---METADATA---
VENDOR: itsourcecode
PRODUCT: Free Hotel Reservation System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1 that could allow an attacker to compromise the application's integrity and confidentiality.

Executive Summary:
itsourcecode Free Hotel Reservation System 1 contains a high-severity security vulnerability that poses a significant risk to guest data and system availability.

Vulnerability Details

CVE-ID: CVE-2026-3730

Affected Software: itsourcecode Free Hotel Reservation System

Affected Versions: 1

Vulnerability: The application contains an unspecified security flaw in version 1. While the exact authentication requirements are not detailed in the initial disclosure, the vulnerability likely resides in a core processing function, potentially allowing an attacker to bypass standard security controls.

Business Impact

A successful exploit could lead to the unauthorized disclosure of sensitive guest information, including personal details and booking history. Given the CVSS score of 7.3, this High-severity vulnerability could also result in the modification of reservation data or system downtime, leading to significant reputational damage and financial loss for hospitality providers.

Remediation Plan

Immediate Action: Administrators should immediately apply any available security patches from the vendor or migrate to a supported, updated version of the reservation system.

Proactive Monitoring: Implement rigorous monitoring of web server logs for unusual POST requests or unauthorized access attempts targeting the reservation management interface.

Compensating Controls: Deploy a Web Application Firewall (WAF) with generic exploit detection rules to filter potentially malicious traffic while awaiting a formal patch.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a public-facing reservation system, the potential for exploitation is high once technical details emerge.

Analyst Recommendation

This vulnerability represents a significant risk to the confidentiality of customer data. Organizations utilizing this software must prioritize the application of vendor-provided updates immediately to mitigate the risk of unauthorized access and data exfiltration.

---METADATA---
VENDOR: OpenAirInterface
PRODUCT: OpenAirInterface5G (nr-softmodem)
AFFECTED_VERSIONS: 2.4.0
---END_METADATA---

Description Summary:
A divide-by-zero vulnerability in the O-RAN RAN function module of OpenAirInterface5G can lead to application crashes.

Executive Summary:
A critical logic flaw in the OpenAirInterface5G nr-softmodem could cause service outages by triggering an unhandled exception during PRB usage calculations.

Vulnerability Details

CVE-ID: CVE-2026-37232

Affected Software: OpenAirInterface OpenAirInterface5G

Affected Versions: 2.4.0 (nr-softmodem)

Vulnerability: The vulnerability exists in the fill_RRU_PrbTotDl() and fill_RRU_PrbTotUl() functions, where the software performs a division operation without validating the divisor. An unauthenticated remote attacker can trigger this condition, causing the service to crash and resulting in a denial-of-service.

Business Impact

With a CVSS score of 8.6, this vulnerability poses a high risk to telecommunications infrastructure availability. A crash in the nr-softmodem component can disrupt 5G connectivity for connected users, leading to service degradation and potential operational losses for operators relying on this software.

Remediation Plan

Immediate Action: Update the OpenAirInterface5G deployment to a patched version that implements proper zero-check validation in the affected functions.

Proactive Monitoring: Monitor the nr-softmodem service logs for frequent restarts or crash reports that may indicate exploitation attempts.

Compensating Controls: Deploy rate-limiting at the network edge to mitigate potential floods of traffic that might trigger the vulnerable calculation routines.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ease of triggering a crash makes the potential for exploitation high.

Analyst Recommendation

Organizations utilizing OpenAirInterface5G for 5G research or deployment should prioritize patching the nr-softmodem component. Ensuring the stability of these core functions is essential to maintaining network uptime and preventing unauthorized service interruption.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
Another security flaw has been discovered in version 1 of the code-projects Simple Flight Ticket Booking System, affecting its overall security.

Executive Summary:
The Simple Flight Ticket Booking System version 1 contains an additional high-severity vulnerability that further increases the risk of system compromise.

Vulnerability Details

CVE-ID: CVE-2026-3723

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: This is yet another security flaw identified in version 1 of the Simple Flight Ticket Booking System. The vulnerability likely pertains to session management or insecure data storage, which could be exploited by an attacker to gain persistent access to the system.

Business Impact

The CVSS score of 7.3 confirms the High severity of this flaw. If exploited alongside other vulnerabilities in this product, an attacker could achieve complete control over the application, leading to massive data exfiltration and the total disruption of booking services.

Remediation Plan

Immediate Action: Apply all available security updates for the Simple Flight Ticket Booking System version 1 immediately.

Proactive Monitoring: Implement comprehensive logging for all administrative actions and monitor for any unauthorized changes to the application's source code or configuration files.

Compensating Controls: Deploy the application within a containerized environment to limit the impact of a potential compromise and use a WAF to block known exploit payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. The clustering of several CVEs for this product highlights a critical need for immediate remediation.

Analyst Recommendation

The cumulative risk of multiple high-severity vulnerabilities in a single product version is extreme. Administrators must apply all relevant patches immediately or consider transitioning to a more robust and frequently audited booking solution to ensure data security.

---METADATA---
VENDOR: Wavlink
PRODUCT: WL-WN579X3-C
AFFECTED_VERSIONS: Version 231124; see vendor advisory for others.
---END_METADATA---

Description Summary:
A high-severity vulnerability has been identified in the Wavlink WL-WN579X3-C router, specifically affecting firmware version 231124, potentially allowing for unauthorized system compromise.

Executive Summary:
The Wavlink WL-WN579X3-C router contains a critical vulnerability that could allow an attacker to compromise the device, posing a significant risk to network integrity and data privacy.

Vulnerability Details

CVE-ID: CVE-2026-3715

Affected Software: Wavlink WL-WN579X3-C

Affected Versions: Version 231124

Vulnerability: This vulnerability involves a flaw in the device's firmware processing. Based on the high CVSS score and the nature of the hardware, it likely involves an unauthenticated path that allows for remote command execution or significant configuration manipulation.

Business Impact

A successful exploit of this vulnerability could lead to a total compromise of the network gateway, enabling attackers to intercept traffic, pivot to internal resources, or launch distributed denial-of-service (DDoS) attacks. With a CVSS score of 8.8, the severity is classified as High, reflecting the potential for complete loss of confidentiality and integrity for all data passing through the affected hardware.

Remediation Plan

Immediate Action: Administrators must immediately update the Wavlink WL-WN579X3-C firmware to the latest secure version provided by the vendor to close the vulnerability.

Proactive Monitoring: Review device system logs for unauthorized configuration changes or unusual outbound traffic patterns that may indicate a persistent compromise.

Compensating Controls: If patching is delayed, restrict administrative access to the device's web interface to trusted internal IP addresses only and disable remote management features.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a common networking peripheral, the potential for exploitation is high once technical details are reverse-engineered.

Analyst Recommendation

The high CVSS score of 8.8 necessitates an immediate response to prevent unauthorized network access. Organizations using Wavlink hardware should prioritize this firmware update as part of their emergency patch management cycle to mitigate the risk of perimeter breach.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
A weakness in code-projects Simple Flight Ticket Booking System version 1 has been identified, potentially allowing for data manipulation or unauthorized access.

Executive Summary:
A high-severity weakness in the Simple Flight Ticket Booking System version 1 poses a risk to the integrity and confidentiality of the booking database.

Vulnerability Details

CVE-ID: CVE-2026-3709

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: This vulnerability represents a distinct weakness from other flaws in the same product version. It likely involves improper input validation, which could be exploited to perform SQL injection or bypass authentication mechanisms within the booking workflow.

Business Impact

With a CVSS score of 7.3, this High severity vulnerability could result in the theft of user credentials or the unauthorized modification of flight prices and booking statuses, leading to financial discrepancies and a loss of organizational integrity.

Remediation Plan

Immediate Action: Update the application to the latest version provided by the vendor to resolve the identified security weakness.

Proactive Monitoring: Monitor database logs for unusual query patterns and implement alerts for failed authentication attempts to the administrative backend.

Compensating Controls: Implement strict input validation and output encoding across the entire application to mitigate the risk of common web-based attacks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, the discovery of multiple flaws in the same version suggests a broader need for a security audit of the software.

Analyst Recommendation

The presence of multiple vulnerabilities in version 1 of this software indicates a high risk for any organization using it. We recommend an immediate update and a review of the application's security posture to prevent potential data breaches.

---METADATA---
VENDOR: code-projects
PRODUCT: Simple Flight Ticket Booking System
AFFECTED_VERSIONS: Version 1
---END_METADATA---

Description Summary:
A security flaw in code-projects Simple Flight Ticket Booking System version 1 could lead to unauthorized access to booking records or user data.

Executive Summary:
The Simple Flight Ticket Booking System version 1 is vulnerable to a high-severity flaw that could expose sensitive traveler information and booking details.

Vulnerability Details

CVE-ID: CVE-2026-3708

Affected Software: code-projects Simple Flight Ticket Booking System

Affected Versions: Version 1

Vulnerability: A security flaw has been discovered in version 1 of this booking system. While the specific type is not defined, these systems are often susceptible to Broken Access Control (BAC) or Cross-Site Scripting (XSS), which could allow attackers to view or modify ticket information.

Business Impact

The CVSS score of 7.3 classifies this as a High severity vulnerability. Exploitation could lead to the exposure of Personal Identifiable Information (PII) of travelers, unauthorized ticket cancellations, and significant reputational damage to the service provider.

Remediation Plan

Immediate Action: Apply the latest security patches from code-projects or upgrade to a more modern booking platform.

Proactive Monitoring: Review web server logs for attempts to access booking IDs sequentially or other signs of insecure direct object reference (IDOR) attacks.

Compensating Controls: Use a Web Application Firewall (WAF) to filter malicious requests and ensure that all user sessions are properly validated before granting access to data.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. These types of open-source projects are often utilized as templates, increasing the potential attack surface.

Analyst Recommendation

Protecting traveler data is a critical requirement for booking systems. Administrators should apply the necessary updates immediately and conduct a thorough review of access control logic to ensure that users can only access their own booking information.

---METADATA---
VENDOR: Wavlink
PRODUCT: NU516U1 Router
AFFECTED_VERSIONS: 251208
---END_METADATA---

Description Summary:
A remote out-of-bounds write vulnerability in the Wavlink NU516U1 router allows attackers to manipulate the ipaddr argument in /cgi-bin/login.cgi, potentially leading to full system compromise.

Executive Summary:
A critical out-of-bounds write vulnerability in Wavlink NU516U1 routers allows remote attackers to execute arbitrary code and gain full control over the device.

Vulnerability Details

CVE-ID: CVE-2026-3703

Affected Software: Wavlink NU516U1

Affected Versions: 251208

Vulnerability: This flaw exists within the sub_401A10 function of the /cgi-bin/login.cgi file. A remote, unauthenticated attacker can manipulate the ipaddr argument to trigger an out-of-bounds write, leading to memory corruption and potential code execution.

Business Impact

A successful exploit allows an external actor to gain unauthorized access to the router’s operating system. This could result in the interception of network traffic, credential theft, or the recruitment of the device into a botnet. The CVSS score of 9.8 reflects the critical nature of this vulnerability due to its remote exploitability and the availability of public exploit code.

Remediation Plan

Immediate Action: Update the router firmware to the latest version provided by Wavlink immediately, as a fix has been professionally released.

Proactive Monitoring: Monitor network traffic for unusual outbound connections and review device logs for suspicious activity originating from the /cgi-bin/login.cgi endpoint.

Compensating Controls: Restrict access to the router’s web management interface from the public internet using a firewall or VPN to minimize the attack surface.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of Mar 8, 2026, a public exploit has been released for this vulnerability. Organizations using this hardware must prioritize patching immediately, as the barrier to entry for attackers is significantly lowered by the public disclosure of exploit mechanics.

Analyst Recommendation

The severity of this vulnerability, combined with the availability of a public exploit, necessitates immediate remediation. Administrators should verify the firmware version of all Wavlink NU516U1 devices and apply the vendor-provided patch without delay to prevent unauthorized remote access.

---METADATA---
VENDOR: H3C
PRODUCT: Magic B1 Router
AFFECTED_VERSIONS: Up to 100R004
---END_METADATA---

Description Summary:
A security vulnerability in the H3C Magic B1 router up to version 100R004 could allow for unauthorized device access or control.

Executive Summary:
H3C Magic B1 routers are affected by a high-severity vulnerability that could allow attackers to compromise the device and the network it serves.

Vulnerability Details

CVE-ID: CVE-2026-3701

Affected Software: H3C Magic B1

Affected Versions: Up to 100R004

Vulnerability: While the specific vulnerability type is not detailed, it affects the Magic B1 router firmware. The CVSS score of 8.8 suggests a significant flaw, likely involving remote access or administrative bypass.

Business Impact

A compromise of a perimeter router like the Magic B1 allows attackers to monitor network traffic, perform man-in-the-middle attacks, or launch further attacks against internal network assets. The CVSS score of 8.8 reflects the high severity of a router-level compromise.

Remediation Plan

Immediate Action: Update the H3C Magic B1 firmware to a version newer than 100R004 immediately.

Proactive Monitoring: Monitor for unusual administrative logins to the router and check for unauthorized changes to DNS or routing settings.

Compensating Controls: Disable remote management features on the WAN interface and restrict local management access to specific trusted IP addresses.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 8, 2026, there is no public information indicating active exploitation. Router vulnerabilities are frequently targeted by state-sponsored actors and botnets once technical details are known.

Analyst Recommendation

Immediate firmware updates are critical for all affected H3C Magic B1 routers. Network administrators should treat this as a high-priority task to ensure the security of the network perimeter.

---METADATA---
VENDOR: Shy2593666979
PRODUCT: AgentChat
AFFECTED_VERSIONS: Up to version 2
---END_METADATA---

Description Summary:
A security flaw in Shy2593666979 AgentChat up to version 2 has been identified, potentially allowing for unauthorized system manipulation.

Executive Summary:
A vulnerability in the AgentChat software up to version 2 poses a high risk to application security and could lead to unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-3693

Affected Software: Shy2593666979 AgentChat

Affected Versions: Up to version 2

Vulnerability: A flaw has been identified in the AgentChat application. Although the specific vulnerability type is not detailed, the affected versions suggest an issue in the legacy codebase that could be leveraged by an attacker to bypass security controls or execute unauthorized commands.

Business Impact

The CVSS score of 7.3 indicates a High severity risk. If exploited, this vulnerability could compromise the confidentiality of communications within the AgentChat platform or allow an attacker to gain unauthorized access to the user database, resulting in reputational damage and potential regulatory non-compliance.

Remediation Plan

Immediate Action: Upgrade AgentChat to a version higher than 2.0 or apply the vendor-recommended security patch immediately.

Proactive Monitoring: Monitor for anomalous chat logs or unexpected API calls that deviate from standard user behavior.

Compensating Controls: Ensure that the application is deployed behind a secure gateway and that all user inputs are strictly validated at the server level.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. The lack of detailed public disclosure may temporarily limit exploitation, but the risk remains high for outdated versions.

Analyst Recommendation

Organizations using AgentChat must verify their current version and upgrade immediately if they are running version 2 or lower. Securing communication tools is essential for maintaining corporate privacy and preventing unauthorized data disclosure.

---METADATA---
VENDOR: OpenClaw
PRODUCT: Canvas
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in OpenClaw Canvas allows unauthorized access to the application.

Executive Summary:
An authentication bypass vulnerability in OpenClaw Canvas poses a severe risk, potentially allowing unauthorized access to sensitive application functionality.

Vulnerability Details

CVE-ID: CVE-2026-3690

Affected Software: OpenClaw Canvas

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an authentication bypass vulnerability that allows an attacker to circumvent existing security checks, potentially accessing restricted areas of the application without valid credentials.

Business Impact

Successful exploitation could result in unauthorized access to sensitive data and administrative functions within the Canvas application. With a CVSS score of 7.4, the vulnerability represents a high-risk entry point for attackers to compromise user accounts or perform unauthorized actions, leading to potential data breaches and service disruption.

Remediation Plan

Immediate Action: Apply the vendor-supplied security update immediately to patch the authentication bypass mechanism.

Proactive Monitoring: Analyze application access logs for suspicious patterns, such as successful access to protected areas without corresponding authentication events.

Compensating Controls: Implement Web Application Firewall (WAF) rules to detect and block requests that attempt to bypass authentication headers or parameters.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate action is necessary to close this authentication loophole. Security teams should prioritize patching the OpenClaw Canvas application to prevent unauthorized access and protect the confidentiality and integrity of the data managed within the platform.

---METADATA---
VENDOR: Gigamon
PRODUCT: GVOS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
Gigamon GVOS v5 contains a vulnerability that may expose the system to unauthorized access or operational disruption.

Executive Summary:
Gigamon GVOS v5 is affected by a high-severity vulnerability that poses a significant risk to the integrity and availability of network visibility infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-36848

Affected Software: Gigamon GVOS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists within the GVOS operating system, though specific technical triggers remain under investigation. Given the nature of network visibility appliances, an attacker may leverage this flaw to gain unauthorized system-level access or disrupt critical traffic monitoring functions.

Business Impact

A successful exploit could lead to full system compromise of the network visibility appliance, potentially allowing attackers to intercept or manipulate network traffic data. With a CVSS score of 7.5, this high-severity flaw represents a substantial threat to organizational security posture and data confidentiality.

Remediation Plan

Immediate Action: Monitor official Gigamon security channels for the release of a patch and apply it to all affected GVOS appliances immediately upon availability.

Proactive Monitoring: Review system access logs for anomalous login attempts or unauthorized configuration changes within the GVOS management interface.

Compensating Controls: Restrict management access to the GVOS appliance to trusted administrative subnets and implement strict firewall rules to prevent exposure to untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the critical role of Gigamon appliances in network architecture, the potential for exploitation remains high.

Analyst Recommendation

Organizations utilizing Gigamon GVOS must prioritize this vulnerability. It is recommended to perform an immediate audit of exposed appliances and ensure that security patches are applied as soon as the vendor makes them available to prevent potential unauthorized access.

---METADATA---
VENDOR: TOTOLINK
PRODUCT: N200RE V5
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A command injection vulnerability in the TOTOLINK N200RE V5 router allows remote code execution via specifically crafted parameters in the formMapDelDevice function.

Executive Summary:
A critical command injection vulnerability in the TOTOLINK N200RE V5 allows unauthenticated remote attackers to execute arbitrary system commands.

Vulnerability Details

CVE-ID: CVE-2026-36841

Affected Software: TOTOLINK N200RE V5

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The device fails to properly sanitize input for the 'macstr' and 'bandstr' parameters within the 'formMapDelDevice' function, enabling command injection.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating the highest level of risk. An attacker can gain full control over the affected networking hardware, leading to total network compromise, data interception, and the potential to use the device as a pivot point for further internal network attacks.

Remediation Plan

Immediate Action: Apply the latest firmware update provided by TOTOLINK to address the command injection flaw.

Proactive Monitoring: Monitor network traffic for unusual outbound connections or attempts to access administrative functions from unexpected sources.

Compensating Controls: Disable remote management interfaces on the WAN side and restrict access to the device management console to trusted internal IP addresses only.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This is a critical security risk requiring immediate mitigation. Administrators must ensure the affected firmware is patched immediately to prevent full device compromise by unauthenticated remote actors.

---METADATA---
VENDOR: Panabit
PRODUCT: PAP-XM320
AFFECTED_VERSIONS: Up to and including v7.7
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in the Panabit PAP-XM320 embedded HTTP server allows attackers to bypass login requirements via directory traversal.

Executive Summary:
A critical authentication bypass vulnerability in the Panabit PAP-XM320 embedded HTTP server allows unauthenticated attackers to gain unauthorized access to the system.

Vulnerability Details

CVE-ID: CVE-2026-36829

Affected Software: Panabit PAP-XM320

Affected Versions: Up to and including v7.7

Vulnerability: The embedded HTTP server improperly validates session cookies by checking for file existence using user-controlled input. This allows for directory traversal and successful bypass of authentication.

Business Impact

With a CVSS score of 9.8, this vulnerability represents an existential threat to the device, as an attacker can gain full administrative access without credentials. This can lead to the complete compromise of the network appliance and any traffic passing through it.

Remediation Plan

Immediate Action: Update the Panabit PAP-XM320 firmware to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor management interface access logs for signs of directory traversal attempts or unauthorized login bypasses.

Compensating Controls: Place the device management interface behind a VPN or restricted network segment to prevent exposure to untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 19, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The ability to bypass authentication on a network appliance is extremely high risk. Organizations using the Panabit PAP-XM320 must prioritize firmware updates and ensure the management interface is not accessible from the public internet.

---METADATA---
VENDOR: Panabit
PRODUCT: PAP-XM320
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
CONFIDENCE: high
MISSING: patch, exploit_status
---END_METADATA---

Description Summary:
The Panabit PAP-XM320 contains a command injection vulnerability in the /cgi-bin/tools/ajax_cmd endpoint, allowing for unauthorized remote code execution.

Executive Summary:
A critical command injection vulnerability in the Panabit PAP-XM320 appliance allows unauthenticated attackers to execute arbitrary system commands, posing a severe threat to network infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-36828

Affected Software: Panabit PAP-XM320

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a command injection vulnerability residing in the /cgi-bin/tools/ajax_cmd endpoint. The vulnerability allows an attacker to inject and execute arbitrary system-level commands, likely without requiring authentication.

Business Impact

The ability to inject commands into a network appliance typically grants an attacker full control over the affected device. With a CVSS score of 8.8, this vulnerability poses an extreme risk, including complete system compromise, lateral movement within the network, and potential interception of sensitive traffic.

Remediation Plan

Immediate Action: Apply vendor-supplied security patches or firmware updates immediately. Restrict network access to the management interface to trusted IP addresses only.

Proactive Monitoring: Monitor device logs for anomalous command execution or unauthorized access attempts to the /cgi-bin/tools/ directory. Check for unexpected outbound network connections originating from the appliance.

Compensating Controls: Utilize a firewall to block all external access to the appliance's management interface. Use an Intrusion Detection System (IDS) to monitor for command injection signatures in HTTP requests.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a significant threat to internal security and should be treated with the highest urgency. Administrators must verify firmware status and restrict administrative access immediately to mitigate the risk of remote code execution.

---METADATA---
VENDOR: Shopizer
PRODUCT: Shopizer
AFFECTED_VERSIONS: v3.2.5
---END_METADATA---

Description Summary:
A path traversal vulnerability in Shopizer v3.2.5 allows remote attackers to write arbitrary files to any writable path via the image upload endpoint.

Executive Summary:
A critical path traversal vulnerability in Shopizer enables remote attackers to write arbitrary files to the server, resulting in potential remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-36767

Affected Software: Shopizer

Affected Versions: v3.2.5

Vulnerability: The /content/images/add endpoint lacks sufficient path sanitization. An attacker can submit a crafted POST request to bypass directory restrictions and write files to unintended locations.

Business Impact

With a CVSS score of 10.0, this vulnerability is of the highest urgency. Successful exploitation allows an attacker to write malicious payloads, such as webshells, to the server. This can lead to complete system takeover, unauthorized access to customer databases, and significant reputational harm.

Remediation Plan

Immediate Action: Patch or upgrade Shopizer to the latest version immediately to resolve the path traversal vulnerability.

Proactive Monitoring: Monitor server logs for POST requests to the image upload endpoint that contain path traversal patterns (e.g., ../).

Compensating Controls: Use a WAF to inspect and block incoming HTTP requests containing directory traversal sequences directed at the image upload endpoint.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 30, 2026, there is no verified evidence of active exploitation. However, the critical nature of this flaw makes it a primary target for automated scanning and exploitation tools.

Analyst Recommendation

This vulnerability requires immediate intervention. Security teams must ensure that all instances of Shopizer are updated and that file system integrity is verified to ensure no unauthorized files have been planted.

---METADATA---
VENDOR: JeeSite
PRODUCT: JeeSite
AFFECTED_VERSIONS: v5.15.1
---END_METADATA---

Description Summary:
Authenticated attackers with file upload permissions can exploit a path traversal vulnerability in JeeSite v5.15.1 to upload arbitrary files to the filesystem.

Executive Summary:
A high-severity path traversal vulnerability in JeeSite allows authenticated attackers to perform unauthorized file writes, potentially leading to remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-36760

Affected Software: JeeSite

Affected Versions: v5.15.1

Vulnerability: The fileMd5 parameter in the /a/file/upload endpoint fails to properly sanitize path inputs. When chunked upload is enabled, an authenticated attacker can write files to arbitrary locations on the server.

Business Impact

This vulnerability carries a CVSS score of 9.6. While it requires authentication, the ability to write arbitrary files allows an attacker to upload malicious scripts (webshells) into executable directories, resulting in full server compromise, data exfiltration, or persistence within the environment.

Remediation Plan

Immediate Action: Upgrade to the latest version of JeeSite that addresses the path traversal flaw in the file upload module.

Proactive Monitoring: Audit the filesystem for unexpected files in upload directories and monitor logs for unusual file upload activity or traversal attempts.

Compensating Controls: Restrict file upload permissions to authorized users only and implement strict validation of file paths and extensions at the application layer.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 30, 2026, there is no public information indicating active exploitation. However, the high CVSS score necessitates immediate patch management.

Analyst Recommendation

Organizations should prioritize updating their JeeSite instances. Furthermore, review current user roles and permissions to ensure that the principle of least privilege is enforced regarding file upload capabilities.

---METADATA---
VENDOR: Bookcars
PRODUCT: Bookcars
AFFECTED_VERSIONS: bookcars version 8.3
---END_METADATA---

Description Summary:
An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows for directory traversal and potential arbitrary file manipulation.

Executive Summary:
An unrestricted file rename vulnerability in bookcars version 8.3 allows authenticated attackers to perform directory traversal, posing a significant risk of unauthorized access or remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-36723

Affected Software: Bookcars Bookcars

Affected Versions: bookcars version 8.3

Vulnerability: This vulnerability resides in the /api/create-user component, where improper validation of file rename operations enables directory traversal sequences. While the attack requires authentication, the ability to move files to arbitrary locations on the server filesystem facilitates system-level compromise.

Business Impact

The severity of this flaw is reflected in its CVSS score of 8.8, which indicates a high potential for severe impact. Successful exploitation could allow an attacker to overwrite critical system files or achieve remote code execution, leading to full system compromise, data theft, and significant operational downtime.

Remediation Plan

Immediate Action: Apply the vendor-released patch that fixes the file rename handling in bookcars v8.3, or update the software to a version that addresses this vulnerability.

Proactive Monitoring: Review application access logs for suspicious API requests containing directory traversal patterns (e.g., ../) directed at the /api/create-user endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block directory traversal sequences and restrict unauthorized access to administrative API endpoints.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of June 11, 2026, public exploits for this vulnerability are available. Given the potential for remote code execution and the availability of exploit code, organizations must prioritize patching this vulnerability immediately.

Analyst Recommendation

Due to the high CVSS score of 8.8 and the confirmed availability of public exploit material, this vulnerability poses an immediate and elevated risk. Administrators should audit their current version of bookcars and apply the necessary patches immediately to prevent potential system-wide compromise.

---METADATA---
VENDOR: OpenSIPS
PRODUCT: Control Panel (opensips-cp)
AFFECTED_VERSIONS: prior to version 9.3.3
---END_METADATA---

Description Summary:
A Time-Based Blind SQL Injection vulnerability exists in the alias_management module of the OpenSIPS Control Panel.

Executive Summary:
An authenticated SQL injection vulnerability in OpenSIPS Control Panel allows attackers to extract sensitive database information via the alias_management module.

Vulnerability Details

CVE-ID: CVE-2026-36670

Affected Software: OpenSIPS Control Panel

Affected Versions: prior to version 9.3.3

Vulnerability: The alias_management module fails to properly sanitize user inputs, enabling a Time-Based Blind SQL Injection. An authenticated attacker can execute arbitrary SQL commands by manipulating parameters within this module.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe risk of data breach and unauthorized database modification. Successful exploitation could lead to full database compromise, where sensitive configuration or user data is exfiltrated or manipulated, undermining the security of the entire telephony infrastructure.

Remediation Plan

Immediate Action: Update OpenSIPS Control Panel to version 9.3.3 or later immediately.

Proactive Monitoring: Enable database query logging and monitor for unusual query execution times, which are indicative of time-based injection attacks.

Compensating Controls: Use a Web Application Firewall (WAF) with SQL injection detection rules to inspect and block malicious input directed at the alias_management module.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of June 17, 2026, a public exploit is available for this vulnerability. Given the ease of exploitation, the risk to unpatched systems is critical.

Analyst Recommendation

The availability of a public exploit significantly elevates the risk associated with this vulnerability. Organizations using OpenSIPS Control Panel must upgrade to version 9.3.3 immediately. Security teams should perform a forensic review of database logs to determine if unauthorized access has already occurred.

---METADATA---
VENDOR: WordPress
PRODUCT: wpForo Forum Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 2.

Executive Summary:
An arbitrary file deletion vulnerability in the wpForo Forum WordPress plugin could allow unauthorized removal of critical system files.

Vulnerability Details

CVE-ID: CVE-2026-3666

Affected Software: WordPress wpForo Forum Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin contains a vulnerability that allows for arbitrary file deletion. This can lead to service instability or the deletion of critical configuration files, depending on the attacker's ability to interact with the plugin's functionality.

Business Impact

With a CVSS score of 8.8, this is a high-risk vulnerability. An attacker could potentially disrupt business operations by deleting essential files, leading to site downtime or the removal of security-critical configuration files that could facilitate further system compromise.

Remediation Plan

Immediate Action: Update the wpForo Forum plugin to the latest version immediately to resolve the file deletion flaw.

Proactive Monitoring: Monitor file system integrity and review WordPress logs for unusual activity related to the plugin.

Compensating Controls: Remove the plugin if it is not strictly necessary for business operations, and ensure that the WordPress installation is running with restricted file system permissions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly severe and requires immediate remediation. Organizations should update the plugin as soon as a patch is confirmed available by the developer or remove the plugin to eliminate the risk entirely.

---METADATA---
VENDOR: Mercusys
PRODUCT: AC12G (EU) V1 Router
AFFECTED_VERSIONS: Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909
---END_METADATA---

Description Summary:
The Mercusys AC12G router allows UPnP AddPortMapping to forward external traffic to the router's own administrative interface, exposing it to unauthorized access.

Executive Summary:
A critical vulnerability in the Mercusys AC12G router’s UPnP implementation allows attackers to expose the device's internal administrative interface to the internet, creating a significant risk of unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-36608

Affected Software: Mercusys AC12G (EU) V1 Router

Affected Versions: Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909

Vulnerability: The router's UPnP service improperly validates AddPortMapping requests, allowing an attacker to map external ports to the router's internal administrative interface. This effectively bypasses network segmentation by making the admin panel accessible from outside the local network.

Business Impact

With a CVSS score of 8.8, this flaw is highly critical as it directly exposes administrative controls to external actors. Successful exploitation allows for unauthorized management of the router, potentially resulting in full device control, credential theft, or the interception of sensitive network traffic.

Remediation Plan

Immediate Action: Disable the UPnP feature on the router immediately if it is not strictly required for network operations.

Proactive Monitoring: Audit current port forwarding rules and UPnP mappings to ensure no unintended services or administrative interfaces are exposed to the WAN.

Compensating Controls: Implement a firewall rule to block all inbound traffic to the router's administrative port from external sources, regardless of UPnP settings.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Exposing administrative interfaces to the internet is a severe security failure. Organizations should disable UPnP functionality immediately and verify that no management interfaces are accessible from external networks to mitigate the risk of unauthorized exploitation.

---METADATA---
VENDOR: Mercusys
PRODUCT: AC12G (EU) V1 Router
AFFECTED_VERSIONS: Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909
---END_METADATA---

Description Summary:
The Mercusys AC12G router contains an unauthenticated brute-force vulnerability in the TDDP password change endpoint due to a lack of rate limiting.

Executive Summary:
An unauthenticated brute-force vulnerability in the Mercusys AC12G router firmware allows attackers to bypass password change protections, posing a significant risk of unauthorized device takeover.

Vulnerability Details

CVE-ID: CVE-2026-36607

Affected Software: Mercusys AC12G (EU) V1 Router

Affected Versions: Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909

Vulnerability: This vulnerability resides in the TDDP password change endpoint (code=10), which fails to implement the rate limiting found on the standard login endpoint. An attacker on the adjacent network can perform unlimited password guessing attempts without triggering account lockout mechanisms.

Business Impact

With a CVSS score of 8.8, this high-severity vulnerability could lead to a complete compromise of the router. Successful exploitation grants an attacker full control over the network traffic, potentially leading to unauthorized data interception, device reconfiguration, and lateral movement into the local network.

Remediation Plan

Immediate Action: Consult the vendor security advisory at https://www.mercusys.com/en/support/security-advisory to identify and apply the latest firmware updates.

Proactive Monitoring: Review router access logs for high-frequency requests to the TDDP endpoint originating from internal or adjacent network IP addresses.

Compensating Controls: Restrict management access to the router to trusted administrative IP addresses only, and isolate the management interface from the public-facing or guest network segments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The absence of rate limiting on critical administrative endpoints represents a significant security oversight. Administrators should prioritize updating the firmware immediately to eliminate the brute-force vector and secure the device against unauthorized access.

---METADATA---
VENDOR: IBM
PRODUCT: Engineering Lifecycle Management
AFFECTED_VERSIONS: IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0
---END_METADATA---

Description Summary:
IBM Engineering Lifecycle Management allows unauthenticated remote attackers to update server property files, potentially resulting in unauthorized access.

Executive Summary:
A critical vulnerability in IBM Engineering Lifecycle Management permits unauthenticated attackers to modify server configurations, leading to unauthorized application access.

Vulnerability Details

CVE-ID: CVE-2026-3660

Affected Software: IBM Engineering Lifecycle Management

Affected Versions: IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0

Vulnerability: An unauthenticated remote attacker can exploit this vulnerability to update server property files, which facilitates unauthorized access to the application.

Business Impact

By enabling unauthorized access, this vulnerability compromises the integrity and confidentiality of the Engineering Lifecycle Management platform. With a CVSS score of 9.8, the risk of data exposure or administrative takeover of the platform is severe, potentially disrupting critical engineering workflows.

Remediation Plan

Immediate Action: Update IBM Engineering Lifecycle Management to the latest version as provided by the vendor.

Proactive Monitoring: Review file integrity logs for unauthorized modifications to server property files and monitor application access logs for suspicious administrative activity.

Compensating Controls: Ensure the application is not directly exposed to the public internet and restrict management access to authorized internal networks.

Exploitation Status

Public Exploit Available: Null

Analyst Notes: As of May 26, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should check for vendor security bulletins and apply the necessary patches immediately to prevent unauthorized access. Securing the configuration files and limiting network exposure are vital steps in mitigating this critical risk.

---METADATA---
VENDOR: Openlabs
PRODUCT: docker-wkhtmltopdf-aas
AFFECTED_VERSIONS: All versions up to and including commit 9f50579.
---END_METADATA---

Description Summary:
An OS command injection vulnerability in the app.py component allows unauthenticated attackers to execute arbitrary commands via a crafted POST request.

Executive Summary:
A critical OS command injection vulnerability in openlabs docker-wkhtmltopdf-aas exposes systems to full remote code execution by unauthenticated attackers.

Vulnerability Details

CVE-ID: CVE-2026-36576

Affected Software: Openlabs docker-wkhtmltopdf-aas

Affected Versions: All versions up to and including commit 9f50579.

Vulnerability: This is a command injection flaw (CWE-78) located in the app.py component. An unauthenticated attacker can exploit this by submitting a specially crafted POST request, which fails to properly neutralize special elements used in OS commands, resulting in arbitrary code execution.

Business Impact

The CVSS score of 9.8 confirms the extreme severity of this vulnerability. Successful exploitation permits an attacker to gain full control over the underlying host system, leading to total data compromise, lateral movement within the network, and potential disruption of critical business services.

Remediation Plan

Immediate Action: Upgrade to the latest version of docker-wkhtmltopdf-aas to ensure the vulnerable app.py component is patched.

Proactive Monitoring: Inspect application and system logs for suspicious POST requests containing shell metacharacters or unexpected system commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common command injection patterns in HTTP request bodies.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of command injection vulnerabilities, organizations must prioritize patching this component. Ensure that any instance of docker-wkhtmltopdf-aas is updated immediately to prevent potential remote compromise of the server infrastructure.

---METADATA---
VENDOR: WordPress
PRODUCT: OTP Login With Phone Number, OTP Verification Plugin
AFFECTED_VERSIONS: versions 1.8.50 through 1.8.60
---END_METADATA---

Description Summary:
The OTP Login With Phone Number plugin for WordPress is vulnerable to authentication bypass, allowing unauthenticated attackers to hijack user accounts by exploiting a flawed Firebase verification flow.

Executive Summary:
A critical authentication bypass flaw in the WordPress OTP Login plugin allows unauthenticated attackers to gain administrative access to sites by hijacking legitimate Firebase sessions.

Vulnerability Details

CVE-ID: CVE-2026-3655

Affected Software: WordPress OTP Login With Phone Number, OTP Verification Plugin

Affected Versions: versions 1.8.50 through 1.8.60

Vulnerability: The vulnerability exists in the lwp_ajax_register AJAX handler, where the Firebase session is not correctly bound to the user's phone number. An unauthenticated attacker can verify their own Firebase session but supply a victim's phone number in the request, causing the application to incorrectly authenticate the attacker as that user.

Business Impact

The CVSS score of 9.8 reflects the high risk of account takeover. If an attacker targets an administrator's account, they can gain full control over the WordPress site, leading to complete data loss, site defacement, or the injection of malicious code into the site's front end.

Remediation Plan

Immediate Action: Immediately update the "OTP Login With Phone Number, OTP Verification" plugin to the latest available version provided by the vendor.

Proactive Monitoring: Review WordPress user account logs for suspicious logins, particularly those involving administrative accounts, and monitor for unauthorized changes to user metadata.

Compensating Controls: Temporarily disable the plugin if an update is not immediately available, or implement a secondary authentication factor (MFA) that is not tied to the vulnerable OTP verification flow.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ability to bypass authentication for administrative accounts makes this a high-priority risk.

Analyst Recommendation

Given that this vulnerability allows for trivial account takeover including administrative accounts, organizations should treat this update as a high priority. Ensure all WordPress sites utilizing this plugin are updated immediately to mitigate the risk of unauthorized access.

---METADATA---
VENDOR: MeiG Smart
PRODUCT: FORGE_SLT711
AFFECTED_VERSIONS: MDM9607.LE.1.0-00110-STD.PROD-1
---END_METADATA---

Description Summary:
The GoAhead web server on MeiG Smart FORGE_SLT711 devices allows unauthenticated remote attackers to perform OS command injection via the /action/SetRemoteAccessCfg endpoint.

Executive Summary:
A critical OS command injection vulnerability in the MeiG Smart FORGE_SLT711 device allows unauthenticated remote attackers to execute arbitrary system commands.

Vulnerability Details

CVE-ID: CVE-2026-36356

Affected Software: MeiG Smart FORGE_SLT711 (GoAhead web server)

Affected Versions: MDM9607.LE.1.0-00110-STD.PROD-1

Vulnerability: This is an OS command injection vulnerability residing in the /action/SetRemoteAccessCfg endpoint of the GoAhead web server, which fails to properly sanitize user input before passing it to the underlying system shell.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a severe threat, enabling attackers to gain full control over the device at the operating system level. This compromise can lead to data exfiltration, denial of service, or the use of the device as a botnet node within the local network.

Remediation Plan

Immediate Action: Update the device firmware to the latest available version provided by the manufacturer.

Proactive Monitoring: Monitor the device for unexpected outbound traffic or anomalous processes running on the system.

Compensating Controls: Restrict access to the device's web management interface via firewall rules to ensure it is not reachable from untrusted networks or the public internet.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations utilizing the MeiG Smart FORGE_SLT711 should treat this as a high-priority update. Ensure that all devices are patched and that network-level controls are in place to prevent unauthenticated access to the management interfaces.

---METADATA---
VENDOR: Realtek
PRODUCT: rtl819x Jungle SDK
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability exists in the Realtek rtl819x Jungle SDK affecting the rtl8192cd Wi-Fi kernel driver, which may allow for unauthorized system impact.

Executive Summary:
The Realtek rtl819x Jungle SDK contains a high-severity flaw in the Wi-Fi kernel driver that could lead to unauthorized system-level access.

Vulnerability Details

CVE-ID: CVE-2026-36355

Affected Software: Realtek rtl819x Jungle SDK

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the rtl8192cd Wi-Fi kernel driver. It involves an improper handling of data within the driver, which may be exploited to compromise the stability or security of the host system.

Business Impact

The CVSS score of 7.7 reflects a high risk to organizations relying on hardware integrated with the Realtek SDK. Successful exploitation could result in the compromise of wireless communications or the host operating system, potentially leading to data exfiltration or denial of service.

Remediation Plan

Immediate Action: Update to the latest firmware or SDK version provided by the hardware manufacturer.

Proactive Monitoring: Monitor network infrastructure logs for abnormal Wi-Fi driver behavior or unexpected system reboots.

Compensating Controls: Restrict access to wireless management interfaces to trusted administrative subnets to minimize the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Hardware administrators must verify the SDK versions used in their wireless equipment and apply vendor-supplied patches promptly. Given the role of the kernel driver in system security, deferring this update is not recommended.