---METADATA---
VENDOR: text-generation-webui
PRODUCT: text-generation-webui
AFFECTED_VERSIONS: Prior to 4.1.1
---END_METADATA---

Description Summary:
The text-generation-webui application allows arbitrary Python file overwriting via extension settings, leading to remote code execution.

Executive Summary:
A critical file overwrite vulnerability in text-generation-webui allows attackers to gain remote code execution by replacing application scripts.

Vulnerability Details

CVE-ID: CVE-2026-35050

Affected Software: text-generation-webui

Affected Versions: Prior to 4.1.1

Vulnerability: The application permits saving extension settings in Python format within the application root. An attacker can overwrite critical files, such as download-model.py, which are subsequently executed by the application.

Business Impact

This vulnerability enables an attacker to achieve persistent code execution on the server running the web interface. Given the 9.1 CVSS score, this facilitates total system compromise and potential access to sensitive model files or user data.

Remediation Plan

Immediate Action: Update to text-generation-webui version 4.1.1 or later.

Proactive Monitoring: Monitor the application root directory for unauthorized file modifications or changes to existing Python scripts.

Compensating Controls: Restrict write permissions on the application directory to the absolute minimum required for the application to function.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The risk of persistent code execution requires immediate remediation. Users must update the software and ensure that file system permissions are correctly configured to prevent unauthorized writes to critical application files.

---METADATA---
VENDOR: Piwigo
PRODUCT: Piwigo
AFFECTED_VERSIONS: <= 16.3.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Piwigo installer improperly sanitizes database configuration POST parameters, allowing unauthenticated attackers to inject and execute arbitrary PHP code via the configuration file.

Executive Summary:
A critical remote code execution vulnerability in Piwigo versions 16.3.0 and earlier allows unauthenticated attackers to compromise the underlying server.

Vulnerability Details

CVE-ID: CVE-2026-35048

Affected Software: Piwigo Piwigo

Affected Versions: <= 16.3.0

Vulnerability: This vulnerability is an improper input validation flaw affecting the installer process. An unauthenticated attacker can supply malicious POST parameters that are written directly into a PHP configuration file, leading to arbitrary code execution upon system access.

Business Impact

Successful exploitation of this vulnerability grants an attacker full control over the affected web server. This could lead to complete data exfiltration, unauthorized modification of site content, and potential lateral movement within the network. Given the CVSS score of 9.8, this represents a critical risk to business continuity and data integrity.

Remediation Plan

Immediate Action: Upgrade to the latest version of Piwigo immediately to ensure the installer logic is corrected and input sanitization is properly enforced.

Proactive Monitoring: Review web server access logs for suspicious POST requests targeting the installation directory or unusual modifications to the database configuration file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious payloads within POST requests, specifically targeting PHP syntax injections.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 20, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to the ease of injecting code directly into the application server.

Analyst Recommendation

The severity of this vulnerability cannot be overstated. Organizations running Piwigo must prioritize patching to the latest version, as the lack of authentication requirements makes this an attractive target for automated exploitation. Apply the vendor-provided update immediately to mitigate the risk of a full system compromise.

---METADATA---
VENDOR: fast-jwt
PRODUCT: fast-jwt
AFFECTED_VERSIONS: 0.0.1 to before 6.1.0
---END_METADATA---

Description Summary:
A cache collision vulnerability in fast-jwt allows for JWT token misidentification, potentially causing users to be authenticated as other users.

Executive Summary:
The fast-jwt library contains a critical cache collision vulnerability that allows attackers to bypass authentication by manipulating token verification processes.

Vulnerability Details

CVE-ID: CVE-2026-35039

Affected Software: fast-jwt

Affected Versions: 0.0.1 to before 6.1.0

Vulnerability: This vulnerability involves an improper implementation of the cacheKeyBuilder method, which fails to generate unique keys for different tokens. An attacker can exploit this collision to trick the application into misidentifying valid tokens, granting unauthorized access to other users' sessions.

Business Impact

The ability to misidentify users and hijack sessions poses a severe risk to data confidentiality and integrity. With a CVSS score of 9.1, this flaw allows for unauthorized access to sensitive user accounts and administrative functions, potentially leading to widespread data breaches and loss of system trust.

Remediation Plan

Immediate Action: Upgrade the fast-jwt library to version 6.1.0 or later immediately to resolve the cache key generation logic.

Proactive Monitoring: Review application access logs for anomalous session activity and frequent token verification errors that may indicate exploitation attempts.

Compensating Controls: Implement additional session validation checks at the application layer to verify that the user identity associated with a token matches the expected session context.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this issue necessitates an immediate update to the patched version of the fast-jwt library. Organizations utilizing this library for authentication must prioritize this remediation to prevent unauthorized account access and potential privilege escalation within their environments.

---METADATA---
VENDOR: Jellyfin
PRODUCT: Jellyfin
AFFECTED_VERSIONS: Prior to 10.11.7
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
Jellyfin versions prior to 10.11.7 contain a path traversal vulnerability in the subtitle upload endpoint, enabling arbitrary file write and potential remote code execution.

Executive Summary:
A critical path traversal vulnerability in Jellyfin allows authenticated attackers with specific permissions to achieve remote code execution as root.

Vulnerability Details

CVE-ID: CVE-2026-35031

Affected Software: Jellyfin

Affected Versions: Prior to 10.11.7

Vulnerability: This vulnerability involves a lack of input validation on the subtitle upload endpoint, permitting path traversal. Exploitation requires an authenticated user with administrator privileges or specific "Upload Subtitles" permissions to trigger arbitrary file writes, eventually leading to full system compromise.

Business Impact

The potential for remote code execution with root-level privileges poses a catastrophic risk to the integrity and confidentiality of the media server. A successful exploit could lead to complete system takeover, unauthorized data access, and lateral movement within the network. With a CVSS score of 9.9, this vulnerability is classified as critical and demands immediate remediation.

Remediation Plan

Immediate Action: Upgrade Jellyfin instances to version 10.11.7 or later to implement proper input validation on the subtitle upload endpoint.

Proactive Monitoring: Review access logs for suspicious POST requests to the /Videos/{itemId}/Subtitles endpoint, particularly those containing directory traversal patterns.

Compensating Controls: If immediate patching is not possible, restrict the "Upload Subtitles" permission to a limited set of trusted users to minimize the attack surface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 14, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw—which allows root-level code execution—the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability, combined with the potential for root-level access, necessitates an immediate upgrade to version 10.11.7. Administrators should prioritize patching all Jellyfin instances and audit existing user permissions to ensure the principle of least privilege is strictly enforced.

---METADATA---
VENDOR: ProFTPD
PRODUCT: ProFTPD
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability in ProFTPD allows for potential unauthorized actions, necessitating immediate review and patching.

Executive Summary:
The ProFTPD server software is affected by a high-severity vulnerability that could lead to unauthorized system access or file manipulation.

Vulnerability Details

CVE-ID: CVE-2026-35025

Affected Software: ProFTPD ProFTPD

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability resides in the ProFTPD server, affecting versions up to 1. The flaw may allow an attacker to bypass security controls, though the authentication requirement is currently being assessed.

Business Impact

A successful exploit of this vulnerability could result in the unauthorized disclosure or modification of files transferred via the FTP service. With a CVSS score of 8.1, the potential for unauthorized administrative access is high, which could lead to a complete compromise of the server hosting the FTP services and any data contained therein.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the ProFTPD project or your operating system vendor immediately.

Proactive Monitoring: Review FTP server logs for irregular file access patterns, failed login attempts, or unauthorized configuration changes.

Compensating Controls: Restrict access to the FTP service to known, trusted IP addresses and implement secure protocols like SFTP or FTPS to minimize the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

ProFTPD installations are common targets for automated exploitation. It is vital that administrators verify their current version and apply the appropriate security updates to protect sensitive data transfers and maintain server integrity.

---METADATA---
VENDOR: Anthropic
PRODUCT: Claude Code CLI and Claude Agent SDK
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Anthropic Claude CLI and SDK are vulnerable to OS command injection via unvalidated authentication helper configuration parameters, allowing arbitrary command execution.

Executive Summary:
An OS command injection vulnerability in Anthropic Claude tools allows attackers to execute arbitrary code with the privileges of the automation environment, posing a critical risk of system compromise.

Vulnerability Details

CVE-ID: CVE-2026-35022

Affected Software: Anthropic Claude Code CLI and Claude Agent SDK

Affected Versions: See vendor advisory

Vulnerability: The vulnerability exists in the authentication helper execution logic, which uses shell=true without input validation. An attacker who can influence authentication settings can inject shell metacharacters into parameters to execute commands with the privileges of the active user.

Business Impact

A successful exploit allows for full command execution, leading to potential credential theft, environment variable exfiltration, and complete compromise of the host machine or automation pipeline. With a CVSS score of 9.8, this vulnerability represents a critical threat to data confidentiality and integrity.

Remediation Plan

Immediate Action: Update the Claude Code CLI and Claude Agent SDK to the latest available versions immediately.

Proactive Monitoring: Audit environment configurations and logs for unexpected shell invocations or unauthorized modifications to authentication helper parameters.

Compensating Controls: Implement strict input validation and access controls for any configuration files or environment variables that influence authentication helper execution.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this flaw necessitates immediate attention. Organizations utilizing Anthropic automation tools must verify their current versioning and apply patches as soon as they are made available by the vendor to prevent unauthorized command execution and environment compromise.

---METADATA---
VENDOR: NetComm
PRODUCT: NF20MESH
AFFECTED_VERSIONS: Firmware R6B031 and earlier
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in NetComm NF20MESH routers allows unauthenticated attackers to gain administrative access via a hardcoded AES-256 key used for session cookies.

Executive Summary:
NetComm NF20MESH routers contain a critical authentication bypass vulnerability that allows unauthenticated attackers to gain full administrative control.

Vulnerability Details

CVE-ID: CVE-2026-35019

Affected Software: NetComm NF20MESH

Affected Versions: Firmware R6B031 and earlier

Vulnerability: This is an authentication bypass vulnerability. Attackers can exploit a hardcoded AES-256 key used to encrypt session cookies to impersonate administrative users without requiring valid credentials.

Business Impact

With a CVSS score of 8.1, this vulnerability poses a severe risk to network security. An attacker gaining administrative access to a router can intercept traffic, modify network configurations, or pivot into internal corporate segments, leading to complete network compromise and significant data loss.

Remediation Plan

Immediate Action: Update the NF20MESH firmware to the latest version provided by NetComm immediately to remove the hardcoded key.

Proactive Monitoring: Inspect network traffic for unauthorized administrative logins and verify if the web management interface is accessible from the WAN side.

Compensating Controls: Immediately disable remote management (WAN-side administration) to ensure that the interface is only accessible from trusted internal network segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, the presence of hardcoded cryptographic keys makes this a high-risk target for exploitation.

Analyst Recommendation

This vulnerability is highly critical due to the ease with which an unauthenticated attacker can achieve full device control. Network administrators must apply the vendor patch immediately and audit all router configurations to ensure that remote management is disabled as a standard security practice.

---METADATA---
VENDOR: NetComm
PRODUCT: NF20MESH
AFFECTED_VERSIONS: Firmware R6B031 and earlier
---END_METADATA---

Description Summary:
NetComm NF20MESH routers are vulnerable to authenticated remote code execution via shell metacharacter injection in the username parameter.

Executive Summary:
An authenticated remote code execution vulnerability in NetComm NF20MESH routers allows attackers with valid credentials to execute arbitrary commands with root privileges.

Vulnerability Details

CVE-ID: CVE-2026-35018

Affected Software: NetComm NF20MESH

Affected Versions: Firmware R6B031 and earlier

Vulnerability: The vulnerability exists in the dalStorage_addUserAccount function, where insufficient sanitization of the username JSON parameter allows authenticated attackers to inject shell metacharacters. This results in the execution of arbitrary commands with root-level privileges on the device.

Business Impact

With a CVSS score of 8.8, this vulnerability presents a significant risk to network security. An attacker who has obtained valid credentials can achieve full administrative control over the router, potentially leading to total network compromise, data interception, and the establishment of persistent backdoors within the organization's infrastructure.

Remediation Plan

Immediate Action: Upgrade all affected NF20MESH devices to a firmware version later than R6B031 immediately to resolve the command injection flaw.

Proactive Monitoring: Monitor device access logs for unusual administrative activity or failed attempts to create new user accounts, which may indicate exploitation attempts.

Compensating Controls: Disable remote management interfaces on the device and restrict access to the web management console to trusted, internal IP addresses only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ability to gain root access makes this a highly attractive target for malicious actors.

Analyst Recommendation

The severity of this vulnerability necessitates immediate action. Administrators must verify the firmware version of all deployed NF20MESH units and apply the vendor-provided patch to eliminate the risk of unauthorized root-level command execution.

---METADATA---
VENDOR: Dgraph
PRODUCT: Dgraph
AFFECTED_VERSIONS: Prior to 25.3.1
---END_METADATA---

Description Summary:
Dgraph contains an unauthenticated admin mutation, allowing attackers to overwrite databases, read sensitive files, and perform SSRF attacks.

Executive Summary:
An unauthenticated vulnerability in the Dgraph GraphQL database allows remote attackers to fully compromise the database and perform unauthorized file system access.

Vulnerability Details

CVE-ID: CVE-2026-34976

Affected Software: Dgraph

Affected Versions: Prior to 25.3.1

Vulnerability: The restoreTenant admin mutation is missing authorization middleware. This allows unauthenticated attackers to provide malicious backup source URLs, overwrite existing data, and access sensitive server-side files or internal network resources.

Business Impact

This vulnerability grants an attacker complete control over the database, leading to data loss, theft, and potential pivot points into the internal network via SSRF. The CVSS score of 10.0 underscores the extreme risk to business-critical data and infrastructure.

Remediation Plan

Immediate Action: Update Dgraph instances to version 25.3.1 or later.

Proactive Monitoring: Monitor database access logs for any unauthorized restoreTenant requests or unusual outbound network traffic indicative of SSRF.

Compensating Controls: Ensure Dgraph is not exposed to the public internet and restrict access to administrative ports via network firewalls and VPNs.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical security failure requiring urgent intervention. All Dgraph deployments must be patched to 25.3.1 immediately, and network access to administrative endpoints must be strictly audited and limited to trusted sources.

---METADATA---
VENDOR: barebox
PRODUCT: barebox
AFFECTED_VERSIONS: 0 up to (excluding) 2026.04.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A memory safety vulnerability exists in the barebox bootloader, specifically an integer overflow that could lead to unauthorized system behavior.

Executive Summary:
An integer overflow vulnerability in the barebox bootloader (prior to 2026.04.0) poses a significant risk of system compromise or crash.

Vulnerability Details

CVE-ID: CVE-2026-34963

Affected Software: barebox

Affected Versions: 0 up to (excluding) 2026.04.0

Vulnerability: This is an integer overflow (CWE-190) occurring within the EFI PE loader. The vulnerability is exploitable by an unauthenticated attacker, as indicated by the CVSS vector (PR:N).

Business Impact

Successful exploitation allows an attacker to achieve high levels of impact on the target device, potentially leading to full system compromise or a denial-of-service condition. Given the CVSS score of 8.4, this vulnerability is categorized as high severity and requires immediate attention to prevent unauthorized code execution at the boot level.

Remediation Plan

Immediate Action: Update barebox to version 2026.04.0 or later as provided in the official repository.

Proactive Monitoring: Monitor boot logs and system integrity metrics for unexpected crashes or errors during the initialization phase.

Compensating Controls: Ensure that physical access to hardware is restricted and that secure boot mechanisms are correctly configured to prevent unauthorized bootloader modifications.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of May 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Integer overflows in bootloaders are inherently dangerous as they can bypass early-stage system security controls.

Analyst Recommendation

The severity of this flaw necessitates a high-priority patching cycle for all systems utilizing the barebox bootloader. Organizations should verify their current firmware version and apply the update to 2026.04.0 immediately to mitigate the risk of memory-related exploitation.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability has been discovered in the PraisonAI multi-agent teams system.

Executive Summary:
A critical vulnerability in the PraisonAI multi-agent system could allow unauthorized access or manipulation, presenting a significant risk to organizational workflows.

Vulnerability Details

CVE-ID: CVE-2026-34955

Affected Software: PraisonAI PraisonAI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the PraisonAI platform, a system designed for managing multi-agent teams. With a CVSS score of 8.8, the flaw likely involves a critical failure in authorization or input processing that could be exploited to compromise the agent system's integrity.

Business Impact

PraisonAI is used for complex, multi-agent operations; therefore, a compromise could allow an attacker to hijack agent workflows, inject malicious instructions, or access sensitive data processed by the agents. The high CVSS score reflects the potential for widespread operational impact if the system is compromised.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the PraisonAI development team immediately.

Proactive Monitoring: Monitor agent activity logs for unauthorized task execution or unexpected changes to system configurations.

Compensating Controls: Implement strict access control lists (ACLs) for the PraisonAI interface and ensure the environment is isolated from untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for high-impact disruption, organizations utilizing PraisonAI must act quickly to patch their systems. Ensuring the platform is up to date is essential to maintaining the security and reliability of agent-based operations.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in the PraisonAI multi-agent teams system.

Executive Summary:
A vulnerability in the PraisonAI platform poses a risk to automated agent integrity, requiring immediate attention from security administrators.

Vulnerability Details

CVE-ID: CVE-2026-34954

Affected Software: PraisonAI PraisonAI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the PraisonAI multi-agent system. The flaw, carrying a CVSS score of 8.6, indicates a severe issue that could potentially be used to disrupt the operation or security of the multi-agent environment.

Business Impact

Exploitation of this vulnerability could lead to the unauthorized manipulation of agent teams, potentially resulting in the compromise of sensitive tasks or data managed by the system. The high CVSS score underscores the urgency of addressing this risk to prevent operational degradation.

Remediation Plan

Immediate Action: Update the PraisonAI system to the most recent version provided by the vendor to remediate the vulnerability.

Proactive Monitoring: Review logs for unusual agent behavior or unauthorized access attempts to the PraisonAI management interface.

Compensating Controls: Use network-level controls to restrict access to the PraisonAI management console to authorized internal personnel only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this vulnerability as a high priority. Applying the necessary updates is critical to ensure that the PraisonAI environment remains secure and resistant to unauthorized interference.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: Prior to version 4.5.97
---END_METADATA---

Description Summary:
A critical authentication bypass in PraisonAI's OAuthManager allows unauthenticated attackers to gain full access to all registered tools and agent capabilities by providing any arbitrary token.

Executive Summary:
PraisonAI versions prior to 4.5.97 are vulnerable to a critical authentication bypass that grants unauthenticated attackers full administrative control over multi-agent systems.

Vulnerability Details

CVE-ID: CVE-2026-34953

Affected Software: PraisonAI PraisonAI

Affected Versions: Prior to version 4.5.97

Vulnerability: The OAuthManager.validate_token() function incorrectly returns a success state for any token not found in its default empty internal store. This allows an unauthenticated remote attacker to bypass security controls using any arbitrary Bearer token.

Business Impact

A successful exploit grants an attacker full access to the multi-agent system's tools and capabilities, leading to total compromise of the agentic workflow. Given the CVSS score of 9.1, this represents a critical risk of unauthorized data access, manipulation of AI processes, and potential lateral movement within the environment.

Remediation Plan

Immediate Action: Update the PraisonAI installation to version 4.5.97 or later immediately to correct the token validation logic.

Proactive Monitoring: Review HTTP access logs for the MCP server to identify requests containing unrecognized Bearer tokens or unusual agent activity.

Compensating Controls: Implement network-level access control lists (ACLs) to restrict access to the MCP server to trusted IP addresses only until the patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Apr 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the trivial nature of the bypass and the high CVSS score, the potential for exploitation is extremely high.

Analyst Recommendation

The severity of this flaw cannot be overstated, as it effectively nullifies the authentication layer of the platform. Organizations utilizing PraisonAI must prioritize the update to version 4.5.97 immediately to prevent unauthorized access to sensitive agent tools.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI Gateway
AFFECTED_VERSIONS: Prior to version 4.5.97
---END_METADATA---

Description Summary:
PraisonAI Gateway prior to 4.5.97 lacks authentication for WebSocket and info endpoints. Attackers can enumerate AI agents and send arbitrary messages to manipulate agent tools.

Executive Summary:
The PraisonAI Gateway is vulnerable to unauthenticated access, allowing any network client to enumerate AI agents and send arbitrary commands to their tool sets.

Vulnerability Details

CVE-ID: CVE-2026-34952

Affected Software: PraisonAI PraisonAI Gateway

Affected Versions: Prior to version 4.5.97

Vulnerability: The gateway server exposes agent topology at /info and accepts WebSocket connections at /ws without any authentication. This allows unauthenticated attackers to discover all registered agents and inject arbitrary messages into the agent communication stream.

Business Impact

An attacker can hijack AI workflows, exfiltrate data from agent interactions, or trigger unauthorized actions through the agents' tool sets. The CVSS score of 9.1 reflects the critical risk of unauthenticated control over automated AI systems, which may have access to sensitive corporate resources.

Remediation Plan

Immediate Action: Update the PraisonAI Gateway to version 4.5.97 or later, which implements the necessary authentication checks for these endpoints.

Proactive Monitoring: Monitor WebSocket connection logs for unauthorized IP addresses and audit agent activity for unexpected or anomalous tool executions.

Compensating Controls: Place the PraisonAI Gateway behind a VPN or use a reverse proxy to enforce authentication before requests reach the /ws and /info endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Apr 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, the lack of authentication on public-facing endpoints makes this a trivial target for attackers.

Analyst Recommendation

Securing AI infrastructure is critical as these systems are increasingly integrated into business processes. Organizations using PraisonAI must update to version 4.5.97 immediately to prevent unauthorized actors from controlling their AI agents. Ensure that all management endpoints are strictly authenticated and not exposed to the open internet.

---METADATA---
VENDOR: fast-jwt
PRODUCT: fast-jwt
AFFECTED_VERSIONS: 6.1.0 and earlier
---END_METADATA---

Description Summary:
The fast-jwt library is vulnerable to an algorithm confusion attack due to a flawed regex implementation that fails to properly sanitize leading whitespace.

Executive Summary:
The fast-jwt library contains a critical flaw that enables JWT algorithm confusion attacks, allowing attackers to bypass signature verification.

Vulnerability Details

CVE-ID: CVE-2026-34950

Affected Software: fast-jwt

Affected Versions: 6.1.0 and earlier

Vulnerability: The publicKeyPemMatcher regex uses an anchor that is bypassed by leading whitespace in the key string. This regression re-enables a known JWT algorithm confusion vulnerability, allowing an attacker to manipulate token headers and bypass authentication mechanisms.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a severe threat to authentication integrity. An attacker can forge JWT tokens, allowing them to impersonate any user, including administrators, leading to unauthorized access to protected resources and sensitive data.

Remediation Plan

Immediate Action: Update the fast-jwt library to the latest patched version that specifically addresses this regex anchor flaw.

Proactive Monitoring: Monitor authentication logs for patterns of suspicious JWT usage, such as tokens with unexpected algorithm headers or malformed key structures.

Compensating Controls: Implement strict server-side validation of JWT headers and ensure that only expected signing algorithms are permitted for verification.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, the re-introduction of a previously known vulnerability makes this a high-risk target.

Analyst Recommendation

This vulnerability represents a significant regression in security. It is imperative that all applications relying on fast-jwt for authentication are updated immediately to prevent potential exploitation of the algorithm confusion flaw.

---METADATA---
VENDOR: PraisonAI
PRODUCT: praisonai-agents
AFFECTED_VERSIONS: Prior to version 1.5.90
---END_METADATA---

Description Summary:
PraisonAI agents prior to 1.5.90 contain a sandbox bypass in the execute_code() function. Attackers can execute arbitrary OS commands on the host by bypassing the safe attribute wrapper.

Executive Summary:
PraisonAI agents are vulnerable to a critical sandbox bypass that allows unauthenticated attackers to achieve arbitrary OS command execution on the host system.

Vulnerability Details

CVE-ID: CVE-2026-34938

Affected Software: PraisonAI praisonai-agents

Affected Versions: Prior to version 1.5.90

Vulnerability: The execute_code() function in the praisonai-agents package uses a flawed three-layer sandbox. By passing a string subclass with an overridden startswith() method to the _safe_getattr wrapper, an attacker can bypass all restrictions and execute arbitrary Python and OS commands.

Business Impact

A successful exploit grants the attacker full control over the host system running the AI agents. With a CVSS score of 10.0, this is the most severe type of vulnerability, potentially leading to full data exfiltration, malware installation, and complete infrastructure compromise.

Remediation Plan

Immediate Action: Update the praisonai-agents package to version 1.5.90 or later immediately to fix the sandbox bypass logic.

Proactive Monitoring: Audit system logs for unusual process spawning from the AI agent service and monitor for unauthorized network connections initiated by the host.

Compensating Controls: Run AI agents in highly isolated environments, such as dedicated virtual machines or hardened containers with minimal privileges and no access to sensitive host resources.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Apr 3, 2026, there is no public information indicating active exploitation of this vulnerability. The technical nature of the bypass suggests it could be easily weaponized by researchers or malicious actors.

Analyst Recommendation

A CVSS 10.0 vulnerability requires immediate emergency response. The sandbox intended to protect the host from untrusted code is completely ineffective. Organizations must update to version 1.5.90 immediately and should consider the underlying host compromised if the service was exposed to untrusted inputs.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in the PraisonAI multi-agent teams system.

Executive Summary:
A vulnerability in the PraisonAI platform requires immediate attention to ensure the integrity and security of automated agent operations.

Vulnerability Details

CVE-ID: CVE-2026-34937

Affected Software: PraisonAI PraisonAI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the PraisonAI multi-agent system. With a CVSS score of 7.8, the flaw indicates a significant security risk that could be leveraged to interfere with system operations or gain unauthorized access to agent functions.

Business Impact

Successful exploitation could allow an attacker to disrupt agent workflows or access information processed by the system. Given the 7.8 CVSS score, this is a high-severity issue that could lead to data integrity loss or operational instability.

Remediation Plan

Immediate Action: Apply all security patches released by the PraisonAI vendor to address this vulnerability.

Proactive Monitoring: Monitor logs for unauthorized access or unexpected changes to agent configurations within the PraisonAI system.

Compensating Controls: Limit access to the PraisonAI management interface using strong authentication and network access controls.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations using PraisonAI should prioritize this update. Proactive patching is essential to prevent potential exploitation and ensure the continued security of the multi-agent environment.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been discovered in the PraisonAI multi-agent teams system.

Executive Summary:
A vulnerability in the PraisonAI platform could facilitate unauthorized system interaction, necessitating prompt remediation.

Vulnerability Details

CVE-ID: CVE-2026-34936

Affected Software: PraisonAI PraisonAI

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the PraisonAI multi-agent system. The CVSS score of 7.7 highlights a significant security risk that should be addressed to prevent potential exploitation by unauthorized actors.

Business Impact

Exploitation of this vulnerability could lead to the degradation of agent-based services or unauthorized access to internal resources. Addressing this high-severity flaw is critical to maintaining the security and operational continuity of the PraisonAI platform.

Remediation Plan

Immediate Action: Update to the latest version of the PraisonAI system as recommended by the vendor.

Proactive Monitoring: Review system logs for signs of anomalous activity or unauthorized access attempts targeting the PraisonAI agents.

Compensating Controls: Implement strong access controls and ensure the system is not accessible from untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this vulnerability with high priority. Applying the latest security updates will mitigate the risks associated with this flaw and help protect the PraisonAI environment from potential compromise.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI CLI
AFFECTED_VERSIONS: From version 4.5.15 to before version 4.5.69
---END_METADATA---

Description Summary:
PraisonAI CLI versions 4.5.15 through 4.5.68 are vulnerable to OS command injection via the --mcp argument. The argument is passed to the system shell without sanitization.

Executive Summary:
The PraisonAI CLI is vulnerable to a critical OS command injection flaw, allowing attackers to execute arbitrary commands as the current user via a crafted --mcp argument.

Vulnerability Details

CVE-ID: CVE-2026-34935

Affected Software: PraisonAI PraisonAI CLI

Affected Versions: From version 4.5.15 to before version 4.5.69

Vulnerability: The --mcp command-line argument is passed directly to shlex.split() and subsequently to anyio.open_process() without any validation or sanitization. This allows an attacker to inject shell commands that will be executed with the privileges of the user running the CLI tool.

Business Impact

This vulnerability could be used for local privilege escalation or as part of a larger exploit chain to achieve remote command execution if the CLI is called by a web service. The CVSS score of 9.8 underscores the critical risk of arbitrary command execution on the host machine.

Remediation Plan

Immediate Action: Update the PraisonAI CLI to version 4.5.69 or later to ensure all command-line arguments are properly sanitized.

Proactive Monitoring: Audit shell command history and process execution logs for suspicious use of the --mcp flag or unexpected child processes originating from the PraisonAI CLI.

Compensating Controls: Implement strict AppArmor or SELinux profiles for the CLI tool to restrict its ability to execute unauthorized system commands or access sensitive files.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Apr 3, 2026, there is no public information indicating active exploitation of this vulnerability. Command injection via CLI arguments is a common vector for attackers who have gained an initial foothold on a system.

Analyst Recommendation

The direct passing of unsanitized user input to process execution functions is a high-risk practice. Administrators should update to version 4.5.69 immediately. We also recommend that developers use safer APIs for process execution that do not involve shell interpretation whenever possible.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: Prior to version 4.5.90
---END_METADATA---

Description Summary:
PraisonAI prior to 4.5.90 is vulnerable to SQL injection in the get_all_user_threads function. Attackers can gain full database access by injecting malicious payloads into thread IDs.

Executive Summary:
PraisonAI contains a critical SQL injection vulnerability that allows attackers to execute arbitrary database queries and gain full access to sensitive stored data.

Vulnerability Details

CVE-ID: CVE-2026-34934

Affected Software: PraisonAI PraisonAI

Affected Versions: Prior to version 4.5.90

Vulnerability: The get_all_user_threads function constructs raw SQL queries using f-strings with unescaped thread IDs. An attacker can store a malicious payload in a thread ID via the update_thread function, which is then executed when the application attempts to load the thread list.

Business Impact

This vulnerability allows for the complete compromise of the application's database. Attackers can read, modify, or delete all stored data, including user credentials and proprietary AI training data. The CVSS score of 9.8 reflects the high probability of total data loss and unauthorized administrative access.

Remediation Plan

Immediate Action: Update PraisonAI to version 4.5.90 or later to implement parameterized queries and proper input sanitization.

Proactive Monitoring: Monitor database logs for unusual query patterns, such as those containing unexpected SQL keywords (e.g., UNION, SELECT, SLEEP) in the thread ID fields.

Compensating Controls: Deploy a WAF with SQL injection protection rules to detect and block malicious payloads in application requests.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Apr 3, 2026, there is no public information indicating active exploitation of this vulnerability. Because this is a stored SQL injection, the payload may remain dormant until the vulnerable function is called.

Analyst Recommendation

SQL injection remains one of the most damaging web vulnerabilities. Given the 9.8 severity, it is critical to apply the update to version 4.5.90 immediately. Organizations should also conduct a database audit to ensure no unauthorized data exfiltration has occurred prior to patching.

---METADATA---
VENDOR: Trend Micro
PRODUCT: TrendAI Apex One
AFFECTED_VERSIONS: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An origin validation vulnerability in the TrendAI Apex One agent allows a local authenticated attacker to escalate privileges on affected installations.

Executive Summary:
A privilege escalation vulnerability in the TrendAI Apex One agent poses a significant risk of unauthorized system-level access by local attackers.

Vulnerability Details

CVE-ID: CVE-2026-34930

Affected Software: Trend Micro TrendAI Apex One

Affected Versions: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731

Vulnerability: The software suffers from an origin validation error (CWE-346). A local attacker with low privileges can exploit this flaw to execute actions with higher privileges than authorized.

Business Impact

Successful exploitation of this vulnerability allows a local attacker to achieve privilege escalation, potentially resulting in full system compromise. With a CVSS score of 7.8, this vulnerability is classified as High, reflecting the significant impact on system integrity and confidentiality when an attacker gains elevated control over the security agent.

Remediation Plan

Immediate Action: Update TrendAI Apex One to version 14.0.0.17079 or apply the latest service update for SaaS deployments as directed by Trend Micro.

Proactive Monitoring: Review system logs for suspicious process execution or unauthorized attempts to interact with security agent services.

Compensating Controls: Ensure strict adherence to the principle of least privilege for all local user accounts to limit the potential impact of local exploitation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires local access, which inherently limits the attack surface.

Analyst Recommendation

Given the severity of privilege escalation vulnerabilities, organizations should prioritize patching affected endpoints. Apply the vendor-supplied updates immediately to prevent local attackers from abusing the agent's elevated permissions.

---METADATA---
VENDOR: Trend Micro
PRODUCT: TrendAI Apex One
AFFECTED_VERSIONS: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An origin validation vulnerability in the TrendAI Apex One agent allows a local authenticated attacker to escalate privileges on affected installations.

Executive Summary:
A privilege escalation vulnerability in the TrendAI Apex One agent poses a significant risk of unauthorized system-level access by local attackers.

Vulnerability Details

CVE-ID: CVE-2026-34929

Affected Software: Trend Micro TrendAI Apex One

Affected Versions: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731

Vulnerability: The software contains an origin validation error (CWE-346), which can be exploited by a local attacker with low-level privileges to perform unauthorized actions with escalated system permissions.

Business Impact

This vulnerability carries a CVSS score of 7.8, indicating a high level of risk to organizational assets. Successful exploitation could allow an attacker to bypass security controls and gain administrative control over the host, leading to potential data theft or further lateral movement within the network.

Remediation Plan

Immediate Action: Apply the vendor security updates to reach version 14.0.0.17079 or the equivalent SaaS update provided by Trend Micro.

Proactive Monitoring: Monitor endpoint security logs for unauthorized process modification or service manipulation attempts.

Compensating Controls: Implement robust endpoint hardening and minimize the number of users with local administrative rights to reduce the attack vector.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires existing local access, making it primarily a risk for multi-user or compromised-workstation environments.

Analyst Recommendation

The risk of privilege escalation necessitates prompt remediation. Administrators should schedule and apply the provided security updates across all affected TrendAI Apex One installations as soon as possible to mitigate the risk of unauthorized privilege elevation.

---METADATA---
VENDOR: Trend Micro
PRODUCT: TrendAI Apex One
AFFECTED_VERSIONS: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An origin validation vulnerability in the TrendAI Apex One agent allows a local authenticated attacker to escalate privileges on affected installations.

Executive Summary:
A privilege escalation vulnerability in the TrendAI Apex One agent poses a significant risk of unauthorized system-level access by local attackers.

Vulnerability Details

CVE-ID: CVE-2026-34928

Affected Software: Trend Micro TrendAI Apex One

Affected Versions: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731

Vulnerability: The software suffers from an origin validation error (CWE-346), enabling local attackers with low privileges to escalate their authority on the target system.

Business Impact

With a CVSS score of 7.8, this vulnerability represents a high-risk security flaw. If exploited, an attacker could gain elevated privileges, undermining the host's security posture and potentially exposing sensitive data or enabling persistent unauthorized access.

Remediation Plan

Immediate Action: Update TrendAI Apex One to version 14.0.0.17079 or apply the latest mandatory SaaS update released by Trend Micro.

Proactive Monitoring: Review access and audit logs for anomalous behavior related to service processes or attempts to bypass origin checks.

Compensating Controls: Maintain strong endpoint security policies and ensure that user accounts operate with the minimum necessary privileges to perform their functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The technical requirements for exploitation remain confined to a local context.

Analyst Recommendation

Given the potential for privilege escalation, immediate patching is recommended. Organizations should ensure that all instances of TrendAI Apex One are updated to the corrected versions to prevent local exploitation and maintain the integrity of their security infrastructure.

---METADATA---
VENDOR: Trend Micro
PRODUCT: TrendAI Apex One
AFFECTED_VERSIONS: TrendAI Apex One: 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An origin validation vulnerability in the TrendAI Apex One agent allows a local attacker to escalate privileges on affected installations.

Executive Summary:
A privilege escalation vulnerability in Trend Micro's Apex One agent poses a significant risk by allowing local attackers to gain elevated system permissions.

Vulnerability Details

CVE-ID: CVE-2026-34927

Affected Software: Trend Micro TrendAI Apex One

Affected Versions: TrendAI Apex One 2019 (14.0) up to 14.0.0.17079; TrendAI Apex One as a Service: SaaS up to 14.0.20731

Vulnerability: This is an origin validation error (CWE-346) within the agent process. It allows a local, authenticated user with low privileges to bypass security checks and escalate their access level to that of the agent.

Business Impact

The vulnerability carries a CVSS score of 7.8, reflecting its potential for total system compromise if exploited by a local user. Successful exploitation could allow an attacker to bypass security controls, install persistent malware, or exfiltrate sensitive data from the endpoint. This poses a high risk to organizational data integrity and overall system security.

Remediation Plan

Immediate Action: Update TrendAI Apex One to version 14.0.0.17079 or later, or ensure the SaaS version is updated to build 14.0.20731 or later.

Proactive Monitoring: Review system logs for unusual process execution patterns or unexpected elevation of privileges occurring on endpoints managed by Apex One.

Compensating Controls: Implement strict Endpoint Detection and Response (EDR) policies to limit local user permissions and monitor for unauthorized attempts to interact with security agent processes.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for local access inherently limits its attack surface to already-compromised or malicious insider accounts.

Analyst Recommendation

Given the potential for privilege escalation and full system compromise, administrators should prioritize patching all affected Apex One agents. Apply the vendor-provided updates immediately to close the validation gap and prevent unauthorized elevation of privileges within the environment.

---METADATA---
VENDOR: Trend Micro
PRODUCT: Apex One
AFFECTED_VERSIONS: Apex One (on-premise) server builds below 17079; Apex One as a Service and Vision One Endpoint Security agent builds below 14.0.20731.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A directory traversal vulnerability in the Trend Micro Apex One on-premise server allows authenticated administrators to inject malicious code to deploy to managed endpoints.

Executive Summary:
Trend Micro Apex One is affected by a critical directory traversal vulnerability that allows administrative users to weaponize the security platform for malware distribution.

Vulnerability Details

CVE-ID: CVE-2026-34926

Affected Software: Trend Micro Apex One

Affected Versions: Apex One (on-premise) server builds below 17079; Apex One as a Service and Vision One Endpoint Security agent builds below 14.0.20731.

Vulnerability: This is a directory traversal vulnerability requiring an attacker to already possess administrative credentials for the Apex One Server. Once exploited, it allows for the modification of internal tables to distribute malicious payloads to all managed agents.

Business Impact

The CVSS score of 9.5 reflects the severe impact of this vulnerability, which effectively turns a security management tool into a vector for malware propagation. A compromise of the Apex One server allows an attacker to bypass traditional endpoint security controls across the entire enterprise environment, leading to widespread system infection and loss of control over the managed fleet.

Remediation Plan

Immediate Action: Update on-premise servers to Apex One SP1 Critical Patch Build 18012 and baseline build 17079, and update agents to build 14.0.20731 or higher.

Proactive Monitoring: Audit administrative access logs and monitor for unauthorized modifications to server configuration files or software deployment tasks.

Compensating Controls: Restrict access to the Apex One management console to known, secure administrative workstations and ensure all administrative sessions are monitored.

Exploitation Status

Public Exploit Available: True

Analyst Notes: This vulnerability is listed in the CISA KEV catalog with evidence of active exploitation in the wild.

Analyst Recommendation

This vulnerability represents an existential threat to the security of the managed endpoint environment. Administrators must move quickly to apply the provided patches, as successful exploitation results in the total failure of the organization's primary endpoint defense mechanism.

---METADATA---
VENDOR: Revive
PRODUCT: Adserver
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Revive Adserver 6 contains a vulnerability involving missing input validation during the saving of delivery limitations, which may lead to unauthorized system impacts.

Executive Summary:
A missing input validation vulnerability in Revive Adserver 6 could allow an authenticated attacker to manipulate delivery limitations, threatening the integrity of the ad serving platform.

Vulnerability Details

CVE-ID: CVE-2026-34916

Affected Software: Revive Adserver

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from insufficient validation of user-supplied input when configuring delivery limitations. This flaw requires the attacker to be authenticated to the application, after which they may inject malicious data to bypass intended constraints.

Business Impact

Successful exploitation allows for the subversion of ad delivery logic, which can result in unauthorized content serving or the potential for stored cross-site scripting (XSS) if the input is improperly handled. With a CVSS score of 8.8, this poses a high risk to the availability and integrity of advertising operations, potentially leading to reputational damage.

Remediation Plan

Immediate Action: Update all instances of Revive Adserver to the latest patched version provided by the vendor.

Proactive Monitoring: Review administrative audit logs for any unusual entries related to delivery limitation configurations and monitor for unexpected changes in ad serving behavior.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically tuned to block suspicious input patterns or script injections targeted at the Adserver administrative interfaces.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, the severity necessitates immediate patching to prevent potential unauthorized manipulation by authenticated malicious actors.

Analyst Recommendation

Administrators must prioritize updating their Revive Adserver installations. Given the risk of configuration manipulation, ensure that administrative access is restricted to trusted personnel and that all system inputs are rigorously validated through the latest vendor-provided security patches.

---METADATA---
VENDOR: Revive
PRODUCT: Adserver
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in the Revive Adserver software allows for potential exploitation due to a lack of proper input sanitization in the zone-include function.

Executive Summary:
Revive Adserver is affected by a high-severity vulnerability involving improper input sanitization, which could lead to unauthorized code execution or injection attacks.

Vulnerability Details

CVE-ID: CVE-2026-34914

Affected Software: Revive Adserver

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability is caused by the failure to correctly sanitize user-supplied input within the zone-include component, potentially allowing an attacker to inject malicious payloads.

Business Impact

With a CVSS score of 8.3, this flaw presents a significant risk to the integrity and availability of the ad server. Exploitation could allow attackers to inject malicious content into served advertisements, leading to reputational damage, the delivery of malware to end-users, or unauthorized administrative access to the platform.

Remediation Plan

Immediate Action: Apply the latest security updates released by Revive to patch the zone-include input sanitization vulnerability.

Proactive Monitoring: Review web server logs for suspicious URL parameters and unusual requests directed at the zone-include component.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common injection patterns, such as cross-site scripting (XSS) or command injection strings.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The vulnerability in Revive Adserver represents a critical risk to advertising operations and user safety. Organizations should treat this as a high-priority remediation task and ensure that the software is updated to the latest secure version to prevent exploitation of the input sanitization flaw.

---METADATA---
VENDOR: Ubiquiti
PRODUCT: UniFi OS
AFFECTED_VERSIONS: UniFi OS Server: 0 to 5.0.7; UDM/UDM-Pro/UDM-SE/UDM-Pro-Max: 0 to 5.1.11; UDM-Beast: 0 to 5.1.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A path traversal vulnerability in UniFi OS devices allows a network-adjacent attacker with low privileges to access sensitive files on the underlying system.

Executive Summary:
A path traversal vulnerability in Ubiquiti UniFi OS devices allows low-privileged network users to read arbitrary system files, potentially leading to information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-34911

Affected Software: Ubiquiti UniFi OS / UDM Series

Affected Versions: UniFi OS Server: < 5.0.8; UDM/UDM-Pro/UDM-SE/UDM-Pro-Max: < 5.1.12; UDM-Beast: < 5.1.11

Vulnerability: The vulnerability is a path traversal (CWE-22) flaw that allows an attacker with low privileges to manipulate file paths to access unauthorized system files. The attacker must have network access to the device.

Business Impact

With a CVSS score of 7.7, this vulnerability presents a significant risk to the confidentiality of the network infrastructure. Access to sensitive configuration files or system data could allow an attacker to extract credentials or other information needed to further compromise the network. This could lead to a total loss of confidentiality for the impacted management platform.

Remediation Plan

Immediate Action: Update all UniFi OS devices and servers to the specified patched versions (5.0.8 for Server, 5.1.12 for UDM/Pro/SE/Max, and 5.1.11 for UDM-Beast) immediately.

Proactive Monitoring: Monitor network traffic to UniFi management interfaces for suspicious HTTP requests containing directory traversal sequences (e.g., "../").

Compensating Controls: Restrict access to the UniFi management interface to trusted administrative subnets only, effectively removing the "low-privileged" network access required for exploitation.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable if the management interface is exposed to untrusted networks.

Analyst Recommendation

The severity of this flaw necessitates immediate attention. Organizations should verify their current firmware versions and apply the patches provided by Ubiquiti without delay to prevent unauthorized file access and potential credential theft.

---METADATA---
VENDOR: Ubiquiti
PRODUCT: UniFi OS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An improper input validation flaw in Ubiquiti UniFi OS enables network-adjacent attackers to execute arbitrary commands on the underlying system.

Executive Summary:
A critical command injection vulnerability in Ubiquiti UniFi OS allows remote attackers to execute arbitrary system commands, leading to complete device takeover.

Vulnerability Details

CVE-ID: CVE-2026-34910

Affected Software: Ubiquiti UniFi OS

Affected Versions: See vendor advisory

Vulnerability: This vulnerability stems from improper input validation, which allows an attacker to inject and execute malicious system commands. This occurs within the UniFi OS management context, granting the attacker significant control over the host device.

Business Impact

A CVSS score of 10.0 reflects the ability for an attacker to achieve full remote code execution. Successful exploitation allows for complete system compromise, enabling the attacker to install malware, exfiltrate data, or disrupt network services, posing an extreme risk to infrastructure.

Remediation Plan

Immediate Action: Deploy the latest firmware updates provided by Ubiquiti to patch the input validation mechanism.

Proactive Monitoring: Monitor system processes and command execution logs for anomalous activity or unauthorized shell commands.

Compensating Controls: Isolate management interfaces from public or untrusted network segments to limit the reach of potential attackers.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents the highest level of risk to network infrastructure. Remediation must be performed immediately, and devices should be monitored for signs of prior unauthorized access or persistent malware.

---METADATA---
VENDOR: Ubiquiti
PRODUCT: UniFi OS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A path traversal vulnerability in Ubiquiti UniFi OS allows network-adjacent attackers to read sensitive system files and potentially compromise user accounts.

Executive Summary:
A critical path traversal vulnerability in Ubiquiti UniFi OS permits unauthorized access to sensitive system files, risking full device compromise.

Vulnerability Details

CVE-ID: CVE-2026-34909

Affected Software: Ubiquiti UniFi OS

Affected Versions: See vendor advisory

Vulnerability: The vulnerability exists due to insufficient validation of user-supplied input, enabling path traversal. This allows an attacker with network access to traverse the file system and access restricted data, including account credentials.

Business Impact

With a CVSS score of 10.0, this vulnerability enables an attacker to exfiltrate system configuration files or sensitive credentials. This could lead to a total compromise of the device and potential lateral movement within the network, causing significant data loss or operational downtime.

Remediation Plan

Immediate Action: Update all UniFi OS devices to the latest vendor-supplied firmware version to resolve the path traversal issue.

Proactive Monitoring: Review system file access logs for patterns indicative of directory traversal attempts (e.g., "../" sequences).

Compensating Controls: Employ a Web Application Firewall (WAF) or equivalent network security appliance to inspect and block malicious requests containing path traversal sequences.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate patching is required to prevent unauthorized access to sensitive system files. Organizations should also audit current user account activity to ensure no credentials have been compromised through this vector.

---METADATA---
VENDOR: Ubiquiti
PRODUCT: UniFi OS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An improper access control vulnerability in Ubiquiti UniFi OS devices allows network-adjacent attackers to modify system configurations without authorization.

Executive Summary:
A critical access control flaw in Ubiquiti UniFi OS exposes devices to unauthorized system modifications by network-adjacent attackers.

Vulnerability Details

CVE-ID: CVE-2026-34908

Affected Software: Ubiquiti UniFi OS

Affected Versions: See vendor advisory

Vulnerability: This vulnerability involves improper access control within the UniFi OS management framework. An attacker with network access can bypass security restrictions to perform unauthorized system changes.

Business Impact

The ability to manipulate system settings poses a severe risk to organizational network integrity. With a CVSS score of 10.0, this flaw could lead to complete loss of device control, resulting in unauthorized network traffic redirection, persistent backdoors, or total service disruption.

Remediation Plan

Immediate Action: Apply the latest firmware updates provided by Ubiquiti for all UniFi OS-based hardware immediately.

Proactive Monitoring: Audit system logs for unauthorized configuration changes or unexpected administrative sessions.

Compensating Controls: Restrict management interface access to trusted administrative IP addresses using VLANs or internal firewall rules.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS severity, administrators must prioritize patching all affected UniFi OS devices. Verify the integrity of current device configurations post-update to ensure no unauthorized changes were made prior to remediation.

---METADATA---
VENDOR: iControlWP
PRODUCT: iControlWP
AFFECTED_VERSIONS: <= 5.5.3
---END_METADATA---

Description Summary:
iControlWP contains an unauthenticated privilege escalation vulnerability that allows remote attackers to gain elevated access to the system.

Executive Summary:
An unauthenticated privilege escalation vulnerability in iControlWP allows remote attackers to gain unauthorized administrative access, presenting a severe risk to the management platform.

Vulnerability Details

CVE-ID: CVE-2026-34901

Affected Software: iControlWP

Affected Versions: <= 5.5.3

Vulnerability: This is an unauthenticated privilege escalation vulnerability. It allows an attacker to bypass standard access controls and assume a higher privilege level within the application without providing valid credentials.

Business Impact

A CVSS score of 9.8 indicates a critical security risk. Since iControlWP is typically used to manage multiple WordPress sites, an attacker exploiting this flaw could gain administrative control over the entire managed fleet, leading to widespread site defacement, malware distribution, or total data exfiltration.

Remediation Plan

Immediate Action: Update the iControlWP software to a version greater than 5.5.3 immediately.

Proactive Monitoring: Audit user account creation logs and access logs for unauthorized administrative activity or unexpected elevation of user roles.

Compensating Controls: Restrict access to the management dashboard to known, trusted IP addresses using IP whitelisting or a VPN.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given that iControlWP is a centralized management tool, this vulnerability is exceptionally dangerous. Administrators must apply the patch immediately to protect all managed environments from unauthorized administrative takeover.

---METADATA---
VENDOR: picklescan
PRODUCT: picklescan
AFFECTED_VERSIONS: before 1.0.4
---END_METADATA---

Description Summary:
A security bypass in the picklescan library allows attackers to resolve dangerous functions through indirect calls, leading to remote code execution.

Executive Summary:
A critical vulnerability in the picklescan library allows remote attackers to bypass blocklists and execute arbitrary code on systems processing untrusted pickle data.

Vulnerability Details

CVE-ID: CVE-2026-3490

Affected Software: picklescan

Affected Versions: before 1.0.4

Vulnerability: The library fails to properly restrict pkgutil.resolve_name, allowing an attacker to bypass existing blocklists. By utilizing indirect REDUCE calls, an attacker can invoke restricted functions like os.system or builtins.exec to achieve remote code execution.

Business Impact

The ability to execute arbitrary commands on a host system poses a severe risk of data theft, malware installation, and complete system takeover. With a CVSS score of 10.0, this vulnerability requires immediate attention for any application relying on picklescan for secure serialization handling.

Remediation Plan

Immediate Action: Upgrade the picklescan library to version 1.0.4 or later immediately to address the blocklist bypass.

Proactive Monitoring: Monitor application logs for unexpected execution of system-level commands or unauthorized attempts to access shell-related functions.

Compensating Controls: Implement strict input validation and ensure that any data processed by the application is sourced from trusted, authenticated origins to minimize exposure.

Exploitation Status

Public Exploit Available: null

Analyst Notes: As of Jun 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical due to the ease of achieving remote code execution. Users must prioritize the update to version 1.0.4 to ensure the library's security controls are effectively enforced.