---METADATA---
VENDOR: Gotenberg
PRODUCT: Gotenberg
AFFECTED_VERSIONS: 8.30.1 and earlier
---END_METADATA---

Description Summary:
Gotenberg contains a command injection vulnerability where unsanitized metadata values allow attackers to manipulate ExifTool arguments, leading to arbitrary file system operations.

Executive Summary:
An unauthenticated command injection vulnerability in Gotenberg allows attackers to overwrite or move arbitrary files within the container environment.

Vulnerability Details

CVE-ID: CVE-2026-40281

Affected Software: Gotenberg

Affected Versions: 8.30.1 and earlier

Vulnerability: The application fails to sanitize newline characters in metadata values, allowing an unauthenticated attacker to inject ExifTool flags. This permits the manipulation of files, including the creation of symlinks or overwriting system files.

Business Impact

This flaw grants an attacker significant control over the container file system, which may lead to privilege escalation or the destruction of critical application data. Given the 10.0 CVSS score, the potential for total loss of container integrity and subsequent lateral movement is extreme.

Remediation Plan

Immediate Action: Upgrade to the latest version of Gotenberg to ensure proper metadata sanitization.

Proactive Monitoring: Review application logs for evidence of unusual metadata input or unexpected file system operations within the container.

Compensating Controls: Run the container with a read-only root file system and strictly limit the privileges of the user running the service to minimize the impact of file-system manipulation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is critical due to its potential for full container compromise. Organizations utilizing Gotenberg should apply the vendor-supplied patches immediately to prevent unauthorized file system modifications.

---METADATA---
VENDOR: Gramps Project
PRODUCT: Gramps Web API
AFFECTED_VERSIONS: >= 1.6.0, < 3.11.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Gramps Web API is susceptible to a path traversal vulnerability during media archive imports, allowing authenticated users to write arbitrary files to the server's filesystem.

Executive Summary:
A critical path traversal vulnerability in Gramps Web API allows authenticated users to execute arbitrary file writes on the underlying server filesystem.

Vulnerability Details

CVE-ID: CVE-2026-40258

Affected Software: Gramps Project Gramps Web API

Affected Versions: 1.6.0 through 3.11.0

Vulnerability: The software fails to properly sanitize ZIP entry names during the media archive import process, leading to a Zip Slip vulnerability (CWE-22). This allows an authenticated user with owner-level privileges to traverse directories and write files outside the designated temporary directory.

Business Impact

Exploitation of this vulnerability could lead to full server compromise, as an attacker can overwrite critical system files, upload web shells, or modify configuration files to achieve remote code execution. With a CVSS score of 9.1, the ability to escape the application's sandbox poses a severe threat to the confidentiality, integrity, and availability of the host environment.

Remediation Plan

Immediate Action: Update the Gramps Web API to version 3.11.1 or later, which includes mandatory validation of ZIP entry paths against the resolved temporary directory.

Proactive Monitoring: Review file integrity logs and audit application-specific logs for unusual file creation events or attempts to access directories outside of expected storage locations.

Compensating Controls: Run the Gramps Web API service with the least privilege necessary, ideally within a containerized environment with a read-only root filesystem and restricted write access to specific mount points.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable if an attacker possesses valid owner-level credentials, making patch management essential for systems exposed to the internet.

Analyst Recommendation

The risk posed by this path traversal flaw is substantial, particularly for multi-user installations of the Gramps Web API. Administrators should prioritize upgrading to version 3.11.1 immediately to ensure that path validation is correctly enforced, thereby preventing unauthorized file system modifications.

---METADATA---
VENDOR: EGroupware
PRODUCT: egroupware
AFFECTED_VERSIONS: <= 26.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
EGroupware version 26.0 and earlier are vulnerable to OS command injection and eval injection, which could allow an authenticated attacker to execute arbitrary code on the underlying system.

Executive Summary:
EGroupware versions 26.0 and earlier contain a critical vulnerability that permits OS command and eval injection by authenticated users, risking full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40187

Affected Software: EGroupware egroupware

Affected Versions: <= 26.0

Vulnerability: This vulnerability involves improper neutralization of special elements used in OS commands and dynamically evaluated code. An attacker with administrative privileges can leverage these flaws to execute arbitrary commands on the host server.

Business Impact

Successful exploitation leads to full remote code execution, which may result in total system compromise, unauthorized data access, and lateral movement within the network. With a CVSS score of 8.6, this vulnerability poses a high risk to business continuity and data integrity, particularly for environments where EGroupware manages sensitive organizational communications.

Remediation Plan

Immediate Action: Apply the latest security updates provided by EGroupware as soon as they become available to patch the injection vectors.

Proactive Monitoring: Review web access logs and system audit logs for suspicious process execution patterns or unusual command-line arguments originating from the application service account.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common injection payloads, such as shell metacharacters or unauthorized eval function calls.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 21, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The requirement for administrative authentication limits the initial attack surface, but the potential for total system impact remains severe.

Analyst Recommendation

Given the high CVSS score and the existence of a proof-of-concept, organizations should treat this vulnerability with urgency. Administrators must restrict administrative access to trusted personnel and prioritize the application of vendor patches to remediate the underlying command and code injection flaws.

---METADATA---
VENDOR: Axios
PRODUCT: Axios
AFFECTED_VERSIONS: Prior to 1.15.0
---END_METADATA---

Description Summary:
Axios is vulnerable to a prototype pollution attack chain that can be escalated to remote code execution or AWS IMDSv2 bypass.

Executive Summary:
A critical vulnerability in the Axios library allows for prototype pollution to be escalated into remote code execution or full cloud environment compromise.

Vulnerability Details

CVE-ID: CVE-2026-40175

Affected Software: Axios

Affected Versions: Prior to 1.15.0

Vulnerability: This vulnerability involves a "Gadget" attack chain where prototype pollution is leveraged to achieve remote code execution or bypass AWS IMDSv2 protections. The vulnerability is accessible to external attackers through the HTTP client's processing of malicious data.

Business Impact

With a CVSS score of 10.0, this is a maximum-severity flaw. The impact ranges from full server takeover to the compromise of cloud infrastructure, potentially allowing attackers to escalate privileges and access sensitive cloud metadata, leading to widespread data breaches.

Remediation Plan

Immediate Action: Update the Axios library to version 1.15.0 or later across all applications and dependencies.

Proactive Monitoring: Utilize Software Composition Analysis (SCA) tools to identify and track the usage of vulnerable Axios versions throughout the development lifecycle.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious payloads associated with prototype pollution techniques.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 10, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates an immediate update. Development teams must ensure that all instances of Axios are patched to the secure version to prevent potential cloud-level compromises.

---METADATA---
VENDOR: Dgraph
PRODUCT: Dgraph
AFFECTED_VERSIONS: 25.3.1 and prior
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
Dgraph versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability via the /debug/pprof/cmdline endpoint, leaking admin tokens.

Executive Summary:
An unauthenticated credential disclosure in Dgraph allows attackers to steal administrative tokens and gain full operational control over the database.

Vulnerability Details

CVE-ID: CVE-2026-40173

Affected Software: Dgraph

Affected Versions: 25.3.1 and prior

Vulnerability: This is an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint exposes sensitive configuration flags, including the admin token, which can then be reused to bypass authentication.

Business Impact

This vulnerability carries a CVSS score of 9.4, indicating critical risk. An attacker can gain full administrative control over the Dgraph database, allowing them to modify configurations, access sensitive data, or disrupt operations, leading to significant potential for data breaches and service outages.

Remediation Plan

Immediate Action: Upgrade Dgraph to version 25.3.2 or later to remediate the endpoint exposure and token handling logic.

Proactive Monitoring: Review access logs for unauthorized requests to /debug/pprof/ endpoints and monitor for unexpected administrative configuration changes.

Compensating Controls: Ensure the Alpha HTTP port is protected by network-level access controls (e.g., firewalls or VPC security groups) to prevent access by untrusted parties.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The exposure of administrative credentials via an unauthenticated endpoint is a severe security oversight. Administrators must upgrade to version 25.3.2 immediately and verify that no unauthorized administrative tokens were generated or utilized during the period the service was exposed.

---METADATA---
VENDOR: goauthentik
PRODUCT: authentik
AFFECTED_VERSIONS: < 2025.12.5, >= 2026.2.0-rc1, < 2026.2.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the authentik identity provider allows for improper authentication and XML injection, potentially leading to unauthorized access or security configuration conflicts.

Executive Summary:
A critical authentication vulnerability in authentik could allow unauthenticated attackers to bypass security controls and potentially compromise identity management.

Vulnerability Details

CVE-ID: CVE-2026-40165

Affected Software: goauthentik authentik

Affected Versions: < 2025.12.5 and 2026.2.0-rc1 through 2026.2.2

Vulnerability: This vulnerability involves improper authentication (CWE-287), XML injection (CWE-91), and interpretation conflicts (CWE-436). The vulnerability is reachable by unauthenticated, remote attackers, creating a high risk of unauthorized access.

Business Impact

As an identity provider, authentik holds the keys to organizational access; a compromise here can facilitate wide-scale unauthorized access to downstream applications. The CVSS score of 8.7 reflects the high severity of this flaw, as it permits remote, unauthenticated attackers to potentially hijack authentication flows or manipulate identity data.

Remediation Plan

Immediate Action: Upgrade to authentik version 2025.12.5 or 2026.2.3 or later immediately to apply the security fixes.

Proactive Monitoring: Review authentication logs for anomalous login patterns, especially those involving malformed XML or unexpected identity provider behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious XML payloads and restrict access to the authentik administrative interface to trusted management networks.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 21, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The complexity of the vulnerability suggests that while it is highly critical, it may require specific knowledge of the authentik identity configuration to exploit effectively.

Analyst Recommendation

The criticality of this vulnerability cannot be overstated given its role as an identity provider. Organizations must perform an immediate assessment of their authentik deployments and apply the provided patches to prevent potential identity-based attacks.

---METADATA---
VENDOR: Saltcorn
PRODUCT: Saltcorn
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A vulnerability exists in Saltcorn, an extensible, open-source, no-code database application builder.

Executive Summary:
A high-severity vulnerability in the Saltcorn no-code database builder poses a significant risk to application integrity.

Vulnerability Details

CVE-ID: CVE-2026-40163

Affected Software: Saltcorn

Affected Versions: See vendor advisory

Vulnerability: The vulnerability affects the Saltcorn platform, which allows for the creation of database-driven applications. Further technical details regarding the specific flaw are forthcoming from the vendor.

Business Impact

A CVSS score of 8.2 classifies this as a high-risk vulnerability. Exploitation could allow attackers to manipulate database applications or gain unauthorized access to underlying data, risking the compromise of business-critical information stored within the platform.

Remediation Plan

Immediate Action: Check the Saltcorn vendor advisory for the latest security patches and apply them immediately.

Proactive Monitoring: Audit application logs for unusual administrative actions or unauthorized modifications to database schemas.

Compensating Controls: Implement strong access controls and ensure the application is not exposed to the public internet without adequate protection.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Apr 12, 2026, there is no public information indicating active exploitation. However, given the nature of the platform, the risk of exploitation is high.

Analyst Recommendation

Security teams must prioritize updating the Saltcorn platform. Given the high severity, ensure that all instances are patched as soon as the vendor releases the necessary updates.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: Prior to 4.5.128
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
PraisonAI fails to validate the integrity or origin of remotely fetched template files, enabling supply chain attacks by executing malicious code.

Executive Summary:
A critical supply chain vulnerability in PraisonAI allows for arbitrary code execution by treating unverified, remotely fetched templates as trusted executable code.

Vulnerability Details

CVE-ID: CVE-2026-40154

Affected Software: PraisonAI

Affected Versions: Prior to 4.5.128

Vulnerability: The application suffers from a lack of integrity verification and origin validation when processing remotely fetched template files. This allows an attacker to inject malicious templates that the system subsequently executes without user confirmation or validation.

Business Impact

The ability to inject and execute arbitrary code via malicious templates creates a severe supply chain risk, potentially leading to unauthorized data access, service disruption, and total system compromise. With a CVSS score of 9.3, this flaw necessitates immediate remediation to prevent attackers from gaining persistent access to the server or integrated environments.

Remediation Plan

Immediate Action: Upgrade the PraisonAI system to version 4.5.128 or later to incorporate the necessary integrity and validation checks.

Proactive Monitoring: Monitor for unexpected outbound network connections from the PraisonAI application to untrusted endpoints and audit logs for unusual template file processing events.

Compensating Controls: Implement strict egress filtering on the application server to prevent the fetching of templates from unauthorized or unknown external domains.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a significant supply chain risk that could be leveraged for widespread system compromise. Security teams should immediately verify their current PraisonAI version and apply the patch to ensure all template processing is subjected to rigorous integrity verification.

---METADATA---
VENDOR: BeyondTrust
PRODUCT: Remote Support and Privileged Remote Access
AFFECTED_VERSIONS: Remote Support: < 26.2.1, < 25.3.3; Privileged Remote Access: < 26.2.1, < 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the web application component of BeyondTrust Remote Support and Privileged Remote Access allows authenticated users to exploit improper neutralization of data query logic.

Executive Summary:
An authenticated vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows attackers with low-level access to potentially compromise data and system integrity.

Vulnerability Details

CVE-ID: CVE-2026-40141

Affected Software: BeyondTrust Remote Support and Privileged Remote Access

Affected Versions: Remote Support: < 26.2.1, < 25.3.3; Privileged Remote Access: < 26.2.1, < 25.3.3

Vulnerability: This vulnerability (CWE-943) involves improper neutralization of special elements in data query logic within a web application component. Exploitation requires the attacker to have at least low-level authenticated access to the system.

Business Impact

The CVSS score of 8.5 reflects the potential for unauthorized data access and integrity compromise. By manipulating query logic, an attacker could potentially extract sensitive information or alter system states, undermining the security of the privileged access management environment and posing a significant reputational and operational risk.

Remediation Plan

Immediate Action: Apply vendor security updates to version 26.2.1, 25.3.3, or later as specified in the vendor advisory (BT26-03).

Proactive Monitoring: Review access logs for unusual queries or unexpected database interactions originating from authenticated user accounts.

Compensating Controls: Enforce the principle of least privilege for user accounts to limit the potential impact of an authenticated attacker, and utilize WAF rules to detect SQL-injection-style patterns in web requests.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

While this vulnerability requires authentication, the impact on a privileged access management system is severe. Administrators must prioritize updating these systems to the latest version to prevent unauthorized data access or manipulation by compromised or malicious user accounts.

---METADATA---
VENDOR: BeyondTrust
PRODUCT: Remote Support and Privileged Remote Access
AFFECTED_VERSIONS: Remote Support: < 26.2.1, < 25.3.3; Privileged Remote Access: < 26.2.1, < 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A pre-authentication vulnerability in the network communication subsystem of BeyondTrust Remote Support and Privileged Remote Access allows for uncontrolled resource consumption.

Executive Summary:
A critical pre-authentication vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows unauthenticated attackers to trigger uncontrolled resource consumption, potentially causing a denial-of-service.

Vulnerability Details

CVE-ID: CVE-2026-40140

Affected Software: BeyondTrust Remote Support and Privileged Remote Access

Affected Versions: Remote Support: < 26.2.1, < 25.3.3; Privileged Remote Access: < 26.2.1, < 25.3.3

Vulnerability: This is a pre-authentication resource consumption vulnerability (CWE-400) located within the network communication subsystem. An unauthenticated remote attacker can exploit this flaw to exhaust system resources, leading to service disruption.

Business Impact

The vulnerability carries a CVSS score of 8.7, indicating high severity due to the ease of exploitation (no authentication required). Successful exploitation could result in significant system downtime, preventing legitimate users from accessing critical remote support or privileged access management tools, thereby disrupting IT operations and administrative workflows.

Remediation Plan

Immediate Action: Upgrade to version 26.2.1, 25.3.3, or later as specified in the vendor security advisory (BT26-03).

Proactive Monitoring: Monitor system performance metrics for sudden spikes in resource utilization and review network traffic logs for anomalous patterns directed at the communication subsystem.

Compensating Controls: Implement rate limiting or blocking at the network perimeter for unauthorized or suspicious traffic patterns attempting to interact with the appliance's communication ports.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, which allows for unauthenticated remote denial-of-service, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score and the ability for unauthenticated attackers to impact system availability, organizations should prioritize patching these BeyondTrust appliances immediately. Ensure all instances are updated to the non-vulnerable versions provided by the vendor to prevent potential service disruption.

---METADATA---
VENDOR: BeyondTrust
PRODUCT: Remote Support and Privileged Remote Access
AFFECTED_VERSIONS: 0 up to 26.2.1, 0 up to 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A pre-authentication vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows unauthenticated attackers to bypass access controls and gain unauthorized administrative access.

Executive Summary:
A critical vulnerability in BeyondTrust remote access appliances could allow unauthenticated attackers to achieve full system compromise, representing a severe risk to organizational security.

Vulnerability Details

CVE-ID: CVE-2026-40139

Affected Software: BeyondTrust Remote Support and Privileged Remote Access

Affected Versions: 0 up to 26.2.1; 0 up to 25.3.3

Vulnerability: This is an authentication bypass vulnerability (CWE-287) located within the appliance authentication subsystem. An unauthenticated remote attacker can exploit improper request processing to gain elevated privileges, provided a specific authentication configuration is enabled.

Business Impact

Successful exploitation grants an attacker complete unauthorized access to the appliance, effectively neutralizing the security perimeter provided by the remote access solution. Given the CVSS score of 9.2, this vulnerability poses a critical threat to data confidentiality and integrity, potentially allowing attackers to pivot into the internal network or harvest sensitive credentials.

Remediation Plan

Immediate Action: Upgrade BeyondTrust Remote Support and Privileged Remote Access appliances to version 26.2.1, 25.3.3, or the latest available release as specified by the vendor advisory.

Proactive Monitoring: Review appliance access logs for anomalous authentication patterns or unexpected administrative sessions originating from unknown sources.

Compensating Controls: Restrict access to the administrative interface of the appliance to known, trusted IP addresses using network-level access control lists (ACLs) until patching is complete.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a significant risk to the integrity of remote access infrastructure. Administrators must prioritize updating these appliances immediately, as the ability for an unauthenticated attacker to gain administrative access constitutes a total system compromise.

---METADATA---
VENDOR: BeyondTrust
PRODUCT: Remote Support
AFFECTED_VERSIONS: BeyondTrust Remote Support: 0 up to (excluding) 26.2.1, 0 up to (excluding) 25.3.3; Privileged Remote Access: 0 up to (excluding) 26.2.1, 0 up to (excluding) 25.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A pre-authentication vulnerability in the BeyondTrust Remote Support and Privileged Remote Access authentication subsystem allows attackers to bypass access controls.

Executive Summary:
A critical pre-authentication vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows attackers to bypass security controls and gain unauthorized administrative access.

Vulnerability Details

CVE-ID: CVE-2026-40138

Affected Software: BeyondTrust Remote Support and Privileged Remote Access

Affected Versions: BeyondTrust Remote Support and Privileged Remote Access: 0 up to (excluding) 26.2.1, 0 up to (excluding) 25.3.3

Vulnerability: This is a pre-authentication vulnerability located within the authentication subsystem. Improper validation of authentication data allows a network-positioned attacker to bypass access controls, provided specific authentication configurations are enabled.

Business Impact

Given the central role these products play in privileged access management, the risk of unauthorized access is extreme, reflected by the CVSS score of 9.2. Successful exploitation could allow an attacker to hijack the appliance and gain elevated privileges across the entire managed environment.

Remediation Plan

Immediate Action: Upgrade BeyondTrust Remote Support and Privileged Remote Access to version 26.2.1 or 25.3.3, depending on the current branch, to patch the authentication subsystem.

Proactive Monitoring: Monitor authentication logs for failed and successful logins originating from unusual network paths or during off-hours.

Compensating Controls: Temporarily disable the specific authentication configurations noted in the vendor advisory until the patch can be verified and applied.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

BeyondTrust appliances are high-value targets for attackers seeking to move laterally within a network. Organizations must apply the vendor-provided patches immediately to secure these critical privileged access points.

---METADATA---
VENDOR: Nimiq
PRODUCT: core-rs-albatross
AFFECTED_VERSIONS: < 1.4.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Nimiq core-rs-albatross blockchain implementation is vulnerable to an unchecked return value in its persistent block storage, which may lead to security inconsistencies.

Executive Summary:
An unchecked return value vulnerability in Nimiq core-rs-albatross block storage could lead to data integrity issues or system instability.

Vulnerability Details

CVE-ID: CVE-2026-40092

Affected Software: Nimiq core-rs-albatross

Affected Versions: < 1.4.0

Vulnerability: This vulnerability is caused by an unchecked return value (CWE-252) within the persistent block storage component of the blockchain implementation. An attacker could potentially exploit this to cause unexpected behavior or state inconsistencies, though the exact authentication requirements depend on the deployment context.

Business Impact

The failure to check return values in critical blockchain storage can result in data corruption, loss of synchronization, or system instability. Given the CVSS score of 7.5, this poses a substantial risk to the reliability of the Nimiq network implementation, potentially leading to financial or data integrity loss.

Remediation Plan

Immediate Action: Upgrade the Nimiq core-rs-albatross implementation to version 1.4.0 or later immediately.

Proactive Monitoring: Monitor blockchain node logs for error signals or unexpected termination events that may indicate failed storage operations.

Compensating Controls: Ensure robust integrity checks and backups of the blockchain state are maintained to facilitate rapid recovery in the event of storage failure.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical role of the block storage component, all users of the Nimiq core-rs-albatross software must update to version 1.4.0. Failure to patch may expose the system to data integrity risks that could impact the entire node's operational status.

---METADATA---
VENDOR: Sonicverse
PRODUCT: Sonicverse Radio Audio Streaming Stack
AFFECTED_VERSIONS: Installations created via install.sh
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability in the Sonicverse Radio dashboard allows authenticated operators to perform arbitrary HTTP requests to internal or external systems.

Executive Summary:
An SSRF vulnerability in the Sonicverse Radio streaming dashboard enables authenticated attackers to perform unauthorized requests against internal and external infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-40089

Affected Software: Sonicverse Radio Audio Streaming Stack

Affected Versions: Installations created via the provided install.sh script.

Vulnerability: The dashboard API client lacks sufficient validation when processing user-controlled URLs, leading to a Server-Side Request Forgery (SSRF) vulnerability. An authenticated operator can abuse this flaw to force the backend to make arbitrary HTTP requests to internal network resources or external systems.

Business Impact

SSRF vulnerabilities are frequently used to bypass network perimeters, scan internal infrastructure, or interact with cloud metadata services. With a CVSS score of 9.9, the potential for lateral movement and unauthorized access to sensitive internal services is extreme, posing a significant risk to the integrity and confidentiality of the host network.

Remediation Plan

Immediate Action: Apply the fix provided in commit cb1ddbacafcb441549fe87d3eeabdb6a085325e4 or update to the latest available version provided by the project maintainers.

Proactive Monitoring: Review application logs for anomalous API requests and monitor network traffic for unexpected internal scans originating from the streaming stack dashboard.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block suspicious URL parameters or requests directed at internal IP ranges from the dashboard application.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the exceptionally high CVSS score, this vulnerability should be treated as a priority. Administrators must immediately apply the code-level fix and restrict access to the dashboard to trusted users only to mitigate the risk of internal network reconnaissance and exploitation.

---METADATA---
VENDOR: PraisonAI
PRODUCT: PraisonAI
AFFECTED_VERSIONS: Prior to 4.5.121
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
PraisonAI is vulnerable to command injection via the execute_command function and workflow shell execution, allowing attackers to execute arbitrary commands through crafted YAML or LLM inputs.

Executive Summary:
A critical command injection vulnerability in PraisonAI allows attackers to execute arbitrary shell commands, potentially leading to full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40088

Affected Software: PraisonAI

Affected Versions: Prior to 4.5.121

Vulnerability: This vulnerability involves improper neutralization of special elements used in an OS command. Attackers can inject arbitrary shell metacharacters through agent workflows, YAML definitions, or LLM-generated tool calls, which the application then executes with system-level privileges.

Business Impact

Successful exploitation of this vulnerability allows an attacker to achieve remote code execution on the underlying host. Given the CVSS score of 9.6, this represents a critical risk that could lead to complete data exfiltration, lateral movement within the network, and full loss of system integrity.

Remediation Plan

Immediate Action: Upgrade the PraisonAI system to version 4.5.121 or later immediately to resolve the command injection flaw.

Proactive Monitoring: Review system logs for unusual shell process spawns or unexpected command execution patterns originating from agent workflows.

Compensating Controls: Implement strict input validation for all YAML definitions and restrict agent workflow permissions to the least privilege necessary to prevent unauthorized shell access.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate patching. Organizations utilizing PraisonAI must prioritize updating to version 4.5.121 to mitigate the risk of arbitrary code execution and potential total system compromise.

---METADATA---
VENDOR: Cacti
PRODUCT: Cacti
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in the Cacti performance and fault management framework that requires immediate attention from system administrators.

Executive Summary:
A high-severity vulnerability in the Cacti performance management framework poses a significant risk of unauthorized system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40079

Affected Software: Cacti Cacti

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a flaw in the Cacti performance and fault management framework, potentially allowing for unauthorized operations. The exact authentication requirements remain dependent on the specific exploit vector identified in the vendor's forthcoming technical disclosure.

Business Impact

The vulnerability carries a CVSS score of 8.6, placing it in the High severity category. Successful exploitation could lead to unauthorized system access, potential data exfiltration, or disruption of critical network monitoring infrastructure, which may severely impact operational visibility and business continuity.

Remediation Plan

Immediate Action: Administrators should monitor the official Cacti security advisory page and apply the recommended security patches or configuration changes as soon as they are made available.

Proactive Monitoring: Review web server and application access logs for anomalous request patterns or unauthorized administrative activity originating from untrusted sources.

Compensating Controls: Implement strict network segmentation and utilize a Web Application Firewall (WAF) to filter malicious traffic targeting the Cacti interface until a permanent patch is applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the High severity of this vulnerability, immediate vigilance is required. IT teams must prioritize the tracking of the vendor’s security bulletins and ensure that all instances of Cacti are updated to a secure version as soon as the vendor releases a patch to mitigate the risk of unauthorized access.