---METADATA---
VENDOR: Node.js (vm2)
PRODUCT: vm2
AFFECTED_VERSIONS: 3.10.4
---END_METADATA---

Description Summary:
A full sandbox escape vulnerability in vm2 version 3.10.4 allows attackers to access the host process object and execute arbitrary host commands.

Executive Summary:
A critical sandbox escape vulnerability in vm2 allows attackers to gain access to the host process object and execute arbitrary commands on the system.

Vulnerability Details

CVE-ID: CVE-2026-26956

Affected Software: vm2 (Node.js)

Affected Versions: 3.10.4

Vulnerability: This is a full sandbox escape that allows code running within VM.run() to obtain the host process object. With this access, an attacker can execute arbitrary commands on the host system without any cooperation from the host itself.

Business Impact

The CVSS score of 9.8 indicates that this is a critical vulnerability. An attacker can achieve complete system compromise, bypassing all intended restrictions of the vm2 sandbox, potentially leading to unauthorized data access and system manipulation.

Remediation Plan

Immediate Action: Upgrade vm2 to version 3.10.5 or later to resolve the sandbox escape.

Proactive Monitoring: Monitor for suspicious process activity or unauthorized modifications to the host system by the Node.js application.

Compensating Controls: Utilize kernel-level security features to limit the process's capabilities and prevent the exploitation of process objects.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is exceptionally dangerous as it grants direct access to the host process. Immediate patching is required. Organizations should treat this as a high-priority security update and review their application's dependency tree to ensure the patch is correctly applied.

---METADATA---
VENDOR: SandboxJS
PRODUCT: SandboxJS
AFFECTED_VERSIONS: Prior to 0.8.34
---END_METADATA---

Description Summary:
SandboxJS versions prior to 0.8.34 allow attackers to escape the JavaScript sandbox by obtaining arrays containing Function objects, leading to arbitrary code execution.

Executive Summary:
A critical sandbox escape vulnerability in SandboxJS allows attackers to bypass security restrictions and execute arbitrary JavaScript code on the host system.

Vulnerability Details

CVE-ID: CVE-2026-26954

Affected Software: SandboxJS

Affected Versions: Prior to 0.8.34

Vulnerability: The library fails to properly restrict access to the Function constructor when specific array and object methods are used. An attacker can use Object.fromEntries to construct malicious objects that grant access to restricted functions, effectively breaking the sandbox environment.

Business Impact

The ability to escape a security sandbox represents a total failure of the primary security control of the library, justifying the CVSS score of 10.0. This allows for unauthenticated arbitrary code execution, which can lead to full system compromise, data exfiltration, and the deployment of malware. For applications relying on SandboxJS to run untrusted code, this is a catastrophic risk.

Remediation Plan

Immediate Action: Upgrade SandboxJS to version 0.8.34 or higher to resolve the logic error allowing the sandbox escape.

Proactive Monitoring: Audit application logs for unusual JavaScript execution patterns or attempts to access the Function constructor from within sandboxed environments.

Compensating Controls: Implement secondary isolation layers, such as running the sandboxed process within a low-privilege container or a separate virtual machine.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, sandbox escape techniques are highly sought after by attackers, and the technical details suggest a reliable exploit could be developed quickly.

Analyst Recommendation

This vulnerability represents the highest possible technical risk, as it completely negates the security guarantees provided by the product. IT administrators must ensure that all instances of SandboxJS are updated to version 0.8.34 immediately. Continuous monitoring of sandboxed execution environments is also recommended to detect any further bypass attempts.

---METADATA---
VENDOR: SmarterTools
PRODUCT: SmarterMail
AFFECTED_VERSIONS: Before 9526
---END_METADATA---

Description Summary:
SmarterTools SmarterMail is vulnerable to Cross-Site Scripting (XSS) via MAPI requests in versions prior to 9526, potentially allowing session hijacking.

Executive Summary:
SmarterMail users are at risk of account takeover and data theft due to a high-severity Cross-Site Scripting vulnerability in the handling of MAPI requests.

Vulnerability Details

CVE-ID: CVE-2026-26930

Affected Software: SmarterTools SmarterMail

Affected Versions: Before 9526

Vulnerability: This vulnerability allows an attacker to inject malicious scripts into MAPI requests. When an administrative or standard user views the affected content, the script executes in their browser, potentially allowing the attacker to steal session cookies or perform actions on behalf of the user.

Business Impact

A successful XSS attack against a mail server can lead to the compromise of sensitive corporate communications. If an administrator's session is hijacked, the attacker could gain full control over the mail server, leading to widespread data exposure and reputational damage. The CVSS score is 7.2.

Remediation Plan

Immediate Action: Upgrade SmarterMail to version 9526 or later immediately to resolve the XSS vulnerability.

Proactive Monitoring: Review mail server logs for unusual MAPI requests and monitor for suspicious administrative login activity.

Compensating Controls: Implement a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and use a Web Application Firewall (WAF) to filter malicious XSS payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation. XSS in mail clients is a common vector for targeted phishing and credential theft.

Analyst Recommendation

The 7.2 CVSS score underscores the importance of securing communication platforms. Administrators should apply the SmarterMail update immediately to protect users from script injection attacks that could compromise their accounts and sensitive data.

---METADATA---
VENDOR: SECCN
PRODUCT: Dingcheng G10
AFFECTED_VERSIONS: 3.1.0.181203
---END_METADATA---

Description Summary:
A command injection vulnerability in the SECCN Dingcheng G10 login script allows unauthenticated remote attackers to execute OS commands via the User argument.

Executive Summary:
A critical OS command injection vulnerability in SECCN Dingcheng G10 devices allows unauthenticated remote attackers to execute arbitrary system commands and take full control of the appliance.

Vulnerability Details

CVE-ID: CVE-2026-2686

Affected Software: SECCN Dingcheng G10

Affected Versions: 3.1.0.181203

Vulnerability: The vulnerability exists in the qq function within /cgi-bin/session_login.cgi. Improper sanitization of the User argument allows an unauthenticated remote attacker to inject and execute arbitrary operating system commands.

Business Impact

This flaw provides a direct path to total system compromise. Attackers can execute commands with the privileges of the web server, potentially escalating to root, stealing sensitive credentials, or disrupting critical business operations. The CVSS score of 9.8 indicates an extremely high risk.

Remediation Plan

Immediate Action: Apply the latest firmware update provided by SECCN to patch the vulnerable CGI script. If a patch is unavailable, restrict access to the management interface.

Proactive Monitoring: Monitor web server logs for suspicious characters (e.g., ;, |, &) within the User parameter of requests directed at session_login.cgi.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically designed to detect and block OS command injection patterns in HTTP POST/GET parameters.

Exploitation Status

Public Exploit Available: Yes

Analyst Notes: As of Feb 19, 2026, the exploit for this vulnerability has been disclosed publicly. Given the availability of public exploit code and the critical nature of command injection, active exploitation is highly likely.

Analyst Recommendation

With a public exploit available, the urgency to remediate this vulnerability is critical. Organizations using the SECCN Dingcheng G10 must update their devices immediately to prevent unauthenticated attackers from gaining full control of their network appliances.

---METADATA---
VENDOR: node-tesseract-ocr (NPM Package)
PRODUCT: node-tesseract-ocr
AFFECTED_VERSIONS: All versions through 2.2.1
---END_METADATA---

Description Summary:
The node-tesseract-ocr npm package allows OS command injection in the recognize() function. File path parameters are concatenated into shell commands without proper sanitization.

Executive Summary:
A critical command injection vulnerability in the node-tesseract-ocr library enables attackers to execute arbitrary system commands by providing malicious file paths to the OCR processing function.

Vulnerability Details

CVE-ID: CVE-2026-26832

Affected Software: node-tesseract-ocr (npm package)

Affected Versions: All versions through 2.2.1

Vulnerability: The recognize() function in src/index.js is vulnerable to OS Command Injection. It improperly concatenates user-controlled file path parameters into a shell command string which is then executed via child_process.exec() without sanitization.

Business Impact

Successful exploitation allows an unauthenticated attacker to execute arbitrary code with the privileges of the Node.js process. This can result in complete server takeover, data exfiltration, and the installation of persistent backdoors. The CVSS score of 9.8 indicates a critical risk to any application relying on this library for OCR tasks.

Remediation Plan

Immediate Action: Update the node-tesseract-ocr dependency to a version higher than 2.2.1. If no update is available, sanitize all inputs to the recognize() function to remove shell metacharacters.

Proactive Monitoring: Monitor for unexpected shell execution or outbound network connections from servers performing OCR processing.

Compensating Controls: Run the Node.js application within a containerized environment with restricted system call capabilities (e.g., using Seccomp or AppArmor) to limit the damage of a command injection.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 25, 2026, there is no public information indicating active exploitation. Library-level command injections are particularly dangerous as they can be exploited through any application endpoint that eventually calls the vulnerable function.

Analyst Recommendation

This vulnerability highlights the danger of shell interpolation. Immediate remediation is required for any application that processes user-uploaded files via this OCR wrapper. Developers should prioritize upgrading the package or implementing rigorous input sanitization to prevent command execution.

---METADATA---
VENDOR: pdf-image (NPM Package)
PRODUCT: pdf-image
AFFECTED_VERSIONS: Through version 2.0.0
---END_METADATA---

Description Summary:
The pdf-image npm package is vulnerable to OS command injection via the pdfFilePath parameter. This occurs due to improper interpolation of user paths into shell commands.

Executive Summary:
The pdf-image library for Node.js contains a critical command injection vulnerability that allows unauthenticated attackers to execute arbitrary OS commands on the host server.

Vulnerability Details

CVE-ID: CVE-2026-26830

Affected Software: pdf-image (npm package)

Affected Versions: Through version 2.0.0

Vulnerability: This is an OS Command Injection vulnerability triggered via the pdfFilePath parameter. The functions constructGetInfoCommand and constructConvertCommandForPage use util.format() to build shell strings that are passed directly to child_process.exec() without sanitization.

Business Impact

An attacker can exploit this flaw to gain a shell on the application server. This leads to full system compromise, potential lateral movement within the network, and unauthorized access to application databases or environment variables. The CVSS score of 9.8 reflects the ease of exploitation and the total impact on confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Developers should immediately stop using vulnerable versions of the pdf-image package and update to a patched version if available, or migrate to a more secure alternative.

Proactive Monitoring: Implement runtime application self-protection (RASP) or monitor system logs for suspicious child processes spawned by Node.js applications.

Compensating Controls: Use input validation to strictly enforce file path patterns and ensure the application runs with the least privilege necessary to minimize the impact of a command injection.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 25, 2026, there is no public information indicating active exploitation. However, command injection in popular npm packages is frequently targeted by automated scanners and supply chain attackers.

Analyst Recommendation

The use of child_process.exec() with unsanitized input is a high-risk practice. Organizations using this package in their production applications must audit their code immediately. If a patch is not provided by the maintainer, the library should be replaced with one that uses safer execution methods like execFile.

---METADATA---
VENDOR: GL-iNet
PRODUCT: GL-AR300M16
AFFECTED_VERSIONS: v4.3.11
---END_METADATA---

Description Summary:
The GL-iNet GL-AR300M16 router contains a command injection vulnerability in the set_config function, allowing for arbitrary command execution.

Executive Summary:
A critical command injection vulnerability in GL-iNet GL-AR300M16 routers allows attackers to execute arbitrary commands and gain full control over the device.

Vulnerability Details

CVE-ID: CVE-2026-26793

Affected Software: GL-iNet GL-AR300M16

Affected Versions: v4.3.11

Vulnerability: The set_config function in the router's firmware fails to properly sanitize user input, leading to a command injection vulnerability. An attacker can provide crafted input to execute arbitrary system commands on the router.

Business Impact

A successful exploit grants the attacker full administrative control over the router. With a CVSS score of 9.8, this allows for persistent network monitoring, traffic redirection, and a foothold for lateral movement within the local network. This is particularly dangerous for remote offices or small businesses relying on these devices for secure connectivity.

Remediation Plan

Immediate Action: Update the GL-iNet firmware to the latest available version that includes a fix for the set_config function.

Proactive Monitoring: Monitor the router for unauthorized configuration changes or unusual outbound traffic that might indicate a compromised device.

Compensating Controls: Disable remote management interfaces and ensure that access to the router's web interface is restricted to trusted local devices only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 12, 2026, there is no public information indicating active exploitation of this vulnerability. Command injection flaws in network hardware are frequently targeted by botnets, making this a high-risk entry.

Analyst Recommendation

It is critical to update the firmware on all affected GL-iNet devices immediately. Given the role of routers in network security, a compromise at this level can undermine all other security controls within the environment.

---METADATA---
VENDOR: Twenty CRM
PRODUCT: Twenty CRM
AFFECTED_VERSIONS: v1.15.0 and before
---END_METADATA---

Description Summary:
Twenty CRM is vulnerable to arbitrary code execution via the local.driver.ts module, allowing a remote attacker to compromise the application server.

Executive Summary:
Twenty CRM versions v1.15.0 and earlier contain a critical vulnerability in the local.driver.ts module that allows remote attackers to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-26720

Affected Software: Twenty CRM

Affected Versions: v1.15.0 and before

Vulnerability: The vulnerability resides in the local.driver.ts module, where insufficient input validation allows a remote attacker to inject and execute arbitrary code. This typically occurs through unauthenticated or lowly privileged requests to the driver interface.

Business Impact

A successful exploit allows for full application and server compromise, leading to the exposure of sensitive CRM data, including customer contacts and business leads. The CVSS score of 9.8 reflects the critical threat to the confidentiality and integrity of the entire CRM platform.

Remediation Plan

Immediate Action: Update Twenty CRM to the latest patched version immediately to remediate the flaw in the driver module.

Proactive Monitoring: Audit application logs for suspicious file system activities or unauthorized modifications to the local.driver.ts or related TypeScript files.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter incoming requests for common code injection patterns and restrict file upload/execution capabilities.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 2, 2026, there is no public information indicating active exploitation of this vulnerability. Given that CRM systems house highly sensitive data, this flaw is likely to be targeted by financially motivated actors.

Analyst Recommendation

Organizations utilizing Twenty CRM should treat this as a critical priority. The ability to execute code remotely through a core module necessitates immediate patching and a thorough review of the application's security configuration.

---METADATA---
VENDOR: XXL-Job
PRODUCT: xxl-job-admin
AFFECTED_VERSIONS: 3.0.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A Cross Site Request Forgery vulnerability in the xxl-job-admin web application allows unauthenticated attackers to modify Glue IDE shell scripts.

Executive Summary:
A critical Cross Site Request Forgery vulnerability in xxl-job-admin version 3.0.0 enables unauthorized modification of sensitive system scripts.

Vulnerability Details

CVE-ID: CVE-2026-26718

Affected Software: XXL-Job xxl-job-admin

Affected Versions: 3.0.0

Vulnerability: The application fails to implement proper CSRF token validation on the Glue IDE shell script modification endpoint, allowing an unauthenticated attacker to execute unauthorized actions via a web request.

Business Impact

With a CVSS score of 9.1, this vulnerability is critical. Unauthorized modification of shell scripts can lead to arbitrary code execution, resulting in full system compromise, data theft, or complete disruption of job automation processes.

Remediation Plan

Immediate Action: Review the vendor advisory for official patch releases. If a patch is unavailable, restrict network access to the admin interface to trusted management subnets only.

Proactive Monitoring: Audit logs for unauthorized requests to the Glue IDE script modification endpoints and monitor for unexpected changes to job configurations.

Compensating Controls: Deploy a Web Application Firewall (WAF) to inspect incoming requests and block those lacking valid CSRF tokens or originating from untrusted sources.

Exploitation Status

Public Exploit Available: Yes (a proof of concept is available via a public GitHub repository).

Analyst Notes: As of July 16, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The lack of CSRF protection makes this vulnerability highly susceptible to automated exploitation.

Analyst Recommendation

This vulnerability poses a severe risk to the integrity of the job management infrastructure. It is imperative that administrators restrict access to the administration interface immediately while awaiting a vendor-supplied patch.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Food Order System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
The Simple Food Order System v1.0 contains a critical SQL Injection vulnerability in the cancel-order.php script, posing a risk of unauthorized database access.

Executive Summary:
An unauthenticated SQL Injection vulnerability in the cancel-order.php component of Simple Food Order System v1.0 allows for complete database compromise.

Vulnerability Details

CVE-ID: CVE-2026-26713

Affected Software: Simple Food Order System

Affected Versions: v1.0

Vulnerability: The vulnerability is located in /food/routers/cancel-order.php. The application fails to properly validate or escape user input before including it in SQL queries, allowing an unauthenticated attacker to manipulate database operations.

Business Impact

A successful attack could result in the deletion of order records, theft of user data, or administrative credential harvesting. The CVSS score of 9.8 reflects the critical nature of this flaw and the potential for significant business disruption and data loss.

Remediation Plan

Immediate Action: Update the software to a patched version or implement parameterized queries in /food/routers/cancel-order.php to neutralize the injection vector.

Proactive Monitoring: Review application access logs for suspicious parameters sent to the cancel-order.php endpoint, particularly those containing SQL keywords.

Compensating Controls: Implement a WAF to detect and drop requests containing SQL injection signatures and enforce strict input validation at the application entry points.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 2, 2026, there is no public information indicating active exploitation. The simplicity of the exploit makes it a high-probability target for script-based attacks.

Analyst Recommendation

Given the critical CVSS score, this vulnerability must be addressed immediately. Developers and administrators should ensure that all database interactions are secured using modern coding practices to prevent unauthorized data manipulation.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Food Order System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
The Simple Food Order System v1.0 is vulnerable to SQL Injection in the view-ticket-admin.php file, allowing attackers to compromise the administrative database interface.

Executive Summary:
A critical SQL Injection vulnerability in the view-ticket-admin.php component of Simple Food Order System v1.0 allows attackers to gain unauthorized access to administrative data.

Vulnerability Details

CVE-ID: CVE-2026-26712

Affected Software: Simple Food Order System

Affected Versions: v1.0

Vulnerability: The vulnerability exists in /food/view-ticket-admin.php. Although the filename suggests an administrative function, the lack of proper input sanitization allows an attacker to perform SQL injection, potentially bypassing authentication or escalating privileges.

Business Impact

Exploitation of this flaw can lead to the total compromise of the administrative interface and the underlying database. With a CVSS score of 9.8, the risk includes complete data loss, unauthorized access to sensitive business records, and potential service termination.

Remediation Plan

Immediate Action: Immediately secure /food/view-ticket-admin.php by implementing prepared statements and ensuring that the page is protected by robust session-based authentication.

Proactive Monitoring: Monitor for unauthorized access attempts to administrative PHP files and analyze logs for SQL injection strings like ' OR '1'='1.

Compensating Controls: Implement IP-based access control lists (ACLs) to restrict access to the /food/view-ticket-admin.php page to known administrative IP addresses only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 2, 2026, there is no public information indicating active exploitation. Administrative endpoints are high-value targets, and this vulnerability provides a direct path to system-wide compromise.

Analyst Recommendation

This vulnerability represents a significant threat to the application's security posture. Immediate action to patch the SQL injection and enforce strict access controls on administrative endpoints is essential to protect the system.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Food Order System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
Simple Food Order System v1.0 is vulnerable to SQL Injection in the view-ticket.php file, allowing unauthenticated attackers to extract sensitive information from the database.

Executive Summary:
Simple Food Order System v1.0 contains a critical SQL Injection vulnerability in view-ticket.php that enables unauthenticated remote attackers to access sensitive database content.

Vulnerability Details

CVE-ID: CVE-2026-26711

Affected Software: Simple Food Order System

Affected Versions: v1.0

Vulnerability: The /food/view-ticket.php endpoint is vulnerable to SQL Injection. An unauthenticated attacker can manipulate the ticket ID or other parameters to execute arbitrary SQL commands against the backend database.

Business Impact

This vulnerability allows for the unauthorized viewing of all support tickets, customer details, and potentially administrative credentials stored in the database. The CVSS score of 9.8 highlights the severe risk to data confidentiality and the potential for full system compromise.

Remediation Plan

Immediate Action: Manually patch view-ticket.php to use prepared statements or update to a secured version of the software if available.

Proactive Monitoring: Audit database activity for queries that access sensitive tables (e.g., users, admins) originating from the view-ticket.php script.

Compensating Controls: Use a WAF to inspect all GET and POST requests for SQL injection patterns and restrict database user permissions to the minimum necessary for application function.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 2, 2026, there is no public information indicating active exploitation. SQL injection remains a primary vector for data breaches in legacy or unpatched PHP applications.

Analyst Recommendation

The presence of SQL injection in a public-facing script like view-ticket.php is a critical security risk. Immediate remediation through code updates or the implementation of robust virtual patching via a WAF is highly recommended.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Food Order System
AFFECTED_VERSIONS: v1.0
---END_METADATA---

Description Summary:
The Simple Food Order System v1.0 is vulnerable to a critical SQL Injection in the edit-orders.php router, allowing for full database compromise.

Executive Summary:
Simple Food Order System v1.0 is susceptible to a critical SQL Injection vulnerability that allows unauthenticated attackers to execute arbitrary database commands.

Vulnerability Details

CVE-ID: CVE-2026-26710

Affected Software: Simple Food Order System

Affected Versions: v1.0

Vulnerability: A critical SQL Injection vulnerability exists in /food/routers/edit-orders.php. Due to insufficient sanitization of user-supplied input, an unauthenticated attacker can inject malicious SQL queries to bypass security controls or extract data.

Business Impact

Exploitation can lead to the unauthorized disclosure of customer information, order history, and administrative credentials. With a CVSS score of 9.8, the integrity and confidentiality of the entire application database are at extreme risk, potentially leading to total system takeover.

Remediation Plan

Immediate Action: Since this appears to be a flaw in a project-based system, immediately apply any available patches or manually sanitize the input in edit-orders.php using prepared statements.

Proactive Monitoring: Monitor database logs for unusual query syntax or error messages that indicate SQL injection attempts (e.g., UNION SELECT statements).

Compensating Controls: Deploy a Web Application Firewall (WAF) with SQL injection protection enabled to filter and block malicious payloads targeting the affected PHP scripts.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 2, 2026, there is no public information indicating active exploitation. However, SQL injection in open-source projects is a common target for automated vulnerability scanners.

Analyst Recommendation

Immediate remediation is required to prevent data theft. Users of this system should prioritize migrating to a supported platform or applying rigorous input validation to all PHP router files.

---METADATA---
VENDOR: mlflow
PRODUCT: mlflow
AFFECTED_VERSIONS: unspecified up to (excluding) 3.10.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An authentication bypass vulnerability exists in mlflow/mlflow versions prior to 3.10.0, potentially allowing unauthorized access to system functions.

Executive Summary:
A critical authentication bypass vulnerability in mlflow allows unauthenticated remote attackers to potentially compromise system integrity.

Vulnerability Details

CVE-ID: CVE-2026-2652

Affected Software: mlflow mlflow

Affected Versions: Unspecified up to (excluding) 3.10.0

Vulnerability: The flaw is an authentication bypass (CWE-305) that permits unauthenticated remote attackers to interact with the application. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms that no user interaction or prior authentication is required to exploit this vulnerability.

Business Impact

With a CVSS score of 8.6, this vulnerability poses a high risk to business operations. Successful exploitation allows for unauthorized system interaction, which could lead to data exfiltration, unauthorized modification of machine learning models, or service disruption, directly threatening the integrity of data science pipelines.

Remediation Plan

Immediate Action: Update the mlflow package to version 3.11.0 or higher as specified by the OSV record.

Proactive Monitoring: Monitor network traffic for unusual API requests to the mlflow server and review access logs for successful requests originating from unknown or unauthorized IP addresses.

Compensating Controls: Implement strict network access control lists (ACLs) to restrict access to the mlflow instance to trusted internal networks or VPNs only.

Exploitation Status

Public Exploit Available: No (Nuclei template only).

Analyst Notes: As of May 15, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. While no weaponized exploit is currently known, the existence of a Nuclei detection template suggests the vulnerability is being actively scanned for by threat actors.

Analyst Recommendation

Given the ease of exploitability (low complexity, no authentication required) and the presence of a public proof-of-concept, organizations should prioritize patching immediately. Ensure all mlflow deployments are updated to version 3.11.0 to eliminate this critical security gap.

---METADATA---
VENDOR: Mobvoi
PRODUCT: Tichome Mini
AFFECTED_VERSIONS: 012-18853 and 027-58389
---END_METADATA---

Description Summary:
A shell command injection vulnerability in Mobvoi Tichome Mini allows unauthenticated remote attackers to execute arbitrary code as root via specially crafted UDP datagrams.

Executive Summary:
The Mobvoi Tichome Mini smart speaker is vulnerable to a critical remote command injection that allows unauthenticated attackers to gain root-level shell access via the network.

Vulnerability Details

CVE-ID: CVE-2026-26478

Affected Software: Mobvoi Tichome Mini

Affected Versions: 012-18853 and 027-58389

Vulnerability: A shell command injection vulnerability exists in the way the device processes UDP datagrams. An unauthenticated remote attacker can send a specially crafted UDP packet to the device, triggering the execution of arbitrary shell commands with root-level privileges on the underlying operating system.

Business Impact

With a CVSS score of 9.8, this vulnerability is extremely severe. An attacker can gain full control of the device, listen to audio, pivot to other devices on the local network, or incorporate the speaker into a botnet. This represents a significant breach of privacy and a security risk to the network where the device is deployed.

Remediation Plan

Immediate Action: Apply the latest firmware update from Mobvoi to the Tichome Mini smart speaker immediately.

Proactive Monitoring: Monitor local network traffic for anomalous UDP traffic directed at smart speakers and audit for unexpected outbound connections from these devices.

Compensating Controls: Place IoT devices like smart speakers on a dedicated, isolated VLAN to prevent them from interacting with sensitive corporate or personal data systems.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 4, 2026, there is no public information indicating active exploitation. However, command injection via simple UDP packets is a highly reliable and easily exploitable vector.

Analyst Recommendation

Users and administrators should immediately update their Mobvoi Tichome Mini devices. Given the potential for root-level access via the network, these devices should be strictly isolated from critical network segments until the patch is confirmed to be in place.

---METADATA---
VENDOR: DokuWiki
PRODUCT: DokuWiki
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A security issue has been identified in DokuWiki, a popular open-source wiki software, which could lead to unauthorized system access or data exposure.

Executive Summary:
A vulnerability in DokuWiki could allow attackers to compromise the wiki platform, potentially leading to unauthorized modification of content or data theft.

Vulnerability Details

CVE-ID: CVE-2026-26477

Affected Software: DokuWiki

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: An unspecified security issue exists in DokuWiki. In the context of wiki software, such vulnerabilities typically involve cross-site scripting (XSS), path traversal, or improper access control, allowing an attacker to manipulate files or execute malicious scripts.

Business Impact

A compromise of DokuWiki can lead to the loss of proprietary information, the defacement of internal documentation, and the distribution of malware to wiki users. Depending on the nature of the flaw, an attacker might gain full control over the wiki server. The CVSS score of 7.5 indicates a High severity risk to the organization’s information assets.

Remediation Plan

Immediate Action: Update DokuWiki to the latest stable release that addresses this vulnerability.

Proactive Monitoring: Review file integrity on the server and check DokuWiki access logs for suspicious activity or unauthorized changes to wiki pages.

Compensating Controls: Implement a Web Application Firewall (WAF) with rulesets specifically designed to block common CMS and Wiki exploits.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. Wikis are often targeted for their wealth of internal corporate information.

Analyst Recommendation

Organizations should immediately verify their DokuWiki version and apply the necessary updates. Ensuring the wiki is running the most recent version is vital for protecting internal knowledge bases from unauthorized access and manipulation.

---METADATA---
VENDOR: SourceForge
PRODUCT: Offline Hospital Management System
AFFECTED_VERSIONS: See vendor advisory
CONFIDENCE: low
MISSING: versions, patch, technical_details
---END_METADATA---

Description Summary:
The Offline Hospital Management System is vulnerable to remote code execution due to unspecified flaws, potentially allowing unauthenticated attackers to execute arbitrary commands.

Executive Summary:
A critical vulnerability in the Offline Hospital Management System allows unauthenticated remote code execution, posing a severe risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-26462

Affected Software: SourceForge Offline Hospital Management System

Affected Versions: See vendor advisory

Vulnerability: This is a remote code execution vulnerability that allows an unauthenticated attacker to execute arbitrary commands on the host system via network access (AV:N/AC:L/PR:N/UI:N).

Business Impact

Successful exploitation allows an attacker to gain complete control over the affected hospital management server, facilitating data exfiltration, unauthorized access to sensitive patient health information, and potential ransomware deployment. While the CVSS score is 7.3, the ability for an unauthenticated attacker to achieve remote code execution represents an extreme risk to organizational integrity and patient confidentiality.

Remediation Plan

Immediate Action: Consult the project's SourceForge page for any available updates or patches. If no official fix is provided, restrict network access to the application to trusted internal segments only.

Proactive Monitoring: Monitor server logs for suspicious process execution, unusual outbound network traffic, or unauthorized administrative login attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common command injection patterns and restrict access to the application via an authenticated VPN.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation or a confirmed public proof-of-concept for this vulnerability. The lack of detailed technical documentation necessitates a proactive approach to securing the environment.

Analyst Recommendation

Due to the potential for remote code execution, this vulnerability should be treated with high priority. Organizations utilizing this software must immediately review their exposure and implement network-level restrictions until a verified vendor patch is applied.

---METADATA---
VENDOR: clash-verge-service
PRODUCT: ipc
AFFECTED_VERSIONS: Versions before 2
---END_METADATA---

Description Summary:
A vulnerability has been identified in the clash-verge-service-ipc package before version 2.

Executive Summary:
A high-severity vulnerability in the clash-verge-service-ipc package exposes systems to potential unauthorized actions due to insufficient security controls.

Vulnerability Details

CVE-ID: CVE-2026-26422

Affected Software: clash-verge-service-ipc

Affected Versions: Versions before 2

Vulnerability: The vulnerability exists in the inter-process communication (IPC) mechanism, which, if improperly secured, can be leveraged to gain unauthorized access or influence service operations.

Business Impact

The CVSS score of 8.4 confirms the High severity of this flaw, suggesting that an attacker could potentially escalate privileges or perform unauthorized operations within the service context. Such exposure poses a significant risk to the integrity and confidentiality of the host environment.

Remediation Plan

Immediate Action: Upgrade to version 2 or higher of the clash-verge-service-ipc package immediately.

Proactive Monitoring: Monitor system processes for unusual IPC calls or unexpected service behavior.

Compensating Controls: Restrict local user permissions and ensure that the service is running with the least privilege necessary to limit potential attack surfaces.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate remediation is required to mitigate this high-risk vulnerability. Administrators should ensure that all instances are updated to version 2 or later and verify that service configurations follow security best practices.

---METADATA---
VENDOR: OpenBMB
PRODUCT: XAgent
AFFECTED_VERSIONS: 1.0.0 and before
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A path traversal vulnerability in the file() function of OpenBMB XAgent allows unauthenticated attackers to read sensitive files via the "filename" parameter.

Executive Summary:
A path traversal vulnerability in OpenBMB XAgent v1.0.0 and earlier allows unauthenticated remote attackers to access sensitive system files.

Vulnerability Details

CVE-ID: CVE-2026-26396

Affected Software: OpenBMB XAgent

Affected Versions: 1.0.0 and before

Vulnerability: The application is vulnerable to directory traversal within XAgentServer/application/routers/workspace.py. The filename parameter is inadequately validated, allowing unauthenticated attackers to supply crafted input and traverse the directory structure to read arbitrary files.

Business Impact

With a CVSS score of 7.5, this vulnerability represents a high risk of sensitive information disclosure. Attackers can leverage this to exfiltrate configuration files, credentials, or source code, which could be used as a precursor to further system compromise or data theft.

Remediation Plan

Immediate Action: Review the OpenBMB XAgent repository for security updates and apply patches that implement strict input sanitization on the filename parameter.

Proactive Monitoring: Monitor application access logs for suspicious patterns containing directory traversal sequences (e.g., ../, ..%2f) directed at the workspace.py endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block requests containing directory traversal characters or patterns in URI parameters.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 14, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is easily exploitable due to a lack of authentication requirements.

Analyst Recommendation

Organizations running OpenBMB XAgent must treat this vulnerability with high urgency. Given the availability of a proof-of-concept, it is critical to sanitize inputs or restrict access to the affected service until an official patch is verified and applied.