPI

Affected Versions: 11.0.0 to 11.0.5

Vulnerability: The application fails to properly sanitize administrative template inputs, allowing an attacker with administrative privileges to inject code that is subsequently executed.

Business Impact

While this requires administrative access, the resulting RCE allows the attacker to fully compromise the server hosting the IT management assets. Given the 9.1 CVSS score, the impact on organizational security is severe.

Remediation Plan

Immediate Action: Update GLPI to version 11.0.6 or later.

Proactive Monitoring: Audit administrative activities and review template configurations for any unauthorized or suspicious code injections.

Compensating Controls: Limit access to administrative functions to a small, trusted group of users and implement robust logging for administrative actions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability for an administrator to achieve RCE is a critical risk. Administrators must update to 11.0.6 immediately and ensure that administrative access is strictly controlled and audited.

---METADATA---
VENDOR: Catalyst
PRODUCT: Catalyst Game Server Platform
AFFECTED_VERSIONS: Versions prior to commit 11980aaf3f46315b02777f325ba02c56b110165d
---END_METADATA---

Description Summary:
Catalyst allows users with template permissions to execute arbitrary shell commands as root on host operating systems due to a lack of sandboxing in server template install scripts.

Executive Summary:
The Catalyst platform is subject to a critical remote code execution vulnerability where authenticated users can gain full root-level access to all nodes in a cluster.

Vulnerability Details

CVE-ID: CVE-2026-26009

Affected Software: Catalyst Game Server Platform

Affected Versions: Versions prior to commit 11980aaf3f46315b02777f325ba02c56b110165d

Vulnerability: The vulnerability exists in the way install scripts in server templates are handled, executing directly on the host via bash -c without sandboxing. This allows an authenticated attacker with template.create or template.update permissions to achieve root-level remote code execution.

Business Impact

The impact is catastrophic, as an attacker can gain total control over every node machine within the Catalyst cluster. This could lead to the theft of sensitive billing data, destruction of game community assets, and complete infrastructure takeover. The CVSS score of 9.9 underscores the extreme risk posed by this lack of isolation.

Remediation Plan

Immediate Action: Apply the security fix identified in commit 11980aaf3f46315b02777f325ba02c56b110165d or update to the latest version.

Proactive Monitoring: Audit all existing server templates for suspicious shell commands and monitor node operating systems for unauthorized root-level activity.

Compensating Controls: Restrict template.create and template.update permissions to only the most trusted administrative personnel until the patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Feb 10, 2026, there is no public information indicating active exploitation of this vulnerability. The flaw is design-based, making it trivial to exploit once an attacker gains basic template-management privileges.

Analyst Recommendation

The absence of containerization for administrative scripts represents a fundamental security failure. It is imperative that administrators update their Catalyst installations immediately. Furthermore, organizations should adopt a principle of least privilege for all template-related permissions to minimize the internal attack surface.

---METADATA---
VENDOR: Tandoor Recipes
PRODUCT: Tandoor Recipes
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
Tandoor Recipes, a meal management application, contains a high-severity vulnerability that could lead to unauthorized access or data compromise.

Executive Summary:
Tandoor Recipes is affected by a high-severity security vulnerability that poses a significant risk to the confidentiality and integrity of user data.

Vulnerability Details

CVE-ID: CVE-2026-25991

Affected Software: Tandoor Recipes

Affected Versions: See vendor advisory for affected versions

Vulnerability: While specific technical details of the flaw class are not fully disclosed in the initial summary, the CVSS score of 7.7 indicates a high-severity issue that likely involves unauthorized access or data manipulation within the recipe management platform.

Business Impact

A successful exploit could allow an attacker to access private user data, modify meal plans, or disrupt the availability of the application. For organizations or individuals relying on this platform for data management, this represents a significant breach of privacy and operational reliability.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the Tandoor Recipes maintainers immediately to mitigate the identified risks.

Proactive Monitoring: Review application access logs for any unauthorized login attempts or unusual data modification patterns.

Compensating Controls: Ensure the application is behind a reverse proxy with strong authentication and limit exposure to the public internet where possible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 14, 2026, there is no public information indicating active exploitation. The high CVSS score suggests that the vulnerability is serious and warrants immediate attention.

Analyst Recommendation

Security teams should treat this as a high-priority update. Promptly applying the vendor-supplied patches is the most effective way to protect the application environment from potential exploitation.

---METADATA---
VENDOR: Ninja Team
PRODUCT: Database for Contact Form 7, WPforms, Elementor forms
AFFECTED_VERSIONS: All versions up to, and including, 1.4.7
---END_METADATA---

Description Summary:
The Database for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection via the 'download_csv' function. This could lead to code execution if a POP chain is present.

Executive Summary:
A critical PHP Object Injection vulnerability in a popular WordPress contact form database plugin could allow unauthenticated attackers to execute code or delete files.

Vulnerability Details

CVE-ID: CVE-2026-2599

Affected Software: Database for Contact Form 7, WPforms, Elementor forms (WordPress Plugin)

Affected Versions: All versions up to, and including, 1.4.7

Vulnerability: This vulnerability occurs due to the deserialization of untrusted input within the download_csv function. An unauthenticated attacker can inject a malicious PHP Object. While the plugin itself does not contain a "Property-Oriented Programming" (POP) chain, the presence of other plugins or themes with a POP chain could enable remote code execution or arbitrary file deletion.

Business Impact

If exploited, this could lead to the total compromise of the WordPress site, including data theft and defacement. Because many sites use multiple plugins, the probability of a usable POP chain being present is high. The CVSS score of 9.8 reflects the potential for unauthenticated remote code execution.

Remediation Plan

Immediate Action: Update the "Database for Contact Form 7, WPforms, Elementor forms" plugin to the latest version (above 1.4.7) immediately.

Proactive Monitoring: Use a security scanner to check for unauthorized file changes and monitor for suspicious requests targeting the download_csv functionality.

Compensating Controls: Utilize a Web Application Firewall (WAF) with rules specifically designed to block PHP Object Injection and serialized data patterns in GET/POST requests.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 5, 2026, there is no public information indicating active exploitation. However, PHP Object Injection is a well-known attack vector in the WordPress ecosystem.

Analyst Recommendation

The high CVSS score and the unauthenticated nature of this vulnerability make it a priority for WordPress administrators. Even if no POP chain is currently identified, the risk of "latent" exploitation remains high. Update the plugin immediately to protect your web environment from potential takeover.

---METADATA---
VENDOR: SumatraPDF
PRODUCT: SumatraPDF
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
SumatraPDF for Windows is affected by a high-severity vulnerability. The flaw resides in the handling of multi-format files, potentially allowing for unauthorized actions on the host system.

Executive Summary:
A vulnerability in the SumatraPDF multi-format reader for Windows poses a significant risk of exploitation through the processing of untrusted document files.

Vulnerability Details

CVE-ID: CVE-2026-25961

Affected Software: SumatraPDF SumatraPDF

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability involves the SumatraPDF multi-format reader and likely stems from improper input validation when parsing document headers or content. An unauthenticated attacker could exploit this by convincing a user to open a specific, malicious file.

Business Impact

The impact of this vulnerability is significant, as reflected by its CVSS score of 7.5. Exploitation could result in the compromise of individual workstations, leading to unauthorized access to sensitive user data and potential lateral movement within the corporate network. System downtime and the need for forensic investigation following a breach could incur substantial operational costs.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the SumatraPDF development team to all affected Windows endpoints immediately.

Proactive Monitoring: Monitor for anomalous network traffic originating from workstations that have recently opened external PDF or multi-format documents.

Compensating Controls: Implement "Least Privilege" principles to ensure that the PDF reader operates with the minimum necessary permissions, reducing the impact of a potential sandbox escape.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 10, 2026, there is no public information indicating active exploitation of this vulnerability. The high severity indicates that once a technical proof-of-concept is developed, it could be quickly integrated into exploit kits.

Analyst Recommendation

Given the High severity rating, this vulnerability should be prioritized within the current patch cycle. Organizations should ensure that all users are running the most recent version of SumatraPDF to prevent exploitation through common social engineering and phishing vectors.