---METADATA---
VENDOR: Luanti
PRODUCT: Luanti
AFFECTED_VERSIONS: Versions before 5.15.2
---END_METADATA---

Description Summary:
Luanti versions before 5.15.2 are vulnerable to a Lua sandbox escape when using LuaJIT, allowing a crafted mod to execute arbitrary code.

Executive Summary:
A critical sandbox escape vulnerability in Luanti allows attackers to bypass security restrictions and achieve code execution through malicious mod files.

Vulnerability Details

CVE-ID: CVE-2026-40959

Affected Software: Luanti (formerly Minetest)

Affected Versions: Versions before 5.15.2

Vulnerability: This is a sandbox escape vulnerability occurring when the software utilizes LuaJIT. An attacker can supply a specially crafted mod to break out of the intended execution environment, leading to unauthorized system-level operations.

Business Impact

With a CVSS score of 9.3, this vulnerability poses a severe risk to organizational assets. Successful exploitation could allow a remote attacker to gain control over the underlying host system, leading to total data compromise, loss of service integrity, and potential lateral movement within the network.

Remediation Plan

Immediate Action: Upgrade all Luanti installations to version 5.15.2 or later immediately.

Proactive Monitoring: Review mod installation logs and monitor for unusual server-side process activity or unexpected file system modifications.

Compensating Controls: Restrict the ability to load third-party or untrusted mods to authorized personnel only until the software is patched.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the high CVSS score, the potential for exploitation is high; immediate patching is strongly advised.

Analyst Recommendation

The severity of this flaw cannot be overstated, as it directly undermines the isolation mechanism required for safe mod execution. Administrators must prioritize updating their Luanti instances to version 5.15.2 or higher to mitigate the risk of full system compromise.

---METADATA---
VENDOR: Flowise
PRODUCT: Flowise
AFFECTED_VERSIONS: Prior to 3.1.0
---END_METADATA---

Description Summary:
Flowise prior to 3.1.0 is vulnerable to OS command injection due to unsafe serialization of stdio commands in the MCP adapter, allowing authenticated attackers to execute arbitrary commands.

Executive Summary:
An authenticated command injection vulnerability in Flowise allows attackers to execute arbitrary code on the underlying host OS.

Vulnerability Details

CVE-ID: CVE-2026-40933

Affected Software: Flowise

Affected Versions: Prior to 3.1.0

Vulnerability: The vulnerability exists in the "Custom MCP" configuration interface, where insufficient input sanitization allows an authenticated attacker to inject malicious arguments into stdio commands, bypassing existing validation checks.

Business Impact

Successful exploitation grants an attacker full control over the underlying server, enabling data exfiltration, ransomware deployment, or complete system takeover. With a CVSS score of 9.9, this vulnerability represents a critical threat to the confidentiality, integrity, and availability of the host environment.

Remediation Plan

Immediate Action: Upgrade Flowise to version 3.1.0 or later immediately to address the command injection flaw.

Proactive Monitoring: Audit logs for suspicious process creation or unusual command executions originating from the Flowise service account.

Compensating Controls: Implement strict network segmentation and ensure the application runs with the least-privilege principle to contain potential breaches.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of command injection, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a severe risk to infrastructure integrity. Administrators should apply the 3.1.0 update immediately and conduct a thorough review of the application's configuration to ensure no malicious MCP servers were added prior to the patch.

---METADATA---
VENDOR: WWBN
PRODUCT: AVideo
AFFECTED_VERSIONS: 29.0 and prior
---END_METADATA---

Description Summary:
A WebSocket-based cross-site scripting (XSS) vulnerability in the AVideo YPTSocket plugin allows unauthenticated attackers to achieve universal account takeover.

Executive Summary:
An unauthenticated XSS vulnerability in the WWBN AVideo YPTSocket plugin allows attackers to remotely execute JavaScript in the context of other users, leading to full account takeover.

Vulnerability Details

CVE-ID: CVE-2026-40911

Affected Software: WWBN AVideo

Affected Versions: 29.0 and prior

Vulnerability: The YPTSocket server relays unsanitized JSON messages to connected clients, which then execute the malicious payload via eval() sinks in the client-side script.

Business Impact

With a CVSS score of 10.0, this is a critical vulnerability. An attacker can hijack administrative sessions, steal sensitive user data, and execute privileged actions across the platform, resulting in total loss of platform integrity and trust.

Remediation Plan

Immediate Action: Apply the fix provided in commit c08694bf6264eb4decceb78c711baee2609b4efd or update to the latest patched version.

Proactive Monitoring: Monitor WebSocket traffic for anomalous JSON messages containing suspicious msg or callback fields.

Compensating Controls: If patching is delayed, consider disabling the YPTSocket plugin entirely to mitigate the risk of remote code execution within user browsers.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is exceptionally dangerous due to its unauthenticated nature and the ability to target multiple users simultaneously. Administrators must prioritize the application of the vendor-supplied fix to prevent widespread account compromise.

---METADATA---
VENDOR: ElectricSQL
PRODUCT: Electric
AFFECTED_VERSIONS: 1.1.12 to before 1.5.0
---END_METADATA---

Description Summary:
ElectricSQL is vulnerable to error-based SQL injection via the /v1/shape API, allowing authenticated users to read, modify, or destroy database contents.

Executive Summary:
An authenticated SQL injection vulnerability in the ElectricSQL sync engine allows attackers to perform full database manipulation.

Vulnerability Details

CVE-ID: CVE-2026-40906

Affected Software: ElectricSQL Electric

Affected Versions: 1.1.12 to before 1.5.0

Vulnerability: The vulnerability resides in the order_by parameter of the /v1/shape API, where insufficient validation allows an authenticated user to inject malicious SQL queries into the underlying PostgreSQL database.

Business Impact

With a CVSS score of 9.9, this vulnerability allows an authenticated attacker to bypass all database access controls. This results in a high risk of data destruction, unauthorized data exfiltration, and full database compromise, which could lead to severe operational disruption and regulatory non-compliance.

Remediation Plan

Immediate Action: Upgrade ElectricSQL to version 1.5.0 or later to patch the vulnerable API endpoint.

Proactive Monitoring: Examine database audit logs for anomalous query patterns or unexpected data modification attempts.

Compensating Controls: Enforce strict API authentication and rate-limiting, and ensure the database service account operates with the minimum required privileges.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a critical threat to database integrity. Given that the impact includes the ability to destroy data, administrators must prioritize updating to version 1.5.0 and perform an immediate review of database access logs for signs of suspicious activity.

---METADATA---
VENDOR: Chartbrew
PRODUCT: Chartbrew
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in Chartbrew, an open-source data visualization tool, could potentially be leveraged by attackers to compromise connected data sources.

Executive Summary:
Chartbrew contains a high-severity security flaw that poses a risk to connected database and API environments.

Vulnerability Details

CVE-ID: CVE-2026-40904

Affected Software: Chartbrew

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the Chartbrew web application, which facilitates connections to external data providers. The flaw could potentially allow attackers to bypass intended access controls during the data visualization and retrieval process.

Business Impact

With a CVSS score of 8.1, this vulnerability is classified as high risk. If exploited, an attacker could potentially gain unauthorized access to sensitive information stored within connected databases or manipulate the data used for critical business reporting, leading to significant operational and data integrity risks.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the vendor to address the identified vulnerability.

Proactive Monitoring: Monitor database query logs for anomalous or unauthorized access requests originating from the Chartbrew application server.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious requests and restrict access to the Chartbrew administrative interface to trusted IP addresses only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must treat this vulnerability as a high priority. Ensure that the most recent security patches are deployed across all Chartbrew instances to mitigate the risk of unauthorized data exposure.

---METADATA---
VENDOR: GitHub
PRODUCT: goshs
AFFECTED_VERSIONS: Prior to 2.0.0-beta.6
---END_METADATA---

Description Summary:
The goshs SimpleHTTPServer is affected by an ArtiPACKED vulnerability that can lead to the unauthorized leakage of GITHUB_TOKEN credentials via workflow artifacts.

Executive Summary:
A credential leakage vulnerability in goshs allows unauthorized access to sensitive GITHUB_TOKEN credentials through workflow artifacts.

Vulnerability Details

CVE-ID: CVE-2026-40903

Affected Software: GitHub goshs

Affected Versions: Prior to 2.0.0-beta.6

Vulnerability: The "ArtiPACKED" vulnerability allows for the inadvertent exposure of sensitive environment tokens, even if those tokens are not explicitly stored in the source code repository.

Business Impact

Leakage of the GITHUB_TOKEN can provide attackers with unauthorized access to private repositories, workflow secrets, and deployment environments. Given the CVSS score of 9.1, this vulnerability poses a significant risk to the entire software supply chain and organizational development security.

Remediation Plan

Immediate Action: Upgrade goshs to version 2.0.0-beta.6 or later and immediately rotate any GITHUB_TOKENs that were accessible by the affected versions.

Proactive Monitoring: Audit CI/CD logs for unauthorized access and review artifact storage for potential data leakage.

Compensating Controls: Implement strict permissions on repository artifacts and enforce the use of short-lived tokens where possible.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the sensitive nature of the leaked information, the potential for exploitation is high.

Analyst Recommendation

Security teams must treat this as a high-priority incident. Beyond applying the software update, it is critical to assume that existing tokens may have been compromised and to perform a full credential rotation across all affected workflows.

---METADATA---
VENDOR: Unknown
PRODUCT: Math
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability has been identified in a Math-related software component, posing a significant risk to systems that rely on this library for calculations.

Executive Summary:
A critical security flaw has been reported in a Math software component, which could lead to severe system impacts if exploited.

Vulnerability Details

CVE-ID: CVE-2026-40897

Affected Software: Unknown Math component

Affected Versions: See vendor advisory for affected versions

Vulnerability: The vulnerability relates to a Math-focused software package. Without specific technical details, the CVSS score of 8.8 suggests a serious flaw, likely involving improper input handling or memory management during complex mathematical operations, which could be triggered by remote or local attackers.

Business Impact

The CVSS score of 8.8 reflects a high-severity risk. Exploitation of mathematical libraries can lead to application crashes, data corruption, or potential code execution, which could disrupt financial, scientific, or infrastructure-related applications relying on these calculations.

Remediation Plan

Immediate Action: Identify the specific "Math" software in your environment and check vendor sources for security patches. Update to the latest version immediately.

Proactive Monitoring: Review application logs for unexpected errors or crashes occurring during mathematical processing tasks.

Compensating Controls: Run applications utilizing the affected library with the least privilege necessary to minimize the impact of a potential compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators must investigate their software stacks for any Math-related libraries and ensure they are patched. Given the high CVSS score, treat this as a priority update once the specific vendor advisory is identified.

---METADATA---
VENDOR: Vendure
PRODUCT: Vendure
AFFECTED_VERSIONS: 1.7.4 through 3.6.1
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in the Vendure Shop API allows remote attackers to execute arbitrary SQL commands against the backend database.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Vendure Shop API permits remote attackers to execute arbitrary database queries, leading to potential unauthorized data access or modification.

Vulnerability Details

CVE-ID: CVE-2026-40887

Affected Software: Vendure

Affected Versions: 1.7.4 through 3.6.1

Vulnerability: Input validation failure in the Shop API allows unauthenticated users to inject malicious SQL into query string parameters, which are processed without sufficient sanitization.

Business Impact

This vulnerability carries a CVSS score of 9.1, indicating a critical risk to business operations. Exploitation could result in the exfiltration of sensitive customer data, unauthorized administrative access, or complete database corruption, causing significant reputational and operational harm.

Remediation Plan

Immediate Action: Upgrade to versions 2.3.4, 3.5.7, or 3.6.2 depending on your current deployment branch.

Proactive Monitoring: Review database query logs for syntax errors, unexpected union selects, or signs of reconnaissance activity targeting the Vendure Shop API.

Compensating Controls: Apply the provided vendor hotfix to the RequestContextService to validate languageCode inputs, or implement a WAF rule to block suspicious SQL injection patterns in query strings.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease of exploitation and the potential for total database compromise, organizations must apply the provided patches or hotfixes immediately. Ensure all database backends (PostgreSQL, MySQL, SQLite) are protected by the updated validation logic.

---METADATA---
VENDOR: goshs
PRODUCT: goshs
AFFECTED_VERSIONS: Prior to 2.0.0-beta.6
---END_METADATA---

Description Summary:
An SFTP authentication bypass in goshs allows unauthenticated network attackers to access files without a password when specific configurations are used.

Executive Summary:
An SFTP authentication bypass in the goshs SimpleHTTPServer allows unauthenticated attackers to access files without credentials, representing a critical security risk.

Vulnerability Details

CVE-ID: CVE-2026-40884

Affected Software: goshs (SimpleHTTPServer)

Affected Versions: Prior to 2.0.0-beta.6

Vulnerability: When configured with empty-username basic-auth and the -sftp flag, the server fails to initialize an SFTP password handler, effectively disabling authentication for the SFTP service.

Business Impact

The CVSS score of 9.8 reflects the severity of this access control failure. An attacker can remotely access the entire filesystem reachable by the goshs service, leading to full data exfiltration and potential compromise of host integrity.

Remediation Plan

Immediate Action: Upgrade to version 2.0.0-beta.6 or later immediately to resolve the SFTP authentication bypass.

Proactive Monitoring: Inspect SFTP access logs for connections originating from unexpected IP addresses or connections that successfully authenticate despite invalid or empty credentials.

Compensating Controls: If upgrading is not immediately feasible, disable the SFTP service or restrict network access to the server to prevent unauthorized connections.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is a significant oversight in authentication logic. Users of goshs should update to 2.0.0-beta.6 immediately to ensure that SFTP access is correctly protected by password verification.

---METADATA---
VENDOR: Apache
PRODUCT: Camel
AFFECTED_VERSIONS: 3.0.0 before 4.14.7, 4.15.0 before 4.18.2, 4.19.0 before 4.20.0
CONFIDENCE: high
MISSING: exploit_status
---END_METADATA---

Description Summary:
Apache Camel’s JMS components are vulnerable to remote code execution due to insecure deserialization of ObjectMessage payloads when mapJmsMessage is enabled.

Executive Summary:
An insecure deserialization vulnerability in Apache Camel JMS components allows attackers to achieve remote code execution by publishing crafted payloads to a message queue.

Vulnerability Details

CVE-ID: CVE-2026-40860

Affected Software: Apache Camel

Affected Versions: 3.0.0 before 4.14.7, 4.15.0 before 4.18.2, 4.19.0 before 4.20.0

Vulnerability: The application deserializes JMS ObjectMessage payloads without adequate filtering or allowlisting, allowing an attacker to trigger a deserialization gadget chain on the classpath.

Business Impact

This critical vulnerability (CVSS 9.8) enables remote code execution, which can be leveraged to gain full control over the application server. Any organization using Apache Camel as a JMS consumer is at significant risk of total system compromise if an attacker can reach the message queue.

Remediation Plan

Immediate Action: Upgrade to version 4.20.0, 4.14.7, or 4.18.2, depending on the specific release stream in use.

Proactive Monitoring: Monitor JMS traffic for suspicious or malformed ObjectMessage payloads and review application logs for unexpected deserialization errors.

Compensating Controls: Implement strict network-level access controls for the message broker to ensure only trusted sources can publish messages to the consumed queues.

Exploitation Status

Public Exploit Available: Not specified

Analyst Notes: As of Apr 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The reliance on default settings like mapJmsMessage significantly expands the attack surface for this vulnerability. Organizations must prioritize upgrading their Apache Camel dependencies to versions that enforce secure deserialization practices to prevent unauthorized code execution.

---METADATA---
VENDOR: Apache
PRODUCT: Camel
AFFECTED_VERSIONS: 4.0.0 up to (excluding) 4.14.8, 4.15.0 up to (excluding) 4.18.3, 4.19.0 up to (excluding) 4.20.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
Apache Camel is susceptible to an untrusted Java deserialization vulnerability, which could allow an attacker to achieve full system compromise.

Executive Summary:
A severe deserialization vulnerability in Apache Camel presents a critical risk, enabling unauthenticated remote attackers to achieve total technical impact.

Vulnerability Details

CVE-ID: CVE-2026-40859

Affected Software: Apache Camel

Affected Versions: 4.0.0 up to (excluding) 4.14.8, 4.15.0 up to (excluding) 4.18.3, 4.19.0 up to (excluding) 4.20.0

Vulnerability: This vulnerability involves the deserialization of untrusted data, allowing an attacker to manipulate serialized objects. The vulnerability is network-accessible and requires no authentication, though it is categorized as having high complexity for exploitation.

Business Impact

The CVSS score of 8.1 (High) underscores the severity of this issue, as it permits full technical impact on the affected system. Exploitation could lead to unauthorized data access, modification, or complete service disruption, causing significant operational and reputational damage.

Remediation Plan

Immediate Action: Update Apache Camel instances to the patched versions (4.14.8, 4.18.3, or 4.20.0) as documented in the official Apache security release.

Proactive Monitoring: Review enterprise integration patterns and service logs for signs of anomalous deserialization activity or unexpected remote connections.

Compensating Controls: Utilize a Web Application Firewall (WAF) to inspect incoming traffic for malicious serialized objects and enforce strict input validation policies.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Apache Camel is a core integration component in many enterprise environments, making this vulnerability particularly dangerous. Security teams must prioritize patching this flaw to prevent remote attackers from leveraging deserialization weaknesses to gain control over middleware infrastructure.

---METADATA---
VENDOR: Unknown
PRODUCT: cfgparser
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
CONFIDENCE: medium
MISSING: versions, patch, exploit_status
---END_METADATA---

Description Summary:
A local confusion attack vulnerability in the cfgparser component allows for potential code execution via a malicious file on a USB stick.

Executive Summary:
A local confusion vulnerability in the cfgparser component could allow an attacker with physical access to achieve arbitrary code execution.

Vulnerability Details

CVE-ID: CVE-2026-40851

Affected Software: Unknown / cfgparser

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a local confusion attack targeting the cfgparser utility. An attacker can trigger the vulnerability by providing a specially crafted file via a USB storage device, resulting in arbitrary code execution.

Business Impact

This vulnerability carries a CVSS score of 8.4, indicating a high risk of total system compromise. If an attacker gains physical access to the affected hardware, they can execute arbitrary code, potentially leading to unauthorized data access, persistence, or full system takeover.

Remediation Plan

Immediate Action: Restrict physical access to USB ports on critical hardware and apply vendor-provided security patches when available.

Proactive Monitoring: Audit system logs for unexpected file processing errors or unauthorized execution attempts following USB device attachment.

Compensating Controls: Disable USB mass storage functionality via BIOS/UEFI or OS-level policies where such access is not strictly required for operations.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Due to the high CVSS score and the risk of code execution, this vulnerability should be treated with urgency. Implement hardware-level access restrictions immediately to mitigate the risk until a formal patch is deployed.

---METADATA---
VENDOR: Saleswonder LLC
PRODUCT: WebinarIgnition
AFFECTED_VERSIONS: Through 4.08.253
---END_METADATA---

Description Summary:
Saleswonder LLC's WebinarIgnition plugin for WordPress is vulnerable to Blind SQL Injection, allowing unauthenticated attackers to extract database information.

Executive Summary:
A critical Blind SQL Injection vulnerability in the Saleswonder LLC WebinarIgnition plugin allows unauthenticated attackers to extract sensitive information from the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-40797

Affected Software: Saleswonder LLC WebinarIgnition

Affected Versions: Through 4.08.253

Vulnerability: This is a Blind SQL Injection vulnerability where the application fails to properly neutralize special elements in SQL commands, allowing an attacker to manipulate queries and retrieve data from the database.

Business Impact

With a CVSS score of 9.3, this vulnerability poses a severe risk of data breach. An attacker can systematically extract user data, credentials, and potentially other sensitive application information, leading to significant reputational damage and regulatory compliance issues.

Remediation Plan

Immediate Action: Update to the latest version of the WebinarIgnition plugin. If no patch is available, deactivate and remove the plugin until a fix can be verified.

Proactive Monitoring: Monitor web server logs for suspicious SQL injection patterns, such as unexpected use of UNION, SELECT, or WAITFOR commands.

Compensating Controls: Implement a Web Application Firewall (WAF) with SQL injection protection rules enabled to block malicious payloads targeting the plugin.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the ease with which SQL injection can be automated, this vulnerability is a high-priority threat. Organizations should update immediately and review database access logs to ensure no unauthorized data extraction has occurred.

---METADATA---
VENDOR: GeekyBot
PRODUCT: GeekyBot Plugin
AFFECTED_VERSIONS: GeekyBot <= 1.2.2
---END_METADATA---

Description Summary:
The GeekyBot WordPress plugin is susceptible to an unauthenticated arbitrary file upload vulnerability, which can lead to remote code execution.

Executive Summary:
An unauthenticated arbitrary file upload vulnerability in the GeekyBot plugin allows attackers to upload malicious files, posing a critical risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40772

Affected Software: GeekyBot

Affected Versions: GeekyBot <= 1.2.2

Vulnerability: This vulnerability allows an unauthenticated attacker to upload arbitrary files to the server, which can subsequently be executed to achieve remote code execution (RCE) on the underlying host.

Business Impact

With a maximum CVSS score of 10.0, this is a critical vulnerability. Successful exploitation grants an attacker complete control over the affected server, enabling them to install backdoors, steal sensitive information, or use the server for further malicious activities, resulting in a total security failure.

Remediation Plan

Immediate Action: Update the GeekyBot plugin to version 1.2.3 or later immediately.

Proactive Monitoring: Scan the web server's upload directories for unauthorized files or suspicious scripts that may have been uploaded via this vector.

Compensating Controls: Configure the web server to restrict file execution permissions in upload directories and deploy a WAF to block unauthorized file upload requests.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability constitutes the highest level of risk. Immediate action is required to patch the software and perform a security audit of the affected server to ensure no malicious files have already been introduced.

---METADATA---
VENDOR: Divi
PRODUCT: Contact Form Extender for Divi
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An unauthenticated arbitrary file deletion vulnerability exists in the Contact Form Extender for Divi plugin, allowing remote attackers to remove files from the server.

Executive Summary:
The Contact Form Extender for Divi plugin contains an unauthenticated file deletion vulnerability that allows attackers to remove critical server files.

Vulnerability Details

CVE-ID: CVE-2026-40769

Affected Software: Contact Form Extender for Divi

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an unauthenticated vulnerability, meaning no login is required to trigger the file deletion process. The flaw resides in the file handling functions of the plugin, permitting remote attackers to delete arbitrary files on the system.

Business Impact

The CVSS score of 8.6 reflects the high severity of this flaw, as it allows for catastrophic system disruption. An attacker could delete critical system files, leading to a complete denial of service (DoS) or the destruction of essential application data, resulting in significant operational downtime.

Remediation Plan

Immediate Action: Update the Contact Form Extender for Divi plugin to the latest version immediately.

Proactive Monitoring: Monitor server file system activity logs for unauthorized deletion events or suspicious file modifications.

Compensating Controls: Use a WAF to block unauthorized requests that target the specific file upload or deletion functions of the plugin.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical vulnerability due to the lack of required authentication. Organizations must prioritize updating this plugin immediately to prevent potential malicious actors from causing irreversible damage to the host server's file system.

---METADATA---
VENDOR: StylemixThemes
PRODUCT: MasterStudy LMS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A SQL injection vulnerability in MasterStudy LMS allows authenticated users with the Subscriber role to execute arbitrary SQL commands.

Executive Summary:
MasterStudy LMS is vulnerable to a critical SQL injection flaw that enables authenticated subscribers to manipulate the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-40766

Affected Software: StylemixThemes MasterStudy LMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The application fails to perform adequate input validation on parameters processed by the LMS, allowing an authenticated Subscriber to perform unauthorized database operations.

Business Impact

The ability to perform SQL injection can lead to the exfiltration of personally identifiable information (PII) or the total compromise of site data. The CVSS score of 8.5 reflects the high impact on confidentiality and integrity that this vulnerability presents to the organization.

Remediation Plan

Immediate Action: Update MasterStudy LMS to the latest version immediately upon release of the security patch.

Proactive Monitoring: Monitor database query logs for unusual query structures or unexpected unauthorized access attempts.

Compensating Controls: Utilize a Web Application Firewall (WAF) to provide virtual patching by filtering malicious SQL payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this SQL injection vulnerability as a high priority. Ensure that the plugin is updated immediately and consider restricting user access to the LMS functions until the patch is successfully applied.

---METADATA---
VENDOR: themagnifico52 Kids
PRODUCT: Kids Online Store
AFFECTED_VERSIONS: From n/a through 0.8.9
---END_METADATA---

Description Summary:
An unrestricted file upload vulnerability in themagnifico52 Kids Online Store allows attackers to upload and execute a web shell.

Executive Summary:
A critical unrestricted file upload vulnerability in the Kids Online Store allows remote attackers to gain unauthorized control via web shell execution.

Vulnerability Details

CVE-ID: CVE-2026-40750

Affected Software: themagnifico52 Kids Online Store

Affected Versions: n/a through 0.8.9

Vulnerability: This vulnerability involves the lack of file type restrictions during the upload process. An attacker can exploit this to upload a malicious file, such as a web shell, to the server, allowing for subsequent remote command execution.

Business Impact

With a CVSS score of 9.9, this flaw allows for complete server takeover. Once a web shell is established, an attacker can steal sensitive customer data, modify store content, or pivot into the internal network, causing significant business disruption and legal liability.

Remediation Plan

Immediate Action: Update the Kids Online Store to the latest version, ensuring that robust file validation and sanitization measures are in place.

Proactive Monitoring: Scan the web server for unauthorized files, particularly in directories where user uploads are permitted, and inspect for anomalous web server behavior.

Compensating Controls: Use file upload restrictions at the application level and ensure the web server is configured to prevent the execution of scripts within upload directories.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation. However, the ease of exploiting file upload vulnerabilities to gain a web shell makes this a high-priority target for automated scanning and exploitation.

Analyst Recommendation

Organizations should prioritize updating their Kids Online Store installation to version 0.9.0 or higher. Immediate action is required to prevent potential unauthorized access, and administrators should conduct a security review of all uploaded content to ensure no malicious files have been deployed.

---METADATA---
VENDOR: Dell
PRODUCT: Container Storage Modules (CSI PowerStore)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists in Dell Container Storage Modules (CSI PowerStore) version 2, potentially impacting the integrity of storage management operations.

Executive Summary:
A high-severity vulnerability in Dell Container Storage Modules (CSI PowerStore) could allow an attacker to compromise storage infrastructure integrity.

Vulnerability Details

CVE-ID: CVE-2026-40711

Affected Software: Dell Container Storage Modules

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the CSI PowerStore driver within Dell's Container Storage Modules. Detailed technical specifics are limited, but the flaw likely allows for unauthorized manipulation or access to storage resources via the container orchestration interface.

Business Impact

With a CVSS score of 8.0, this vulnerability presents a significant risk to data availability and storage security. Successful exploitation could lead to unauthorized access to persistent storage volumes or disruption of mission-critical containerized services, resulting in operational downtime.

Remediation Plan

Immediate Action: Apply the latest vendor security patches for Dell Container Storage Modules and the associated CSI PowerStore driver.

Proactive Monitoring: Audit container orchestration logs (e.g., Kubernetes API server logs) for unauthorized modifications to storage classes or persistent volume claims.

Compensating Controls: Utilize network segmentation to restrict access to the storage management interface to authorized administrative nodes only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams should treat this vulnerability with high priority, as it impacts core storage infrastructure. Ensure that all CSI drivers are updated to the latest secure versions to maintain the confidentiality and integrity of your containerized data environment.

---METADATA---
VENDOR: EVoke
PRODUCT: EVoke CSMS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
The EVoke CSMS platform contains a critical vulnerability where WebSocket endpoints lack authentication, allowing attackers to impersonate charging stations and gain unauthorized system access.

Executive Summary:
A critical authentication failure in EVoke CSMS WebSocket endpoints allows attackers to impersonate charging stations, leading to potential unauthorized access and complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-40702

Affected Software: EVoke EVoke CSMS

Affected Versions: See vendor advisory

Vulnerability: The vulnerability stems from missing authentication mechanisms on WebSocket endpoints. This allows an unauthenticated attacker to inject traffic and impersonate legitimate charging stations, effectively bypassing security controls to execute unauthorized actions.

Business Impact

With a CVSS score of 9.4, this vulnerability represents an extreme risk to the platform's security. Successful exploitation could result in the compromise of the charging infrastructure, unauthorized data access, and potential large-scale operational disruption, severely impacting both business revenue and physical asset security.

Remediation Plan

Immediate Action: Apply the latest security update provided by EVoke to implement mandatory authentication for all WebSocket communications.

Proactive Monitoring: Monitor WebSocket traffic patterns for anomalous connection requests or suspicious commands originating from unauthorized or unexpected endpoints.

Compensating Controls: Deploy strict network segmentation and egress filtering to limit communication to only known, trusted charging station IP addresses.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 25, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score underscores the severity of this authentication weakness. Organizations utilizing EVoke CSMS must prioritize this update to prevent unauthorized control over critical infrastructure components.

---METADATA---
VENDOR: Dell
PRODUCT: ECS / ObjectScale
AFFECTED_VERSIONS: ECS 3.8.1.0 through 3.8.1.7; ObjectScale prior to 4.3.0.0
---END_METADATA---

Description Summary:
Dell ECS and ObjectScale contain a hard-coded credentials vulnerability, enabling local attackers to gain unauthorized filesystem access.

Executive Summary:
A critical hard-coded credential vulnerability in Dell ECS and ObjectScale enables local, unauthenticated attackers to gain unauthorized access to the underlying filesystem.

Vulnerability Details

CVE-ID: CVE-2026-40636

Affected Software: Dell ECS and ObjectScale

Affected Versions: ECS 3.8.1.0-3.8.1.7; ObjectScale < 4.3.0.0

Vulnerability: The product utilizes hard-coded credentials within its configuration, which can be exploited by an unauthenticated attacker with local access to the system. This allows for unauthorized escalation and direct interaction with the filesystem.

Business Impact

With a CVSS score of 9.8, this vulnerability poses a severe threat to the confidentiality and integrity of stored data. Local exploitation could allow an attacker to bypass security controls, leading to unauthorized access to sensitive information stored within the Dell ECS or ObjectScale platforms, potentially resulting in a total loss of data sovereignty.

Remediation Plan

Immediate Action: Apply the latest security patches provided by Dell for ECS and ObjectScale to remove the hard-coded credentials.

Proactive Monitoring: Monitor local system access logs and audit trails for unauthorized login attempts or unexpected command execution on the storage appliance.

Compensating Controls: Ensure that physical and logical access to the hardware management interface is strictly restricted to authorized personnel only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, the presence of hard-coded credentials is a high-risk security flaw that mandates immediate attention.

Analyst Recommendation

Security teams must prioritize the deployment of vendor-supplied patches for all affected Dell storage hardware. Because this vulnerability facilitates filesystem access, it represents a significant risk to data stored on these platforms and should be addressed as part of an emergency maintenance cycle.

---METADATA---
VENDOR: SenseLive
PRODUCT: X3050
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Improper access control enforcement in the SenseLive X3050 web management interface allows unauthorized users to interact with sensitive configuration endpoints.

Executive Summary:
Inadequate access control within the SenseLive X3050 web interface allows unauthorized actors to bypass security mechanisms and interact with critical system configuration functions.

Vulnerability Details

CVE-ID: CVE-2026-40630

Affected Software: SenseLive X3050

Affected Versions: See vendor advisory

Vulnerability: The application fails to properly enforce access control for specific configuration endpoints. This allows an attacker to bypass authentication mechanisms and directly execute administrative functions through the web interface.

Business Impact

The CVSS score of 9.8 reflects the critical nature of this flaw, which allows for unauthorized modification of system settings. This could result in the compromise of device integrity, unauthorized data access, or the disruption of critical services, leading to significant business impact and operational risk.

Remediation Plan

Immediate Action: Apply the latest firmware update from the vendor to resolve the access control enforcement errors.

Proactive Monitoring: Review application logs for unauthorized access attempts to configuration endpoints and identify any unauthorized changes to system settings.

Compensating Controls: Use a Web Application Firewall (WAF) to block requests to sensitive configuration URLs that should not be accessible to standard users or unauthenticated actors.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability highlights a critical failure in the product's authorization model. It is imperative that administrators update the affected hardware immediately and audit system configurations for any unauthorized modifications made prior to patching.

---METADATA---
VENDOR: AVer
PRODUCT: PTC500S, PTC115, PTC500+, and PTC115+ Cameras
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Improper input validation in AVer PTC series cameras allows remote, unauthenticated attackers to execute arbitrary code via crafted web requests.

Executive Summary:
A critical arbitrary code execution vulnerability in AVer PTC series cameras permits remote, unauthenticated attackers to compromise affected hardware.

Vulnerability Details

CVE-ID: CVE-2026-40624

Affected Software: AVer PTC500S, PTC115, PTC500+, and PTC115+ Cameras

Affected Versions: See vendor advisory

Vulnerability: The vulnerability stems from improper input validation within the camera's web interface. This allows an unauthenticated remote attacker to inject and execute arbitrary code by sending specially crafted web requests.

Business Impact

Successful exploitation allows an attacker to gain full control over the camera hardware, potentially enabling remote surveillance or pivoting into internal networks. With a CVSS score of 9.8, this vulnerability represents a severe threat to physical and network security, particularly in sensitive environments.

Remediation Plan

Immediate Action: Apply the latest firmware updates provided by AVer for the affected PTC camera models.

Proactive Monitoring: Monitor network traffic for anomalous HTTP requests directed at camera web interfaces and check for unauthorized device configuration changes.

Compensating Controls: Place affected cameras on isolated management VLANs and restrict access via a Web Application Firewall (WAF) or access control lists (ACLs).

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 19, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability for unauthenticated attackers to achieve remote code execution on camera hardware is a severe security risk. Organizations should immediately isolate these devices from public-facing networks and prioritize firmware updates to close the identified input validation gaps.

---METADATA---
VENDOR: ELECOM
PRODUCT: Wireless LAN Access Point
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Certain ELECOM wireless LAN access points contain an authentication bypass vulnerability, allowing unauthenticated access to specific web URLs.

Executive Summary:
An authentication bypass vulnerability in ELECOM wireless LAN access points allows unauthenticated attackers to access sensitive management functions.

Vulnerability Details

CVE-ID: CVE-2026-40621

Affected Software: ELECOM Wireless LAN Access Point

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The device web interface does not require authentication for specific URLs, allowing an unauthenticated attacker to access or manipulate device settings.

Business Impact

The CVSS score of 9.8 highlights a severe risk to network infrastructure. Unauthorized access to access point settings can allow an attacker to modify network configuration, intercept traffic, or disable security features, leading to a complete compromise of the wireless network.

Remediation Plan

Immediate Action: Check the ELECOM support website for firmware updates and apply them to all affected wireless access points.

Proactive Monitoring: Monitor network management traffic for unauthorized access attempts to the device web interface.

Compensating Controls: Place the management interface of the access points on a separate, isolated VLAN and restrict access to authorized administrative workstations only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 13, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Network administrators should prioritize updating firmware for all ELECOM access points. Until updates are applied, ensure management interfaces are not accessible from the public internet or untrusted internal segments.

---METADATA---
VENDOR: SenseLive
PRODUCT: X3050
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
The SenseLive X3050 embedded management service lacks any authentication or authorization, allowing unauthenticated attackers full administrative control over the device.

Executive Summary:
The total absence of authentication in the SenseLive X3050 management service exposes the device to complete administrative takeover by any network-adjacent attacker.

Vulnerability Details

CVE-ID: CVE-2026-40620

Affected Software: SenseLive X3050

Affected Versions: See vendor advisory

Vulnerability: This is an unauthenticated remote code execution and configuration bypass vulnerability. The management service accepts connections from any host and fails to perform any verification of the requester's identity or permissions.

Business Impact

With a CVSS score of 9.8, this flaw constitutes a severe threat to any environment utilizing the SenseLive X3050. An attacker can remotely modify critical system parameters, potentially leading to persistent backdoors, total device failure, or the use of the device as a pivot point into the broader internal network.

Remediation Plan

Immediate Action: Update the SenseLive X3050 device to the latest vendor-provided firmware that enforces mandatory authentication.

Proactive Monitoring: Monitor network traffic for unauthorized connections to management ports associated with the X3050 device.

Compensating Controls: Immediately isolate the device management interface from the public internet and untrusted networks using a VPN or an isolated management VLAN.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the lack of any authentication, this device is effectively wide open to any attacker who can route traffic to it. Organizations must prioritize the removal of these devices from externally reachable networks and apply the necessary patches with the highest level of urgency.