---METADATA---
VENDOR: Open Vehicle
PRODUCT: Monitoring System 3 (OVMS3)
AFFECTED_VERSIONS: 3.3.005
---END_METADATA---

Description Summary:
A buffer overflow in the Open Vehicle Monitoring System (OVMS3) 3.3.005 allows remote attackers to cause a denial of service or execute arbitrary code via crafted GVRET frames.

Executive Summary:
A critical buffer overflow in Open Vehicle Monitoring System 3 (OVMS3) allows remote attackers to execute arbitrary code or cause a system crash.

Vulnerability Details

CVE-ID: CVE-2026-37541

Affected Software: Open Vehicle Monitoring System 3

Affected Versions: 3.3.005

Vulnerability: Located in canformat_gvret.cpp, this buffer overflow is caused by improper validation of the length field in binary GVRET data, allowing memory corruption when processing malformed frames.

Business Impact

The CVSS score of 10.0 identifies this as a maximum-severity vulnerability. In the context of vehicle monitoring systems, this could lead to safety risks, loss of system control, and unauthorized access to vehicle telematics data.

Remediation Plan

Immediate Action: Update to the latest available version of OVMS3 as provided by the vendor.

Proactive Monitoring: Monitor telematics logs for malformed frames or unexpected device reboots.

Compensating Controls: Isolate the vehicle monitoring system from untrusted public networks where possible to minimize the attack surface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical and requires immediate attention. Organizations using OVMS3 should apply patches as soon as they are made available to protect against potential remote exploitation and loss of system integrity.

---METADATA---
VENDOR: Cannelloni
PRODUCT: v2
AFFECTED_VERSIONS: 2.0.0
---END_METADATA---

Description Summary:
A buffer overflow vulnerability in Cannelloni v2 allows remote attackers to cause a denial of service or execute arbitrary code via crafted CAN FD frames.

Executive Summary:
A critical buffer overflow vulnerability in the Cannelloni v2 parser and decoder functions poses a severe risk of arbitrary code execution for affected systems.

Vulnerability Details

CVE-ID: CVE-2026-37539

Affected Software: Cannelloni v2

Affected Versions: 2.0.0

Vulnerability: This is a buffer overflow vulnerability located in the parseCANFrame and decodeFrame functions. The vulnerability is exploitable by an unauthenticated remote attacker who can send crafted CAN FD frames to the target system.

Business Impact

The successful exploitation of this vulnerability can lead to a complete system crash (Denial of Service) or the execution of unauthorized code with the privileges of the application. Given the CVSS score of 9.8, this represents a critical risk to operational continuity and system integrity, potentially allowing attackers to gain full control over the affected hardware or software environment.

Remediation Plan

Immediate Action: Update the Cannelloni v2 software to the latest available version provided by the vendor.

Proactive Monitoring: Monitor system logs for anomalous CAN frame traffic or frequent application crashes that may indicate exploitation attempts.

Compensating Controls: Implement network segmentation to isolate CAN bus traffic from untrusted networks and utilize deep packet inspection to identify malformed frames.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention. Organizations should prioritize patching the affected software components to prevent potential remote code execution. If immediate updates are not feasible, strict network access controls must be enforced to minimize the attack surface until a permanent fix is deployed.

---METADATA---
VENDOR: miaofng
PRODUCT: uds-c
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A stack buffer overflow vulnerability exists in the send_diagnostic_request function of the miaofng/uds-c library.

Executive Summary:
A critical stack buffer overflow in the uds-c library could lead to arbitrary code execution, potentially allowing an attacker to hijack the system.

Vulnerability Details

CVE-ID: CVE-2026-37536

Affected Software: miaofng/uds-c

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The send_diagnostic_request function in the library fails to properly validate input sizes, leading to a stack buffer overflow. This is a classic memory corruption issue that can be exploited by an attacker providing malicious input.

Business Impact

With a CVSS score of 8.8, this is a severe vulnerability. Successful exploitation could allow an attacker to gain full control over the process or service using the library, leading to system-wide compromise or persistent access for an attacker.

Remediation Plan

Immediate Action: Update the uds-c library to the latest version that includes the stack buffer overflow protection.

Proactive Monitoring: Monitor logs for segmentation faults or abnormal process crashes, which are common indicators of a failed or successful buffer overflow attempt.

Compensating Controls: Ensure that the application using the library is compiled with modern exploit mitigation techniques, such as stack canaries and ASLR.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly dangerous due to the nature of buffer overflows. Developers and system administrators must prioritize upgrading the library and ensuring that all downstream applications are recompiled and patched.

---METADATA---
VENDOR: Open-SAE-J1939
PRODUCT: SAE-J1939 Library
AFFECTED_VERSIONS: Commits up to b6caf884df46435e539b1ecbf92b6c29b345bdfe
---END_METADATA---

Description Summary:
An integer underflow vulnerability in the Open-SAE-J1939 library allows remote attackers to perform arbitrary memory writes via crafted CAN frames.

Executive Summary:
An integer underflow in the Open-SAE-J1939 library allows unauthenticated attackers to achieve arbitrary memory corruption and potential code execution.

Vulnerability Details

CVE-ID: CVE-2026-37534

Affected Software: Open-SAE-J1939

Affected Versions: Commits up to b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30)

Vulnerability: This is an integer underflow vulnerability within the SAE_J1939_Read_Transport_Protocol_Data_Transfer function. An unauthenticated attacker can exploit this by sending a crafted CAN frame containing a specific sequence number, leading to an out-of-bounds memory write.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a critical threat to business operations. Memory corruption vulnerabilities of this nature typically allow for full system compromise, potentially resulting in data exfiltration, the installation of persistent malicious backdoors, or critical system failure.

Remediation Plan

Immediate Action: Update the Open-SAE-J1939 library to a version that includes the fix for this integer underflow.

Proactive Monitoring: Review system logs for unexpected memory access errors or segmentation faults that may suggest an ongoing attack.

Compensating Controls: Deploy host-based intrusion detection systems to monitor for anomalous memory usage patterns and restrict network access to the CAN interface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The potential for arbitrary memory corruption makes this vulnerability extremely dangerous. Security teams must treat this as a high-priority remediation item. Ensure all implementations of the library are updated to the secure version to prevent unauthorized system access.

---METADATA---
VENDOR: AGL
PRODUCT: app-framework-main
AFFECTED_VERSIONS: thru 17.1.12
---END_METADATA---

Description Summary:
AGL app-framework-main is vulnerable to Zip Slip path traversal and a TOCTOU race condition during widget installation, allowing arbitrary file writes.

Executive Summary:
A critical combination of Zip Slip and TOCTOU vulnerabilities in the AGL app-framework-main allows unauthenticated attackers to write arbitrary files to the filesystem.

Vulnerability Details

CVE-ID: CVE-2026-37531

Affected Software: AGL app-framework-main

Affected Versions: thru 17.1.12

Vulnerability: The application fails to block dot-notation traversal sequences in ZIP entries and performs file extraction before signature verification. This allows an attacker to write files anywhere on the system, with the malicious files persisting even if signature verification fails.

Business Impact

This vulnerability provides an attacker with the ability to overwrite critical system files or place malicious executables, leading to full system compromise. The CVSS score of 9.8 highlights the severity of this flaw in the widget installation flow.

Remediation Plan

Immediate Action: Upgrade to the latest version of the AGL app-framework-main to ensure secure extraction and signature validation.

Proactive Monitoring: Monitor filesystem integrity and watch for the creation of unauthorized files in sensitive directories during the widget installation process.

Compensating Controls: Restrict the service account running the app-framework-main to the minimum necessary filesystem permissions to prevent unauthorized writes.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate patching is required to address the insecure file handling in the installation process. Failure to update may allow attackers to bypass security controls and achieve persistence on the affected device.

---METADATA---
VENDOR: Automotive Grade Linux (AGL)
PRODUCT: app-framework-binder (afb-daemon)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The AGL app-framework-binder (afb-daemon) contains a security vulnerability affecting versions through v19.

Executive Summary:
A vulnerability in the AGL app-framework-binder could allow for unauthorized access or system compromise in automotive infotainment systems.

Vulnerability Details

CVE-ID: CVE-2026-37526

Affected Software: AGL app-framework-binder

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The afb-daemon is responsible for binding applications within the AGL environment. A vulnerability here could allow an attacker to bypass security constraints or interact with services they should not have access to.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a high risk to the security and integrity of automotive systems. Exploitation could allow unauthorized control over vehicle infotainment features or access to sensitive user data, undermining the safety and privacy of the platform.

Remediation Plan

Immediate Action: Update the afb-daemon package to the latest version provided by your AGL distribution or automotive software vendor.

Proactive Monitoring: Review system logs for unauthorized service binding attempts or suspicious inter-process communication (IPC) activity.

Compensating Controls: Implement strict sandboxing and MAC (Mandatory Access Control) policies to limit the privileges of applications running within the framework.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Automotive manufacturers and software developers must treat this vulnerability with high urgency. Patching the binder daemon is critical to maintaining the overall security integrity of the vehicle's software ecosystem.

---METADATA---
VENDOR: itsourcecode
PRODUCT: University Management System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
itsourcecode University Management System 1 is vulnerable to a high-severity flaw that could lead to unauthorized administrative access and data manipulation.

Executive Summary:
A critical security vulnerability in itsourcecode University Management System 1 puts sensitive institutional and student data at risk of unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-3747

Affected Software: itsourcecode University Management System

Affected Versions: 1

Vulnerability: The University Management System version 1 contains a security weakness that may allow an attacker to compromise the application. The high CVSS score suggests that the vulnerability could be exploited by an unauthenticated attacker to gain unauthorized privileges.

Business Impact

A successful exploit could allow an attacker to alter academic records, access sensitive financial information, or disrupt university operations. The CVSS score of 7.3 confirms the high impact on confidentiality and integrity, which could result in severe regulatory and reputational consequences for the institution.

Remediation Plan

Immediate Action: Administrators must immediately update the University Management System to the latest patched version to mitigate the risk of exploitation.

Proactive Monitoring: Conduct a thorough audit of administrative user accounts and review system logs for any signs of unauthorized privilege escalation.

Compensating Controls: Implement multi-factor authentication (MFA) for all management interfaces to provide an additional layer of security against unauthorized access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, management systems are high-value targets, and the potential for exploitation remains high.

Analyst Recommendation

The severity of this vulnerability requires immediate attention from IT and security leadership. Applying the primary vendor patch is the only effective way to ensure the continued security and integrity of the university's digital assets.

---METADATA---
VENDOR: FRRouting
PRODUCT: FRRouting (FRR)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability exists in the ParseIP6Extended function of the FRRouting (FRR) BGP component.

Executive Summary:
A high-severity out-of-bounds read vulnerability in the FRRouting BGP component could lead to service disruption or memory exposure.

Vulnerability Details

CVE-ID: CVE-2026-37461

Affected Software: FRRouting (FRR)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability is an out-of-bounds read located in the ParseIP6Extended function within the BGP routing component. This can be triggered by a specially crafted packet, causing the application to crash or potentially leak sensitive information from memory.

Business Impact

The CVSS score of 7.5 reflects a High-severity risk. Routing protocols are essential for network stability; a crash or compromise in FRR could lead to significant network instability, routing loops, or denial-of-service (DoS) conditions.

Remediation Plan

Immediate Action: Update FRRouting to the latest stable release containing the fix for the BGP parsing component.

Proactive Monitoring: Monitor BGP process stability and check system logs for segmentation faults or abnormal memory usage.

Compensating Controls: Use network-level filtering to ensure that only trusted BGP peers can communicate with the FRR instance.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, BGP-related vulnerabilities are frequently targeted to disrupt core network services.

Analyst Recommendation

Network infrastructure components must be maintained at the latest patch levels. Given the risk to BGP stability, administrators should verify their FRRouting versions and update immediately to mitigate the potential for DoS attacks.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Simple Responsive Tourism Website
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security vulnerability in SourceCodester Simple Responsive Tourism Website 1 could enable attackers to compromise the website and access backend data.

Executive Summary:
SourceCodester Simple Responsive Tourism Website 1 contains a high-severity flaw that risks unauthorized access to tourism-related data and website defacement.

Vulnerability Details

CVE-ID: CVE-2026-3746

Affected Software: SourceCodester Simple Responsive Tourism Website

Affected Versions: 1

Vulnerability: This vulnerability affects version 1 of the tourism website script. Based on the CVSS score of 7.3, the flaw likely permits an attacker to bypass authentication or perform unauthorized actions within the web application environment.

Business Impact

Exploitation of this flaw could result in the theft of customer travel information and the unauthorized modification of website content. This poses a significant risk to business operations, potentially leading to financial discrepancies and a loss of customer confidence in the platform's security.

Remediation Plan

Immediate Action: Apply the latest security updates from SourceCodester immediately to address the vulnerability in the tourism website script.

Proactive Monitoring: Monitor for suspicious database activity or changes to web files that could indicate a successful compromise or web shell installation.

Compensating Controls: Utilize a Web Application Firewall (WAF) to detect and block common web-based attack vectors such as SQL injection or cross-site scripting.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. The lack of a public exploit does not reduce the urgency, as the vulnerability is rated as High severity.

Analyst Recommendation

Given the potential for unauthorized access to business-critical data, immediate remediation is required. Security teams should prioritize patching the Simple Responsive Tourism Website to version 1 or higher as recommended by the vendor.

---METADATA---
VENDOR: FRRouting
PRODUCT: FRRouting (FRR)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An integer underflow vulnerability exists in the FRRouting (FRR) stable/10 release.

Executive Summary:
A high-severity integer underflow flaw in FRRouting (FRR) could result in service instability or remote exploitation.

Vulnerability Details

CVE-ID: CVE-2026-37459

Affected Software: FRRouting (FRR)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This integer underflow vulnerability occurs within the FRRouting codebase. Such vulnerabilities often lead to memory corruption, which can be leveraged by an attacker to cause a denial-of-service or execute arbitrary code.

Business Impact

With a CVSS score of 7.5, this is a High-severity vulnerability. Because FRR is a critical networking component, any instability or potential for exploitation could jeopardize the availability of the entire network segment it manages.

Remediation Plan

Immediate Action: Upgrade to the latest version of FRRouting as recommended by the project maintainers to resolve the integer underflow issue.

Proactive Monitoring: Monitor the FRR daemon for unexpected restarts or performance degradation.

Compensating Controls: Implement strict control plane policing to limit the volume and nature of traffic processed by the routing daemon.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, memory corruption flaws in networking software are high-risk.

Analyst Recommendation

Maintaining the integrity of routing software is critical for network security. Administrators are advised to update their FRRouting deployments immediately to ensure the stability and security of their routing environment.

---METADATA---
VENDOR: code-projects
PRODUCT: Student Web Portal
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A high-severity vulnerability in code-projects Student Web Portal 1 could allow an attacker to gain unauthorized access to sensitive academic and personal data.

Executive Summary:
The code-projects Student Web Portal 1 is affected by a security vulnerability that could lead to a complete compromise of student information systems.

Vulnerability Details

CVE-ID: CVE-2026-3744

Affected Software: code-projects Student Web Portal

Affected Versions: 1

Vulnerability: A vulnerability was identified in version 1 of the Student Web Portal. The flaw likely involves improper input validation or broken access control, potentially allowing an attacker to interact with the portal's backend without appropriate authorization.

Business Impact

The impact of this vulnerability is severe, as it threatens the privacy of student records and institutional data. With a CVSS score of 7.3, the risk includes unauthorized data modification and potential identity theft, which could lead to legal non-compliance and a loss of trust within the educational community.

Remediation Plan

Immediate Action: Update the Student Web Portal to the latest version provided by the vendor to close the identified security gap.

Proactive Monitoring: Review application access logs for any anomalous administrative activity or unauthorized attempts to access student profiles.

Compensating Controls: Restrict access to the web portal via a VPN or IP allowlisting to ensure only authorized users can reach the vulnerable interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, student portals are frequent targets for unauthorized data harvesting, making rapid remediation essential.

Analyst Recommendation

The High-severity rating and the sensitive nature of student data necessitate immediate intervention. IT departments should verify their current software version and apply the necessary security updates without delay to prevent potential exploitation.

---METADATA---
VENDOR: Beauty Parlour Management System
PRODUCT: Beauty Parlour Management System
AFFECTED_VERSIONS: v1.1
CONFIDENCE: medium
MISSING: patch, technical_details
---END_METADATA---

Description Summary:
A SQL injection vulnerability in Beauty Parlour Management System v1.1 allows unauthenticated attackers to extract sensitive database information via the 'aptnumber' parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in Beauty Parlour Management System v1.1 enables attackers to compromise sensitive database content.

Vulnerability Details

CVE-ID: CVE-2026-37431

Affected Software: Beauty Parlour Management System

Affected Versions: v1.1

Vulnerability: This is a classic SQL injection vulnerability located in the /appointment-detail.php endpoint. The attacker does not require authentication (PR:N) to supply malicious SQL statements via the aptnumber parameter.

Business Impact

The vulnerability allows for unauthorized access to the application's database, which likely contains sensitive customer or appointment information. A CVSS score of 9.8 reflects the high risk of data exfiltration and potential loss of confidentiality and integrity, which could lead to significant reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: Since no official patch is currently available, disable the affected endpoint or the application entirely until a security update is released by the vendor.

Proactive Monitoring: Review database query logs for suspicious patterns, such as unexpected SQL keywords (e.g., UNION, SELECT, SLEEP) targeting the aptnumber parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious traffic directed at the /appointment-detail.php page.

Exploitation Status

Public Exploit Available: Yes — a public proof-of-concept exists on GitHub.

Analyst Notes: As of May 8, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The existence of a public PoC increases the likelihood of opportunistic attacks.

Analyst Recommendation

Due to the lack of an official vendor patch and the presence of a public proof-of-concept, this application should be considered insecure. Administrators must implement aggressive WAF filtering or isolate the system from the network until a formal remediation is provided by the developers.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Payroll Management and Information System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL injection via the 'view_employee.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Payroll Management and Information System allows unauthenticated attackers to execute unauthorized database queries.

Vulnerability Details

CVE-ID: CVE-2026-37347

Affected Software: SourceCodester Payroll Management and Information System

Affected Versions: v1.0

Vulnerability: The application lacks proper input sanitization in 'view_employee.php', allowing for SQL injection. An unauthenticated attacker can manipulate queries to extract or modify sensitive payroll and employee data.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a significant risk to the security of sensitive employee and financial information. A successful exploit could lead to data breach, regulatory non-compliance, and loss of organizational trust.

Remediation Plan

Immediate Action: Update to the latest version of the Payroll Management and Information System.

Proactive Monitoring: Audit database logs for unusual query patterns and monitor for unauthorized access to employee data tables.

Compensating Controls: Implement a WAF to block common SQL injection payloads and enforce strict database user permissions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The sensitivity of the data handled by this system makes this vulnerability particularly dangerous. Administrators must prioritize patching to prevent the theft of sensitive payroll information.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Vehicle Parking Area Management System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL injection via the 'manage_park.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Vehicle Parking Area Management System allows unauthenticated attackers to execute arbitrary database queries.

Vulnerability Details

CVE-ID: CVE-2026-37345

Affected Software: SourceCodester Vehicle Parking Area Management System

Affected Versions: v1.0

Vulnerability: The application fails to properly sanitize user-supplied input in the 'manage_park.php' file. This allows an unauthenticated attacker to inject malicious SQL commands, potentially leading to unauthorized data extraction or modification.

Business Impact

With a CVSS score of 9.8, this flaw risks complete database compromise. Attackers can bypass access controls to steal sensitive information, destroy data, or gain administrative access to the underlying application.

Remediation Plan

Immediate Action: Apply patches provided by the vendor or upgrade to a secured version if available.

Proactive Monitoring: Monitor database query logs for anomalous syntax or unexpected access patterns indicative of SQL injection attempts.

Compensating Controls: Deploy a WAF configured to detect and block common SQL injection patterns (e.g., 'UNION SELECT', 'OR 1=1').

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

SQL injection is a high-impact vulnerability that requires immediate attention. Organizations using this system should prioritize patching or implementing strict input validation to mitigate the risk of data loss.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Simple Music Cloud Community System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL injection via the 'view_user.php' file.

Executive Summary:
A critical SQL injection vulnerability in the Simple Music Cloud Community System allows unauthenticated attackers to compromise the application database.

Vulnerability Details

CVE-ID: CVE-2026-37338

Affected Software: SourceCodester Simple Music Cloud Community System

Affected Versions: v1.0

Vulnerability: The application does not adequately validate input in the 'view_user.php' file. This enables an unauthenticated attacker to inject SQL queries, potentially compromising the integrity and confidentiality of the entire database.

Business Impact

The CVSS score of 9.4 reflects the severe risk of unauthorized data access. Exploitation could lead to the exposure of user credentials, personal information, and the total loss of database integrity.

Remediation Plan

Immediate Action: Update to the latest version of the system or apply the vendor-provided patch.

Proactive Monitoring: Watch database query logs for suspicious activity and utilize database activity monitoring (DAM) to detect unauthorized access.

Compensating Controls: Use a WAF to filter malicious traffic and sanitize inputs before they reach the application backend.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease with which SQL injection can be exploited, administrators must ensure that all input fields are sanitized. Immediate patching is critical to securing the application against external database threats.

---METADATA---
VENDOR: itsourcecode
PRODUCT: Free Hotel Reservation System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1 that could allow an attacker to compromise the application's integrity and confidentiality.

Executive Summary:
itsourcecode Free Hotel Reservation System 1 contains a high-severity security vulnerability that poses a significant risk to guest data and system availability.

Vulnerability Details

CVE-ID: CVE-2026-3730

Affected Software: itsourcecode Free Hotel Reservation System

Affected Versions: 1

Vulnerability: The application contains an unspecified security flaw in version 1. While the exact authentication requirements are not detailed in the initial disclosure, the vulnerability likely resides in a core processing function, potentially allowing an attacker to bypass standard security controls.

Business Impact

A successful exploit could lead to the unauthorized disclosure of sensitive guest information, including personal details and booking history. Given the CVSS score of 7.3, this High-severity vulnerability could also result in the modification of reservation data or system downtime, leading to significant reputational damage and financial loss for hospitality providers.

Remediation Plan

Immediate Action: Administrators should immediately apply any available security patches from the vendor or migrate to a supported, updated version of the reservation system.

Proactive Monitoring: Implement rigorous monitoring of web server logs for unusual POST requests or unauthorized access attempts targeting the reservation management interface.

Compensating Controls: Deploy a Web Application Firewall (WAF) with generic exploit detection rules to filter potentially malicious traffic while awaiting a formal patch.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a public-facing reservation system, the potential for exploitation is high once technical details emerge.

Analyst Recommendation

This vulnerability represents a significant risk to the confidentiality of customer data. Organizations utilizing this software must prioritize the application of vendor-provided updates immediately to mitigate the risk of unauthorized access and data exfiltration.

---METADATA---
VENDOR: Fire-Boltt
PRODUCT: Smartwatch FB BGS001
AFFECTED_VERSIONS: Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Fire-Boltt Smartwatch FB BGS001 firmware allows unauthorized access via GATT Write Request commands, enabling replay attacks using captured BLE packets.

Executive Summary:
A critical authentication bypass vulnerability in Fire-Boltt Smartwatch FB BGS001 firmware allows attackers to execute arbitrary commands via BLE replay attacks.

Vulnerability Details

CVE-ID: CVE-2026-37271

Affected Software: Fire-Boltt Smartwatch FB BGS001

Affected Versions: Fire-Boltt Smartwatch FB BGS001 Firmware: MOY-JS14-2.0.4

Vulnerability: The device suffers from improper authentication, failing to validate sessions for GATT Write Request commands. An unauthenticated attacker in physical proximity can capture and replay Bluetooth Low Energy (BLE) packets to trigger device functions.

Business Impact

This vulnerability poses a significant risk to user privacy and device integrity. With a CVSS score of 9.8, the potential for total system compromise is high, as an attacker could manipulate smartwatch functions without user consent. Such unauthorized access could lead to the exposure of sensitive personal data or the disruption of critical device services.

Remediation Plan

Immediate Action: Review the vendor advisory at https://github.com/advisories/GHSA-wjqj-v3q8-x4h3 and apply firmware updates if available.

Proactive Monitoring: Monitor the environment for unusual Bluetooth pairing requests or unexpected device behavior that may indicate unauthorized BLE interaction.

Compensating Controls: Disable Bluetooth connectivity on the device when not in use and avoid pairing in public, high-traffic areas where BLE sniffing could occur.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity of this authentication bypass, administrators and users must prioritize the application of security patches. If a firmware update is not currently available, maintain strict physical control over the device and limit exposure to unauthorized Bluetooth environments.

---METADATA---
VENDOR: OpenAirInterface
PRODUCT: OpenAirInterface5G (nr-softmodem)
AFFECTED_VERSIONS: 2.4.0
---END_METADATA---

Description Summary:
A divide-by-zero vulnerability in the O-RAN RAN function module of OpenAirInterface5G can lead to application crashes.

Executive Summary:
A critical logic flaw in the OpenAirInterface5G nr-softmodem could cause service outages by triggering an unhandled exception during PRB usage calculations.

Vulnerability Details

CVE-ID: CVE-2026-37232

Affected Software: OpenAirInterface OpenAirInterface5G

Affected Versions: 2.4.0 (nr-softmodem)

Vulnerability: The vulnerability exists in the fill_RRU_PrbTotDl() and fill_RRU_PrbTotUl() functions, where the software performs a division operation without validating the divisor. An unauthenticated remote attacker can trigger this condition, causing the service to crash and resulting in a denial-of-service.

Business Impact

With a CVSS score of 8.6, this vulnerability poses a high risk to telecommunications infrastructure availability. A crash in the nr-softmodem component can disrupt 5G connectivity for connected users, leading to service degradation and potential operational losses for operators relying on this software.

Remediation Plan

Immediate Action: Update the OpenAirInterface5G deployment to a patched version that implements proper zero-check validation in the affected functions.

Proactive Monitoring: Monitor the nr-softmodem service logs for frequent restarts or crash reports that may indicate exploitation attempts.

Compensating Controls: Deploy rate-limiting at the network edge to mitigate potential floods of traffic that might trigger the vulnerable calculation routines.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ease of triggering a crash makes the potential for exploitation high.

Analyst Recommendation

Organizations utilizing OpenAirInterface5G for 5G research or deployment should prioritize patching the nr-softmodem component. Ensuring the stability of these core functions is essential to maintaining network uptime and preventing unauthorized service interruption.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
Another security flaw has been discovered in version 1 of the code-projects Simple Flight Ticket Booking System, affecting its overall security.

Executive Summary:
The Simple Flight Ticket Booking System version 1 contains an additional high-severity vulnerability that further increases the risk of system compromise.

Vulnerability Details

CVE-ID: CVE-2026-3723

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: This is yet another security flaw identified in version 1 of the Simple Flight Ticket Booking System. The vulnerability likely pertains to session management or insecure data storage, which could be exploited by an attacker to gain persistent access to the system.

Business Impact

The CVSS score of 7.3 confirms the High severity of this flaw. If exploited alongside other vulnerabilities in this product, an attacker could achieve complete control over the application, leading to massive data exfiltration and the total disruption of booking services.

Remediation Plan

Immediate Action: Apply all available security updates for the Simple Flight Ticket Booking System version 1 immediately.

Proactive Monitoring: Implement comprehensive logging for all administrative actions and monitor for any unauthorized changes to the application's source code or configuration files.

Compensating Controls: Deploy the application within a containerized environment to limit the impact of a potential compromise and use a WAF to block known exploit payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. The clustering of several CVEs for this product highlights a critical need for immediate remediation.

Analyst Recommendation

The cumulative risk of multiple high-severity vulnerabilities in a single product version is extreme. Administrators must apply all relevant patches immediately or consider transitioning to a more robust and frequently audited booking solution to ensure data security.

---METADATA---
VENDOR: Wavlink
PRODUCT: WL-WN579X3-C
AFFECTED_VERSIONS: Version 231124; see vendor advisory for others.
---END_METADATA---

Description Summary:
A high-severity vulnerability has been identified in the Wavlink WL-WN579X3-C router, specifically affecting firmware version 231124, potentially allowing for unauthorized system compromise.

Executive Summary:
The Wavlink WL-WN579X3-C router contains a critical vulnerability that could allow an attacker to compromise the device, posing a significant risk to network integrity and data privacy.

Vulnerability Details

CVE-ID: CVE-2026-3715

Affected Software: Wavlink WL-WN579X3-C

Affected Versions: Version 231124

Vulnerability: This vulnerability involves a flaw in the device's firmware processing. Based on the high CVSS score and the nature of the hardware, it likely involves an unauthenticated path that allows for remote command execution or significant configuration manipulation.

Business Impact

A successful exploit of this vulnerability could lead to a total compromise of the network gateway, enabling attackers to intercept traffic, pivot to internal resources, or launch distributed denial-of-service (DDoS) attacks. With a CVSS score of 8.8, the severity is classified as High, reflecting the potential for complete loss of confidentiality and integrity for all data passing through the affected hardware.

Remediation Plan

Immediate Action: Administrators must immediately update the Wavlink WL-WN579X3-C firmware to the latest secure version provided by the vendor to close the vulnerability.

Proactive Monitoring: Review device system logs for unauthorized configuration changes or unusual outbound traffic patterns that may indicate a persistent compromise.

Compensating Controls: If patching is delayed, restrict administrative access to the device's web interface to trusted internal IP addresses only and disable remote management features.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a common networking peripheral, the potential for exploitation is high once technical details are reverse-engineered.

Analyst Recommendation

The high CVSS score of 8.8 necessitates an immediate response to prevent unauthorized network access. Organizations using Wavlink hardware should prioritize this firmware update as part of their emergency patch management cycle to mitigate the risk of perimeter breach.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
A weakness in code-projects Simple Flight Ticket Booking System version 1 has been identified, potentially allowing for data manipulation or unauthorized access.

Executive Summary:
A high-severity weakness in the Simple Flight Ticket Booking System version 1 poses a risk to the integrity and confidentiality of the booking database.

Vulnerability Details

CVE-ID: CVE-2026-3709

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: This vulnerability represents a distinct weakness from other flaws in the same product version. It likely involves improper input validation, which could be exploited to perform SQL injection or bypass authentication mechanisms within the booking workflow.

Business Impact

With a CVSS score of 7.3, this High severity vulnerability could result in the theft of user credentials or the unauthorized modification of flight prices and booking statuses, leading to financial discrepancies and a loss of organizational integrity.

Remediation Plan

Immediate Action: Update the application to the latest version provided by the vendor to resolve the identified security weakness.

Proactive Monitoring: Monitor database logs for unusual query patterns and implement alerts for failed authentication attempts to the administrative backend.

Compensating Controls: Implement strict input validation and output encoding across the entire application to mitigate the risk of common web-based attacks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, the discovery of multiple flaws in the same version suggests a broader need for a security audit of the software.

Analyst Recommendation

The presence of multiple vulnerabilities in version 1 of this software indicates a high risk for any organization using it. We recommend an immediate update and a review of the application's security posture to prevent potential data breaches.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
A security flaw in code-projects Simple Flight Ticket Booking System version 1 could lead to unauthorized access to booking records or user data.

Executive Summary:
The Simple Flight Ticket Booking System version 1 is vulnerable to a high-severity flaw that could expose sensitive traveler information and booking details.

Vulnerability Details

CVE-ID: CVE-2026-3708

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: A security flaw has been discovered in version 1 of this booking system. While the specific type is not defined, these systems are often susceptible to Broken Access Control (BAC) or Cross-Site Scripting (XSS), which could allow attackers to view or modify ticket information.

Business Impact

The CVSS score of 7.3 classifies this as a High severity vulnerability. Exploitation could lead to the exposure of Personal Identifiable Information (PII) of travelers, unauthorized ticket cancellations, and significant reputational damage to the service provider.

Remediation Plan

Immediate Action: Apply the latest security patches from code-projects or upgrade to a more modern booking platform.

Proactive Monitoring: Review web server logs for attempts to access booking IDs sequentially or other signs of insecure direct object reference (IDOR) attacks.

Compensating Controls: Use a Web Application Firewall (WAF) to filter malicious requests and ensure that all user sessions are properly validated before granting access to data.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. These types of open-source projects are often utilized as templates, increasing the potential attack surface.

Analyst Recommendation

Protecting traveler data is a critical requirement for booking systems. Administrators should apply the necessary updates immediately and conduct a thorough review of access control logic to ensure that users can only access their own booking information.

---METADATA---
VENDOR: Wavlink
PRODUCT: NU516U1 Router
AFFECTED_VERSIONS: 251208
---END_METADATA---

Description Summary:
A remote out-of-bounds write vulnerability in the Wavlink NU516U1 router allows attackers to manipulate the ipaddr argument in /cgi-bin/login.cgi, potentially leading to full system compromise.

Executive Summary:
A critical out-of-bounds write vulnerability in Wavlink NU516U1 routers allows remote attackers to execute arbitrary code and gain full control over the device.

Vulnerability Details

CVE-ID: CVE-2026-3703

Affected Software: Wavlink NU516U1

Affected Versions: 251208

Vulnerability: This flaw exists within the sub_401A10 function of the /cgi-bin/login.cgi file. A remote, unauthenticated attacker can manipulate the ipaddr argument to trigger an out-of-bounds write, leading to memory corruption and potential code execution.

Business Impact

A successful exploit allows an external actor to gain unauthorized access to the router’s operating system. This could result in the interception of network traffic, credential theft, or the recruitment of the device into a botnet. The CVSS score of 9.8 reflects the critical nature of this vulnerability due to its remote exploitability and the availability of public exploit code.

Remediation Plan

Immediate Action: Update the router firmware to the latest version provided by Wavlink immediately, as a fix has been professionally released.

Proactive Monitoring: Monitor network traffic for unusual outbound connections and review device logs for suspicious activity originating from the /cgi-bin/login.cgi endpoint.

Compensating Controls: Restrict access to the router’s web management interface from the public internet using a firewall or VPN to minimize the attack surface.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of Mar 8, 2026, a public exploit has been released for this vulnerability. Organizations using this hardware must prioritize patching immediately, as the barrier to entry for attackers is significantly lowered by the public disclosure of exploit mechanics.

Analyst Recommendation

The severity of this vulnerability, combined with the availability of a public exploit, necessitates immediate remediation. Administrators should verify the firmware version of all Wavlink NU516U1 devices and apply the vendor-provided patch without delay to prevent unauthorized remote access.

---METADATA---
VENDOR: H3C
PRODUCT: Magic B1 Router
AFFECTED_VERSIONS: Up to 100R004
---END_METADATA---

Description Summary:
A security vulnerability in the H3C Magic B1 router up to version 100R004 could allow for unauthorized device access or control.

Executive Summary:
H3C Magic B1 routers are affected by a high-severity vulnerability that could allow attackers to compromise the device and the network it serves.

Vulnerability Details

CVE-ID: CVE-2026-3701

Affected Software: H3C Magic B1

Affected Versions: Up to 100R004

Vulnerability: While the specific vulnerability type is not detailed, it affects the Magic B1 router firmware. The CVSS score of 8.8 suggests a significant flaw, likely involving remote access or administrative bypass.

Business Impact

A compromise of a perimeter router like the Magic B1 allows attackers to monitor network traffic, perform man-in-the-middle attacks, or launch further attacks against internal network assets. The CVSS score of 8.8 reflects the high severity of a router-level compromise.

Remediation Plan

Immediate Action: Update the H3C Magic B1 firmware to a version newer than 100R004 immediately.

Proactive Monitoring: Monitor for unusual administrative logins to the router and check for unauthorized changes to DNS or routing settings.

Compensating Controls: Disable remote management features on the WAN interface and restrict local management access to specific trusted IP addresses.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 8, 2026, there is no public information indicating active exploitation. Router vulnerabilities are frequently targeted by state-sponsored actors and botnets once technical details are known.

Analyst Recommendation

Immediate firmware updates are critical for all affected H3C Magic B1 routers. Network administrators should treat this as a high-priority task to ensure the security of the network perimeter.