---METADATA---
VENDOR: Totolink
PRODUCT: A8000RU
AFFECTED_VERSIONS: 7.1cu.643_b20200521
---END_METADATA---

Description Summary:
A remote OS command injection vulnerability exists in the Totolink A8000RU router via the pptpPassThru argument in the setVpnPassCfg function.

Executive Summary:
An unauthenticated OS command injection vulnerability in the Totolink A8000RU router allows remote attackers to execute arbitrary system commands, posing a critical risk of total device compromise.

Vulnerability Details

CVE-ID: CVE-2026-7037

Affected Software: Totolink A8000RU

Affected Versions: 7.1cu.643_b20200521

Vulnerability: This is an OS command injection flaw within the setVpnPassCfg function of the /cgi-bin/cstecgi.cgi component. Attackers can reach this endpoint without authentication to inject malicious commands that run with system-level privileges.

Business Impact

The CVSS score of 9.8 reflects the ease of exploitation and the severity of the impact. Successful exploitation grants an attacker full control over the network device, which can be used to intercept sensitive traffic, pivot into internal network segments, or deploy persistent malware, leading to severe data breaches and operational downtime.

Remediation Plan

Immediate Action: Disconnect the affected device from the internet or restrict access to the management interface to trusted IP addresses only until a firmware patch is applied.

Proactive Monitoring: Inspect system logs for unusual command executions or attempts to access the cstecgi.cgi file from unauthorized external IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) or intrusion prevention system (IPS) configured to block malicious patterns targeting CGI scripts and command injection sequences.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of April 26, 2026, public exploit code is available for this vulnerability. Given the ease of remote execution and the availability of proof-of-concept material, the likelihood of active exploitation is extremely high.

Analyst Recommendation

This vulnerability represents a critical threat to network integrity. Organizations using the Totolink A8000RU should prioritize immediate isolation of the device. If an official firmware update is unavailable, ensure the device is not accessible from the public internet and evaluate replacement options if the vendor does not provide a timely fix.

---METADATA---
VENDOR: SmythOS
PRODUCT: SRE
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in SmythOS SRE, affecting versions up to 0.

Executive Summary:
A high-severity security vulnerability in the SmythOS SRE product could expose organizations to unauthorized system access.

Vulnerability Details

CVE-ID: CVE-2026-7022

Affected Software: SmythOS SRE

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects SmythOS SRE up to version 0. While technical details are emerging, the vulnerability represents a significant security oversight that could be exploited to compromise the underlying system's security posture.

Business Impact

Exploitation of this flaw could lead to the unauthorized access of sensitive system management functions, potentially resulting in full system compromise. The CVSS score of 7.3 confirms the high severity of this vulnerability, which poses a substantial risk to the availability and security of the affected infrastructure.

Remediation Plan

Immediate Action: Immediately update the SmythOS SRE component to the latest vendor-provided release.

Proactive Monitoring: Monitor system logs for unauthorized authentication attempts or unexpected changes in service configuration.

Compensating Controls: Apply strict firewall rules to restrict access to the SRE management interface to authorized personnel only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators must treat this vulnerability with high priority. We strongly advise updating the affected software immediately and ensuring that management interfaces are secured against unauthorized external access.

---METADATA---
VENDOR: Vanna-AI
PRODUCT: Vanna
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in the Vanna-AI Vanna framework, affecting versions up to 2.

Executive Summary:
A high-severity vulnerability in the Vanna-AI Vanna framework could allow for unauthorized system interactions.

Vulnerability Details

CVE-ID: CVE-2026-6977

Affected Software: Vanna-AI Vanna

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects Vanna-AI Vanna up to version 2. The specific nature of the flaw remains under investigation, but it represents a security weakness that could be leveraged by an attacker to gain unauthorized access or influence the AI-driven data retrieval processes.

Business Impact

A successful exploit could result in unauthorized access to sensitive data processed by the Vanna AI framework, leading to potential information disclosure. With a CVSS score of 7.3, this high-severity issue necessitates a prompt response to maintain the confidentiality and integrity of AI-assisted data workflows.

Remediation Plan

Immediate Action: Upgrade the Vanna library to the latest stable version provided by Vanna-AI to remediate the vulnerability.

Proactive Monitoring: Review access logs for unusual queries or unauthorized API calls directed at the Vanna integration.

Compensating Controls: Use network segmentation to isolate systems running Vanna from critical internal databases until the software is patched.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should immediately identify all instances of Vanna-AI Vanna within their environment. Applying the latest vendor updates is critical to neutralizing the risk of exploitation and ensuring the security of AI-driven analytical platforms.

---METADATA---
VENDOR: BookingPress
PRODUCT: BookingPress Pro
AFFECTED_VERSIONS: all versions up to, and including, 5.6
---END_METADATA---

Description Summary:
The BookingPress Pro plugin for WordPress contains an arbitrary file upload vulnerability that can lead to unauthenticated remote code execution.

Executive Summary:
A critical arbitrary file upload vulnerability in the BookingPress Pro plugin for WordPress poses a severe risk of unauthenticated remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-6960

Affected Software: BookingPress, BookingPress Pro

Affected Versions: all versions up to, and including, 5.6

Vulnerability: The vulnerability exists due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function. This allows an unauthenticated attacker to upload malicious files, specifically if a signature custom field is enabled on the booking form, leading to potential remote code execution.

Business Impact

With a CVSS score of 9.8, this vulnerability is classified as critical. Successful exploitation provides attackers with the ability to execute arbitrary code on the underlying server, potentially leading to a complete system compromise, unauthorized access to sensitive booking data, and significant operational disruption.

Remediation Plan

Immediate Action: Update to the latest version of BookingPress Pro immediately to apply the necessary file validation patches.

Proactive Monitoring: Review web server access logs for anomalous file upload attempts or requests to unexpected file types within the plugin's upload directory.

Compensating Controls: Implement a Web Application Firewall (WAF) to block suspicious file upload requests and restrict access to the booking form interface if feasible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity and the ease of exploitation via the booking form, immediate patching is required. Administrators should verify their plugin version and apply updates without delay to prevent potential system-wide compromise.

---METADATA---
VENDOR: simple-git
PRODUCT: simple-git
AFFECTED_VERSIONS: Versions before 3.36.0
---END_METADATA---

Description Summary:
The simple-git package is vulnerable to Remote Code Execution (RCE) via a bypass of previous security fixes, allowing attackers to inject malicious git configurations.

Executive Summary:
A critical vulnerability in the simple-git package allows unauthenticated remote attackers to achieve Remote Code Execution (RCE) by leveraging insecure configuration options.

Vulnerability Details

CVE-ID: CVE-2026-6951

Affected Software: simple-git

Affected Versions: Versions before 3.36.0

Vulnerability: This is an RCE vulnerability stemming from an incomplete fix for CVE-2022-25912; by using the --config form instead of the blocked -c option, an attacker can enable dangerous git protocols. This allows unauthenticated attackers to execute arbitrary code if they can influence the input passed to the library.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a critical risk to organizational infrastructure. Successful exploitation allows for complete system compromise, enabling attackers to execute arbitrary commands, exfiltrate sensitive data, or deploy persistent backdoors within the development or production environment.

Remediation Plan

Immediate Action: Upgrade the simple-git package to version 3.36.0 or higher immediately to apply the necessary configuration blocking.

Proactive Monitoring: Review application logs for unusual git command arguments or attempts to utilize ext:: clone sources within input parameters.

Compensating Controls: Implement input validation to sanitize any untrusted data that is passed as arguments to the simple-git library.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the criticality of RCE, the potential for exploitation is high.

Analyst Recommendation

The severity of this flaw necessitates immediate remediation. Organizations relying on simple-git for repository management must prioritize upgrading to version 3.36.0 to eliminate the risk of arbitrary code execution.

---METADATA---
VENDOR: Radare
PRODUCT: radare2-mcp
AFFECTED_VERSIONS: 1.6.0 and earlier
---END_METADATA---

Description Summary:
An OS command injection vulnerability in radare2-mcp allows unauthenticated remote attackers to execute arbitrary commands via the JSON-RPC interface.

Executive Summary:
A critical command injection vulnerability in radare2-mcp allows unauthenticated attackers to execute arbitrary OS commands, leading to full host compromise.

Vulnerability Details

CVE-ID: CVE-2026-6942

Affected Software: radare2-mcp

Affected Versions: 1.6.0 and earlier

Vulnerability: The application fails to properly filter shell metacharacters in the JSON-RPC interface parameters passed to r2_cmd_str(). This allows an attacker to inject shell commands that execute with the privileges of the application.

Business Impact

A CVSS score of 9.8 indicates that this vulnerability can be leveraged for full system takeover. If exposed externally, it allows any remote attacker to execute arbitrary code, which is catastrophic for the host environment.

Remediation Plan

Immediate Action: Update to the latest version of radare2-mcp as soon as available.

Proactive Monitoring: Monitor for unexpected shell command execution and unusual network traffic to the JSON-RPC port.

Compensating Controls: Restrict access to the JSON-RPC interface to trusted internal IP addresses only via firewall rules.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Command injection is a high-impact vulnerability that requires immediate mitigation. All users running radare2-mcp should restrict network access to the service and prioritize applying the update to remediate the flaw.

---METADATA---
VENDOR: Premmerce
PRODUCT: Dev Tools
AFFECTED_VERSIONS: <= 2
---END_METADATA---

Description Summary:
The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution due to missing authorization checks in versions up to 2.

Executive Summary:
A critical authorization bypass vulnerability in the Premmerce Dev Tools plugin allows unauthenticated attackers to achieve Remote Code Execution (RCE).

Vulnerability Details

CVE-ID: CVE-2026-6933

Affected Software: Premmerce Dev Tools

Affected Versions: <= 2

Vulnerability: The plugin fails to perform proper authorization checks on critical functions, allowing an unauthenticated attacker to execute arbitrary code on the underlying server.

Business Impact

With a CVSS score of 8.8, this is an extremely dangerous vulnerability. An attacker can achieve complete control over the WordPress installation, potentially gaining full server access, installing backdoors, or pivoting into the internal network.

Remediation Plan

Immediate Action: Update the Premmerce Dev Tools plugin immediately or deactivate and remove the plugin if it is not strictly required for production operations.

Proactive Monitoring: Monitor server logs for unexpected process execution or modifications to WordPress core files.

Compensating Controls: Use a Web Application Firewall (WAF) to block unauthorized requests to the vulnerable plugin endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Remote Code Execution vulnerabilities require immediate attention. Given the ease with which an unauthenticated attacker can exploit this, all instances of the Premmerce Dev Tools plugin must be updated or removed from the environment without delay.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: Prior to 147
CONFIDENCE: high
MISSING: patch, technical_details
---END_METADATA---

Description Summary:
A race condition exists within the GPU component of Google Chrome on Windows, affecting versions prior to 147.

Executive Summary:
A critical race condition in the Google Chrome GPU process on Windows creates an opportunity for attackers to compromise system security.

Vulnerability Details

CVE-ID: CVE-2026-6921

Affected Software: Google Chrome on Windows

Affected Versions: Prior to 147

Vulnerability: The vulnerability involves a race condition in the GPU processing component, which could allow an unauthenticated attacker to execute arbitrary code or cause a system crash through malicious web content.

Business Impact

A CVSS score of 8.3 indicates a high risk of remote code execution or system instability. Successful exploitation could allow an attacker to escape the browser sandbox, potentially leading to full user-level compromise of the host machine and subsequent access to corporate resources.

Remediation Plan

Immediate Action: Update all instances of Google Chrome on Windows to version 147 or later as soon as the update is released.

Proactive Monitoring: Employ endpoint detection and response (EDR) solutions to monitor for suspicious browser-initiated child processes or unexpected GPU driver behavior.

Compensating Controls: Utilize browser security policies to disable non-essential features and enforce the latest security patches through centralized management software.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Browser vulnerabilities are frequent targets for exploitation. Organizations should ensure that automated update mechanisms for Chrome are enabled and verified, ensuring all endpoints are patched to version 147 to eliminate this race condition risk.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: Prior to 147.0.7727.117
---END_METADATA---

Description Summary:
An out-of-bounds read vulnerability in the Google Chrome GPU process on Android allows a remote attacker to achieve sandbox escape via a crafted HTML page.

Executive Summary:
A critical out-of-bounds read vulnerability in Google Chrome for Android enables remote attackers to escape the browser sandbox and potentially compromise the underlying device.

Vulnerability Details

CVE-ID: CVE-2026-6920

Affected Software: Google Chrome

Affected Versions: Prior to 147.0.7727.117

Vulnerability: This vulnerability involves an out-of-bounds read within the GPU process. An attacker who has already compromised the renderer process can leverage this flaw to escape the security sandbox via a malicious HTML page.

Business Impact

Successful exploitation poses a severe risk to mobile device security, potentially leading to unauthorized access to user data and system-level compromise. Given the CVSS score of 9.6, the impact on integrity and confidentiality is extreme, warranting immediate attention to prevent full device takeover.

Remediation Plan

Immediate Action: Update Google Chrome on all Android devices to version 147.0.7727.117 or later immediately.

Proactive Monitoring: Monitor device traffic for anomalous HTML rendering patterns and review mobile endpoint logs for unexpected process crashes or unauthorized sandbox activity.

Compensating Controls: Use mobile device management (MDM) solutions to enforce browser update policies and restrict the execution of untrusted or unknown web content.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this flaw cannot be overstated, as sandbox escapes are highly sought after by threat actors for persistent device compromise. IT administrators must prioritize the deployment of the latest Chrome update across all managed Android assets to mitigate this critical risk.

---METADATA---
VENDOR: Eclipse Foundation
PRODUCT: OpenJ9
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in Eclipse OpenJ9 may lead to undefined behavior or potential system instability.

Executive Summary:
An unspecified vulnerability in Eclipse OpenJ9 requires urgent investigation and patching to maintain the stability and security of Java-based environments.

Vulnerability Details

CVE-ID: CVE-2026-6918

Affected Software: Eclipse Foundation OpenJ9

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: While specific details remain limited, the flaw affects the core functionality of the OpenJ9 runtime. Given the high severity rating, it likely involves memory management or execution logic that could be manipulated by an attacker.

Business Impact

With a CVSS score of 7.5, this issue poses a critical threat to the availability of enterprise Java applications. Exploitation could lead to arbitrary code execution or significant system crashes, severely impacting business continuity and data integrity.

Remediation Plan

Immediate Action: Consult the official Eclipse OpenJ9 security advisories and apply the latest runtime updates or patches immediately.

Proactive Monitoring: Monitor JVM performance metrics and system logs for unexpected crashes, memory errors, or anomalous execution patterns.

Compensating Controls: Ensure that Java applications are running with the principle of least privilege to minimize the potential impact of an exploit should the runtime be compromised.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

As the core runtime for many applications, OpenJ9 is a high-value target. Organizations should prioritize updating their JRE/JDK environments as soon as the vendor releases the necessary patches.

---METADATA---
VENDOR: AWS
PRODUCT: Ops Wheel
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
AWS Ops Wheel is vulnerable to an attribute modification flaw in Cognito User Pool configuration, allowing authenticated users to escalate their privileges to deployment administrator.

Executive Summary:
An authenticated privilege escalation vulnerability in AWS Ops Wheel allows remote users to gain deployment administrator access by manipulating Cognito User Pool attributes.

Vulnerability Details

CVE-ID: CVE-2026-6912

Affected Software: AWS Ops Wheel

Affected Versions: See vendor advisory for affected versions (Fixed in PR #165)

Vulnerability: The vulnerability involves improper control of dynamically-determined object attributes. An authenticated user can leverage a crafted UpdateUserAttributes API call to modify the custom:deployment_admin attribute, effectively granting themselves unauthorized administrative control over user accounts.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a significant threat to cloud administrative integrity. Successful exploitation leads to full unauthorized administrative access, allowing an attacker to manipulate user accounts, access sensitive cloud resources, and potentially compromise the entire deployment environment.

Remediation Plan

Immediate Action: Update AWS Ops Wheel to the version containing the fix for PR #165 or apply the vendor-recommended security patch immediately.

Proactive Monitoring: Audit CloudTrail and Cognito logs for any UpdateUserAttributes API calls that modify custom attributes, specifically looking for unauthorized changes to deployment_admin flags.

Compensating Controls: Implement strict IAM policies to restrict the permissions of standard users, preventing them from accessing or modifying sensitive Cognito user attributes.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Privilege escalation vulnerabilities are critical in cloud environments. Administrators must audit current Cognito configurations and apply the necessary updates to Ops Wheel to prevent unauthorized administrative takeover.

---METADATA---
VENDOR: AWS
PRODUCT: Ops Wheel
AFFECTED_VERSIONS: See vendor advisory
CONFIDENCE: high
MISSING: versions
---END_METADATA---

Description Summary:
A missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge tokens and gain administrative access to the application.

Executive Summary:
AWS Ops Wheel is affected by a critical authentication bypass vulnerability that permits unauthenticated attackers to forge JWT tokens and gain full administrative control.

Vulnerability Details

CVE-ID: CVE-2026-6911

Affected Software: AWS Ops Wheel

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability stems from a complete lack of JWT signature verification. An unauthenticated attacker can craft and submit arbitrary JWTs to the API Gateway to impersonate administrative users, bypassing all authentication mechanisms.

Business Impact

This flaw grants an attacker full administrative control over the application, including the ability to manipulate data across all tenants and manage user accounts in Cognito. The CVSS score of 9.8 reflects the extreme risk of unauthorized access and potential for massive data breach or service destruction. Organizations relying on this tool for infrastructure management face a critical threat to their entire cloud deployment.

Remediation Plan

Immediate Action: Redeploy the application using the updated repository provided by the vendor and ensure all forked or derivative codebases incorporate the security patch.

Proactive Monitoring: Audit logs for suspicious administrative actions or unauthorized API requests utilizing forged tokens.

Compensating Controls: Restrict access to the API Gateway endpoint via IP whitelisting or mutual TLS until the patch is successfully deployed.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this flaw cannot be overstated; it is a complete authentication bypass. Administrators must treat this as an emergency update, as the flaw allows for unauthenticated access to the core administrative functions of the deployment.

---METADATA---
VENDOR: B&R Industrial Automation GmbH
PRODUCT: APROL
AFFECTED_VERSIONS: 0 up to (excluding) R 4.4-01P5
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An untrusted search path vulnerability in B&R Industrial Automation APROL allows local authenticated users to escalate privileges by manipulating the application's search environment.

Executive Summary:
An untrusted search path vulnerability in B&R Industrial Automation APROL versions prior to R 4.4-01P5 poses a high risk of privilege escalation to local attackers.

Vulnerability Details

CVE-ID: CVE-2026-6901

Affected Software: B&R Industrial Automation GmbH APROL

Affected Versions: 0 up to (excluding) R 4.4-01P5

Vulnerability: The software contains an untrusted search path vulnerability (CWE-426), which permits a local, authenticated attacker to influence the location from which the application loads resources. By placing malicious binaries in the path, an attacker can achieve privilege escalation within the system.

Business Impact

With a CVSS score of 7.7, this vulnerability presents a substantial risk to industrial control environments. Successful exploitation allows a local user to gain unauthorized control over the APROL system, potentially leading to the compromise of critical industrial processes and long-term system instability.

Remediation Plan

Immediate Action: Update APROL to version R 4.4-01P5 or higher to remediate the search path vulnerability.

Proactive Monitoring: Monitor system logs for unauthorized file modifications or the execution of unexpected binaries within the application's directory structure.

Compensating Controls: Restrict local user permissions and implement robust file system auditing to prevent unauthorized modification of application configuration and binary paths.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential impact on industrial control systems, organizations using APROL must prioritize the deployment of the vendor's update. Restricting local access is essential to mitigating the impact of this vulnerability until the patch can be applied.

---METADATA---
VENDOR: B&R Industrial Automation
PRODUCT: APROL
AFFECTED_VERSIONS: 0 up to (excluding) R 4.4-01P5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper certificate validation vulnerability in B&R Industrial Automation's APROL allows potential security bypasses.

Executive Summary:
A critical certificate validation flaw in B&R APROL exposes industrial control systems to potential man-in-the-middle attacks, necessitating immediate attention.

Vulnerability Details

CVE-ID: CVE-2026-6900

Affected Software: B&R Industrial Automation APROL

Affected Versions: 0 up to (excluding) R 4.4-01P5

Vulnerability: This vulnerability (CWE-295) involves improper validation of digital certificates, which could allow an unauthenticated attacker to intercept or manipulate encrypted communications between system components.

Business Impact

The exploitation of this vulnerability could lead to a complete compromise of the integrity and confidentiality of communication channels within the APROL environment. Given the high CVSS score of 7.4, this risk is substantial for industrial operations, as it could facilitate unauthorized command injection or the exfiltration of sensitive process data, leading to operational downtime or safety risks.

Remediation Plan

Immediate Action: Update the APROL software to version R 4.4-01P5 or later as specified by the vendor advisory.

Proactive Monitoring: Monitor network traffic logs for unusual certificate handshakes or unexpected communication patterns between APROL nodes.

Compensating Controls: Implement strict network segmentation to isolate APROL components and ensure that only authorized, trusted connections are permitted to communicate with the application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in an industrial control environment, the potential for exploitation is high.

Analyst Recommendation

The severity of this certificate validation flaw requires prompt action to prevent potential man-in-the-middle attacks. Administrators should prioritize testing and deploying the vendor-provided update to all affected APROL installations immediately to ensure the security of industrial communication channels.

---METADATA---
VENDOR: WishList Products
PRODUCT: WishList Member
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The WishList Member plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check.

Executive Summary:
A high-severity authorization vulnerability in the WishList Member WordPress plugin allows attackers to modify sensitive data by bypassing capability checks.

Vulnerability Details

CVE-ID: CVE-2026-6898

Affected Software: WishList Products WishList Member

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the 'WishListMember3_Hooks::generate_api_key' function, which lacks proper capability checks. This allows an unauthorized user to invoke administrative functions and modify system data.

Business Impact

A CVSS score of 8.8 highlights the severity of this flaw. Exploitation could lead to unauthorized API key generation, granting attackers persistent access to the platform and the ability to manipulate member data or compromise sensitive site information.

Remediation Plan

Immediate Action: Update the WishList Member plugin to the latest version provided by the vendor.

Proactive Monitoring: Check logs for unauthorized calls to API generation functions or unusual administrative activity.

Compensating Controls: Restrict access to the WordPress administrative dashboard to trusted IP addresses only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Missing capability checks are a significant security oversight. Administrators must apply the latest plugin updates immediately to ensure that administrative functions are protected by proper authorization requirements.

---METADATA---
VENDOR: WishList Products
PRODUCT: WishList Member
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The WishList Member plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check.

Executive Summary:
A high-severity authorization vulnerability in the WishList Member WordPress plugin allows attackers to modify system settings by bypassing capability checks.

Vulnerability Details

CVE-ID: CVE-2026-6897

Affected Software: WishList Products WishList Member

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the 'WishListMember\Features\Team_Accounts::save_settings' function, which fails to verify user capabilities. This allows unauthorized users to modify plugin settings.

Business Impact

A CVSS score of 8.8 indicates a high risk. Exploitation could allow an attacker to alter core plugin settings, potentially weakening the site's security posture or redirecting member traffic.

Remediation Plan

Immediate Action: Update the WishList Member plugin to the latest version.

Proactive Monitoring: Regularly review plugin configuration settings for any unexpected changes.

Compensating Controls: Limit access to the WordPress backend to trusted network locations.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Capability checks are fundamental to plugin security. Administrators should update the WishList Member plugin immediately to ensure that configuration settings are protected from unauthorized modification.

---METADATA---
VENDOR: WishList Products
PRODUCT: WishList Member
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The WishList Member plugin for WordPress is vulnerable to sensitive information disclosure and privilege escalation due to missing authorization.

Executive Summary:
A high-severity vulnerability in the WishList Member WordPress plugin allows attackers to disclose sensitive information and escalate privileges through missing authorization.

Vulnerability Details

CVE-ID: CVE-2026-6895

Affected Software: WishList Products WishList Member

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin lacks necessary authorization checks, enabling an attacker to access sensitive information and escalate their privileges. This flaw exposes the internal workings and user account structure of the plugin.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a significant risk of data breach and account takeover. Unauthorized access to sensitive information can lead to further exploitation, while privilege escalation grants attackers administrative control.

Remediation Plan

Immediate Action: Update the WishList Member plugin to the latest version immediately.

Proactive Monitoring: Monitor site traffic for unusual access to administrative or configuration endpoints.

Compensating Controls: Ensure that sensitive directories are protected and that access logs are monitored for anomalous activity.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is critical due to the combination of information disclosure and privilege escalation. Administrators must update the plugin immediately to secure the site against these threats.

---METADATA---
VENDOR: Red Hat
PRODUCT: dracut
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A command injection vulnerability in dracut's legacy DHCP path allows remote attackers on an adjacent network to execute code as root within the initramfs.

Executive Summary:
A high-severity command injection flaw in dracut allows unauthenticated attackers on an adjacent network to achieve root code execution during the system initialization process.

Vulnerability Details

CVE-ID: CVE-2026-6893

Affected Software: Red Hat Enterprise Linux, OpenShift Container Platform, and Hardened Images (using dracut)

Affected Versions: See vendor advisory

Vulnerability: This is a command injection vulnerability located in the legacy DHCP path of dracut. An attacker on an adjacent network can supply specially crafted DHCP options that are improperly handled, resulting in root-level code execution within the initramfs environment.

Business Impact

The CVSS score of 8.8 reflects the high severity of this flaw, as it grants an attacker root access during the early stages of the boot process. This can lead to total system compromise, including the ability to bypass security controls, persist across reboots, and access encrypted data.

Remediation Plan

Immediate Action: Apply the vendor-provided security patches for dracut as detailed in the official Red Hat security advisory.

Proactive Monitoring: Monitor network traffic for suspicious DHCP activity and review system logs for anomalies occurring during the boot sequence.

Compensating Controls: Restrict physical and network access to the local segment to prevent unauthorized devices from interacting with the DHCP service.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is particularly dangerous as it occurs during system startup. Administrators must apply the latest patches provided by Red Hat immediately. Until patching is complete, ensure that only trusted devices are connected to the network segment to mitigate the risk of adjacent network attacks.

---METADATA---
VENDOR: BorG Technology Corporation
PRODUCT: SPM 2007
AFFECTED_VERSIONS: All versions
CONFIDENCE: high
MISSING: patch, exploit_status
---END_METADATA---

Description Summary:
The legacy Borg SPM 2007 application is susceptible to an unauthenticated SQL injection vulnerability, potentially allowing full database compromise.

Executive Summary:
An unauthenticated SQL injection vulnerability in the end-of-life Borg SPM 2007 software poses a critical risk of unauthorized database access and data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-6887

Affected Software: BorG Technology Corporation SPM 2007

Affected Versions: All versions

Vulnerability: The application fails to properly sanitize user-supplied input before executing database queries. This allows an unauthenticated, remote attacker to perform SQL injection attacks to read, modify, or delete sensitive data stored in the backend database.

Business Impact

This vulnerability allows for total compromise of the database, leading to potential theft of intellectual property, customer PII, and loss of data integrity. Given the 9.8 CVSS score, the risk is extreme, particularly for organizations still relying on this unsupported, end-of-life software.

Remediation Plan

Immediate Action: Because this product reached end-of-life in 2008, the recommended action is to decommission the software and migrate to a modern, supported alternative.

Proactive Monitoring: Implement database activity monitoring to detect unauthorized queries or abnormal access patterns that deviate from standard application behavior.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection rule sets to block malicious traffic directed at the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

As the software is long past its end-of-life, patching is unlikely. Organizations must prioritize the migration away from this legacy platform, as it remains highly vulnerable to trivial exploitation by unauthenticated actors.

---METADATA---
VENDOR: BorG Technology Corporation
PRODUCT: SPM 2007
AFFECTED_VERSIONS: SPM 2007
CONFIDENCE: high
MISSING: patch, technical_details
---END_METADATA---

Description Summary:
Borg SPM 2007 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to the system as any user.

Executive Summary:
A critical authentication bypass vulnerability in the legacy Borg SPM 2007 platform poses a severe risk of total unauthorized system access.

Vulnerability Details

CVE-ID: CVE-2026-6886

Affected Software: BorG Technology Corporation, SPM 2007

Affected Versions: SPM 2007

Vulnerability: This is an authentication bypass vulnerability that allows an unauthenticated remote attacker to log into the application as any user, including administrative accounts, without requiring valid credentials.

Business Impact

The ability for an unauthenticated attacker to impersonate any user represents a total compromise of system integrity and confidentiality. Given the CVSS score of 9.8, this vulnerability allows for complete account takeover, leading to potential data theft, unauthorized administrative modifications, and full system compromise. Since the product is end-of-life, the lack of official patches significantly amplifies the business risk.

Remediation Plan

Immediate Action: Given that this product reached end-of-life in 2008, the primary recommendation is to decommission the software immediately and migrate to a supported, modern alternative.

Proactive Monitoring: Inspect server access logs for anomalous login patterns or unauthorized administrative activity originating from unknown IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict ingress filtering and implement network-level segmentation to isolate the application from the broader network.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the age of the software, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is critical and requires immediate attention. Because the software is legacy, it likely lacks modern security controls, making it a prime target for attackers. Organizations should prioritize the migration away from this platform to mitigate the risk of permanent system compromise.

---METADATA---
VENDOR: BorG Technology Corporation
PRODUCT: SPM 2007
AFFECTED_VERSIONS: SPM 2007
CONFIDENCE: high
MISSING: patch, technical_details
---END_METADATA---

Description Summary:
Borg SPM 2007 is susceptible to an arbitrary file upload vulnerability, enabling unauthenticated remote attackers to upload and execute malicious web shells for remote code execution.

Executive Summary:
An arbitrary file upload vulnerability in the legacy Borg SPM 2007 platform allows unauthenticated attackers to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-6885

Affected Software: BorG Technology Corporation, SPM 2007

Affected Versions: SPM 2007

Vulnerability: This is an arbitrary file upload vulnerability that permits an unauthenticated remote attacker to bypass file validation mechanisms to upload and subsequently execute malicious web shell backdoors.

Business Impact

The capability to execute arbitrary code on the underlying server grants an attacker full control over the application environment. With a CVSS score of 9.8, this flaw represents a critical threat, potentially leading to data exfiltration, lateral movement within the network, and complete server compromise. The end-of-life status of the software ensures that no vendor-supplied security patches will be issued to remediate this flaw.

Remediation Plan

Immediate Action: Due to the end-of-life status of this product, the only effective remediation is the immediate decommissioning and replacement of the SPM 2007 platform with a supported solution.

Proactive Monitoring: Monitor the web server’s file system for the creation of unauthorized scripts, particularly in directories with execution permissions, and review web server logs for suspicious POST requests.

Compensating Controls: Implement strict file upload restrictions at the WAF level and enforce read-only file system policies where possible to prevent the execution of uploaded files.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability is extreme. Organizations relying on this software must assume that any exposure to the internet is dangerous and take immediate steps to isolate or replace the system to prevent a full-scale security breach.

---METADATA---
VENDOR: Transbank
PRODUCT: Webpay WordPress Plugin
AFFECTED_VERSIONS: before 1.14.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Transbank Webpay WordPress plugin contains a stored XSS vulnerability that allows unauthenticated attackers to inject malicious scripts into plugin logs.

Executive Summary:
A stored Cross-Site Scripting vulnerability in the Transbank Webpay plugin allows unauthenticated attackers to hijack administrator sessions via malicious log entries.

Vulnerability Details

CVE-ID: CVE-2026-6858

Affected Software: Transbank Webpay WordPress Plugin

Affected Versions: before 1.14.0

Vulnerability: This is a stored Cross-Site Scripting (XSS) vulnerability caused by the failure to sanitize or HTML-encode log data. Unauthenticated attackers can inject malicious scripts into the plugin's logs, which then execute when an administrator views the logs in the WordPress dashboard.

Business Impact

The CVSS score of 7.1 highlights the critical risk of this vulnerability. Because the script executes in the browser of an administrator, an attacker can achieve session hijacking, steal sensitive administrative credentials, or perform unauthorized administrative actions, leading to a complete compromise of the WordPress site.

Remediation Plan

Immediate Action: Upgrade the Transbank Webpay WordPress plugin to version 1.14.0 or later to patch the underlying sanitization flaw.

Proactive Monitoring: Audit existing plugin logs for any suspicious or non-standard entries that may contain obfuscated JavaScript or script tags.

Compensating Controls: Utilize a WAF to inspect incoming traffic and block requests containing script injection patterns before they reach the plugin's logging functionality.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is particularly dangerous because it does not require prior authentication to trigger. Immediate patching is required to prevent attackers from using the logging mechanism as a persistence or privilege escalation vector.

---METADATA---
VENDOR: Başbelen Group
PRODUCT: Pause+ Mobile App
AFFECTED_VERSIONS: Pause+ Mobile App: from v1.0.6 before v1.5
---END_METADATA---

Description Summary:
The Pause+ Mobile App contains an authentication bypass vulnerability due to improper restriction of excessive authentication attempts.

Executive Summary:
The Pause+ Mobile App is susceptible to an authentication bypass, potentially allowing unauthorized users to gain access to the application.

Vulnerability Details

CVE-ID: CVE-2026-6853

Affected Software: Başbelen Group Pause+ Mobile App

Affected Versions: Pause+ Mobile App: from v1.0.6 before v1.5

Vulnerability: The application fails to properly limit the number of failed authentication attempts. This design flaw can be leveraged by an attacker to bypass authentication mechanisms.

Business Impact

An authentication bypass allows an attacker to access the application without valid credentials, potentially exposing sensitive customer data or business information stored within the app. With a CVSS score of 9.8, this vulnerability carries a high risk of unauthorized access and data compromise.

Remediation Plan

Immediate Action: Update the Pause+ Mobile App to version 1.5 or the latest available version provided by the developer.

Proactive Monitoring: Review application logs for patterns of brute-force or rapid, repeated authentication failures which may indicate an attempt to exploit this flaw.

Compensating Controls: If patching is not immediately feasible, utilize mobile device management (MDM) policies to restrict app usage to managed, authorized devices.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Authentication bypasses are critical security failures. Users and administrators of the Pause+ Mobile App should ensure the application is updated to the patched version as soon as possible to mitigate the risk of unauthorized account access.

---METADATA---
VENDOR: TUBITAK BILGEM
PRODUCT: Pardus OS My Computer
AFFECTED_VERSIONS: Pardus OS My Computer: from <=0.7.5 before 0.8.0
---END_METADATA---

Description Summary:
An OS command injection vulnerability in Pardus OS My Computer allows attackers to execute arbitrary commands on the underlying operating system.

Executive Summary:
A critical OS command injection vulnerability in Pardus OS My Computer allows attackers to execute arbitrary system commands, potentially leading to a full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-6849

Affected Software: TUBITAK BILGEM Pardus OS My Computer

Affected Versions: Pardus OS My Computer: from <=0.7.5 before 0.8.0

Vulnerability: This vulnerability is caused by improper neutralization of special elements used in an OS command. By injecting malicious input, an attacker can cause the application to execute arbitrary commands with the privileges of the application, leading to OS command injection.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe threat. Successful exploitation allows an attacker to gain complete control over the host system, enabling them to install backdoors, exfiltrate data, or disrupt business operations entirely.

Remediation Plan

Immediate Action: Update Pardus OS My Computer to version 0.8.0 or later to patch the command injection vulnerability.

Proactive Monitoring: Monitor system logs for unauthorized command execution or suspicious shell activity originating from the Pardus OS My Computer process.

Compensating Controls: Implement input validation at the application level and utilize an Endpoint Detection and Response (EDR) solution to detect and block abnormal command execution attempts.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, given that command injection provides direct execution capabilities, the risk of exploitation is very high.

Analyst Recommendation

OS command injection is a critical security risk that must be addressed immediately. Administrators should ensure that the affected software is updated to the latest version to prevent unauthorized code execution and maintain the security of the underlying infrastructure.