---METADATA---
VENDOR: WordPress
PRODUCT: Newsletters
AFFECTED_VERSIONS: 0 up to 4.16
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Newsletters WordPress plugin is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation, allowing unauthenticated attackers to perform unauthorized requests.

Executive Summary:
The Newsletters WordPress plugin is affected by a critical Server-Side Request Forgery vulnerability that enables unauthenticated attackers to perform unauthorized server-side requests.

Vulnerability Details

CVE-ID: CVE-2026-16268

Affected Software: WordPress Newsletters

Affected Versions: 0 up to 4.16

Vulnerability: The plugin contains a Server-Side Request Forgery (SSRF) flaw, identified as CWE-918, which allows an unauthenticated attacker to manipulate server-side requests through the application.

Business Impact

Successful exploitation of this SSRF vulnerability can lead to unauthorized access to internal network resources, potentially exposing sensitive data or allowing an attacker to interact with services restricted to the internal network. With a CVSS score of 8.2, this high-severity flaw poses a significant risk to organizational confidentiality and integrity.

Remediation Plan

Immediate Action: Update the Newsletters WordPress plugin to version 4.16 or later immediately.

Proactive Monitoring: Monitor server access logs and outbound network traffic for suspicious requests originating from the web server.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block suspicious external requests that may indicate SSRF probing.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 6, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The nature of SSRF flaws often allows attackers to bypass perimeter security to scan internal infrastructure.

Analyst Recommendation

Given the high CVSS score and the existence of a proof-of-concept, organizations must prioritize patching this vulnerability. Administrators should apply the update to version 4.16 without delay to prevent potential unauthorized access to internal network resources.

---METADATA---
VENDOR: Newsletters
PRODUCT: Newsletters (newsletters-lite)
AFFECTED_VERSIONS: Newsletters WordPress plugin before 4.16.
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Newsletters WordPress plugin fails to restrict classes during unserialization of form data, allowing unauthenticated attackers to inject arbitrary PHP objects.

Executive Summary:
An unauthenticated deserialization vulnerability in the Newsletters WordPress plugin allows remote attackers to inject arbitrary PHP objects, potentially leading to unauthorized code execution.

Vulnerability Details

CVE-ID: CVE-2026-16267

Affected Software: Newsletters Newsletters (newsletters-lite)

Affected Versions: Newsletters WordPress plugin before 4.16.

Vulnerability: The plugin fails to restrict the classes allowed when unserializing a value taken from a public form submission. This allows unauthenticated attackers to inject arbitrary PHP objects into the application environment.

Business Impact

With a CVSS score of 8.1, this high-severity vulnerability could lead to significant system compromise. While the impact depends on the availability of a functional gadget chain, successful exploitation may allow for remote code execution, unauthorized data access, or total site takeover.

Remediation Plan

Immediate Action: Update the Newsletters WordPress plugin to version 4.16 or later immediately.

Proactive Monitoring: Monitor site traffic for unusual requests directed at plugin forms and review web server access logs for signs of object injection attempts.

Compensating Controls: Utilize a Web Application Firewall (WAF) with rules configured to block suspicious serialized data patterns in POST requests.

Exploitation Status

Public Exploit Available: No (unknown).

Analyst Notes: As of August 8, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The risk is considered credible due to the nature of insecure deserialization flaws.

Analyst Recommendation

This vulnerability is highly dangerous because it allows unauthenticated interaction with the application's underlying code execution logic. Administrators should verify their current version of the Newsletters plugin and apply the 4.16 update as a high-priority task to prevent potential exploitation.

---METADATA---
VENDOR: WordPress
PRODUCT: WP Maps
AFFECTED_VERSIONS: 0 up to 4.9.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The WP Maps WordPress plugin is vulnerable to path traversal, allowing authenticated users with low privileges to access sensitive files on the server.

Executive Summary:
An authenticated path traversal vulnerability in the WP Maps WordPress plugin allows unauthorized access to sensitive filesystem data.

Vulnerability Details

CVE-ID: CVE-2026-16263

Affected Software: WordPress WP Maps

Affected Versions: 0 up to 4.9.7

Vulnerability: This plugin is susceptible to path traversal (CWE-22) because it fails to properly sanitize user input when processing file paths. An attacker with low-level authenticated access can manipulate these paths to read files outside the intended directory.

Business Impact

This vulnerability could allow an attacker to retrieve sensitive configuration files, such as wp-config.php, which often contain database credentials and secret keys. With a CVSS score of 8.8, this vulnerability poses a severe risk of data breach and potential remote code execution through secondary exploitation of leaked credentials.

Remediation Plan

Immediate Action: Update the WP Maps plugin to version 4.9.7 or the latest available version immediately.

Proactive Monitoring: Monitor server logs for file access requests containing directory traversal sequences, such as dot-dot-slash patterns.

Compensating Controls: Ensure the web server process runs with the least privilege necessary to restrict access to sensitive files outside the web root.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 8, 2026, there is no confirmed active exploitation in the wild, however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently exploitable by any authenticated user, making it a critical threat to internal security.

Analyst Recommendation

Organizations should treat this vulnerability with high urgency. Because a proof-of-concept exists, the barrier to entry for an attacker is significantly lowered. Update the plugin immediately to prevent unauthorized file access and potential further system compromise.

---METADATA---
VENDOR: Estatik
PRODUCT: Estatik Real Estate Plugin
AFFECTED_VERSIONS: WordPress plugin before 4.3.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Estatik Real Estate Plugin fails to bind OAuth social login flows to user sessions, enabling login CSRF attacks where victims are logged into attacker-controlled accounts.

Executive Summary:
A high-severity login CSRF vulnerability in the Estatik Real Estate Plugin allows attackers to hijack user sessions and monitor subsequent activity.

Vulnerability Details

CVE-ID: CVE-2026-16262

Affected Software: Estatik Estatik Real Estate Plugin

Affected Versions: WordPress plugin before 4.3.3

Vulnerability: This is a Cross-Site Request Forgery (CWE-352) vulnerability in the OAuth social login implementation. By failing to bind the login flow to the initiating session, an unauthenticated attacker can force a victim to authenticate into an attacker-controlled account, exposing the victim's subsequent data submissions to the attacker.

Business Impact

With a CVSS score of 7.5, this vulnerability presents a significant risk to user privacy and data integrity. Successful exploitation allows an attacker to monitor the sensitive real estate data and activities of victims, potentially leading to unauthorized data collection and loss of user trust in the platform.

Remediation Plan

Immediate Action: Update the Estatik Real Estate Plugin to version 4.3.3 or later to ensure proper session binding during OAuth authentication.

Proactive Monitoring: Review application logs for suspicious login patterns or irregular account activity associated with social login flows.

Compensating Controls: Implement strict SameSite cookie attributes and consider disabling social login features if the update cannot be applied immediately.

Exploitation Status

Public Exploit Available: No confirmed public exploit exists in our curated data.

Analyst Notes: As of Aug 7, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While CISA's SSVC assessment suggests a proof-of-concept exists, there is no evidence of a weaponized exploit at this time.

Analyst Recommendation

This vulnerability highlights the dangers of improper session management in authentication workflows. Security teams should prioritize updating this plugin to the latest version to prevent session hijacking and protect user data from unauthorized surveillance.

---METADATA---
VENDOR: WordPress
PRODUCT: Ajax Search Lite
AFFECTED_VERSIONS: 0 up to (excluding) 4.14.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Ajax Search Lite WordPress plugin is vulnerable to PHP object injection due to improper deserialization of untrusted input, which can lead to remote code execution.

Executive Summary:
An unauthenticated remote code execution vulnerability in the Ajax Search Lite WordPress plugin requires immediate updates to prevent full site compromise.

Vulnerability Details

CVE-ID: CVE-2026-16258

Affected Software: WordPress Ajax Search Lite plugin

Affected Versions: All versions prior to 4.14.5

Vulnerability: The plugin fails to securely handle untrusted input during deserialization (CWE-502). Unauthenticated attackers can leverage this flaw to trigger PHP object injection, which may result in remote code execution if a suitable POP chain is present.

Business Impact

A successful exploit allows an attacker to execute arbitrary code on the web server, leading to complete site takeover, unauthorized data access, and potential infection of other site visitors. The CVSS score of 9.8 reflects the high risk of total system compromise and the ease of exploitation by unauthenticated remote actors.

Remediation Plan

Immediate Action: Update the Ajax Search Lite plugin to version 4.14.5 or the latest available version immediately.

Proactive Monitoring: Monitor server access logs for unusual POST requests or serialized data strings that may indicate attempts to trigger deserialization vulnerabilities.

Compensating Controls: Utilize a Web Application Firewall (WAF) with rules designed to detect and block malicious serialized PHP objects to provide a temporary layer of protection.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 7, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While CISA's SSVC assessment notes the existence of a PoC, this reflects an internal or theoretical assessment rather than a public, weaponized exploit.

Analyst Recommendation

Given the critical nature of remote code execution vulnerabilities, site administrators should treat this as a high-priority update. Ensure that all plugins are kept up to date to minimize the attack surface and prevent exploitation of deserialization flaws.

---METADATA---
VENDOR: Arvow
PRODUCT: AI SEO Writer
AFFECTED_VERSIONS: Arvow AI SEO Writer WordPress plugin before 1.5.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Arvow AI SEO Writer WordPress plugin contains an authentication bypass vulnerability due to improper REST endpoint access control, allowing unauthenticated attackers to perform unauthorized actions.

Executive Summary:
A critical authentication bypass in the Arvow AI SEO Writer WordPress plugin allows unauthenticated attackers to manipulate site content and access sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-16257

Affected Software: Arvow AI SEO Writer

Affected Versions: Arvow AI SEO Writer WordPress plugin before 1.5.4

Vulnerability: This vulnerability involves improper authentication (CWE-287) in a REST API endpoint. Unauthenticated attackers can leverage type juggling techniques to bypass access controls when the plugin is not fully configured, potentially leading to unauthorized creation of content or the disclosure of sensitive author and taxonomy data.

Business Impact

The vulnerability carries a CVSS score of 8.2, which categorizes it as High severity. Successful exploitation allows unauthorized users to modify site content or harvest private metadata, which poses a significant risk to site integrity, intellectual property, and user privacy. Organizations relying on this plugin for content management are at risk of data leakage and unauthorized administrative actions until the software is patched.

Remediation Plan

Immediate Action: Update the Arvow AI SEO Writer plugin to version 1.5.4 or later to remediate the authentication flaw.

Proactive Monitoring: Review web server access logs for anomalous requests targeting REST API endpoints, specifically looking for unexpected POST or GET requests originating from unauthenticated sessions.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block suspicious traffic patterns directed at the plugin's REST API endpoints until the update is deployed.

Exploitation Status

Public Exploit Available: No (There is no confirmed public exploit available in the provided data).

Analyst Notes: As of August 10, 2026, there is no public information indicating active exploitation in the wild. While a proof of concept is scheduled for public release on September 5, 2026, the current risk is primarily driven by the ease of exploitation for unauthenticated actors.

Analyst Recommendation

Given the high severity of this vulnerability and the potential for unauthorized data disclosure and content manipulation, immediate action is required. Administrators should verify their current plugin version and apply the 1.5.4 patch immediately to eliminate the authentication bypass vector. Proactive patching is essential to prevent potential exploitation before the scheduled public release of proof of concept code.

---METADATA---
VENDOR: Tenda
PRODUCT: AC10
AFFECTED_VERSIONS: 16.03.10.09_multi_TDE01
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow vulnerability in the Tenda AC10 router, specifically within the AdvSetLanip function, allows authenticated attackers to corrupt memory.

Executive Summary:
A stack-based buffer overflow in the Tenda AC10 router allows authenticated attackers to trigger memory corruption, potentially leading to unauthorized code execution.

Vulnerability Details

CVE-ID: CVE-2026-16248

Affected Software: Tenda AC10

Affected Versions: 16.03.10.09_multi_TDE01

Vulnerability: This is a stack-based buffer overflow (CWE-121) and memory corruption (CWE-119) flaw found in the AdvSetLanip function. An authenticated attacker can leverage this to disrupt device operations or potentially execute code.

Business Impact

The compromise of networking hardware like the Tenda AC10 can provide an attacker with a foothold in the internal network, facilitating lateral movement. Given the high CVSS score of 8.8, this vulnerability poses a severe risk to network perimeter security and internal data confidentiality.

Remediation Plan

Immediate Action: Check the Tenda support website for the latest firmware updates and apply them if available. If no patch is currently provided, contact the vendor for guidance.

Proactive Monitoring: Monitor the router for unexpected reboots or service instability, which may indicate that the device is being targeted or that a crash has occurred.

Compensating Controls: Disable remote management interfaces on the WAN side and restrict access to the LAN management interface to trusted administrative workstations only.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 21, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The availability of public research on this specific function increases the risk profile for this device.

Analyst Recommendation

Administrators should treat this vulnerability with high urgency. Because buffer overflows in firmware often lead to complete device compromise, ensuring the router is updated or isolated from untrusted segments is critical until a verified patch is applied.

---METADATA---
VENDOR: Red Hat
PRODUCT: Logging Subsystem for Red Hat OpenShift
AFFECTED_VERSIONS: See vendor advisory
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A flaw in the Konnectivity proxy-server configuration for hosted control planes allows unauthenticated remote attackers to connect as an agent and manipulate control-plane-to-node traffic.

Executive Summary:
A critical authentication bypass in the Red Hat Logging Subsystem for OpenShift allows unauthenticated remote attackers to intercept or modify internal cluster traffic.

Vulnerability Details

CVE-ID: CVE-2026-16242

Affected Software: Red Hat Logging Subsystem for Red Hat OpenShift

Affected Versions: See vendor advisory

Vulnerability: This vulnerability involves a missing authentication check (CWE-306) within the Konnectivity proxy-server agent-facing listener. Because the listener fails to validate client certificates or require tokens, remote attackers can join the routing pool as unauthenticated agents.

Business Impact

The CVSS score of 9.4 classifies this as a critical risk, as it allows full network-level control over communication between the control plane and nodes. Successful exploitation could lead to unauthorized data inspection, modification of sensitive control traffic, or a complete compromise of the cluster integrity, resulting in significant operational downtime and potential data exfiltration.

Remediation Plan

Immediate Action: Review Red Hat security bulletins and apply all available updates for the Logging Subsystem and associated Multicluster Engine components.

Proactive Monitoring: Monitor network traffic and access logs for unauthorized connections to the Konnectivity cluster endpoint, specifically looking for unexpected agent joining events.

Compensating Controls: Implement strict network segmentation and firewall rules to restrict access to the Konnectivity proxy-server endpoint to known, trusted infrastructure components only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's high CVSS score is driven by the lack of required authentication for a critical infrastructure component, making it a high-priority target for automated scanning.

Analyst Recommendation

Given the critical nature of this flaw, security teams must prioritize patching affected OpenShift environments. If an immediate patch is not available, restricting network access to the affected endpoint is essential to mitigate the risk of unauthorized cluster manipulation.

---METADATA---
VENDOR: PostgreSQL
PRODUCT: PostgreSQL
AFFECTED_VERSIONS: 18 up to 18.5, 17 up to 17.11, 16 up to 16.15, 15 up to 15.19, 0 up to 14.24
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A type confusion vulnerability in the PostgreSQL portal and cursor lifecycle allows authenticated users to execute arbitrary code as the system user running the database.

Executive Summary:
A critical type confusion vulnerability in PostgreSQL enables authenticated database users to execute arbitrary code with the privileges of the database service account.

Vulnerability Details

CVE-ID: CVE-2026-16239

Affected Software: PostgreSQL PostgreSQL

Affected Versions: 18 up to 18.5, 17 up to 17.11, 16 up to 16.15, 15 up to 15.19, 0 up to 14.24

Vulnerability: This vulnerability involves type confusion (CWE-843) within the portal and cursor management lifecycle of PostgreSQL. By re-creating cursors or portals with incompatible types, an authenticated user can deceive the engine, resulting in arbitrary code execution on the underlying host operating system.

Business Impact

The ability to execute arbitrary code as the database service account provides an attacker with complete control over the database environment. This could lead to full data exfiltration, permanent data loss, or the use of the database server as a pivot point for lateral movement within the network. The CVSS score of 8.8 reflects the high severity of full system compromise.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the PostgreSQL project to all instances, ensuring versions are patched beyond the affected ranges.

Proactive Monitoring: Monitor for unusual cursor activity or errors in database logs that may indicate attempts to manipulate portal lifecycles in an unauthorized manner.

Compensating Controls: Ensure the database service runs with the principle of least privilege, minimizing the permissions available to the operating system user account running the process.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Type confusion vulnerabilities are often complex to exploit but represent a significant threat to the security of the underlying host.

Analyst Recommendation

This vulnerability represents a severe threat to infrastructure security. Organizations must treat this as a high priority, applying the necessary patches to their PostgreSQL environments immediately to prevent potential system-level compromise by malicious internal actors.

---METADATA---
VENDOR: PostgreSQL
PRODUCT: PostgreSQL
AFFECTED_VERSIONS: PostgreSQL 18 up to (excluding) 18.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A type confusion vulnerability in the pg_restore_attribute_stats function allows an authenticated object creator to execute arbitrary code on the PostgreSQL server.

Executive Summary:
A high-severity type confusion vulnerability in PostgreSQL allows an authenticated user to perform arbitrary code execution by conflating range and multirange values.

Vulnerability Details

CVE-ID: CVE-2026-16238

Affected Software: PostgreSQL

Affected Versions: PostgreSQL 18 up to (excluding) 18.5

Vulnerability: The flaw resides in the pg_restore_attribute_stats function. An authenticated user with permissions to create objects can exploit a type confusion between range and multirange values to execute arbitrary code with the privileges of the database service account.

Business Impact

The CVSS score of 8.8 reflects the high risk of this vulnerability. Successful exploitation permits an attacker to gain control over the underlying operating system user, which may lead to unauthorized data access, privilege escalation, and persistent threats to the database infrastructure. Maintaining the integrity of the database host is essential for overall business continuity.

Remediation Plan

Immediate Action: Upgrade PostgreSQL instances running version 18 to version 18.5 or higher to resolve the vulnerability.

Proactive Monitoring: Audit logs for unusual object creation activities or unexpected calls to statistics-related functions.

Compensating Controls: Limit the ability of standard database users to create objects or perform administrative tasks that involve statistics restoration.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for the attacker to be an object creator limits the immediate attack surface but remains a critical concern for multi-tenant or shared database environments.

Analyst Recommendation

Security teams should treat this vulnerability as a priority for all PostgreSQL 18 deployments. Upgrading to the patched version is the necessary step to prevent potential exploitation and ensure the security of the database environment.

---METADATA---
VENDOR: Realtyna
PRODUCT: Organic IDX plugin + WPL Real Estate
AFFECTED_VERSIONS: 0 through 5.3.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Realtyna Organic IDX plugin for WordPress contains an arbitrary file upload vulnerability that allows authenticated users to execute malicious code on the server.

Executive Summary:
An arbitrary file upload vulnerability in the Realtyna Organic IDX plugin for WordPress allows authenticated users with low privileges to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-16236

Affected Software: Realtyna Organic IDX plugin + WPL Real Estate

Affected Versions: 0 through 5.3.0

Vulnerability: The plugin fails to properly validate file types during upload, allowing authenticated users to upload arbitrary files (CWE-434). This vulnerability can be triggered via AJAX functions, enabling an attacker to execute arbitrary code on the underlying server.

Business Impact

This vulnerability carries a CVSS score of 8.8, reflecting the high risk of full server compromise. Successful exploitation grants attackers the ability to execute arbitrary code, which can result in complete site takeover, database theft, or the use of the server as a launchpad for further network attacks.

Remediation Plan

Immediate Action: As no patched version is currently available, administrators should immediately deactivate and remove the Realtyna Organic IDX plugin until a security update is released by the vendor.

Proactive Monitoring: Review web server logs for suspicious POST requests to AJAX endpoints and check the uploads directory for unrecognized or executable file types (e.g., .php, .phtml).

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized file uploads and restrict access to the plugin's administrative and AJAX endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The absence of a patch requires proactive removal of the affected component to ensure security.

Analyst Recommendation

The inability to patch this vulnerability necessitates a defensive posture of complete removal. Security teams should audit WordPress installations for the presence of this plugin and ensure it remains disabled until the vendor releases a version that explicitly addresses the file upload validation flaw.

---METADATA---
VENDOR: DRSTEVE
PRODUCT: Crypt::Password
AFFECTED_VERSIONS: 0 through 0.28
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Crypt::Password versions 0.28 and earlier utilize a cryptographically weak pseudo-random number generator, leading to predictable salt generation.

Executive Summary:
The Crypt::Password Perl module contains a critical flaw in its random value generation that allows for the compromise of cryptographic salts.

Vulnerability Details

CVE-ID: CVE-2026-16235

Affected Software: DRSTEVE Crypt::Password

Affected Versions: 0 through 0.28

Vulnerability: The software uses the standard Perl rand function to generate cryptographic salts, which is not designed for security-sensitive operations. This vulnerability is exploitable by an unauthenticated attacker, as the predictable nature of the output can lead to the compromise of password hashes.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating a critical severity due to the potential for total system compromise. If salts are predictable, attackers can perform offline brute-force attacks against password databases, leading to widespread credential theft and unauthorized access to sensitive user data.

Remediation Plan

Immediate Action: Upgrade to the latest version of Crypt::Password when a secure version becomes available. Developers should audit existing password stores to determine if re-hashing is required due to potentially compromised salts.

Proactive Monitoring: Monitor authentication logs for an unusual spike in failed login attempts, which may indicate offline cracking efforts.

Compensating Controls: Implement additional layers of defense such as multi-factor authentication to reduce reliance on password security alone while the patching process is underway.

Exploitation Status

Public Exploit Available: unknown

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable because it relies on a weak entropy source that is well-understood by attackers.

Analyst Recommendation

The reliance on a non-cryptographic PRNG for security functions is a severe design flaw that necessitates immediate remediation. Organizations using this library should prioritize updating their environment and evaluating the integrity of existing password hashes as soon as a patch is released by the vendor.

---METADATA---
VENDOR: Check Point
PRODUCT: SmartConsole
AFFECTED_VERSIONS: Quantum Security Management and Multi-Domain Security Management versions R82.10 (with Jumbo Hotfix Take 36 or below), R82 (with Jumbo Hotfix Take 118 or below), R81.20 (with Jumbo Hotfix Take 158 or below), R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper authentication vulnerability in Check Point SmartConsole allows unauthenticated attackers to potentially bypass security controls.

Executive Summary:
This critical authentication vulnerability in Check Point SmartConsole is currently being actively exploited in the wild, posing an immediate threat to network security management infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-16232

Affected Software: Check Point SmartConsole (Quantum and Multi-Domain Security Management)

Affected Versions: See metadata for specific version and hotfix levels

Vulnerability: The software suffers from an improper authentication flaw (CWE-287) that allows an unauthenticated, remote attacker to bypass standard login requirements via network access.

Business Impact

The exploitation of this vulnerability grants attackers unauthorized control over critical security management infrastructure. Given the CVSS score of 9.5, the potential for total system compromise is severe, which could lead to massive data exfiltration, the modification of security policies, or complete loss of visibility into network traffic.

Remediation Plan

Immediate Action: Apply the vendor-provided patches or the specified Jumbo Hotfix levels immediately as detailed in Check Point security advisory SK185169.

Proactive Monitoring: Review administrative access logs for unauthorized sessions and monitor for unexpected changes to security policies or management configurations.

Compensating Controls: Restrict access to the SmartConsole management interface to known, trusted management subnets via firewall rules until the patch can be deployed.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists on GitHub.

Analyst Notes: This vulnerability is confirmed to be actively exploited in the wild as of July 22, 2026. The combination of active exploitation and the availability of a public proof-of-concept makes this an extremely high-priority risk.

Analyst Recommendation

Due to the critical nature of this vulnerability and confirmed active exploitation, organizations must prioritize patching their Check Point management environments immediately. Failure to address this flaw leaves the entire security management plane vulnerable to full unauthorized control.

---METADATA---
VENDOR: Strategy11
PRODUCT: Formidable Digital Signatures
AFFECTED_VERSIONS: 0 through 3.0.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Formidable Digital Signatures plugin for WordPress up to 3.0.6 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary files on the server.

Executive Summary:
A critical unauthenticated file deletion vulnerability in the Formidable Digital Signatures plugin allows remote attackers to remove essential server files.

Vulnerability Details

CVE-ID: CVE-2026-16230

Affected Software: Strategy11 Formidable Digital Signatures

Affected Versions: 0 through 3.0.6

Vulnerability: This is a relative path traversal vulnerability (CWE-23) in the delete_file function. By supplying a manipulated filename parameter during an anonymous entry-creation flow, an unauthenticated attacker can delete files outside of the intended directory.

Business Impact

An attacker can delete sensitive configuration files, database files, or core application files, leading to permanent denial of service or potential system instability. The CVSS score of 9.8 reflects the high impact of allowing unauthenticated users to destroy arbitrary data on the host system.

Remediation Plan

Immediate Action: Update the Formidable Digital Signatures plugin to version 3.1 or later.

Proactive Monitoring: Monitor file system integrity and check access logs for unusual POST requests targeting entry-creation endpoints with unauthorized file paths.

Compensating Controls: If immediate updates are not possible, disable the plugin or restrict access to forms that accept anonymous submissions to prevent exploitation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Per CISA's SSVC assessment, the exploitation risk should be treated as credible despite no current evidence of active attacks.

Analyst Recommendation

This vulnerability is highly severe because it allows unauthenticated attackers to perform destructive actions on the server. Administrators must update the plugin to version 3.1 immediately. If an update cannot be performed, the affected functionality should be disabled to prevent potential system disruption.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System version 1.0 allows unauthenticated remote attackers to execute arbitrary database queries.

Executive Summary:
A critical SQL injection vulnerability in the SourceCodester Class and Exam Timetabling System 1.0 exposes the application to unauthenticated database manipulation and potential data compromise.

Vulnerability Details

CVE-ID: CVE-2026-16228

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection (CWE-89), a flaw where untrusted input is improperly neutralized before being used in database queries. This vulnerability is exploitable by unauthenticated attackers over the network.

Business Impact

Successful exploitation of this SQL injection vulnerability could allow unauthorized actors to read, modify, or delete sensitive data stored within the backend database. Given the CVSS score of 7.3, this represents a significant risk to data confidentiality and integrity, potentially leading to unauthorized access to academic or personal information managed by the system.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict network access to the application and monitor for suspicious SQL-related traffic patterns.

Proactive Monitoring: Review application access logs for unusual input characters, such as single quotes, semicolons, or SQL keywords, which may indicate attempted injection attacks.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeted at the application endpoints.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit available in the provided data sources.

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability remains high due to the lack of required authentication.

Analyst Recommendation

Given the exposure of the database to unauthenticated remote attackers, immediate defensive measures are required. Organizations should prioritize isolating the affected system from public-facing networks until a vendor-supplied security update is released and verified for deployment.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The SourceCodester Class and Exam Timetabling System version 1.0 is vulnerable to SQL injection, allowing unauthenticated attackers to compromise database integrity.

Executive Summary:
A critical SQL injection vulnerability in the SourceCodester Class and Exam Timetabling System allows unauthenticated attackers to access or modify sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-16227

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection (CWE-89) and general injection (CWE-74) attacks, allowing an unauthenticated attacker to execute arbitrary database queries.

Business Impact

This vulnerability poses a severe risk to data confidentiality and integrity. An attacker could extract sensitive student or faculty information, modify exam schedules, or potentially gain further unauthorized access to the underlying server. Given the 7.3 CVSS score, the potential for data breaches and reputational damage is substantial.

Remediation Plan

Immediate Action: Since no official patch is currently available, restrict access to the application via network-level controls or by disabling the service until a secure version is released.

Proactive Monitoring: Monitor database query logs for suspicious patterns, such as unexpected SQL keywords (e.g., UNION, SELECT, OR 1=1) originating from web requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection attack signatures targeting the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While CISA's SSVC assessment notes a proof-of-concept exists, it does not confirm active exploitation; however, the risk should be treated as credible due to the simplicity of SQL injection flaws.

Analyst Recommendation

Due to the absence of a vendor-provided patch, users should consider this software insecure for production use. If continued use is required, implement immediate network isolation and robust WAF filtering to prevent exploitation of this high-risk injection vulnerability.

---METADATA---
VENDOR: fastify
PRODUCT: fast-uri
AFFECTED_VERSIONS: 2.3.1 up to 2.4.3, 3.0.0 up to 3.1.4, 4.0.0 up to 4.1.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The fast-uri library is vulnerable to an interpretation conflict when parsing URIs, which may lead to improper integrity validation.

Executive Summary:
An interpretation conflict vulnerability in the fast-uri library could allow an unauthenticated attacker to bypass security checks through malformed URI inputs.

Vulnerability Details

CVE-ID: CVE-2026-16221

Affected Software: fastify fast-uri

Affected Versions: 2.3.1 up to 2.4.3, 3.0.0 up to 3.1.4, 4.0.0 up to 4.1.1

Vulnerability: This vulnerability stems from an interpretation conflict (CWE-436) during URI parsing, which allows an unauthenticated attacker to potentially manipulate data integrity.

Business Impact

Successful exploitation of this flaw can lead to unauthorized changes or bypasses in application logic that rely on URI parsing for security decisions. This represents a significant risk to data integrity and system security. With a CVSS score of 7.5, this high-severity vulnerability could be leveraged to subvert application controls if not addressed promptly.

Remediation Plan

Immediate Action: Update the fast-uri package to version 2.4.3, 3.1.4, or 4.1.1, depending on the major version currently in use.

Proactive Monitoring: Review application logs for unexpected URI structures or input patterns that deviate from standard specifications.

Compensating Controls: Implement strict input validation at the application level to sanitize URIs before they are processed by the fast-uri library.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of the flaw makes it a target for attackers looking to bypass security filters through subtle encoding or parsing discrepancies.

Analyst Recommendation

Developers must update their dependencies to the specified fixed versions to mitigate the risk of interpretation-based attacks. Failure to patch allows for potential manipulation of security-critical application pathways, making this update a high-priority task for development teams.

---METADATA---
VENDOR: newpanjing
PRODUCT: simpleui
AFFECTED_VERSIONS: 2026.01.13
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The simpleui package by newpanjing contains a critical authentication vulnerability that allows unauthorized access to application functions.

Executive Summary:
An unauthenticated access vulnerability in the simpleui package allows for unauthorized interaction, posing a high risk to application integrity.

Vulnerability Details

CVE-ID: CVE-2026-16210

Affected Software: newpanjing simpleui

Affected Versions: 2026.01.13

Vulnerability: The vulnerability involves missing and improper authentication (CWE-306, CWE-287), which allows unauthenticated remote attackers to interact with the system without providing valid credentials.

Business Impact

By bypassing authentication controls, an attacker could gain unauthorized access to administrative or user functions, leading to potential data manipulation or system disruption. The CVSS score of 7.3 underscores the necessity of addressing this flaw to maintain the confidentiality, integrity, and availability of the application.

Remediation Plan

Immediate Action: Review the official simpleui repository for available patches or updates and apply them to resolve the authentication bypass.

Proactive Monitoring: Audit application access logs for unauthorized attempts to access protected routes or API endpoints without a valid session.

Compensating Controls: Restrict network access to the application using IP whitelisting or VPN-only access to prevent public exposure until the vulnerability is remediated.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is severe due to the lack of authentication, no weaponized exploit has been confirmed.

Analyst Recommendation

Authentication is the primary line of defense for this application, and its absence represents a critical security failure. Developers and administrators must treat this as a high-priority issue and implement the vendor recommended fix as soon as it is available to prevent unauthorized access.

---METADATA---
VENDOR: Gerapy
PRODUCT: Gerapy
AFFECTED_VERSIONS: 0.9.0, 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6, 0.9.7
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Gerapy is susceptible to authentication bypass and missing authentication vulnerabilities, allowing unauthorized access to application functions.

Executive Summary:
Gerapy versions 0.9.0 through 0.9.7 contain critical authentication flaws that allow unauthenticated attackers to gain unauthorized access to the application.

Vulnerability Details

CVE-ID: CVE-2026-16209

Affected Software: Gerapy

Affected Versions: 0.9.0 through 0.9.7

Vulnerability: This vulnerability involves missing authentication (CWE-306) and improper authentication (CWE-287). The flaw allows remote, unauthenticated attackers to interact with the application, bypassing intended security controls.

Business Impact

Successful exploitation allows unauthorized users to access, modify, or interact with the Gerapy platform without credentials. This can lead to full compromise of the application, unauthorized data exposure, or the manipulation of configured tasks and settings. The CVSS score of 7.3 highlights the high risk associated with this unauthorized access.

Remediation Plan

Immediate Action: Review the Gerapy GitHub repository for any available security patches or configuration changes that enforce authentication. If no patch is available, restrict network access to the Gerapy instance to trusted networks only.

Proactive Monitoring: Audit application logs for unauthorized access patterns or unexpected administrative actions performed by unknown users.

Compensating Controls: Deploy the application behind a reverse proxy that implements strict authentication and authorization checks before forwarding traffic to the Gerapy backend.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly accessible as it does not require authentication to trigger.

Analyst Recommendation

Due to the lack of a confirmed patch, users should immediately restrict access to the Gerapy interface via network-level controls. Monitor the project upstream for updates and apply them as soon as they become available to resolve the underlying authentication bypass.

---METADATA---
VENDOR: zevorn
PRODUCT: rt-claw
AFFECTED_VERSIONS: zevorn rt-claw up to 0.2.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An improper authorization vulnerability in the zevorn rt-claw RPC handler allows unauthenticated remote attackers to manipulate system tools and gain elevated privileges.

Executive Summary:
An improper authorization flaw in the zevorn rt-claw RPC handler, currently without an official patch, exposes systems to privilege escalation and unauthorized manipulation.

Vulnerability Details

CVE-ID: CVE-2026-16200

Affected Software: zevorn rt-claw

Affected Versions: up to 0.2.0

Vulnerability: This vulnerability, classified as CWE-863, exists in the claw_tool_invoke function within the claw/services/swarm/swarm.c file. It allows unauthenticated attackers to perform unauthorized actions by manipulating RPC data, leading to a compromise of confidentiality, integrity, and availability.

Business Impact

With a CVSS score of 7.3, this vulnerability represents a significant risk to the security posture of systems utilizing rt-claw. An attacker can leverage this flaw to gain unauthorized control over system services, which may lead to data exfiltration or the disruption of critical operations, as there is currently no official vendor patch available.

Remediation Plan

Immediate Action: Since no official patch exists, restrict network access to the affected RPC interface using firewall rules to ensure only trusted internal entities can reach the service.

Proactive Monitoring: Monitor system logs for anomalous RPC invocations or unexpected changes in service state that deviate from standard operational patterns.

Compensating Controls: Implement strict network segmentation to isolate the rt-claw service from external and untrusted internal networks until a formal fix is released.

Exploitation Status

Public Exploit Available: Yes (referenced in public vulnerability databases)

Analyst Notes: As of July 19, 2026, there is no confirmed active exploitation in the wild; however, a public exploit is available, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the lack of authorization checks in the RPC handler.

Analyst Recommendation

Given the availability of a public exploit and the absence of a vendor-provided patch, organizations must treat this vulnerability with extreme urgency. Immediate network isolation is required to prevent unauthorized access until the vendor addresses the flaw in the underlying codebase.

---METADATA---
VENDOR: Universal Software Inc
PRODUCT: Multiple Products
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
An authentication bypass vulnerability exists in multiple products from Universal Software Inc due to the use of an alternate path or channel.

Executive Summary:
Multiple Universal Software Inc products are affected by a critical authentication bypass vulnerability that allows unauthorized users to access restricted system areas.

Vulnerability Details

CVE-ID: CVE-2026-1618

Affected Software: Universal Software Inc Multiple Products

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability is an Authentication Bypass Using an Alternate Path or Channel. It allows an unauthenticated attacker to circumvent standard security checks by accessing the application through a different communication path or logical channel, granting them access to restricted resources without valid credentials.

Business Impact

The impact of an authentication bypass is severe, potentially leading to a total loss of confidentiality, integrity, and availability. Attackers could gain full control over the affected systems, leading to massive data breaches and operational disruption. The CVSS score of 8.8 places this in the High (bordering on Critical) severity range.

Remediation Plan

Immediate Action: Apply all security updates provided by Universal Software Inc immediately. If patches are not yet available, restrict access to the affected products to trusted networks only.

Proactive Monitoring: Review access logs for any unauthorized attempts to access administrative or non-standard paths and monitor for unusual account activity.

Compensating Controls: Implement strict network segmentation and Multi-Factor Authentication (MFA) where possible to provide additional layers of security against unauthorized access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, authentication bypass flaws in core software are often prioritized by sophisticated threat actors for initial entry.

Analyst Recommendation

The CVSS score of 8.8 indicates a critical risk to the organization's security posture. Universal Software Inc products should be updated to the latest secure versions as the highest priority. Administrators must verify that all alternate access paths are properly secured or disabled to prevent unauthorized entry.

Executive Summary:
A high-severity vulnerability has been identified in The's Multiple Products, specifically within the Open Security Issue Management (OSIM) component. This flaw stems from an insecure server configuration that could allow a remote attacker to bypass security controls and access sensitive information. Organizations using affected versions are urged to apply security updates immediately to mitigate the risk of a potential data breach or application compromise.

Vulnerability Details

CVE-ID: CVE-2026-1616

Affected Software: The Multiple Products

Affected Versions: Open Security Issue Management (OSIM) versions prior to v2025

Vulnerability: The vulnerability exists due to the insecure concatenation of the $uri and $args variables within the nginx configuration file. An unauthenticated, remote attacker can exploit this by sending a specially crafted HTTP request containing URL-encoded characters (such as newlines) in the URI. When the vulnerable nginx server processes this request and forwards it to a backend application, the backend may misinterpret the request boundaries, leading to HTTP Request Smuggling, cache poisoning, or the bypassing of security rules.

Business Impact

This vulnerability is rated as High severity with a CVSS score of 7.5. Successful exploitation could have a significant negative impact on the business by allowing an attacker to gain unauthorized access to sensitive corporate or customer data, modify application data, or deface web properties through cache poisoning. These actions could lead to regulatory fines, reputational damage, financial loss, and a loss of customer trust. The vulnerability exposes the organization to risks of data breaches and business process disruption.

Remediation Plan

Immediate Action: The primary remediation is to apply the security updates provided by the vendor to all affected systems without delay. After patching, administrators should review nginx and backend application access logs for any signs of past or ongoing exploitation attempts.

Proactive Monitoring: Implement enhanced logging and monitoring to detect potential exploitation. Security teams should search web server access logs for unusual URI patterns, such as those containing URL-encoded newline characters (%0a, %0d) or other non-standard characters. Anomaly detection on backend application requests that appear malformed or inconsistent with frontend requests can also indicate an attack.

Compensating Controls: If immediate patching is not feasible, implement the following compensating controls to reduce risk:

• Deploy a Web Application Firewall (WAF) with rules to inspect and block HTTP requests containing malformed URIs or suspicious character encoding.
• If direct access to the nginx configuration is possible, modify the configuration to use the safer $request_uri variable instead of the $uri$args concatenation, after thorough testing in a non-production environment.
• Restrict network access to the affected applications to only trusted IP ranges.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of January 30, 2026, there are no known public exploits or active exploitation campaigns targeting this vulnerability. However, vulnerabilities related to nginx misconfigurations are well-understood, and proof-of-concept (PoC) exploits could be developed easily by threat actors. The absence of a public exploit should not diminish the urgency of remediation.

Analyst Recommendation

Given the High severity rating (CVSS 7.5) and the potential for an attacker to bypass security controls, this vulnerability presents a significant risk to the organization. Although this CVE is not currently listed on the CISA KEV list, we strongly recommend that organizations prioritize the immediate deployment of the vendor-supplied patches across all affected assets. Where patching is delayed, the compensating controls and proactive monitoring detailed above should be implemented as an urgent priority to mitigate risk.

---METADATA---
VENDOR: Fastify
PRODUCT: @fastify/reply-from
AFFECTED_VERSIONS: 8.3.1 up to (excluding) 12.6.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The @fastify/reply-from package contains a vulnerability that allows for unintended proxy interactions, functioning as a confused deputy.

Executive Summary:
A critical vulnerability in the @fastify/reply-from package enables unauthorized proxy behavior, posing a significant risk of data and integrity compromise.

Vulnerability Details

CVE-ID: CVE-2026-16158

Affected Software: Fastify @fastify/reply-from

Affected Versions: 8.3.1 up to (excluding) 12.6.4

Vulnerability: The software is susceptible to a confused deputy vulnerability (CWE-441), where an unauthenticated remote attacker can exploit the proxy or intermediary functionality to perform unauthorized actions.

Business Impact

The CVSS score of 8.7 reflects the high severity of this flaw, which allows for unauthorized data access and manipulation. If exploited, an attacker could bypass internal access controls, leading to potential data exfiltration or the alteration of sensitive application states. This poses a severe risk to the confidentiality and integrity of the underlying service infrastructure.

Remediation Plan

Immediate Action: Upgrade to version 12.6.4 or later of @fastify/reply-from to incorporate the necessary security patches.

Proactive Monitoring: Monitor network traffic and application logs for unusual proxy requests or unexpected outbound connections originating from the application.

Compensating Controls: Implement strict network ingress and egress filtering to limit the scope of proxy requests, and deploy a Web Application Firewall to block suspicious request patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's nature as a confused deputy necessitates that the proxy is positioned in a way that trusts the attacker-controlled input.

Analyst Recommendation

Given the high CVSS severity, administrators should prioritize updating the affected dependency immediately. Ensuring that the application environment is running the latest patched version is the most effective way to eliminate the risk of unauthorized proxy manipulation.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: 1.0, 1.php
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in SourceCodester Class and Exam Timetabling System allows remote attackers to execute arbitrary SQL commands via the edit_room1.php script.

Executive Summary:
A critical SQL injection vulnerability in SourceCodester Class and Exam Timetabling System allows unauthenticated remote attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-16154

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: 1.0, 1.php

Vulnerability: This is a SQL injection vulnerability (CWE-89) located in the ID parameter of the edit_room1.php script. The vulnerability is accessible to unauthenticated remote attackers, allowing for the direct execution of arbitrary SQL commands against the backend database.

Business Impact

Successful exploitation of this vulnerability allows unauthorized access to sensitive data stored within the application database. Given the CVSS score of 7.3, this flaw poses a significant risk of data exfiltration, modification, or potential administrative account compromise, which could lead to a total loss of system integrity and confidentiality.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should immediately restrict network access to the affected script or disable the module entirely until a vendor update is released.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax, specifically targeting the edit_room1.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common SQL injection patterns and sanitize input directed at the application.

Exploitation Status

Public Exploit Available: Yes, public exploit code is available for this vulnerability.

Analyst Notes: As of July 19, 2026, there is no confirmed active exploitation in the wild, but the presence of public exploit code significantly lowers the barrier to entry for attackers. The vulnerability is inherently exploitable due to a lack of input sanitization in the affected script.

Analyst Recommendation

The risk posed by this vulnerability is high due to the ease of exploitation and the availability of public exploit code. Organizations using this software should prioritize isolating the affected component and monitoring traffic for suspicious activity while awaiting a formal vendor patch.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the SourceCodester Class and Exam Timetabling System allows remote, unauthenticated attackers to execute arbitrary database queries via the edit_rooma.php file.

Executive Summary:
A critical SQL injection flaw in the SourceCodester Class and Exam Timetabling System allows unauthenticated attackers to manipulate the database, potentially leading to total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-16152

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection flaw in the /edit_rooma.php file. An unauthenticated attacker can supply malicious input via the ID parameter to manipulate database queries, bypassing standard application logic.

Business Impact

The CVSS score of 7.3 highlights the significant risk posed by this SQL injection vulnerability. An attacker can use this flaw to access, modify, or delete sensitive information stored in the system database, leading to potential data breaches and a complete loss of data integrity.

Remediation Plan

Immediate Action: As no official patch is available, sanitize the ID parameter in the /edit_rooma.php file using prepared statements to prevent malicious SQL injection.

Proactive Monitoring: Review web server logs for suspicious URL patterns containing SQL syntax and monitor database query logs for unusual or unauthorized access attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to detect and block common SQL injection patterns, providing a layer of protection until the source code is properly secured.

Exploitation Status

Public Exploit Available: Yes (referenced in public vulnerability databases)

Analyst Notes: As of July 19, 2026, there is no confirmed active exploitation in the wild; however, a public exploit is available, so exploitation risk should be treated as credible. The vulnerability is easily exploitable, as it requires no prior authentication to interact with the vulnerable parameter.

Analyst Recommendation

The presence of a public exploit for this unpatched SQL injection vulnerability necessitates immediate defensive action. System administrators should apply manual code fixes if possible or isolate the application from the network to mitigate the risk of unauthorized database access.

---METADATA---
VENDOR: jsonpath
PRODUCT: jsonpath (Node.js/Browser Package)
AFFECTED_VERSIONS: All versions
---END_METADATA---

Description Summary:
All versions of the jsonpath library are vulnerable to arbitrary code injection via unsafe evaluation of user-supplied JSON Path expressions.

Executive Summary:
The jsonpath library is subject to a critical code injection vulnerability that allows unauthenticated attackers to execute arbitrary code in Node.js or perform XSS in browsers.

Vulnerability Details

CVE-ID: CVE-2026-1615

Affected Software: jsonpath

Affected Versions: All versions

Vulnerability: The library relies on the static-eval module to process JSON Path input, which fails to safely handle untrusted data. An attacker can supply a malicious JSON Path expression to any method (e.g., .query, .nodes) to execute arbitrary JavaScript code on the host system or within a user's browser context.

Business Impact

This vulnerability poses a severe risk to any application using the jsonpath library to process external input. In Node.js environments, it leads to Remote Code Execution (RCE), while in browsers, it enables Cross-Site Scripting (XSS). The CVSS score of 9.8 reflects the high likelihood of total system compromise and data theft.

Remediation Plan

Immediate Action: Developers should immediately update the jsonpath dependency to the latest patched version or migrate to a more secure alternative.

Proactive Monitoring: Audit codebases to identify where user-supplied input is passed directly to jsonpath evaluation methods.

Compensating Controls: Implement strict input validation or sanitization for all JSON Path expressions before they are processed by the library.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Feb 9, 2026, there is no public information indicating active exploitation. However, because this affects all versions of a popular library, the attack surface is vast.

Analyst Recommendation

The vulnerability in the jsonpath library is a critical supply-chain risk. Organizations must identify all internal and customer-facing applications utilizing this package and apply updates or mitigations immediately to prevent unauthenticated remote code execution.

---METADATA---
VENDOR: WordPress
PRODUCT: Invisible Anti-Spam & CAPTCHA
AFFECTED_VERSIONS: 0 through 5.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Invisible Anti-Spam & CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action' parameter, allowing for the potential execution of malicious scripts.

Executive Summary:
A Stored Cross-Site Scripting vulnerability in the Invisible Anti-Spam & CAPTCHA plugin for WordPress allows unauthenticated attackers to execute arbitrary scripts.

Vulnerability Details

CVE-ID: CVE-2026-16145

Affected Software: WordPress Invisible Anti-Spam & CAPTCHA plugin

Affected Versions: 0 through 5.1

Vulnerability: This vulnerability (CWE-79) arises from improper neutralization of input within the 'action' parameter. The attack vector is remote and unauthenticated, allowing any visitor to trigger the vulnerability.

Business Impact

Successful exploitation can result in the execution of malicious scripts in the browsers of users or administrators. This can lead to session theft, unauthorized actions, or defacement of the affected website. The CVSS score of 7.2 highlights the significant risk posed to both the platform's security and its users.

Remediation Plan

Immediate Action: Update the Invisible Anti-Spam & CAPTCHA plugin to version 5.1.1 or later to address the vulnerability.

Proactive Monitoring: Regularly audit plugin logs and monitor for unexpected changes to site content or unusual browser-side behavior.

Compensating Controls: Implement a Web Application Firewall (WAF) to block malicious inputs targeting the 'action' parameter or similar vectors.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically trivial to exploit due to the lack of required authentication.

Analyst Recommendation

Due to the severity of stored XSS, all users of this plugin should apply the update to version 5.1.1 immediately. Proactive patching is essential to maintain the security posture of the WordPress installation.

---METADATA---
VENDOR: wpchill
PRODUCT: Kali Forms
AFFECTED_VERSIONS: 0 through 2.4.20
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Kali Forms plugin for WordPress is vulnerable to remote code execution in versions up to 2.4.20 due to improper control of code generation.

Executive Summary:
A critical remote code execution vulnerability in the wpchill Kali Forms plugin permits unauthenticated attackers to execute arbitrary code, potentially leading to total system compromise.

Vulnerability Details

CVE-ID: CVE-2026-16144

Affected Software: wpchill Kali Forms

Affected Versions: 0 through 2.4.20

Vulnerability: This is a code injection vulnerability (CWE-94) that allows remote, unauthenticated attackers to execute arbitrary code on the server. The flaw exists within the form processing functions of the plugin, which fail to properly sanitize user-supplied input.

Business Impact

Remote code execution is the most severe class of vulnerability, as it allows an attacker to gain full control over the underlying web server. This could lead to the installation of backdoors, theft of database credentials, and the potential for lateral movement within the network. With a CVSS score of 8.1, the business impact is severe and requires immediate attention.

Remediation Plan

Immediate Action: Immediately deactivate or remove the Kali Forms plugin until a secure, patched version is released by wpchill.

Proactive Monitoring: Monitor server logs for unexpected file modifications, unauthorized outbound network connections, or the creation of new files in the WordPress upload directory.

Compensating Controls: Implement a WAF to filter malicious payloads targeting form input fields and ensure that the web server is running with the principle of least privilege.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The complexity of the attack (AC:H) provides a slight delay for attackers, but it does not diminish the catastrophic risk of code execution.

Analyst Recommendation

Given the potential for remote code execution, this vulnerability must be treated as a critical priority. Administrators should remove the plugin immediately to prevent exploitation and monitor the environment for any signs of prior unauthorized access.

---METADATA---
VENDOR: themetechmount
PRODUCT: TrueBooker – Appointment Booking and Scheduler System
AFFECTED_VERSIONS: 0 through 1.2.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The TrueBooker WordPress plugin is vulnerable to account takeover due to an insecure AJAX handler that allows unauthenticated users to modify any account email address.

Executive Summary:
A critical vulnerability in the TrueBooker plugin allows unauthenticated attackers to change any user email address, facilitating full account takeover via the WordPress password reset mechanism.

Vulnerability Details

CVE-ID: CVE-2026-16142

Affected Software: themetechmount TrueBooker – Appointment Booking and Scheduler System

Affected Versions: 0 through 1.2.6

Vulnerability: This is an authorization bypass vulnerability caused by the add_front_user_update AJAX handler. The function fails to verify user authentication or ownership, allowing unauthenticated attackers to update the email address of any WordPress user, including administrators, to an attacker-controlled address.

Business Impact

By modifying the email address associated with a high-privilege account, an attacker can trigger the native WordPress password reset flow to gain full administrative access. This leads to complete site compromise, potential data theft, and loss of control over the appointment booking system. The CVSS score of 9.8 confirms the critical nature of this flaw.

Remediation Plan

Immediate Action: Update the TrueBooker plugin to version 1.2.7 or later immediately to resolve the insecure AJAX handler implementation.

Proactive Monitoring: Inspect user account modification logs or audit trails for unexpected changes to administrator email addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to the add_front_user_update AJAX endpoint to authorized users only.

Exploitation Status

Public Exploit Available: No (unknown)

Analyst Notes: As of Aug 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly exploitable as it leverages built-in WordPress functionality to bypass authentication.

Analyst Recommendation

Administrators must prioritize updating the TrueBooker plugin to version 1.2.7. Failure to patch this vulnerability leaves the application exposed to simple, unauthenticated account takeover attacks that can result in total system compromise.

---METADATA---
VENDOR: Progress
PRODUCT: ShareFile Storage Zones Controller
AFFECTED_VERSIONS: 0 through 5.12.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Progress ShareFile Storage Zones Controller contains a deserialization of untrusted data vulnerability that could lead to unauthorized system impact.

Executive Summary:
A deserialization vulnerability in Progress ShareFile Storage Zones Controller exposes systems to potential compromise through the processing of untrusted data.

Vulnerability Details

CVE-ID: CVE-2026-16138

Affected Software: Progress ShareFile Storage Zones Controller

Affected Versions: 0 through 5.12.5

Vulnerability: This vulnerability is a deserialization of untrusted data (CWE-502) flaw. The attack vector requires the attacker to have low privileges on an adjacent network, where they can exploit the controller to achieve high impact on confidentiality, integrity, and availability.

Business Impact

Successful exploitation allows an attacker to execute arbitrary code or perform unauthorized actions within the context of the Storage Zones Controller. Given the CVSS score of 8.0, this represents a high risk to business operations, potentially leading to total system compromise and the exposure of sensitive data stored within the ShareFile environment.

Remediation Plan

Immediate Action: Upgrade to ShareFile Storage Zones Controller version 5.12.6 or later to eliminate the vulnerable deserialization code path.

Proactive Monitoring: Inspect network traffic for unusual patterns directed at the Storage Zones Controller and review administrative access logs for unauthorized activity.

Compensating Controls: Implement network segmentation to restrict access to the controller to authorized personnel only, reducing the attack surface for adjacent network threats.

Exploitation Status

Public Exploit Available: No confirmed public exploit available.

Analyst Notes: As of August 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Deserialization flaws are inherently dangerous and often facilitate remote code execution, necessitating prompt remediation.

Analyst Recommendation

The vulnerability poses a significant risk to the integrity of the ShareFile infrastructure. Administrators should prioritize the deployment of version 5.12.6, as patching is the only effective method to remediate this deserialization flaw.

---METADATA---
VENDOR: zevorn
PRODUCT: rt-claw
AFFECTED_VERSIONS: 0.1, 0.2.0
CONFIDENCE: medium
MISSING: patch
---END_METADATA---

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability exists in zevorn rt-claw versions 0.1 and 0.2.0, allowing unauthenticated remote attackers to trigger unauthorized network requests.

Executive Summary:
The zevorn rt-claw application is affected by an unauthenticated Server-Side Request Forgery vulnerability that could permit unauthorized network interactions.

Vulnerability Details

CVE-ID: CVE-2026-16128

Affected Software: zevorn rt-claw

Affected Versions: 0.1, 0.2.0

Vulnerability: This is a Server-Side Request Forgery (CWE-918) vulnerability where the application fails to properly validate user-supplied input before making outbound requests. The attack vector is network-based and requires no authentication.

Business Impact

The vulnerability carries a CVSS score of 7.3, reflecting a high-severity risk. Successful exploitation may allow an attacker to probe internal network resources, bypass firewall restrictions, or interact with sensitive internal services that are not exposed to the public internet, potentially leading to unauthorized data access or further lateral movement.

Remediation Plan

Immediate Action: Monitor the official zevorn rt-claw repository for the release of a patched version and apply it immediately upon availability.

Proactive Monitoring: Review web server and application logs for suspicious outbound requests to internal IP addresses or unusual destination ports originating from the rt-claw service.

Compensating Controls: Implement strict egress filtering on the host running rt-claw to restrict network connections to only known, required external endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it allows the application to act as a proxy for malicious requests.

Analyst Recommendation

Given the high CVSS score and the nature of SSRF vulnerabilities, organizations should prioritize restricting the network access of the affected server. Ensure that the application is not permitted to initiate connections to internal infrastructure until a vendor-supplied patch is applied.

---METADATA---
VENDOR: zevorn
PRODUCT: rt-claw
AFFECTED_VERSIONS: 0.1, 0.2.0
CONFIDENCE: medium
MISSING: patch
---END_METADATA---

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability has been identified in zevorn rt-claw versions 0.1 and 0.2.0, enabling unauthenticated remote attackers to perform unauthorized network requests.

Executive Summary:
The zevorn rt-claw application is vulnerable to an unauthenticated Server-Side Request Forgery flaw, which could be leveraged to perform unauthorized internal network scanning or requests.

Vulnerability Details

CVE-ID: CVE-2026-16127

Affected Software: zevorn rt-claw

Affected Versions: 0.1, 0.2.0

Vulnerability: This is a Server-Side Request Forgery (CWE-918) vulnerability, allowing an unauthenticated attacker to influence the application to make unintended requests to internal or external network resources.

Business Impact

The CVSS score of 7.3 indicates a high severity level. Exploitation of this vulnerability may allow attackers to bypass perimeter security, access internal metadata services, or interact with private network assets, which can lead to information disclosure or further exploitation of internal systems.

Remediation Plan

Immediate Action: Monitor for official security updates from the vendor and apply the relevant patch to the rt-claw installation as soon as it is released.

Proactive Monitoring: Monitor network traffic logs for unusual outbound connection patterns originating from the server hosting the rt-claw application.

Compensating Controls: Use network segmentation or egress firewall rules to restrict the server from initiating connections to sensitive internal subnets or services.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SSRF flaws are frequently used in modern attack chains to pivot into internal networks.

Analyst Recommendation

Given the high impact of SSRF, it is essential to implement network-level restrictions to limit the connectivity of the affected application. Prioritize the application of vendor patches once they become available to permanently resolve the underlying request validation flaw.

---METADATA---
VENDOR: zevorn
PRODUCT: rt-claw
AFFECTED_VERSIONS: 0.1, 0.2.0
CONFIDENCE: medium
MISSING: patch
---END_METADATA---

Description Summary:
An authorization bypass vulnerability exists in zevorn rt-claw versions 0.1 and 0.2.0, which may allow unauthenticated remote attackers to perform actions restricted to authorized users.

Executive Summary:
The zevorn rt-claw application contains an authorization flaw that could allow unauthenticated users to perform restricted actions, posing a significant security risk.

Vulnerability Details

CVE-ID: CVE-2026-16126

Affected Software: zevorn rt-claw

Affected Versions: 0.1, 0.2.0

Vulnerability: This vulnerability involves incorrect authorization (CWE-863) and improper authorization (CWE-285). The flaw allows an unauthenticated attacker to access or manipulate functions that were intended to be protected by authentication mechanisms.

Business Impact

With a CVSS score of 7.3, this flaw presents a high risk to the confidentiality and integrity of the application. An attacker could potentially bypass access controls to view sensitive data, modify system settings, or execute administrative functions, leading to a complete compromise of the application context.

Remediation Plan

Immediate Action: Keep the application updated and monitor the zevorn rt-claw repository for a security patch that addresses these authorization gaps.

Proactive Monitoring: Audit application access logs for unexpected administrative activity or requests that should have required valid user sessions.

Compensating Controls: If the application is accessible via the internet, place it behind a Web Application Firewall (WAF) configured to block unauthorized requests to sensitive administrative endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly critical as it undermines the fundamental authentication controls of the software.

Analyst Recommendation

Organizations should treat this authorization vulnerability with high urgency. Until a patch is released, limit public access to the application via network-level controls to reduce the attack surface for potential unauthenticated exploitation.

---METADATA---
VENDOR: zevorn
PRODUCT: rt-claw
AFFECTED_VERSIONS: 0.1, 0.2.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A Server-Side Request Forgery vulnerability exists in zevorn rt-claw, allowing unauthenticated attackers to potentially perform unauthorized requests.

Executive Summary:
An unauthenticated Server-Side Request Forgery vulnerability in zevorn rt-claw poses a significant risk of unauthorized internal network interaction.

Vulnerability Details

CVE-ID: CVE-2026-16125

Affected Software: zevorn rt-claw

Affected Versions: 0.1, 0.2.0

Vulnerability: This vulnerability is a Server-Side Request Forgery (CWE-918) flaw that allows an attacker to manipulate server-side requests. The CVSS vector confirms that the attack requires no authentication (PR:N) and no user interaction (UI:N), making the service highly exposed.

Business Impact

Successful exploitation allows an attacker to force the server to send requests to arbitrary destinations, which can be used to scan internal networks, bypass firewall restrictions, or interact with internal services that are otherwise unreachable from the internet. Given the CVSS score of 7.3, this represents a high-severity risk that could lead to unauthorized data access or the exposure of sensitive internal infrastructure.

Remediation Plan

Immediate Action: Monitor the vendor repository for the release of a security patch and apply it immediately upon availability.

Proactive Monitoring: Review web server and application logs for suspicious outbound requests originating from the server, specifically targeting internal IP addresses or unusual domains.

Compensating Controls: Implement strict egress filtering on the server to restrict outbound connections only to necessary and trusted endpoints, effectively neutralizing the impact of SSRF.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature, which allows for trivial exploitation if the application is internet-facing.

Analyst Recommendation

Organizations utilizing zevorn rt-claw should prioritize identifying all instances of this software within their environment. Given the high-severity nature of SSRF, restricting outbound network traffic from the host is an essential immediate step until a formal vendor patch is verified and applied.

---METADATA---
VENDOR: Red Hat
PRODUCT: Red Hat Enterprise Linux
AFFECTED_VERSIONS: 7, 8, 9, 10
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A heap-based buffer overflow vulnerability in the xdgmime library within Red Hat Enterprise Linux may allow for arbitrary code execution or service disruption via malicious file processing.

Executive Summary:
A heap-based buffer overflow flaw in the xdgmime library affects multiple versions of Red Hat Enterprise Linux, posing a risk of system instability or unauthorized code execution.

Vulnerability Details

CVE-ID: CVE-2026-16118

Affected Software: Red Hat Enterprise Linux

Affected Versions: 7, 8, 9, 10

Vulnerability: This is a heap-based buffer overflow (CWE-122) within the xdgmime library. The vulnerability is triggered when the library processes malformed data, requiring user interaction to open a malicious file to achieve an impact.

Business Impact

With a CVSS score of 7.1, this vulnerability presents a serious risk to system stability and security. Successful exploitation could lead to application crashes or the execution of arbitrary code with the privileges of the user interacting with the malicious file, potentially resulting in unauthorized privilege escalation or system compromise.

Remediation Plan

Immediate Action: Apply the latest security updates provided by Red Hat as they become available for your specific release of Enterprise Linux.

Proactive Monitoring: Monitor system logs for unexpected application crashes or segmentation faults that may indicate an exploitation attempt.

Compensating Controls: Exercise caution when opening untrusted files or documents from unknown sources and ensure that system-level security policies are enforced to limit the impact of code execution.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires user interaction, which serves as a partial barrier to widespread exploitation.

Analyst Recommendation

Users should prioritize the application of Red Hat security errata as they are published. Given the nature of heap overflows, keeping the underlying libraries updated is essential to maintaining the security posture of the operating system.

---METADATA---
VENDOR: @fastify
PRODUCT: http-proxy
AFFECTED_VERSIONS: All versions prior to 11.6.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The @fastify/http-proxy package fails to correctly rewrite request prefixes when URL-encoded, allowing attackers to bypass configured path restrictions and access sensitive internal endpoints.

Executive Summary:
A critical input validation flaw in @fastify/http-proxy allows attackers to bypass prefix-based security controls and access unauthorized internal or administrative upstream endpoints.

Vulnerability Details

CVE-ID: CVE-2026-16117

Affected Software: @fastify/http-proxy

Affected Versions: All versions up to and including 11.5.0

Vulnerability: This is an improper input validation vulnerability (CWE-20). By using URL-encoded segments in a request, an attacker can trick the proxy into matching a route while failing to perform the intended prefix rewrite, causing the raw path to be forwarded to the upstream server.

Business Impact

By bypassing rewrite rules, an attacker can reach administrative or internal endpoints that the proxy was intended to hide. This can lead to unauthorized data exposure or administrative action within the upstream services. With a CVSS score of 10.0, this vulnerability carries maximum severity, as it facilitates unauthorized access to potentially sensitive internal systems.

Remediation Plan

Immediate Action: Upgrade the @fastify/http-proxy package to version 11.6.0 or later to ensure proper path normalization and prefix rewriting.

Proactive Monitoring: Review proxy access logs for requests containing URL-encoded characters that attempt to access restricted or sensitive paths.

Compensating Controls: Implement strict request filtering at the application layer or via a WAF to block requests that contain suspicious or double-encoded path segments.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is highly exploitable given the nature of URL-encoded bypasses.

Analyst Recommendation

Given the critical nature of this flaw, immediate dependency updates are required for all applications utilizing the @fastify/http-proxy package. Ensure that testing includes verifying that path-based access controls remain intact after the update.

---METADATA---
VENDOR: Silicon Labs
PRODUCT: WiseConnect
AFFECTED_VERSIONS: 4.0.0 up to (excluding) 4.1.0, 2.0.0 up to (excluding) 2.14.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in Silicon Labs WiseConnect allows unauthenticated attackers to spoof bonded devices, forcing RS9116W or SiWx917 hardware to re-pair with a rogue device.

Executive Summary:
Silicon Labs WiseConnect is susceptible to an authentication bypass via device spoofing, potentially allowing an attacker to intercept or hijack Bluetooth connections.

Vulnerability Details

CVE-ID: CVE-2026-16101

Affected Software: Silicon Labs WiseConnect

Affected Versions: 4.0.0 up to (excluding) 4.1.0, 2.0.0 up to (excluding) 2.14.0

Vulnerability: This is an authentication bypass vulnerability (CWE-290) occurring in the device pairing mechanism. An unauthenticated attacker within physical proximity can spoof a previously bonded device to force the target hardware into a re-pairing state with a malicious device.

Business Impact

The successful exploitation of this vulnerability poses a significant risk to the integrity and confidentiality of wireless communications. Because this allows for unauthorized pairing, an attacker could potentially gain control over the device or intercept sensitive data, leading to a complete compromise of the affected hardware. With a CVSS score of 8.8, this flaw represents a high risk that requires immediate prioritization.

Remediation Plan

Immediate Action: Update the WiseConnect firmware to version 4.1.0 or 2.14.0, or the latest available version provided by Silicon Labs, to implement the necessary security patches.

Proactive Monitoring: Monitor Bluetooth pairing logs and device connection events for unauthorized pairing attempts or unexpected re-pairing requests.

Compensating Controls: Ensure devices are deployed in environments with restricted physical access to mitigate the risk of proximity-based Bluetooth attacks.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. This flaw is inherently dangerous due to its reliance on physical proximity to the wireless signal, which is difficult to defend against without firmware-level remediation.

Analyst Recommendation

The high severity of this vulnerability necessitates an urgent response. Organizations utilizing the RS9116W or SiWx917 modules must verify their current firmware versions and apply the recommended updates to prevent potential unauthorized access and device hijacking.

---METADATA---
VENDOR: eteubert
PRODUCT: Podlove Podcast Publisher
AFFECTED_VERSIONS: 0 through 4.5.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient path validation in the create_link_item function.

Executive Summary:
A critical arbitrary file deletion vulnerability in the Podlove Podcast Publisher plugin allows authenticated users to delete sensitive system files, leading to potential site instability or service denial.

Vulnerability Details

CVE-ID: CVE-2026-16099

Affected Software: eteubert Podlove Podcast Publisher

Affected Versions: 0 through 4.5.3

Vulnerability: The plugin fails to properly validate file paths within the create_link_item function, allowing an authenticated user to perform arbitrary file deletion on the server.

Business Impact

The ability to delete arbitrary files on the web server can lead to severe service disruption, including the loss of core application files, configuration files, or database backups. This results in significant downtime and potential data loss. With a CVSS score of 8.8, this vulnerability poses a high risk to the availability and integrity of the hosting environment.

Remediation Plan

Immediate Action: Update the Podlove Podcast Publisher plugin to version 4.5.4 or later immediately.

Proactive Monitoring: Monitor server file system logs for unauthorized deletion attempts or unexpected changes to critical directories.

Compensating Controls: Implement file system permissions that restrict the web server user from modifying files outside of necessary directories to limit the impact of potential file-based attacks.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw allows for destructive actions that can severely impact site availability.

Analyst Recommendation

Given the potential for permanent data loss and service disruption, upgrading to version 4.5.4 is mandatory. Organizations relying on the Podlove Podcast Publisher should prioritize this update to prevent unauthorized file system modifications and ensure the ongoing stability of their WordPress infrastructure.

---METADATA---
VENDOR: prosolution
PRODUCT: ProSolution WP Client
AFFECTED_VERSIONS: 0 through 2.0.10
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The ProSolution WP Client WordPress plugin is vulnerable to unauthenticated arbitrary file upload due to insufficient validation of file extensions and publicly exposed nonces.

Executive Summary:
An unauthenticated arbitrary file upload vulnerability in the ProSolution WP Client plugin allows remote attackers to execute arbitrary code on the underlying WordPress server.

Vulnerability Details

CVE-ID: CVE-2026-16098

Affected Software: prosolution ProSolution WP Client

Affected Versions: 0 through 2.0.10

Vulnerability: The plugin fails to validate the filename in the Content-Disposition header and performs inadequate extension checking during file uploads. Because the required security nonce is exposed on front-end pages, an unauthenticated attacker can bypass the upload handler's protections to save executable files.

Business Impact

This is a critical vulnerability that allows for full remote code execution on the web server. Successful exploitation could lead to total site takeover, data exfiltration, or the deployment of persistent backdoors, posing a catastrophic risk to the organization.

Remediation Plan

Immediate Action: Update the ProSolution WP Client plugin to version 2.0.11 immediately.

Proactive Monitoring: Review web server access logs for requests to file paths within the upload directory that contain unexpected file extensions or suspicious script signatures.

Compensating Controls: Use a Web Application Firewall to block requests containing suspicious file upload patterns or attempts to access common web shell locations.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 16, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is fundamentally critical due to the combination of unauthenticated access and the ability to upload executable code.

Analyst Recommendation

Given the critical nature of remote code execution vulnerabilities in WordPress plugins, this update must be prioritized. Administrators should apply version 2.0.11 immediately and verify that no unauthorized files were uploaded to the server prior to the patch.

---METADATA---
VENDOR: Shibby
PRODUCT: Tomato
AFFECTED_VERSIONS: Shibby Tomato 1.28
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Scheduler Name Handler component of Shibby Tomato 1.28 allows for remote exploitation.

Executive Summary:
A remote buffer overflow vulnerability in Shibby Tomato 1.28 exposes the system to potential memory corruption and unauthorized control.

Vulnerability Details

CVE-ID: CVE-2026-16097

Affected Software: Shibby Tomato

Affected Versions: Shibby Tomato 1.28

Vulnerability: This is a stack-based buffer overflow vulnerability residing in the sub_42537C function within the Scheduler Name Handler component. An authenticated attacker can exploit this flaw remotely to trigger memory corruption.

Business Impact

The vulnerability carries a CVSS score of 8.8, indicating a high level of risk. Successful exploitation could lead to system instability, denial of service, or arbitrary code execution, potentially compromising the integrity of the network infrastructure managed by the router.

Remediation Plan

Immediate Action: As the Shibby Tomato project is no longer maintained, users must migrate to a supported alternative such as FreshTomato to remediate this risk.

Proactive Monitoring: Review system logs for unusual crashes or unexpected behavior within the scheduler process.

Compensating Controls: Restrict access to the router management interface to trusted internal networks only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its nature as a memory corruption vulnerability which often facilitates remote code execution.

Analyst Recommendation

Given that Shibby Tomato is an unmaintained project, there is no vendor patch available. Security teams should prioritize replacing any devices running this firmware with a supported version of FreshTomato to eliminate this and future security risks.

---METADATA---
VENDOR: Shibby
PRODUCT: Tomato
AFFECTED_VERSIONS: Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the web monitoring module of Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124 allows remote attackers to trigger memory corruption.

Executive Summary:
A critical buffer overflow vulnerability in the web monitoring module of Shibby Tomato 1.28 could lead to unauthorized system impact.

Vulnerability Details

CVE-ID: CVE-2026-16096

Affected Software: Shibby Tomato

Affected Versions: Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124

Vulnerability: The vulnerability exists in the sub_40BB50 function within the web monitoring component. It requires the web monitoring feature to be enabled and administrative access to trigger the overflow remotely.

Business Impact

With a CVSS score of 8.8, this vulnerability represents a significant threat. If exploited, it could allow an attacker to disrupt router operations or gain control over the affected device, resulting in potential network-wide data interception or service outages.

Remediation Plan

Immediate Action: Migrate away from the unmaintained Shibby Tomato firmware and install FreshTomato, which has superseded this project.

Proactive Monitoring: Monitor the /proc/webmon_recent_domains file and associated web monitoring logs for anomalous activity or unexpected input strings.

Compensating Controls: Disable the web monitoring feature if it is not strictly required for network operations to reduce the attack surface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for administrative access slightly mitigates the attack vector, but the potential for memory corruption remains a high-severity concern.

Analyst Recommendation

Because the Shibby Tomato project is discontinued, no security updates will be issued. Organizations must plan a migration to a supported firmware platform immediately to ensure ongoing protection against this and other unpatched vulnerabilities.

---METADATA---
VENDOR: Shibby
PRODUCT: Tomato
AFFECTED_VERSIONS: Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An out-of-bounds write flaw in the setup_conntrack function of Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124 allows unauthenticated remote attackers to trigger memory corruption.

Executive Summary:
An unauthenticated out-of-bounds write vulnerability in Shibby Tomato 1.28 poses a high risk of remote memory corruption and system compromise.

Vulnerability Details

CVE-ID: CVE-2026-16095

Affected Software: Shibby Tomato

Affected Versions: Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124

Vulnerability: This flaw involves an out-of-bounds write in the setup_conntrack function of the /sbin/rc binary. An unauthenticated attacker can trigger this by manipulating the ct_tcp_timeout argument.

Business Impact

The CVSS score of 8.8 reflects the high risk posed by this vulnerability, particularly because it does not require authentication. Successful exploitation allows for memory corruption, which can lead to complete device compromise or persistent denial of service, impacting the availability of the network.

Remediation Plan

Immediate Action: Cease use of the unmaintained Shibby Tomato firmware and migrate all affected hardware to FreshTomato.

Proactive Monitoring: Monitor network traffic for malformed TCP packets or unusual interactions with connection tracking parameters.

Compensating Controls: Deploy a WAF or an Intrusion Prevention System (IPS) to filter malicious packets directed at the router management interface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of an authentication requirement significantly increases the risk profile of this memory corruption flaw.

Analyst Recommendation

The abandonment of the Shibby Tomato project means that this vulnerability will not be patched by the original developers. Immediate migration to FreshTomato is the only viable path to secure your infrastructure against this critical risk.

---METADATA---
VENDOR: Keycloak
PRODUCT: Keycloak
AFFECTED_VERSIONS: 26.5.0 up to (excluding) 26.5.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Keycloak versions 26.5.0 up to 26.5.3 are affected by an improper access control vulnerability, which allows authenticated users to perform unauthorized actions.

Executive Summary:
An improper access control vulnerability in Keycloak allows authenticated users to perform unauthorized operations, potentially leading to a significant security breach.

Vulnerability Details

CVE-ID: CVE-2026-1609

Affected Software: Keycloak

Affected Versions: 26.5.0 up to 26.5.3

Vulnerability: This is an improper access control vulnerability (CWE-284) that occurs within Keycloak. An attacker must be authenticated to exploit this flaw, which subsequently allows them to bypass intended security constraints.

Business Impact

The impact of this flaw includes unauthorized access to resources and data modification, which could undermine the security of the entire identity and access management system. Given the CVSS score of 8.1, the vulnerability poses a high risk to business operations, as it effectively nullifies existing authorization policies for authenticated users.

Remediation Plan

Immediate Action: Update Keycloak to version 26.5.3 or later to resolve the access control deficiency.

Proactive Monitoring: Audit user activity logs to identify suspicious or unauthorized actions performed by standard users that appear to exceed their assigned permissions.

Compensating Controls: Implement restrictive network access controls to limit access to the Keycloak administration console and sensitive API endpoints to only known, authorized IP ranges.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for authentication limits the initial attack surface, but the potential for privilege escalation remains high.

Analyst Recommendation

Keycloak administrators should prioritize upgrading to version 26.5.3 immediately. Ensuring that access control policies are strictly enforced and monitoring for anomalous user behavior are critical steps in maintaining the integrity of the authentication platform.

---METADATA---
VENDOR: Sipeed
PRODUCT: PicoClaw
AFFECTED_VERSIONS: 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A Server-Side Request Forgery vulnerability in Sipeed PicoClaw allows unauthenticated attackers to manipulate server-side requests.

Executive Summary:
An unauthenticated Server-Side Request Forgery vulnerability in Sipeed PicoClaw presents a high risk of unauthorized internal network access.

Vulnerability Details

CVE-ID: CVE-2026-16084

Affected Software: Sipeed PicoClaw

Affected Versions: 0.2.0, 0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5, 0.2.6, 0.2.7

Vulnerability: The software is susceptible to Server-Side Request Forgery (CWE-918), where an unauthenticated attacker can influence the application to make requests to unintended locations. The vulnerability is accessible over the network without requiring user interaction.

Business Impact

The ability to perform SSRF can lead to the compromise of internal services, leakage of cloud metadata, or unauthorized access to internal APIs. With a CVSS score of 7.3, the vulnerability is classified as high severity, and it could serve as a pivot point for further lateral movement within a corporate network.

Remediation Plan

Immediate Action: Update Sipeed PicoClaw to a version that includes the fix provided in commit c15aac21fe05ee103a470e1104bc891754e83392.

Proactive Monitoring: Inspect application logs for anomalous outbound HTTP/HTTPS requests that do not align with expected application behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block suspicious URL parameters that might be used to trigger external requests to restricted internal resources.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 19, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The availability of a specific fix commit suggests that the vendor has addressed the underlying logic error, and organizations should move quickly to update.

Analyst Recommendation

System administrators must act promptly to update all instances of PicoClaw to the patched release. Given the ease of exploitation, failure to update leaves the internal environment vulnerable to reconnaissance and potential exploitation by remote, unauthenticated threat actors.

---METADATA---
VENDOR: WordPress
PRODUCT: Insert or Embed Articulate Content into WordPress
AFFECTED_VERSIONS: 0 through 4.3000000027
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Insert or Embed Articulate Content into WordPress plugin fails to properly validate uploaded archives, allowing malicious file uploads and potential remote code execution.

Executive Summary:
A critical remote code execution vulnerability exists in the Insert or Embed Articulate Content into WordPress plugin, which allows authenticated users to execute arbitrary code on the server.

Vulnerability Details

CVE-ID: CVE-2026-16060

Affected Software: WordPress Insert or Embed Articulate Content into WordPress

Affected Versions: 0 through 4.3000000027

Vulnerability: This vulnerability is an Unrestricted Upload of File with Dangerous Type (CWE-434), where the plugin fails to perform adequate validation on uploaded archives. While the description identifies an Editor-level user context, the CVSS vector indicates the attack is network-based with low complexity, posing a severe risk to the host environment.

Business Impact

The vulnerability carries a CVSS score of 9.8, signifying a critical risk level. A successful exploit grants an attacker the ability to execute arbitrary code on the underlying web server, which can lead to complete system compromise, unauthorized data exfiltration, or the deployment of ransomware. Given that this plugin is used for content management, its exploitation could result in significant business disruption and loss of site integrity.

Remediation Plan

Immediate Action: As there is no patched version currently available, administrators should immediately deactivate and uninstall the Insert or Embed Articulate Content into WordPress plugin until a secure update is released by the vendor.

Proactive Monitoring: Security teams should audit web server logs for suspicious file uploads or requests to unfamiliar files within the plugin upload directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized file uploads or restrict access to common executable extensions within the WordPress upload directories.

Exploitation Status

Public Exploit Available: No (no confirmed public exploit exists in the provided data).

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of server-side validation for file types, making the system trivial to compromise once the vulnerability is identified by an attacker.

Analyst Recommendation

Given the critical nature of this vulnerability and the lack of an available patch, immediate removal of the affected plugin is the only effective way to eliminate the risk of remote code execution. Organizations should prioritize identifying all instances of this plugin across their WordPress infrastructure and ensure it is disabled until the developer provides a verified security update.

---METADATA---
VENDOR: Contest Gallery
PRODUCT: Contest Gallery
AFFECTED_VERSIONS: < 30.0.7
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
The Contest Gallery WordPress plugin bypasses standard authentication flows, failing to trigger brute-force protection or two-factor authentication for front-end logins.

Executive Summary:
A high-severity authentication flaw in the Contest Gallery WordPress plugin allows attackers to bypass essential security controls including brute-force protection and multi-factor authentication.

Vulnerability Details

CVE-ID: CVE-2026-16055

Affected Software: Contest Gallery

Affected Versions: < 30.0.7

Vulnerability: The plugin utilizes a custom authentication flow for front-end logins that does not integrate with standard WordPress security hooks. This failure allows authenticated users to bypass critical brute-force protections and existing two-factor authentication implementations.

Business Impact

By bypassing brute-force and 2FA protections, this vulnerability significantly lowers the barrier for attackers to perform credential stuffing or password spraying against the application. With a CVSS score of 7.5, the potential for unauthorized access to user accounts and subsequent escalation of privileges warrants immediate attention.

Remediation Plan

Immediate Action: Update the Contest Gallery plugin to version 30.0.7 or later to ensure all login attempts are routed through the standard, secure WordPress authentication flow.

Proactive Monitoring: Monitor login logs for high volumes of failed attempts that do not trigger standard account lockout mechanisms.

Compensating Controls: If immediate patching is not possible, disable the front-end login feature provided by the plugin and force users to utilize the native WordPress login interface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The risk remains high due to the intentional circumvention of established security protocols.

Analyst Recommendation

The reliance on a non-standard authentication mechanism introduces significant security risks. It is imperative that administrators update to the patched version to restore standard security protections and mitigate the risk of unauthorized account access.