---METADATA---
VENDOR: TOTOLINK
PRODUCT: A800R
AFFECTED_VERSIONS: TOTOLINK A800R: 4.1.2cu.5137_B20200730
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the setIpQosRules function of the TOTOLINK A800R router allows remote code execution via manipulation of the Comment argument.

Executive Summary:
A critical buffer overflow in TOTOLINK A800R routers creates a pathway for remote code execution, necessitating urgent mitigation steps to protect network infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-19811

Affected Software: TOTOLINK A800R

Affected Versions: TOTOLINK A800R: 4.1.2cu.5137_B20200730

Vulnerability: This is a stack-based buffer overflow vulnerability occurring in the setIpQosRules function of the firewall.so component. An authenticated attacker can trigger this remotely by providing a malicious Comment argument.

Business Impact

The CVSS score of 8.8 underscores the critical nature of this flaw. Successful exploitation allows an attacker to achieve remote code execution, which may lead to the total loss of confidentiality, integrity, and availability of the affected device and potentially the connected local network.

Remediation Plan

Immediate Action: Monitor vendor communications for a security patch. Until a patch is released, ensure the management interface is inaccessible to non-administrative users.

Proactive Monitoring: Monitor device logs for errors or crashes associated with the firewall.so component or unusual inputs provided to the QoS configuration settings.

Compensating Controls: Restrict access to the device's web management interface to a dedicated management VLAN or VPN to minimize the attack surface.

Exploitation Status

Public Exploit Available: Yes, a public exploit is available via the referenced GitHub repository.

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation in the wild; however, the availability of a public exploit significantly elevates the risk profile.

Analyst Recommendation

Given the availability of a public exploit, this vulnerability poses an immediate threat to the operational stability of the TOTOLINK A800R. Security teams should prioritize limiting exposure of the device's management interface and apply any vendor-supplied security updates immediately upon release.

---METADATA---
VENDOR: Tenda
PRODUCT: G0
AFFECTED_VERSIONS: Tenda G0 up to 20260625
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A remote buffer overflow vulnerability in the Tenda G0 web management interface allows code execution via the setPortMapping function in /goform/module.

Executive Summary:
A critical buffer overflow vulnerability in Tenda G0 allows authenticated attackers to remotely execute arbitrary code by manipulating port mapping parameters.

Vulnerability Details

CVE-ID: CVE-2026-19792

Affected Software: Tenda G0

Affected Versions: Tenda G0 up to 20260625

Vulnerability: The vulnerability exists within the setPortMapping function of the /goform/module file. By injecting oversized data into the portMappingServer, porMappingtInternal, or portMappingExternal arguments, an authenticated attacker can trigger a memory corruption event.

Business Impact

The CVSS score of 8.8 highlights the severe impact of this vulnerability. Successful exploitation permits remote code execution, which may lead to complete device takeover, unauthorized modification of network configurations, or the exfiltration of sensitive traffic passing through the gateway.

Remediation Plan

Immediate Action: Monitor official Tenda security channels for firmware patches. In the interim, restrict access to the web management interface to authorized management subnets.

Proactive Monitoring: Audit logs for suspicious activity targeting the /goform/module file, specifically searching for malformed input in port mapping configuration requests.

Compensating Controls: Utilize a Web Application Firewall (WAF) or network ACLs to filter traffic to the web management interface, ensuring that only known, trusted administrative entities can access the affected functions.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists via GitHub.

Analyst Notes: As of August 14, 2026, there is no confirmed active exploitation in the wild; however, a public proof-of-concept repository is available, making this a credible and high-risk threat. Memory corruption flaws in peripheral devices are frequently targeted for botnet recruitment.

Analyst Recommendation

The combination of a high CVSS score and the existence of public exploit code necessitates immediate defensive action. Organizations using the affected Tenda G0 hardware should implement strict network segmentation to block unauthorized access to the web interface while awaiting a permanent firmware fix from the manufacturer.

---METADATA---
VENDOR: Tenda
PRODUCT: G0
AFFECTED_VERSIONS: Tenda G0 up to 20260625
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Tenda G0 httpd web management interface allows remote attackers to execute arbitrary code via the addStaticRoute function.

Executive Summary:
A critical stack-based buffer overflow vulnerability in Tenda G0 allows authenticated remote attackers to achieve full system compromise through malicious input.

Vulnerability Details

CVE-ID: CVE-2026-19791

Affected Software: Tenda G0

Affected Versions: Tenda G0 up to 20260625

Vulnerability: This memory corruption vulnerability resides in the addStaticRoute function within the /goform/module file. An attacker with low-level privileges can trigger a stack-based buffer overflow by manipulating the staticRouteNet argument, leading to potential remote code execution.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a significant risk to organizational infrastructure. Successful exploitation allows an attacker to gain unauthorized control over the affected device, potentially leading to total system compromise, data interception, or the use of the device as a pivot point for lateral movement within the network.

Remediation Plan

Immediate Action: Contact the vendor or check the official Tenda support portal for firmware updates addressing this buffer overflow. If no patch is currently available, restrict access to the web management interface to trusted administrative IP addresses only.

Proactive Monitoring: Review web server access logs for anomalous requests directed at the /goform/module endpoint, particularly those containing unusually long or malformed input strings in the staticRouteNet parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block requests to the /goform/module interface that contain payloads exceeding expected input lengths.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists via GitHub.

Analyst Notes: As of August 14, 2026, there is no confirmed active exploitation in the wild; however, a public proof-of-concept repository is available, which significantly lowers the barrier for potential attackers. The flaw is inherently dangerous due to its nature as a memory corruption vulnerability in a network-facing interface.

Analyst Recommendation

Given the high CVSS severity and the presence of public proof-of-concept code, this vulnerability should be treated with high urgency. Administrators must prioritize restricting access to the management interface until a vendor-supplied firmware patch is applied to neutralize the underlying buffer overflow risk.

---METADATA---
VENDOR: Tenda
PRODUCT: G0
AFFECTED_VERSIONS: 20260625
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Tenda G0 devices are vulnerable to a stack-based buffer overflow, which can lead to memory corruption and potential system compromise.

Executive Summary:
A memory corruption vulnerability in Tenda G0 devices permits authenticated attackers to trigger a stack-based buffer overflow, risking system availability and integrity.

Vulnerability Details

CVE-ID: CVE-2026-19790

Affected Software: Tenda G0

Affected Versions: 20260625

Vulnerability: The device suffers from stack-based buffer overflow (CWE-121) and memory corruption (CWE-119) vulnerabilities. The attack vector is network-based and requires low-level authentication (PR:L) to trigger the vulnerable function.

Business Impact

This vulnerability carries a CVSS score of 8.8, reflecting the high potential for system compromise. Exploitation could allow an attacker to disrupt critical networking services or gain a foothold within the network, leading to data exfiltration or lateral movement.

Remediation Plan

Immediate Action: Limit management access to the G0 interface to authorized personnel and trusted internal networks.

Proactive Monitoring: Review device logs for suspicious activity or abnormal system behavior that could suggest an ongoing exploitation attempt.

Compensating Controls: Implement network-level access control lists to ensure only designated management workstations can communicate with the device.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly severe for devices exposed to untrusted environments.

Analyst Recommendation

Security teams must treat this vulnerability with high urgency. Ensure the device management interface is not exposed to the public internet and verify that all administrative accounts are secured with strong credentials while awaiting a formal firmware update from the vendor.

---METADATA---
VENDOR: Tenda
PRODUCT: AC1206
AFFECTED_VERSIONS: 15.03.06.23_multi_TD01
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Tenda AC1206 router is vulnerable to a stack-based buffer overflow, allowing memory corruption via specifically crafted input.

Executive Summary:
A stack-based buffer overflow in Tenda AC1206 routers allows authenticated attackers to execute arbitrary code or cause system crashes.

Vulnerability Details

CVE-ID: CVE-2026-19789

Affected Software: Tenda AC1206

Affected Versions: 15.03.06.23_multi_TD01

Vulnerability: The device is susceptible to a stack-based buffer overflow (CWE-121) and memory corruption (CWE-119). These flaws are reachable by an authenticated user with low privileges (PR:L) over the network.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the affected router, resulting in unauthorized access to the local network or denial of service. With a CVSS score of 8.8, this vulnerability represents a high risk to organizational infrastructure, as attackers could intercept traffic or pivot into internal systems.

Remediation Plan

Immediate Action: Restrict access to the management interface to trusted administrative IP addresses only until a vendor-supplied patch is installed.

Proactive Monitoring: Inspect system logs for unexpected reboots or crashes that may indicate memory corruption attempts.

Compensating Controls: Utilize an internal firewall or network segmentation to isolate the management interface from non-administrative network segments.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent nature makes it a prime candidate for remote code execution if an attacker manages to bypass initial authentication requirements.

Analyst Recommendation

Given the high CVSS score and the potential for full device control, administrators should prioritize isolating affected Tenda AC1206 units. Monitor official Tenda support channels for firmware updates and apply them as soon as they become available to remediate the underlying memory corruption risk.

---METADATA---
VENDOR: Tenda
PRODUCT: AC1206
AFFECTED_VERSIONS: Tenda AC1206 15.03.06.23_multi_TD01
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Tenda AC1206 web interface allows remote attackers to execute arbitrary code via the set_device_name function.

Executive Summary:
A critical stack-based buffer overflow in Tenda AC1206 allows authenticated remote attackers to gain full system control via the device naming function.

Vulnerability Details

CVE-ID: CVE-2026-19788

Affected Software: Tenda AC1206

Affected Versions: Tenda AC1206 15.03.06.23_multi_TD01

Vulnerability: This vulnerability occurs in the /goform/SetOnlineDevName file, specifically within the set_device_name function. An authenticated attacker can trigger a stack-based buffer overflow by providing a malicious devName argument, which is processed without sufficient length validation.

Business Impact

The CVSS score of 8.8 reflects the high risk of this vulnerability. Successful exploitation grants an attacker the ability to execute code with system-level privileges, resulting in potential device compromise, network traffic manipulation, and the loss of confidentiality and integrity for all connected systems.

Remediation Plan

Immediate Action: Verify if a firmware update is available from Tenda and apply it immediately. If no update is available, disable the web management interface if possible, or restrict access to trusted internal IP addresses only.

Proactive Monitoring: Inspect network logs for unusual traffic patterns directed at the /goform/SetOnlineDevName endpoint, particularly requests containing large or unexpected characters in the devName parameter.

Compensating Controls: Implement WAF rules to validate input length for all requests targeting the device management interface, effectively blocking potential overflow attempts.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists via GitHub.

Analyst Notes: As of August 14, 2026, there is no confirmed active exploitation in the wild; however, the availability of a public proof-of-concept repository elevates the risk level significantly. Stack-based buffer overflows are a classic vector for achieving remote code execution in IoT devices.

Analyst Recommendation

Given the severity of this remote code execution vulnerability and the availability of public exploit code, swift action is required. Organizations must treat this as a high-priority item, implementing network-level access controls to protect the management interface until a vendor-validated firmware update is applied.

---METADATA---
VENDOR: Devolutions
PRODUCT: PowerShell Universal
AFFECTED_VERSIONS: 0 up to (excluding) 2026.2.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Devolutions PowerShell Universal contains a code injection vulnerability in the settings feature that can be exploited by authenticated users.

Executive Summary:
Devolutions PowerShell Universal versions prior to 2026.2.4 are vulnerable to code injection, which could lead to unauthorized system command execution.

Vulnerability Details

CVE-ID: CVE-2026-19768

Affected Software: Devolutions PowerShell Universal

Affected Versions: 0 up to (excluding) 2026.2.4

Vulnerability: The application improperly controls the generation of code within its settings feature (CWE-94). An authenticated attacker can inject malicious code, which is then executed by the server with the privileges of the application.

Business Impact

A code injection vulnerability represents a severe threat to the confidentiality, integrity, and availability of the hosting environment. By executing arbitrary code, an attacker could gain full control over the server, access sensitive configuration data, or pivot into the broader network. The CVSS score of 8.1 reflects the high potential for impact on enterprise systems.

Remediation Plan

Immediate Action: Update Devolutions PowerShell Universal to version 2026.2.4 or later immediately.

Proactive Monitoring: Monitor server logs for unexpected process execution or modifications to application configuration files.

Compensating Controls: Ensure the application runs with the least privilege necessary, and utilize a Web Application Firewall to block suspicious input patterns in settings requests.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly dangerous due to the nature of code injection in a powerful tool like PowerShell Universal.

Analyst Recommendation

The risk of code injection in management software is critical. Administrators must verify their current version and apply the vendor-provided update to version 2026.2.4 as soon as possible to prevent potential remote code execution.

---METADATA---
VENDOR: Tenda
PRODUCT: CH7, CH7G, CH10, CP3, CP3 Pro, CP7
AFFECTED_VERSIONS: Up to 20260625
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A command injection vulnerability in the ATE Module of various Tenda devices allows unauthenticated remote attackers to execute arbitrary system commands via the CAte::HandleCmd function.

Executive Summary:
A critical command injection vulnerability in multiple Tenda network devices enables unauthenticated remote code execution, posing a severe risk to device integrity and network security.

Vulnerability Details

CVE-ID: CVE-2026-19747

Affected Software: Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7

Affected Versions: Up to 20260625

Vulnerability: This is a command injection vulnerability (CWE-77) located in the CAte::HandleCmd function within the ATE Module. The vulnerability is accessible to unauthenticated remote attackers, allowing for full system compromise.

Business Impact

Successful exploitation of this vulnerability grants an attacker full control over the affected Tenda device. This can lead to complete loss of confidentiality, integrity, and availability of the device, potential lateral movement into the local network, and the deployment of persistent malware. Given the CVSS score of 9.8, the risk is classified as critical, necessitating immediate attention.

Remediation Plan

Immediate Action: Identify all instances of the affected Tenda hardware within the environment and restrict their exposure to the public internet immediately.

Proactive Monitoring: Monitor network traffic for unusual outbound connections originating from Tenda devices, which may indicate command-and-control communication.

Compensating Controls: Implement strict firewall rules to block remote access to the administrative interfaces of these devices from untrusted networks.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists via GitHub.

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation in the wild, though a proof-of-concept has been published on GitHub. The vulnerability is highly exploitable due to the lack of required authentication.

Analyst Recommendation

This vulnerability represents a critical risk to organizational security. Administrators should prioritize isolating affected devices from the internet until official firmware updates are applied, as remote attackers can easily leverage this flaw to gain full control of the impacted hardware.

---METADATA---
VENDOR: Roskus
PRODUCT: Prospero Flow CRM
AFFECTED_VERSIONS: 0 up to (excluding) 5.4.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An authorization bypass vulnerability in the Prospero Flow CRM product management component allows authenticated users to access or modify data belonging to other tenants.

Executive Summary:
Prospero Flow CRM is vulnerable to an authorization bypass that could lead to cross-tenant data exposure and unauthorized modification of product information.

Vulnerability Details

CVE-ID: CVE-2026-19734

Affected Software: Roskus Prospero Flow CRM

Affected Versions: 0 up to (excluding) 5.4.7

Vulnerability: This is an authorization bypass (CWE-639) occurring in the product management module. The vulnerability requires the attacker to be authenticated, but it allows them to manipulate user-controlled keys to access resources outside of their authorized scope.

Business Impact

Successful exploitation results in unauthorized access to sensitive product data across different tenants. This could lead to a significant breach of data privacy, loss of competitive intelligence, and unauthorized modification of business-critical information. The CVSS score of 8.6 reflects the high impact on data confidentiality and integrity within the CRM environment.

Remediation Plan

Immediate Action: Upgrade to version 5.4.7 or higher immediately to resolve the authorization logic flaw.

Proactive Monitoring: Audit access logs for anomalous patterns, specifically looking for users attempting to access resource IDs that do not belong to their assigned tenant.

Compensating Controls: Enforce strict session management and, if possible, implement application-level authorization checks that validate the ownership of resources before processing requests.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is an Insecure Direct Object Reference (IDOR) type, which is a common but dangerous logic error in multi-tenant applications.

Analyst Recommendation

The risk of cross-tenant data leakage is severe for a CRM platform. Administrators must apply the vendor-provided update to version 5.4.7 as soon as possible to ensure that tenant isolation is properly enforced.

---METADATA---
VENDOR: max-mapper
PRODUCT: extract-zip
AFFECTED_VERSIONS: 1.0.0 through 2.0.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The extract-zip package is vulnerable to path traversal and improper link resolution, which can allow attackers to overwrite arbitrary files when processing maliciously crafted zip files.

Executive Summary:
A path traversal vulnerability in the extract-zip package allows attackers to write files to arbitrary locations on the host system during the extraction process.

Vulnerability Details

CVE-ID: CVE-2026-19693

Affected Software: max-mapper extract-zip

Affected Versions: 1.0.0 through 2.0.1

Vulnerability: The software suffers from improper link resolution (CWE-59) and path traversal (CWE-22) flaws. An attacker can craft a zip file that, when extracted by the application, writes files outside of the intended target directory, potentially leading to system compromise.

Business Impact

Successful exploitation poses a severe risk, as an attacker could overwrite critical system files or inject malicious code into the application environment. With a CVSS score of 8.1, this vulnerability represents a high-risk scenario for any system that processes user-provided zip files.

Remediation Plan

Immediate Action: Update the extract-zip dependency to the latest secure version available in your package manager repository.

Proactive Monitoring: Monitor filesystem integrity for unauthorized file creation or modification events in sensitive system directories.

Compensating Controls: Implement strict input validation and sandboxing for processes that handle file extraction, ensuring that the extraction process runs with minimal system privileges.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable if the application processes untrusted archives.

Analyst Recommendation

Due to the nature of path traversal vulnerabilities, the risk of remote code execution or system instability is high. Developers should audit their dependencies and update this package immediately to prevent potential file system manipulation.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A command injection vulnerability exists in Tenable Security Center, allowing remote authenticated attackers to execute arbitrary system commands via an insecurely handled input parameter.

Executive Summary:
A critical command injection vulnerability in Tenable Security Center allows authenticated attackers to execute arbitrary system commands with service account privileges.

Vulnerability Details

CVE-ID: CVE-2026-19682

Affected Software: Tenable Security Center

Affected Versions: 0 up to (excluding) 6.9.0

Vulnerability: The software fails to properly neutralize special elements used in an operating system command. This flaw allows a remote attacker with low-level privileges to inject malicious commands that execute with the permissions of the underlying service account.

Business Impact

Successful exploitation of this vulnerability leads to full system compromise, as the attacker can run arbitrary commands with the privileges of the service account. Given the CVSS score of 9.9, this represents a critical risk to the confidentiality, integrity, and availability of the Tenable platform and any data managed by it. Unauthorized access could lead to lateral movement within the network or the exfiltration of sensitive vulnerability assessment data.

Remediation Plan

Immediate Action: Upgrade Tenable Security Center to version 6.9.0 or later immediately. Installation files are available through the official Tenable Downloads Portal.

Proactive Monitoring: Review system logs for suspicious process execution, particularly those originating from the Security Center service user. Monitor for unauthorized changes to system configuration files or unexpected outbound network traffic.

Compensating Controls: Implement strict network segmentation to limit access to the Security Center management interface to authorized administrative segments only. Utilize host-based intrusion detection systems to flag unauthorized command-line activity.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the potential for total system impact via command injection.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention from security teams. Organizations should prioritize the upgrade to version 6.9.0 to eliminate the command injection vector and prevent potential compromise of the management infrastructure.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An authenticated command injection vulnerability exists in Tenable Security Center during file upload processing, allowing arbitrary command execution.

Executive Summary:
An authenticated command injection vulnerability in Tenable Security Center allows an attacker to execute arbitrary commands on the underlying operating system, posing a severe risk to infrastructure security.

Vulnerability Details

CVE-ID: CVE-2026-19681

Affected Software: Tenable Security Center

Affected Versions: 0 up to (excluding) 6.9.0

Vulnerability: This is a command injection vulnerability (CWE-78) triggered during file upload processes. An authenticated user can supply malicious input that is improperly neutralized, resulting in OS command execution.

Business Impact

With a CVSS score of 9.9, successful exploitation allows an attacker to gain full control over the server hosting Security Center. This could result in the compromise of sensitive vulnerability data, lateral movement within the network, and total loss of confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Update Tenable Security Center to version 6.9.0 or later using the files provided in the Tenable Downloads Portal.

Proactive Monitoring: Monitor system logs for unexpected child processes or unusual file activity originating from the Security Center service.

Compensating Controls: Ensure that the Security Center instance is isolated via network controls and strictly limit the number of users with upload privileges.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for authentication reduces the attack surface but does not mitigate the high-impact nature of the flaw.

Analyst Recommendation

Organizations utilizing Tenable Security Center must prioritize upgrading to version 6.9.0 immediately. Given the high severity and the potential for full system compromise, this should be handled as an emergency maintenance task.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A SQL injection vulnerability in Tenable Security Center allows an authenticated attacker to access unauthorized database information.

Executive Summary:
A critical SQL injection vulnerability in Tenable Security Center could allow an authenticated attacker to exfiltrate sensitive data from the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-19680

Affected Software: Tenable Security Center

Affected Versions: 0 up to (excluding) 6.9.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) arising from the improper neutralization of special elements in SQL commands. The CVSS vector indicates that this flaw requires low privileges (PR:L) to execute, meaning an authenticated user can perform unauthorized database queries.

Business Impact

Successful exploitation of this vulnerability could lead to significant data compromise, as an attacker may gain unauthorized access to sensitive information stored within the Security Center database. With a CVSS score of 7.1, this flaw is categorized as High severity, necessitating prompt remediation to prevent potential data breaches and maintain the integrity of security management infrastructure.

Remediation Plan

Immediate Action: Upgrade to Tenable Security Center version 6.9.0 or later, which is available via the Tenable Downloads Portal.

Proactive Monitoring: Review database access logs for unusual query patterns or unexpected SQL syntax that may indicate automated injection attempts.

Compensating Controls: Implement Web Application Firewall (WAF) rules designed to detect and block common SQL injection payloads targeted at the application interface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the potential for direct database interaction through the application layer.

Analyst Recommendation

Given the potential for unauthorized data access, administrators should prioritize updating to version 6.9.0. Applying this patch is the only definitive way to neutralize the vulnerability and prevent exploitation by malicious actors.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Tenable Security Center is vulnerable to OS command injection due to insufficient sanitization of filenames during file upload operations.

Executive Summary:
An authenticated OS command injection vulnerability in Tenable Security Center allows attackers to execute arbitrary system commands via crafted file uploads.

Vulnerability Details

CVE-ID: CVE-2026-19679

Affected Software: Tenable Security Center

Affected Versions: 0 up to (excluding) 6.9.0

Vulnerability: This vulnerability (CWE-78) occurs when the application fails to properly neutralize special characters in file upload requests. An authenticated user can leverage this weakness to inject and execute system-level commands on the Tenable Security Center appliance.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its potential for total system impact. Unauthorized command execution could allow an attacker to gain full control over the Tenable Security Center instance, potentially leading to the theft of sensitive vulnerability data or the compromise of administrative credentials used to manage the security infrastructure.

Remediation Plan

Immediate Action: Upgrade to Tenable Security Center version 6.9.0 or later, which is officially released to mitigate this specific command injection vulnerability.

Proactive Monitoring: Review audit logs for suspicious file upload activity and monitor for unexpected spawned processes or shell commands originating from the web server user account.

Compensating Controls: Restrict access to the file upload functionality to trusted administrators only and employ WAF rules to sanitize or block uploads containing suspicious shell metacharacters.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly accessible to any user with legitimate upload permissions, making it a critical target for internal or compromised-account threats.

Analyst Recommendation

Tenable Security Center is a critical component of security operations, making this vulnerability particularly sensitive. Organizations must prioritize the update to version 6.9.0 to protect their vulnerability management environment from potential exploitation.

---METADATA---
VENDOR: SCADA-LTS
PRODUCT: ScadaLTS
AFFECTED_VERSIONS: 2.7.8.1
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
ScadaLTS 2.7.8.1 contains an authorization bypass vulnerability that allows authenticated users with low privileges to execute arbitrary operating system commands as root.

Executive Summary:
An authorization vulnerability in ScadaLTS allows low-privileged users to escalate their access and execute arbitrary commands with root privileges on the server.

Vulnerability Details

CVE-ID: CVE-2026-19656

Affected Software: SCADA-LTS ScadaLTS

Affected Versions: 2.7.8.1

Vulnerability: The application lacks necessary authorization checks for certain server-side methods. This permits any user with read-only access to invoke administrative functions, leading to OS command injection in the context of the root user.

Business Impact

With a CVSS score of 9.9, this vulnerability represents a severe threat to operational technology environments. Successful exploitation allows an attacker to gain full control over the ScadaLTS server, potentially disrupting industrial processes or accessing sensitive control network data.

Remediation Plan

Immediate Action: Since a specific patch version is not currently identified in the provided data, users should contact the vendor for the latest security release or apply vendor-provided mitigations.

Proactive Monitoring: Monitor system logs for unauthorized attempts to access server-side administrative methods or unexpected process execution by the ScadaLTS application user.

Compensating Controls: Implement strict network segmentation to isolate the ScadaLTS instance and enforce the principle of least privilege for all user accounts accessing the platform.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is extremely dangerous due to the potential for privilege escalation and full system compromise from a low-privileged account.

Analyst Recommendation

Organizations utilizing ScadaLTS must treat this as a high-priority security incident. Given the potential for full system compromise, restrict access to the application immediately and engage with the vendor to obtain the necessary security updates or configuration changes to address the authorization flaw.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: Versions prior to 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Tenable Security Center contains an OS command injection vulnerability, allowing authenticated local users to execute arbitrary commands with elevated privileges.

Executive Summary:
A local OS command injection vulnerability in Tenable Security Center could allow an authenticated attacker to achieve full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-19635

Affected Software: Tenable Security Center

Affected Versions: Versions prior to 6.9.0

Vulnerability: The software fails to properly neutralize special elements used in OS commands (CWE-78), enabling command injection. The attack requires local access and authenticated privileges (PR:L) to execute the malicious payload.

Business Impact

With a CVSS score of 8.8, this local privilege escalation vulnerability poses a severe threat to infrastructure security. An attacker who has already gained low-level access to the host can escalate their privileges to perform unauthorized system operations, leading to potential data exfiltration or system destruction.

Remediation Plan

Immediate Action: Upgrade Tenable Security Center to version 6.9.0 or later using the files provided in the Tenable Downloads Portal.

Proactive Monitoring: Monitor system logs for unexpected process execution or shell commands originating from the Security Center service account.

Compensating Controls: Restrict local shell access to the host server and apply the principle of least privilege to all users who have access to the Security Center interface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for local access mitigates the risk from remote actors, but it remains a critical issue for insider threat scenarios.

Analyst Recommendation

Organizations should proceed with the update to version 6.9.0 as soon as possible. Because this is a local privilege escalation, securing the underlying operating system and auditing user access rights should be conducted alongside the software patch.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: Tenable, Inc. Security Center: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Tenable Security Center contains a privilege escalation flaw allowing users with Security Manager roles to modify users outside their assigned groups.

Executive Summary:
A privilege escalation vulnerability in Tenable Security Center allows authenticated users to bypass authorization controls and modify user accounts across restricted groups.

Vulnerability Details

CVE-ID: CVE-2026-19629

Affected Software: Tenable Security Center

Affected Versions: Tenable, Inc. Security Center: 0 up to (excluding) 6.9.0

Vulnerability: This is an incorrect authorization vulnerability (CWE-863) where a user with the Security Manager role and limited group management permissions can escalate their privileges to perform unauthorized administrative actions on users in other groups.

Business Impact

This flaw allows a malicious insider or a compromised account to expand their influence within the security management platform. With a CVSS score of 8.1, this represents a significant risk to internal governance and the principle of least privilege, as unauthorized users could potentially modify or disable security audit accounts.

Remediation Plan

Immediate Action: Upgrade Tenable Security Center to version 6.9.0 or later by downloading the update from the Tenable Downloads Portal.

Proactive Monitoring: Audit user activity logs for unexpected modifications to administrative accounts or changes to group membership configurations.

Compensating Controls: Strictly enforce the principle of least privilege by auditing existing user roles and removing unnecessary "manage user" permissions until the patch is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires low-level authenticated access, the ability to manipulate other user accounts makes it a critical internal security risk.

Analyst Recommendation

Organizations should treat this privilege escalation vulnerability with high urgency. Administrators must apply the version 6.9.0 update as soon as possible to restore proper authorization boundaries and prevent unauthorized access to sensitive security management functions.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Tenable Security Center versions prior to 6.9.0 contain an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands on the underlying host.

Executive Summary:
A command injection vulnerability in Tenable Security Center prior to version 6.9.0 allows authenticated users with high privileges to execute arbitrary OS commands.

Vulnerability Details

CVE-ID: CVE-2026-19628

Affected Software: Tenable Security Center

Affected Versions: 0 up to 6.9.0

Vulnerability: The application is susceptible to OS command injection (CWE-78) due to improper neutralization of special elements. This vulnerability requires the attacker to be authenticated with high privileges, limiting the initial vector of attack to compromised or malicious administrative accounts.

Business Impact

Successful exploitation grants an attacker full control over the underlying operating system of the Security Center instance. With a CVSS score of 7.2, the potential for total system compromise, exfiltration of vulnerability data, or pivoting into the wider network environment poses a severe risk to organizational security.

Remediation Plan

Immediate Action: Update Tenable Security Center to version 6.9.0 or later immediately. The update can be obtained through the official Tenable Downloads Portal.

Proactive Monitoring: Review administrative audit logs for unusual command execution patterns or unauthorized changes to system configurations.

Compensating Controls: Ensure that administrative access to the Security Center interface is restricted to highly trusted personnel and monitored via multi-factor authentication.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for high privileges mitigates the risk of external mass exploitation, but the impact remains critical for internal security.

Analyst Recommendation

Organizations should treat this as a high-priority update. Apply the 6.9.0 patch immediately to eliminate the risk of command injection and ensure that administrative access is strictly managed and audited.

---METADATA---
VENDOR: Tenable
PRODUCT: Security Center
AFFECTED_VERSIONS: 0 up to (excluding) 6.9.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Tenable Security Center is vulnerable to remote code execution during report generation, allowing an authenticated, non-administrative user to execute arbitrary code on the server.

Executive Summary:
A critical remote code execution vulnerability in Tenable Security Center allows an authenticated, low-privileged user to execute arbitrary code with service account privileges.

Vulnerability Details

CVE-ID: CVE-2026-19626

Affected Software: Tenable Security Center

Affected Versions: 0 up to (excluding) 6.9.0

Vulnerability: This is an eval injection vulnerability occurring within the report generation functionality. An authenticated user can supply malicious input during the server-side rendering process, which results in the execution of arbitrary code with the privileges of the underlying service account.

Business Impact

Successful exploitation allows an attacker to gain remote code execution capabilities on the host system. This can lead to total system compromise, unauthorized access to sensitive vulnerability data, and the potential for lateral movement within the network. Although the attack requires authentication, the high CVSS score of 9.9 reflects the extreme impact of arbitrary code execution on a security management platform.

Remediation Plan

Immediate Action: Update Tenable Security Center to version 6.9.0 or later, which is available via the Tenable Downloads Portal.

Proactive Monitoring: Monitor server logs for suspicious activities during report generation or unexpected process execution spawned by the Security Center service.

Compensating Controls: Limit access to the Security Center interface to trusted users only and ensure the application is segmented within the network to minimize potential lateral movement.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of Aug 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Per CISA's SSVC assessment, there is no evidence of active exploitation, and the automatability of the attack is low.

Analyst Recommendation

Given the critical nature of this remote code execution vulnerability, organizations should treat the update to version 6.9.0 as a high-priority task. Applying the patch is the only effective method to mitigate the risk of unauthorized system-level command execution.

---METADATA---
VENDOR: sc0ttkclark
PRODUCT: Pods – Custom Content Types and Fields
AFFECTED_VERSIONS: >= 2.8 and <= 2.8.23.3; >= 2.9 and <= 2.9.19.3; >= 3.0 and <= 3.0.10.3; >= 3.1 and <= 3.1.4.1; 3.3 through 3.3.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Pods WordPress plugin is vulnerable to unauthenticated privilege escalation due to an authorization bypass in the AJAX router.

Executive Summary:
A critical authorization bypass in the Pods WordPress plugin enables unauthenticated attackers to escalate privileges to Administrator, granting full site control.

Vulnerability Details

CVE-ID: CVE-2026-19598

Affected Software: sc0ttkclark Pods – Custom Content Types and Fields

Affected Versions: See metadata for specific version ranges

Vulnerability: The pods_admin AJAX router fails to properly terminate requests upon failed authorization checks, allowing unauthenticated users to bypass security gates. This flaw permits attackers to perform administrative actions or overwrite user passwords, including those of site owners.

Business Impact

This vulnerability carries a CVSS score of 9.8, reflecting the highest level of risk to confidentiality, integrity, and availability. Unauthorized administrative access allows attackers to exfiltrate sensitive data, inject malicious content, or permanently compromise the site infrastructure.

Remediation Plan

Immediate Action: Update the Pods – Custom Content Types and Fields plugin to version 2.8.23.4 or the latest available secure version immediately.

Proactive Monitoring: Review administrative user accounts for unauthorized additions or password changes that occurred prior to patching.

Compensating Controls: Utilize a Web Application Firewall to filter requests targeting the pods_admin AJAX endpoint and restrict access to administrative interfaces.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The bypass is highly trivial to trigger, as it relies on a logic error in the request handling flow.

Analyst Recommendation

Given the critical nature of this privilege escalation flaw, all affected installations must be updated immediately. Failure to patch allows for complete site takeover, making this a top priority for security teams.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: 151.0.7922.137
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use after free vulnerability exists in the Blink rendering engine of Google Chrome, potentially allowing remote attackers to achieve arbitrary code execution.

Executive Summary:
A high severity use after free flaw in the Google Chrome Blink engine poses a risk of arbitrary code execution for users visiting malicious websites.

Vulnerability Details

CVE-ID: CVE-2026-19560

Affected Software: Google Chrome

Affected Versions: 151.0.7922.137

Vulnerability: This vulnerability involves a use after free condition within the Blink rendering engine. The attack vector is network based and requires the victim to interact with a malicious webpage, with no authentication required by the attacker.

Business Impact

The CVSS score of 8.8 reflects the high potential for impact, including complete loss of confidentiality, integrity, and availability of the affected browser session. If successfully exploited, an attacker could bypass browser security boundaries to execute malicious code on the underlying host system.

Remediation Plan

Immediate Action: Apply the latest security updates provided by Google to all Chrome installations within the enterprise.

Proactive Monitoring: Audit browser logs and endpoint security telemetry for anomalies such as unauthorized process spawning or unusual memory usage patterns.

Compensating Controls: Utilize browser security policies and web filtering solutions to restrict access to untrusted or newly registered domains that might host exploit code.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The Blink engine is a critical component of the browser, and flaws here are frequently targeted for their ability to bypass sandbox protections.

Analyst Recommendation

Given the critical nature of the rendering engine, this update must be treated with high urgency. Administrators should verify that all clients have successfully updated to the latest version to mitigate this risk.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: 151.0.7922.137
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use after free vulnerability in the HTML component of Google Chrome allows remote attackers to trigger memory corruption via a crafted web page.

Executive Summary:
A high severity use after free vulnerability in Google Chrome could allow a remote attacker to execute arbitrary code or cause a crash.

Vulnerability Details

CVE-ID: CVE-2026-19559

Affected Software: Google Chrome

Affected Versions: 151.0.7922.137

Vulnerability: This is a use after free flaw in the browser HTML processing logic. The vulnerability is exploitable by an unauthenticated attacker, though it requires user interaction to visit a malicious site.

Business Impact

Successful exploitation of this vulnerability can result in arbitrary code execution within the context of the browser, potentially leading to full system compromise or sensitive data theft. Given the CVSS score of 8.8, this flaw represents a significant risk to organizational endpoints, as web browsers are frequent targets for initial access.

Remediation Plan

Immediate Action: Update Google Chrome to the latest stable version immediately to incorporate the necessary memory management fixes.

Proactive Monitoring: Monitor endpoint logs for suspicious browser crashes or unexpected process behavior that may indicate an exploitation attempt.

Compensating Controls: Ensure that endpoint protection software is active and updated to detect known exploit patterns, and consider using browser isolation technologies for high risk users.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Use after free flaws are inherently dangerous as they provide a reliable path for attackers to achieve code execution if memory corruption primitives are stable.

Analyst Recommendation

The severity of this vulnerability necessitates rapid deployment of patches across all managed Chrome instances. IT teams should prioritize this update to prevent potential remote code execution attacks against the user base.

---METADATA---
VENDOR: Google
PRODUCT: Chrome
AFFECTED_VERSIONS: 151.0.7922.137
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use-after-free vulnerability exists in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to execute arbitrary code via a specially crafted webpage.

Executive Summary:
A high-severity use-after-free vulnerability in the Google Chrome V8 engine could allow an attacker to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-19556

Affected Software: Google Chrome

Affected Versions: 151.0.7922.137

Vulnerability: This is a use-after-free vulnerability within the V8 JavaScript engine. An attacker can trigger this condition through a malicious webpage, potentially leading to memory corruption and subsequent execution of arbitrary code in the context of the browser process.

Business Impact

Successful exploitation can lead to a complete compromise of the user's browser environment. Given the 8.8 CVSS score, this poses a risk of data theft, unauthorized tracking, or the deployment of malware on the end-user's workstation, potentially facilitating further network penetration.

Remediation Plan

Immediate Action: Update Google Chrome to the latest stable release immediately to ensure the V8 engine vulnerability is patched.

Proactive Monitoring: Utilize endpoint detection and response tools to monitor for suspicious browser process behavior or unexpected crashes that may indicate exploitation attempts.

Compensating Controls: Deploy browser-based security policies that restrict script execution or utilize enterprise browser management settings to force timely updates across the organization.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Use-after-free flaws in the V8 engine are historically high-value targets for exploit developers due to their reliability.

Analyst Recommendation

Browser-based vulnerabilities remain a primary entry point for modern attacks. Organizations must ensure that all client systems are updated to the latest version of Chrome to mitigate the risk of memory corruption attacks targeting the V8 engine.

---METADATA---
VENDOR: Red Hat
PRODUCT: Red Hat Enterprise Linux
AFFECTED_VERSIONS: 6, 7, 8, 9, 10
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A code injection vulnerability exists within the DBI component of Red Hat Enterprise Linux, potentially allowing authenticated users to inject and execute arbitrary code.

Executive Summary:
A high-severity code injection vulnerability in the DBI component of Red Hat Enterprise Linux requires immediate attention to prevent unauthorized command execution.

Vulnerability Details

CVE-ID: CVE-2026-19546

Affected Software: Red Hat Enterprise Linux

Affected Versions: 6, 7, 8, 9, 10

Vulnerability: The flaw is an improper control of code generation (CWE-94) residing in the DBI (Database Interface) component. An attacker with low-level authenticated access can leverage this vulnerability to perform code injection, leading to high impacts on confidentiality, integrity, and availability.

Business Impact

The CVSS score of 8.8 reflects the potential for severe system compromise. Because this vulnerability affects the core database interface, a successful exploit could allow an attacker to execute arbitrary code with the privileges of the database service, leading to total data exfiltration or system takeover.

Remediation Plan

Immediate Action: Check the Red Hat Security Advisory (RHSA) portal for the latest security errata and apply the necessary patches for the DBI component.

Proactive Monitoring: Monitor database query logs for anomalous behavior or unexpected system calls originating from the database interface.

Compensating Controls: Apply principle of least privilege to database service accounts and ensure that database interfaces are not exposed to untrusted users or network segments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous due to its position in the database interaction layer.

Analyst Recommendation

Organizations running Red Hat Enterprise Linux should immediately monitor Red Hat security bulletins for the specific patch release. Given the broad range of affected versions, patching should be treated as a high-priority maintenance task to secure the database layer against potential code injection attacks.

---METADATA---
VENDOR: Delta
PRODUCT: Electronics AS320T
AFFECTED_VERSIONS: 0 through 1.14
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Delta Electronics AS320T is vulnerable to a denial-of-service attack via an undocumented subfunction.

Executive Summary:
An undocumented subfunction vulnerability in the Delta Electronics AS320T allows unauthenticated attackers to trigger a denial-of-service condition.

Vulnerability Details

CVE-ID: CVE-2026-1952

Affected Software: Delta Electronics AS320T

Affected Versions: 0 through 1.14

Vulnerability: This vulnerability involves the presence of hidden, undocumented functionality (CWE-912) that can be abused by an unauthenticated, remote attacker to cause a denial-of-service, disrupting device operations.

Business Impact

The exploitation of this flaw can result in significant operational disruption, as the device becomes unresponsive or enters a failed state. Given the CVSS score of 9.8, this vulnerability is critical, posing a severe risk to service availability and system uptime for industrial or network environments utilizing this hardware.

Remediation Plan

Immediate Action: Upgrade the device firmware to version 1.16 or later as specified in the vendor advisory.

Proactive Monitoring: Monitor device logs for unusual traffic patterns or unexpected service interruptions that may indicate attempts to trigger hidden functions.

Compensating Controls: Implement network segmentation to restrict access to the device management interfaces to only authorized administrative segments.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of 2026-04-24, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this an attractive target for automated exploitation tools.

Analyst Recommendation

The severity of this vulnerability necessitates immediate action to maintain system integrity. Administrators should prioritize upgrading the firmware on all affected Delta Electronics AS320T units to version 1.16 or higher to eliminate the risk associated with this undocumented subfunction.

---METADATA---
VENDOR: Delta
PRODUCT: Electronics AS320T
AFFECTED_VERSIONS: 0 through 1.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Delta Electronics AS320T directory name handling allows for potential remote code execution.

Executive Summary:
A critical stack-based buffer overflow in the Delta Electronics AS320T allows unauthenticated remote attackers to potentially execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-1951

Affected Software: Delta Electronics AS320T

Affected Versions: 0 through 1.10

Vulnerability: The software fails to perform adequate bounds checking on directory names, leading to a stack-based buffer overflow (CWE-121). This vulnerability is exploitable by an unauthenticated attacker over the network.

Business Impact

Successful exploitation allows for complete system compromise, including potential unauthorized code execution, data theft, and persistent denial-of-service. With a CVSS score of 9.8, the impact is considered total, threatening the confidentiality, integrity, and availability of the affected system.

Remediation Plan

Immediate Action: Upgrade the device firmware to version 1.12 or later immediately to patch the buffer overflow vulnerability.

Proactive Monitoring: Review system logs for signs of memory corruption, unexpected process crashes, or unauthorized command execution.

Compensating Controls: Utilize a Web Application Firewall (WAF) or Network Intrusion Prevention System (NIPS) to filter malicious traffic containing oversized directory naming strings.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of 2026-04-24, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Stack-based buffer overflows of this nature are highly dangerous due to their potential for remote code execution.

Analyst Recommendation

Given the critical nature of this buffer overflow, immediate firmware remediation is required. Security teams must ensure that all AS320T devices are updated to at least version 1.12 to prevent potential remote exploitation of the directory handling mechanism.

---METADATA---
VENDOR: Delta
PRODUCT: Electronics AS320T
AFFECTED_VERSIONS: 0 through 1.14
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Delta Electronics AS320T file name handling allows for potential remote code execution.

Executive Summary:
A critical stack-based buffer overflow in the Delta Electronics AS320T allows unauthenticated remote attackers to potentially execute arbitrary code via file name manipulation.

Vulnerability Details

CVE-ID: CVE-2026-1950

Affected Software: Delta Electronics AS320T

Affected Versions: 0 through 1.14

Vulnerability: The software fails to perform proper length validation on file name inputs, resulting in a stack-based buffer overflow (CWE-121). An unauthenticated attacker can exploit this flaw remotely to crash the system or execute arbitrary code.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating the highest level of urgency. Successful exploitation can lead to full system compromise, resulting in a total loss of control over the affected hardware and potential access to sensitive operational data.

Remediation Plan

Immediate Action: Upgrade the device firmware to version 1.16 or later as per the vendor's security instructions.

Proactive Monitoring: Monitor for abnormal process behavior or unexpected reboots that may indicate exploitation attempts targeting file system operations.

Compensating Controls: Deploy network-level traffic inspection to detect and block malformed packets containing excessively long file names before they reach the device.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of 2026-04-24, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. This flaw represents a significant risk due to its accessibility to remote, unauthenticated actors.

Analyst Recommendation

The risk posed by this buffer overflow is extreme, and it must be addressed with the highest priority. Administrators should proceed with firmware updates to version 1.16 immediately, ensuring that all devices are brought into a secure state to mitigate the threat of remote code execution.

---METADATA---
VENDOR: Delta Electronics
PRODUCT: AS320T
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Delta Electronics AS320T is vulnerable to a stack-based buffer overflow due to incorrect buffer size calculations in its web service's GET/PUT request handler.

Executive Summary:
A stack-based buffer overflow in the Delta Electronics AS320T web service creates a critical risk for remote code execution and system instability.

Vulnerability Details

CVE-ID: CVE-2026-1949

Affected Software: Delta Electronics AS320T

Affected Versions: See vendor advisory

Vulnerability: The web service fails to correctly calculate buffer sizes on the stack during the processing of GET/PUT requests. This allows an attacker to trigger a buffer overflow, potentially leading to arbitrary code execution or a crash of the service.

Business Impact

With a CVSS score of 9.8, this vulnerability is extremely dangerous, as it can allow an attacker to gain full control over the device. Potential impacts include unauthorized access to operational data, the deployment of malicious payloads, and critical system downtime, which is particularly severe in industrial environments.

Remediation Plan

Immediate Action: Update the firmware of the Delta Electronics AS320T to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor for unexpected service crashes or restarts, which may indicate an exploitation attempt in progress.

Compensating Controls: Implement network-level filtering to restrict access to the web service, ensuring that only authorized traffic can reach the device.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Buffer overflows in critical service handlers are high-priority vulnerabilities that can lead to complete device compromise. Organizations must expedite the deployment of the provided patches and verify the integrity of the device configuration post-update.

---METADATA---
VENDOR: NetScaler
PRODUCT: ADC and Gateway
AFFECTED_VERSIONS: NetScaler ADC: 14.1 through 73.32, 13.1 through 63.21; NetScaler Gateway: 14.1 through 73.32, 13.1 through 63.21
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in NetScaler ADC and NetScaler Gateway allows for remote service disruption. The flaw is exploitable by unauthenticated attackers over the network.

Executive Summary:
A high-severity vulnerability in NetScaler ADC and Gateway allows unauthenticated remote attackers to cause significant service availability impact.

Vulnerability Details

CVE-ID: CVE-2026-19489

Affected Software: NetScaler ADC and NetScaler Gateway

Affected Versions: NetScaler ADC: 14.1 through 73.32, 13.1 through 63.21; NetScaler Gateway: 14.1 through 73.32, 13.1 through 63.21

Vulnerability: The vulnerability is a network-based flaw requiring no authentication, which primarily impacts system availability. It allows an attacker to interact with the appliance to trigger a high-impact service degradation or denial of service.

Business Impact

The CVSS score of 8.8 reflects the high potential for service disruption in critical infrastructure. Successful exploitation could lead to significant downtime for services routed through the ADC or Gateway, potentially halting business operations and affecting external client access to internal applications.

Remediation Plan

Immediate Action: Update all affected NetScaler ADC and Gateway instances to the latest vendor-provided security release as specified in the official advisory.

Proactive Monitoring: Review system logs for unusual traffic patterns or spikes in resource consumption that may indicate exploitation attempts.

Compensating Controls: Deploy Web Application Firewall policies to inspect and filter suspicious traffic directed at the management or gateway interfaces.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirement makes this a high-priority item for perimeter-facing assets.

Analyst Recommendation

Given the high impact on service availability and the lack of authentication required for exploitation, organizations must prioritize patching these appliances. Administrators should apply the vendor updates immediately to prevent potential service outages.

---METADATA---
VENDOR: GitLab
PRODUCT: GitLab
AFFECTED_VERSIONS: 18.2 up to (excluding) 18.11.11, 19.0 up to (excluding) 19.0.8, 19.1 up to (excluding) 19.1.6, 19.2 up to (excluding) 19.2.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A code injection vulnerability in GitLab allows unauthenticated remote attackers to modify or delete public projects and user data via a malicious GraphQL directive.

Executive Summary:
An unauthenticated code injection vulnerability in GitLab allows remote attackers to manipulate project and user data, presenting a critical risk to platform integrity.

Vulnerability Details

CVE-ID: CVE-2026-19478

Affected Software: GitLab CE/EE

Affected Versions: 18.2 up to (excluding) 18.11.11, 19.0 up to (excluding) 19.0.8, 19.1 up to (excluding) 19.1.6, 19.2 up to (excluding) 19.2.4

Vulnerability: This is an Improper Control of Generation of Code (CWE-94) vulnerability. It enables an unauthenticated attacker to execute unauthorized actions against public projects and user data by leveraging a specific GraphQL directive.

Business Impact

With a CVSS score of 9.4, this vulnerability is extremely severe as it allows unauthenticated remote access to modify or destroy project data. This could result in catastrophic data loss, unauthorized alteration of source code, and reputational damage. The ability to target user data further elevates the risk to the privacy and security of all platform participants.

Remediation Plan

Immediate Action: Upgrade GitLab to versions 18.11.11, 19.0.8, 19.1.6, 19.2.4, or later immediately.

Proactive Monitoring: Review audit logs for unexpected GraphQL queries or suspicious API activity originating from unauthorized or external IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to filter and block malicious GraphQL directives or unexpected API requests that target project management endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature and the high level of control it grants over project data.

Analyst Recommendation

This vulnerability is critical and requires immediate attention to prevent unauthorized data modification. GitLab administrators must apply the provided patches across all affected instances without delay to secure their environments against potential remote exploitation.

---METADATA---
VENDOR: Fastify
PRODUCT: @fastify/multipart
AFFECTED_VERSIONS: 3.0.0 up to 10.1.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The @fastify/multipart library fails to properly clean up or limit resources during multipart form data parsing, leading to potential denial of service.

Executive Summary:
A resource exhaustion vulnerability in @fastify/multipart allows unauthenticated remote attackers to cause a denial of service via malformed multipart requests.

Vulnerability Details

CVE-ID: CVE-2026-19474

Affected Software: Fastify @fastify/multipart

Affected Versions: 3.0.0 up to 10.1.1

Vulnerability: This issue involves incomplete resource cleanup and lack of throttling mechanisms (CWE-459 and CWE-770) during file uploads. An unauthenticated attacker can exploit this by sending specially crafted requests that consume excessive server memory or CPU.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a high severity due to the ease of exploitation. Successful exploitation results in system instability or a complete denial of service, which can cause significant operational downtime for applications relying on this library for file processing.

Remediation Plan

Immediate Action: Update the @fastify/multipart package to version 10.1.1 or later to implement proper resource limits and cleanup logic.

Proactive Monitoring: Monitor server memory and CPU utilization for sudden, sustained spikes that coincide with multipart form-data requests.

Compensating Controls: Implement strict request size limits and timeout configurations at the Web Application Firewall or reverse proxy level to drop excessively large or slow-processing requests.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any network-adjacent user capable of submitting multipart requests to the application.

Analyst Recommendation

Given the high CVSS score and the potential for service disruption, administrators should prioritize updating the vulnerable package immediately. Ensuring that the application environment enforces strict resource constraints is essential to minimizing the impact of similar parsing vulnerabilities.

---METADATA---
VENDOR: Roskus
PRODUCT: Prospero Flow CRM
AFFECTED_VERSIONS: 0 up to (excluding) 5.4.8
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Roskus Prospero Flow CRM contains an authorization bypass vulnerability in its contact management component, allowing authenticated users to access or modify data via user-controlled keys.

Executive Summary:
An authorization bypass vulnerability in the Roskus Prospero Flow CRM contact management component exposes sensitive data to authenticated attackers, requiring an urgent update.

Vulnerability Details

CVE-ID: CVE-2026-19433

Affected Software: Roskus Prospero Flow CRM

Affected Versions: 0 up to (excluding) 5.4.8

Vulnerability: This vulnerability is classified as CWE-639, representing an Insecure Direct Object Reference (IDOR) or authorization bypass. It allows an authenticated attacker to manipulate user-controlled keys to access records they are not authorized to view or modify.

Business Impact

The ability to bypass authorization checks in a CRM system directly threatens the confidentiality and integrity of customer records. A CVSS score of 8.6 indicates that this is a critical risk, potentially leading to unauthorized data exports or modifications that could result in severe reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: Upgrade to version 5.4.8 or higher to resolve the authorization logic flaw.

Proactive Monitoring: Review audit logs for suspicious export activity or access patterns where users are requesting records outside of their standard operational scope.

Compensating Controls: Deploy a Web Application Firewall (WAF) to detect and block requests that exhibit signs of parameter tampering or ID-based enumeration.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous due to its ease of exploitation once an authenticated session is established.

Analyst Recommendation

This vulnerability represents a significant risk to data privacy. Organizations should immediately update their Prospero Flow CRM instances to the patched version to prevent unauthorized access to sensitive contact information.

---METADATA---
VENDOR: Jenkins
PRODUCT: Jenkins
AFFECTED_VERSIONS: 1.0 through 2.576, 1.0 through 2.568.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Jenkins contains an improper link resolution vulnerability that allows authenticated users to manipulate file paths during access operations.

Executive Summary:
A high-severity path traversal vulnerability in Jenkins allows authenticated users to achieve full system compromise by exploiting improper link resolution.

Vulnerability Details

CVE-ID: CVE-2026-19429

Affected Software: Jenkins Jenkins

Affected Versions: 1.0 through 2.576, 1.0 through 2.568.2

Vulnerability: This vulnerability involves improper link resolution (CWE-59) and incomplete input validation (CWE-184) within the Jenkins FilePath component. An authenticated attacker can leverage this flaw to access or manipulate unauthorized files on the underlying host system.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its high potential for total system compromise. Successful exploitation allows an attacker with low-level privileges to gain full read and write access to the filesystem, which could lead to the theft of sensitive build artifacts, credentials, or the execution of arbitrary code, resulting in severe data loss and operational downtime.

Remediation Plan

Immediate Action: Update Jenkins to the latest available version as specified in the official vendor security advisory to patch the FilePath resolution logic.

Proactive Monitoring: Review Jenkins build logs and system access logs for unusual file access patterns or attempts to navigate outside of defined workspace directories.

Compensating Controls: Ensure that Jenkins instances are deployed within containerized or isolated environments to minimize the impact of a potential filesystem breakout.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's high technical impact necessitates prompt patching despite the lack of current exploit evidence.

Analyst Recommendation

Given the critical nature of the Jenkins CI/CD pipeline, this vulnerability poses a significant risk to the integrity of the software supply chain. Administrators should prioritize applying the vendor-supplied patches immediately to prevent potential unauthorized access and system-wide escalation.

---METADATA---
VENDOR: Win Men Intermational
PRODUCT: Travel Agency Management System
AFFECTED_VERSIONS: all
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Win Men Intermational Travel Agency Management System is vulnerable to SQL injection, allowing unauthenticated remote attackers to manipulate database contents.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Win Men Intermational Travel Agency Management System allows remote attackers to read, modify, or delete database information.

Vulnerability Details

CVE-ID: CVE-2026-19425

Affected Software: Win Men Intermational Travel Agency Management System

Affected Versions: All versions

Vulnerability: This is a classic SQL injection (CWE-89) vulnerability, where the application fails to properly sanitize user-supplied input before including it in database queries. This allows an unauthenticated remote attacker to execute arbitrary SQL commands.

Business Impact

This vulnerability poses a severe risk, as it grants attackers unauthorized access to the application database. With a CVSS score of 9.8, the business impact includes potential data breaches of customer information, unauthorized modification of travel records, and total loss of data integrity.

Remediation Plan

Immediate Action: Contact the vendor immediately to inquire about a security patch. If no patch is available, restrict access to the application via network controls to prevent unauthorized external access.

Proactive Monitoring: Monitor database query logs for suspicious patterns, such as UNION statements, unexpected syntax errors, or queries attempting to access administrative tables.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection payloads before they reach the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication.

Analyst Recommendation

Due to the critical nature of SQL injection and the lack of a provided patch, organizations currently using this software must isolate the instance from public-facing networks immediately. Ensure that rigorous WAF protections are in place until an official vendor update is applied.

---METADATA---
VENDOR: Inventec
PRODUCT: Chiline Cloud
AFFECTED_VERSIONS: 0 through 4.5.9
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Chiline Cloud by Inventec Appliances contains an Insecure Direct Object Reference (IDOR) vulnerability that permits unauthorized access to data.

Executive Summary:
An Insecure Direct Object Reference vulnerability in Inventec Chiline Cloud allows unauthenticated attackers to potentially access sensitive data.

Vulnerability Details

CVE-ID: CVE-2026-19424

Affected Software: Inventec Appliances Chiline Cloud

Affected Versions: 0 through 4.5.9

Vulnerability: This vulnerability is an IDOR flaw (CWE-639) that occurs when an application provides direct access to objects based on user-supplied input without performing adequate authorization checks. It is exploitable by an unauthenticated attacker over the network.

Business Impact

The ability to bypass authorization controls allows for the unauthorized retrieval of sensitive information, potentially leading to a significant data breach. The CVSS score of 7.5 reflects the high risk posed by this vulnerability, as it allows for unauthorized access to data without requiring any user interaction or prior authentication.

Remediation Plan

Immediate Action: No customer action is required as the service provider has already resolved the vulnerability at the cloud infrastructure level.

Proactive Monitoring: Review system access logs for unusual patterns of data requests that might indicate attempts to manipulate object identifiers.

Compensating Controls: Ensure that all future API endpoints implement robust authorization checks that validate user permissions against requested object IDs.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherent in the way the application manages object references, which has now been mitigated centrally.

Analyst Recommendation

Because this vulnerability has been addressed at the service provider level, users do not need to perform manual updates. However, organizations should verify that their internal security posture remains strong by conducting regular audits of API security and data access controls.

---METADATA---
VENDOR: TYPO3
PRODUCT: TYPO3 CMS
AFFECTED_VERSIONS: 13.0.0 up to (excluding) 13.4.34, 14.0.0 up to (excluding) 14.3.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
TYPO3 CMS v13 and v14 contain a flaw where referrer enforcement is ineffective, enabling potential Cross-Site Request Forgery (CSRF) attacks against authenticated users.

Executive Summary:
An origin validation error in TYPO3 CMS allows for CSRF attacks, potentially enabling unauthorized actions to be performed on behalf of an authenticated user.

Vulnerability Details

CVE-ID: CVE-2026-19418

Affected Software: TYPO3 CMS

Affected Versions: 13.0.0 up to (excluding) 13.4.34, 14.0.0 up to (excluding) 14.3.6

Vulnerability: This vulnerability involves an origin validation error (CWE-346) and Cross-Site Request Forgery (CWE-352). The referrer enforcement mechanism, intended to prevent unauthorized cross-site requests, fails in these versions, allowing an attacker to manipulate an authenticated user into performing unintended actions.

Business Impact

The inability to properly validate the origin of requests exposes the application to CSRF attacks, which can lead to unauthorized configuration changes or data submission. With a CVSS score of 7.3, this flaw poses a high risk to application integrity, particularly for administrative users who may be tricked into performing sensitive operations.

Remediation Plan

Immediate Action: Update TYPO3 CMS to version 13.4.34 or 14.3.6, or the latest available maintenance release, to restore proper referrer enforcement.

Proactive Monitoring: Monitor server access logs for suspicious request patterns and verify that security headers are correctly implemented to prevent unauthorized cross-site interactions.

Compensating Controls: Implement strict SameSite cookie attributes and consider the use of a Web Application Firewall (WAF) to filter suspicious incoming traffic that lacks valid referrer headers.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The issue is a regression in security controls that requires immediate attention to prevent potential exploitation.

Analyst Recommendation

The failure of referrer enforcement in current TYPO3 versions represents a critical security regression. Organizations should prioritize updating to the patched versions immediately to ensure that origin validation is restored and the application is protected against CSRF-based attacks.

---METADATA---
VENDOR: Red Hat
PRODUCT: Red Hat Enterprise Linux
AFFECTED_VERSIONS: Red Hat Enterprise Linux 7, 8, 9, and 10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Multiple integer overflow and underflow vulnerabilities in the GStreamer gst-plugins-ugly ASF demuxer allow for potential denial of service via specially crafted media files.

Executive Summary:
A critical vulnerability in the GStreamer ASF demuxer affects multiple versions of Red Hat Enterprise Linux and may lead to application crashes or denial of service.

Vulnerability Details

CVE-ID: CVE-2026-19389

Affected Software: Red Hat Enterprise Linux

Affected Versions: Red Hat Enterprise Linux 7, 8, 9, and 10

Vulnerability: This vulnerability involves integer overflow and underflow flaws within the ASF demuxer component of GStreamer. An unauthenticated, remote attacker can trigger these conditions by providing a malformed ASF, WMV, or WMA file, requiring user interaction to process the malicious media.

Business Impact

The exploitation of this flaw can result in significant service instability or complete application failure, categorized as a high severity risk with a CVSS score of 7.1. While information disclosure is limited, the impact on availability poses a direct threat to business continuity for systems that rely on media processing pipelines.

Remediation Plan

Immediate Action: Update the GStreamer packages to the versions specified in the official Red Hat security advisory to address the demuxer flaws.

Proactive Monitoring: Monitor system logs for unexpected crashes or error messages associated with the GStreamer media framework.

Compensating Controls: Restrict the processing of untrusted media files from external sources until patches are successfully deployed across the environment.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. These integer-based flaws are historically difficult to weaponize for code execution, though they remain reliable vectors for denial of service.

Analyst Recommendation

Given the prevalence of media processing within enterprise environments, administrators should prioritize the deployment of the vendor-supplied patches. Failure to remediate could leave systems vulnerable to targeted crashes if users are induced to open malicious media files.

---METADATA---
VENDOR: Red Hat
PRODUCT: Red Hat Enterprise Linux
AFFECTED_VERSIONS: Red Hat Enterprise Linux 7, 8, 9, 10
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A heap out-of-bounds write vulnerability in the GStreamer gst-plugins-bad adpcmdec element allows attackers to trigger crashes or potentially execute code via maliciously crafted audio files.

Executive Summary:
A heap out-of-bounds write vulnerability in GStreamer, affecting multiple versions of Red Hat Enterprise Linux, poses a risk of application crashes or arbitrary code execution.

Vulnerability Details

CVE-ID: CVE-2026-19387

Affected Software: Red Hat Enterprise Linux (RHEL) 7, 8, 9, and 10

Affected Versions: Red Hat Enterprise Linux 7, 8, 9, 10

Vulnerability: The flaw exists in the adpcmdec element of gst-plugins-bad, which fails to properly validate input during the decoding of IMA/DVI ADPCM audio data (CWE-787). This is an unauthenticated, remotely exploitable vulnerability that requires user interaction to process the malicious media file.

Business Impact

The vulnerability carries a CVSS score of 7.6, reflecting the potential for remote code execution or denial of service through application crashes. This poses a significant threat to any system that processes external media, potentially leading to unauthorized access or widespread system instability.

Remediation Plan

Immediate Action: Update the GStreamer packages to the latest version provided by Red Hat as soon as security advisories are published. Refer to the Red Hat Bugzilla entry 2513015 for specific package versioning.

Proactive Monitoring: Monitor systems for unusual crashes in media-processing applications or services that utilize GStreamer libraries.

Compensating Controls: Use endpoint protection software to scan incoming media files and restrict the execution of untrusted media applications.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is fundamentally exploitable if a user is convinced to process a malicious file, making user awareness a key component of the defense.

Analyst Recommendation

Organizations should prioritize patching their RHEL environments. Until updates are applied, advise users to exercise extreme caution when opening unknown audio or video files from untrusted sources.

---METADATA---
VENDOR: PostgreSQL
PRODUCT: PostgreSQL
AFFECTED_VERSIONS: PostgreSQL 18 up to 18.5, 17 up to 17.11, 16 up to 16.15, 15 up to 15.19, 0 up to 14.24
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A heap-based buffer overflow in the PostgreSQL pg_dump utility allows an authenticated user to achieve arbitrary code execution as the OS user running the utility via a crafted transform list.

Executive Summary:
A heap buffer overflow vulnerability in PostgreSQL allows authenticated attackers to execute arbitrary code, posing a critical risk to database integrity and host system security.

Vulnerability Details

CVE-ID: CVE-2026-19385

Affected Software: PostgreSQL

Affected Versions: PostgreSQL 18 up to 18.5, 17 up to 17.11, 16 up to 16.15, 15 up to 15.19, 0 up to 14.24

Vulnerability: This is a heap-based buffer overflow (CWE-122) within the pg_dump utility. It can be triggered by an authenticated low-privileged user providing a specially crafted transform list, leading to execution of arbitrary code with the privileges of the system user executing the dump operation.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting the high potential for total compromise of the system running the database backup processes. Successful exploitation could lead to unauthorized data access, modification of critical database objects, or complete system takeover. Organizations relying on automated backup routines are at particular risk, as these processes often run with elevated service account privileges.

Remediation Plan

Immediate Action: Update PostgreSQL instances to the latest patched versions (18.5, 17.11, 16.15, 15.19, or 14.24) as specified by the vendor.

Proactive Monitoring: Review system logs for unusual pg_dump execution patterns or unexpected crashes associated with database utility processes.

Compensating Controls: Restrict access to database administrative functions and ensure that service accounts running backup utilities operate under the principle of least privilege.

Exploitation Status

Public Exploit Available: No (unknown).

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the nature of buffer overflows in system utilities that interact with user-controlled data.

Analyst Recommendation

Given the severity of potential remote code execution, administrators must prioritize patching all PostgreSQL environments immediately. Ensure that the update cycle is completed across all production, staging, and development instances to prevent lateral movement from compromised lower-environment database nodes.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Simple Doctors Appointment System
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
SourceCodester Simple Doctors Appointment System version 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries.

Executive Summary:
A critical SQL injection vulnerability in the SourceCodester Simple Doctors Appointment System allows unauthenticated remote attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-19384

Affected Software: SourceCodester Simple Doctors Appointment System

Affected Versions: 1.0

Vulnerability: This is an injection-based vulnerability (CWE-89, CWE-74) that allows an unauthenticated, remote attacker to execute arbitrary SQL commands. The flaw stems from insufficient sanitization of input, enabling unauthorized data access or modification.

Business Impact

With a CVSS score of 7.3, this vulnerability poses a severe risk of data breach, including the potential theft of sensitive patient information. Successful exploitation could lead to total database compromise, resulting in significant regulatory and reputational damage.

Remediation Plan

Immediate Action: Since there is no official patch available, administrators should immediately restrict access to the application via a firewall or VPN. If possible, disable the application until a fix is implemented by the vendor.

Proactive Monitoring: Review database logs for suspicious query patterns, such as unexpected syntax characters or large-scale data extraction attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection remains one of the most common and easily exploitable web vulnerabilities, making this a high-risk entry point.

Analyst Recommendation

Due to the nature of the software, which likely handles sensitive personal health information, this vulnerability must be treated as critical. Immediate steps should be taken to isolate the application from the public internet until the vendor provides a secure update.

---METADATA---
VENDOR: Kingston
PRODUCT: FURY CTRL RGB Control Software
AFFECTED_VERSIONS: 2.0.65.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Kingston FURY CTRL RGB Control Software version 2.0.65.0 contains an improper privilege management vulnerability that could allow local attackers to escalate privileges.

Executive Summary:
A high-severity privilege escalation vulnerability exists in Kingston FURY CTRL RGB Control Software, potentially allowing a local attacker to gain unauthorized control over the system.

Vulnerability Details

CVE-ID: CVE-2026-19381

Affected Software: Kingston FURY CTRL RGB Control Software

Affected Versions: 2.0.65.0

Vulnerability: This vulnerability involves improper privilege management and incorrect privilege assignment (CWE-269, CWE-266). The flaw requires a local attacker with low privileges to interact with the software to achieve full system compromise.

Business Impact

Successful exploitation of this vulnerability allows a local user to execute commands with elevated permissions, leading to full system compromise. With a CVSS score of 7.8, this represents a significant risk to the integrity and availability of workstations running this software, especially in environments where non-administrative users have local access to machines.

Remediation Plan

Immediate Action: Currently, there is no official patch released by the vendor. Users should restrict local access to systems running this software and consider disabling the service if it is not mission-critical.

Proactive Monitoring: Monitor system logs for unexpected privilege escalation events, such as unauthorized creation of administrative accounts or suspicious processes running under the SYSTEM context.

Compensating Controls: Implement strict application allowlisting to prevent unauthorized code execution and ensure that local users operate with the principle of least privilege.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While the CVSS vector indicates a low attack complexity, it requires local access, which limits the attack surface to the local environment.

Analyst Recommendation

Given the potential for complete system takeover, organizations should treat this vulnerability with high priority. We recommend isolating affected systems until a security update is provided by Kingston and monitoring for any anomalous local activity that suggests privilege escalation attempts.

---METADATA---
VENDOR: EFM
PRODUCT: ipTIME AX8004M
AFFECTED_VERSIONS: 15.09.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The EFM ipTIME AX8004M router is vulnerable to OS command injection, allowing unauthenticated remote attackers to execute arbitrary system commands.

Executive Summary:
A critical OS command injection vulnerability in the EFM ipTIME AX8004M router allows unauthenticated remote attackers to compromise the integrity and availability of the device.

Vulnerability Details

CVE-ID: CVE-2026-19379

Affected Software: EFM ipTIME AX8004M

Affected Versions: 15.09.0

Vulnerability: The device suffers from an OS command injection flaw (CWE-78), which allows an unauthenticated remote attacker to inject and execute arbitrary system commands via the network interface.

Business Impact

The CVSS score of 7.3 classifies this as a high-severity issue. Successful exploitation grants an attacker the ability to execute unauthorized commands on the router, potentially leading to full device takeover, network interception, or further lateral movement into the internal network, which poses a significant threat to organizational security and data confidentiality.

Remediation Plan

Immediate Action: Monitor official EFM support channels for the release of a firmware update and apply it immediately upon availability.

Proactive Monitoring: Review device access logs for unusual system calls or command execution patterns that deviate from standard operation.

Compensating Controls: Restrict management interface access to trusted internal IP addresses and employ a firewall to block unauthorized inbound traffic to the router management port.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Command injection remains one of the most dangerous classes of vulnerabilities due to the direct impact on host system integrity.

Analyst Recommendation

Given the ability for unauthenticated attackers to execute arbitrary code, this vulnerability presents a high risk to network perimeter security. Administrators should restrict access to the device management interface immediately and prioritize applying the vendor patch once it is released.

---METADATA---
VENDOR: Uasoft
PRODUCT: Badaso
AFFECTED_VERSIONS: 3.0.0-alpha
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Uasoft Badaso version 3.0.0-alpha is affected by a permission and privilege assignment vulnerability, enabling unauthenticated remote attackers to bypass security controls.

Executive Summary:
A high-severity privilege assignment vulnerability in Uasoft Badaso allows unauthenticated attackers to bypass security controls and potentially gain unauthorized access to administrative functions.

Vulnerability Details

CVE-ID: CVE-2026-19376

Affected Software: Uasoft Badaso

Affected Versions: 3.0.0-alpha

Vulnerability: The application contains flaws in privilege management (CWE-275, CWE-266), which permit an unauthenticated remote attacker to manipulate access controls and gain elevated privileges.

Business Impact

With a CVSS score of 7.3, this vulnerability represents a severe risk to application security. An attacker could exploit this flaw to gain unauthorized administrative access, resulting in the compromise of sensitive data, unauthorized modification of system settings, or the total takeover of the Badaso instance.

Remediation Plan

Immediate Action: Check the official Uasoft Badaso repository for security patches and upgrade the installation to a version that addresses these privilege management flaws.

Proactive Monitoring: Audit user account creation logs and monitor for unauthorized administrative actions or unexpected changes to role-based access control configurations.

Compensating Controls: Implement strict network-level access controls to limit exposure of the application to untrusted networks and utilize a WAF to filter suspicious requests targeting administrative endpoints.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Privilege bypass vulnerabilities are often targeted to gain persistent unauthorized access to applications.

Analyst Recommendation

Security teams should treat this vulnerability with high urgency. Because it allows for unauthorized privilege escalation without authentication, it is imperative to apply available updates or restrict external access to the affected instance until a fix is deployed.

---METADATA---
VENDOR: adafap
PRODUCT: api-mcp
AFFECTED_VERSIONS: 92b9a5d04acfec165c7d4ef852496593aa87be06
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A Server-Side Request Forgery vulnerability exists in adafap api-mcp, which could allow an unauthenticated attacker to manipulate internal requests.

Executive Summary:
An unauthenticated Server-Side Request Forgery vulnerability in adafap api-mcp could allow attackers to perform unauthorized actions on behalf of the server.

Vulnerability Details

CVE-ID: CVE-2026-19374

Affected Software: adafap api-mcp

Affected Versions: 92b9a5d04acfec165c7d4ef852496593aa87be06

Vulnerability: The application is susceptible to Server-Side Request Forgery (CWE-918). The vulnerability is reachable by unauthenticated attackers (PR:N) over the network.

Business Impact

This vulnerability allows an attacker to force the server to make requests to internal or external resources, potentially exposing sensitive data or bypassing firewall controls. With a CVSS score of 7.3, the impact is significant, as it facilitates unauthorized interaction with internal infrastructure.

Remediation Plan

Immediate Action: Review the official repository at https://github.com/adafap/api-mcp/ for updates or configuration changes that address this flaw.

Proactive Monitoring: Review web server and application logs for suspicious outbound requests originating from the server to internal IP addresses or sensitive endpoints.

Compensating Controls: Implement strict egress filtering on the server to prevent it from initiating unauthorized connections to internal network segments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a confirmed published exploit for this vulnerability. The presence of the E:P indicator in the vector suggests a potential for exploitation, but no curated weaponized code is available.

Analyst Recommendation

Organizations utilizing adafap api-mcp must evaluate their current exposure to this SSRF vulnerability. Until a formal patch is applied, strict network-level egress filtering is strongly recommended to minimize the risk of unauthorized data access.

---METADATA---
VENDOR: YayCommerce
PRODUCT: YayMail – WooCommerce Email Customizer (WordPress Plugin)
AFFECTED_VERSIONS: All versions up to, and including, 4.3.2
---END_METADATA---

Description Summary:
The YayMail plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on an AJAX action, allowing authenticated attackers to gain administrative access.

Executive Summary:
Authenticated attackers with Shop Manager access can escalate their privileges to Administrator by exploiting a security flaw in the YayMail WordPress plugin.

Vulnerability Details

CVE-ID: CVE-2026-1937

Affected Software: YayCommerce YayMail – WooCommerce Email Customizer

Affected Versions: All versions up to, and including, 4.3.2

Vulnerability: The plugin fails to perform a capability check on the yaymail_import_state AJAX action. This allows authenticated attackers with Shop Manager-level access to modify arbitrary WordPress options, such as enabling open registration and setting the default role to administrator.

Business Impact

This vulnerability enables privilege escalation, allowing lower-level staff or compromised accounts to take full control of the WordPress site. The CVSS score of 9.8 reflects the high probability of total site compromise and the resulting theft of customer data and intellectual property.

Remediation Plan

Immediate Action: Update the YayMail – WooCommerce Email Customizer plugin to version 4.3.3 or higher immediately.

Proactive Monitoring: Review WordPress user roles for unauthorized new administrator accounts and check the wp_options table for unauthorized changes to registration settings.

Compensating Controls: Use a security plugin to monitor AJAX actions and restrict access to the WordPress dashboard for non-essential personnel.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Feb 18, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Privilege escalation vulnerabilities in popular plugins like YayMail pose a significant risk to e-commerce operations. Administrators must update the plugin immediately to the latest version to ensure that unauthorized users cannot seize control of the platform.

---METADATA---
VENDOR: MingSoft
PRODUCT: MCMS
AFFECTED_VERSIONS: 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
MingSoft MCMS versions 3.0.0 through 3.0.6 are vulnerable to SQL injection, allowing unauthenticated remote attackers to execute arbitrary database queries.

Executive Summary:
A critical SQL injection vulnerability in MingSoft MCMS versions 3.0.0 through 3.0.6 allows unauthenticated attackers to execute unauthorized database queries and potentially extract sensitive data.

Vulnerability Details

CVE-ID: CVE-2026-19355

Affected Software: MingSoft MCMS

Affected Versions: 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6

Vulnerability: The application is susceptible to SQL injection (CWE-89) because it fails to properly sanitize user-supplied input, allowing an unauthenticated remote attacker to manipulate backend database queries.

Business Impact

The CVSS score of 7.3 reflects the significant risk posed by this injection vulnerability. Successful exploitation could lead to the unauthorized disclosure of sensitive business information, data manipulation, or complete database compromise, potentially resulting in severe reputational and operational damage.

Remediation Plan

Immediate Action: Identify the current version of the deployed MCMS and apply security updates provided by MingSoft to remediate the SQL injection flaw.

Proactive Monitoring: Inspect database query logs for suspicious syntax or unexpected patterns that indicate SQL injection attempts, such as the use of union-based queries or bypass characters.

Compensating Controls: Deploy a Web Application Firewall with signature-based detection for SQL injection attacks to block malicious payloads targeting the application.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection remains a primary vector for data exfiltration and remains a high priority for remediation.

Analyst Recommendation

Given the potential for complete database compromise, immediate action is required to patch the affected versions of MCMS. Organizations should verify their current version and upgrade to the latest release to ensure the vulnerability is fully mitigated.

---METADATA---
VENDOR: dresende
PRODUCT: node-sql-query
AFFECTED_VERSIONS: 0.1.25, 0.1.26, 0.1.27, 0.1.28
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the dresende node-sql-query package, allowing unauthenticated attackers to execute arbitrary SQL commands.

Executive Summary:
The node-sql-query package is vulnerable to SQL injection, which could allow an unauthenticated attacker to manipulate database queries and compromise data integrity.

Vulnerability Details

CVE-ID: CVE-2026-19351

Affected Software: dresende node-sql-query

Affected Versions: 0.1.25, 0.1.26, 0.1.27, 0.1.28

Vulnerability: This is a SQL injection vulnerability (CWE-89) where the application fails to properly sanitize user-supplied input. The vulnerability is exploitable by an unauthenticated remote attacker.

Business Impact

The exploitation of this vulnerability can lead to unauthorized data exposure, modification, or deletion within the underlying database. With a CVSS score of 7.3, this high-severity flaw poses a significant risk to the confidentiality and integrity of applications relying on this library for query construction.

Remediation Plan

Immediate Action: Update the node-sql-query package to version 0.1.29 or later.

Proactive Monitoring: Review database query logs for anomalous syntax or unexpected patterns that may indicate injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with SQL injection protection rules to inspect incoming traffic for malicious payloads.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit found in curated sources).

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for remote code execution or data theft via SQL manipulation.

Analyst Recommendation

Given the high CVSS score and the ease of exploitation for SQL injection flaws, organizations should prioritize updating the node-sql-query dependency immediately. Ensuring that all database interactions are parameterized is critical to preventing this and similar injection vulnerabilities.