---METADATA---
VENDOR: Fission
PRODUCT: Fission
AFFECTED_VERSIONS: Prior to version 1.24.0
---END_METADATA---

Description Summary:
Fission contains a namespace validation flaw in its admission webhook, allowing users to bypass security boundaries when deploying functions.

Executive Summary:
An improper namespace validation vulnerability in the Fission serverless framework could lead to unauthorized access to sensitive Kubernetes resources.

Vulnerability Details

CVE-ID: CVE-2026-49824

Affected Software: Fission

Affected Versions: Prior to version 1.24.0

Vulnerability: The Fission Function admission webhook fails to validate the spec.environment.namespace field. This allows users to reference resources across different namespaces, effectively bypassing the intended security isolation of the Kubernetes-native environment.

Business Impact

The CVSS score of 8.5 indicates a high-severity risk. Exploitation allows an attacker to access configuration maps or secrets from namespaces they should not have visibility into, potentially leading to the compromise of credentials or sensitive data used by other serverless functions.

Remediation Plan

Immediate Action: Upgrade the Fission framework to version 1.24.0 or later to ensure correct namespace validation in the admission webhook.

Proactive Monitoring: Monitor Kubernetes logs and audit trails for unauthorized attempts to access cross-namespace resources or anomalous function deployment patterns.

Compensating Controls: Implement strict Kubernetes RBAC policies and NetworkPolicies to limit the blast radius of potential cross-namespace access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 12, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability undermines the multi-tenancy security model of Kubernetes-based serverless environments. Users of Fission should prioritize the upgrade to version 1.24.0 to restore proper security boundaries and prevent unauthorized access to sensitive application secrets.

---METADATA---
VENDOR: seriousm4x
PRODUCT: UpSnap
AFFECTED_VERSIONS: >= 4.4.1, < 5.4.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
UpSnap is vulnerable to a missing authentication flaw that allows unauthenticated attackers to register an initial superuser account and subsequently execute arbitrary system commands.

Executive Summary:
A critical authentication bypass and privilege escalation vulnerability in UpSnap enables unauthenticated attackers to gain administrative access and perform remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-49819

Affected Software: seriousm4x UpSnap

Affected Versions: >= 4.4.1, < 5.4.0

Vulnerability: The application fails to properly authenticate requests to the superuser initialization endpoint. This allows an unauthenticated attacker to create an administrative account and leverage that access to trigger OS command injection via the application's networking features.

Business Impact

This vulnerability carries a CVSS score of 9.8, reflecting its potential for total system compromise. By gaining superuser status, an attacker can execute arbitrary commands on the underlying host, leading to full control over the server, potential lateral movement, and significant risk to the integrity and confidentiality of the environment.

Remediation Plan

Immediate Action: Update the UpSnap application to version 5.4.0 or later to patch the authentication and command injection vulnerabilities.

Proactive Monitoring: Review audit logs for unexpected account creation events or suspicious command execution patterns originating from the UpSnap service.

Compensating Controls: Ensure the web application is not exposed to the public internet and utilize a Web Application Firewall to block access to the /api/upsnap/init-superuser endpoint.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 12, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly severe because it provides a direct, unauthenticated path to root command execution.

Analyst Recommendation

The severity of this issue necessitates an immediate update to the latest version of UpSnap. Security teams should verify their installation versions and apply the patch without delay to prevent unauthorized administrative takeover.

---METADATA---
VENDOR: Dell
PRODUCT: PowerProtect Data Domain
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Dell PowerProtect Data Domain is susceptible to an OS Command Injection vulnerability, allowing authenticated administrators to execute arbitrary commands.

Executive Summary:
An OS Command Injection vulnerability in Dell PowerProtect Data Domain allows authenticated administrative users to gain unauthorized command execution capabilities on the underlying system.

Vulnerability Details

CVE-ID: CVE-2026-49815

Affected Software: Dell PowerProtect Data Domain

Affected Versions: Prior to 8.8.0.0, 8.6.1.20, 8.3.1.40, and 7.13.1.80

Vulnerability: Similar to related vulnerabilities in this suite, this issue involves improper neutralization of special elements used in OS commands, allowing an authenticated administrator to inject and execute arbitrary commands.

Business Impact

The CVSS score of 7.2 indicates a high severity risk. While exploitation requires administrative credentials, the ability to execute arbitrary OS commands on a data protection appliance allows for the potential loss of data integrity and availability, which could severely impact business operations and recovery capabilities.

Remediation Plan

Immediate Action: Apply the vendor-supplied security updates to reach the corrected versions (8.8.0.0, 8.6.1.20, 8.3.1.40, 7.13.1.80 or later) as referenced in DSA-2026-278.

Proactive Monitoring: Review system logs for unexpected process execution or modifications to system binaries by administrative accounts.

Compensating Controls: Limit access to the management console to authorized personnel only and implement Multi-Factor Authentication (MFA) to prevent unauthorized credential usage.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this command injection vulnerability necessitates prompt remediation. Organizations should prioritize patching their PowerProtect Data Domain systems and review administrative access logs to ensure no prior unauthorized activity has occurred.

---METADATA---
VENDOR: Dell
PRODUCT: PowerProtect Data Domain
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Dell PowerProtect Data Domain is vulnerable to OS Command Injection, allowing an authenticated administrator to execute arbitrary commands on the underlying operating system.

Executive Summary:
An OS Command Injection vulnerability in Dell PowerProtect Data Domain allows authenticated administrators to achieve unauthorized command execution on the host system.

Vulnerability Details

CVE-ID: CVE-2026-49814

Affected Software: Dell PowerProtect Data Domain

Affected Versions: Prior to 8.8.0.0, 8.6.1.20, 8.3.1.40, and 7.13.1.80

Vulnerability: This vulnerability involves the improper neutralization of special elements used in OS commands. An attacker with high-level administrative privileges can leverage this flaw to inject and execute arbitrary system commands.

Business Impact

With a CVSS score of 7.2, this vulnerability poses a significant risk to the integrity and availability of the storage infrastructure. While it requires administrative authentication, the ability to execute OS-level commands could allow an attacker to bypass security controls, destroy data, or pivot further into the internal network, leading to catastrophic system downtime.

Remediation Plan

Immediate Action: Upgrade Dell PowerProtect Data Domain to the fixed versions (8.8.0.0, 8.6.1.20, 8.3.1.40, 7.13.1.80 or later) as detailed in the Dell Security Advisory (DSA-2026-278).

Proactive Monitoring: Audit administrative activity logs for anomalous shell commands or unauthorized modifications to system configurations.

Compensating Controls: Restrict administrative access to the management interface to known, trusted management workstations and enforce strict Role-Based Access Control (RBAC).

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a high-risk security gap in critical storage infrastructure. It is imperative that security teams verify their current firmware version and schedule the necessary updates to the recommended versions to eliminate the command injection vector.

---METADATA---
VENDOR: Microsoft
PRODUCT: Windows
AFFECTED_VERSIONS: Windows 10 Version 1809 (10.0.17763.0-10.0.17763.9019), Windows 10 Version 21H2 (10.0.19044.0-10.0.19044.7547), Windows 10 Version 22H2 (10.0.19045.0-10.0.19045.7547), Windows 11 Version 24H2 (10.0.26100.0-10.0.26100.8874), Windows 11 Version 25H2 (10.0.26200.0-10.0.26200.8874), Windows 11 Version 26H1 (10.0.28000.0-10.0.28000.2268)
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A use after free vulnerability in the Windows Kernel allows a locally authenticated attacker to elevate privileges to the system level.

Executive Summary:
A use after free vulnerability in the Windows Kernel allows an authenticated attacker to achieve local privilege escalation, posing a severe risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-49795

Affected Software: Microsoft Windows

Affected Versions: See metadata for specific build ranges.

Vulnerability: This vulnerability is a use after free flaw in the Windows Kernel, triggered when an authenticated user performs specific operations that lead to memory corruption. Successful exploitation allows the attacker to execute arbitrary code with kernel privileges.

Business Impact

Successful exploitation grants an attacker full control over the affected system, enabling them to bypass security controls, install persistent malware, or exfiltrate sensitive data. With a CVSS score of 8.8, this vulnerability represents a high risk to business operations, as it effectively nullifies local access restrictions once a foothold is established.

Remediation Plan

Immediate Action: Apply the relevant monthly security updates provided by Microsoft for the affected Windows versions listed in the metadata.

Proactive Monitoring: Monitor system logs for unexpected kernel crashes or suspicious process elevation activities that could indicate exploitation attempts.

Compensating Controls: Implement strict endpoint privilege management to ensure that standard users do not have unnecessary local administrative rights, limiting the attacker's ability to reach the vulnerable kernel interface.

Exploitation Status

Public Exploit Available: No (exploit_available: false).

Analyst Notes: As of July 15, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires the attacker to already possess local access, which remains a significant barrier to entry for many threat actors.

Analyst Recommendation

Given the high CVSS severity and the potential for full system compromise, administrators should prioritize the deployment of the July 2026 security patches. Immediate patching is the most effective way to eliminate this risk to your Windows infrastructure.

---METADATA---
VENDOR: SureTriggers
PRODUCT: OttoKit
AFFECTED_VERSIONS: OttoKit <= 1.1.27 versions.
---END_METADATA---

Description Summary:
An unauthenticated PHP Object Injection vulnerability exists in the OttoKit component of the SureTriggers WordPress plugin, potentially leading to remote code execution.

Executive Summary:
The OttoKit WordPress plugin contains a critical PHP Object Injection vulnerability that allows unauthenticated attackers to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-49781

Affected Software: SureTriggers OttoKit

Affected Versions: OttoKit <= 1.1.27 versions.

Vulnerability: This vulnerability involves the insecure deserialization of untrusted data within the OttoKit component. Because it is unauthenticated, any remote attacker can trigger this flaw without requiring prior access to the WordPress environment.

Business Impact

Successful exploitation of this vulnerability poses a severe threat, as it allows for Remote Code Execution (RCE) on the underlying server. With a CVSS score of 9.8, this flaw represents a critical risk that could lead to full system compromise, data theft, and complete loss of service availability.

Remediation Plan

Immediate Action: Update the OttoKit plugin to the latest available version provided by the vendor to remediate the deserialization flaw.

Proactive Monitoring: Monitor server logs for suspicious PHP serialization strings or unexpected outbound network connections emanating from the web server.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious serialized objects in HTTP requests.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical CVSS severity of 9.8 and the lack of authentication required to exploit this, immediate action is mandatory. Administrators should verify their plugin versions and apply the necessary updates to prevent potential site takeovers.

---METADATA---
VENDOR: Dokan
PRODUCT: Dokan Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A privilege escalation vulnerability exists in the Dokan plugin, allowing authenticated users with the Customer role to gain unauthorized elevated access.

Executive Summary:
The Dokan plugin is affected by a critical privilege escalation vulnerability that allows unauthorized users to gain elevated administrative permissions.

Vulnerability Details

CVE-ID: CVE-2026-49780

Affected Software: Dokan Dokan Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a flaw in the application's authorization logic, enabling an authenticated user with the "Customer" role to bypass security checks and escalate their privileges.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the WordPress environment, resulting in unauthorized data access, modification of site configurations, and potential full system takeovers. With a CVSS score of 8.8, this flaw poses a high risk to business continuity and data integrity.

Remediation Plan

Immediate Action: Update the Dokan plugin to the latest available version provided by the vendor immediately.

Proactive Monitoring: Review user account activity logs for anomalous privilege changes or unauthorized administrative actions performed by non-admin accounts.

Compensating Controls: Implement strict role-based access control (RBAC) and utilize a Web Application Firewall (WAF) to monitor for suspicious requests targeting account management functions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the severity of privilege escalation, organizations must prioritize patching this vulnerability as soon as a security update is released. Administrators should audit all user roles to ensure no unauthorized escalations have already occurred while waiting for the patch deployment.

---METADATA---
VENDOR: UMAI Vision
PRODUCT: Traffic Analysis System
AFFECTED_VERSIONS: 29 up to (excluding) 34
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A critical SQL injection vulnerability in UMAI Vision Traffic Analysis System allows unauthenticated attackers to execute arbitrary SQL commands via the application.

Executive Summary:
An unauthenticated SQL injection vulnerability in UMAI Vision Traffic Analysis System poses a critical risk of total system compromise and unauthorized data access.

Vulnerability Details

CVE-ID: CVE-2026-4978

Affected Software: UMAI Vision Traffic Analysis System

Affected Versions: 29 up to (excluding) 34

Vulnerability: This vulnerability is a classic SQL injection (CWE-89) arising from the improper neutralization of special elements in SQL commands. The lack of authentication requirements (AV:N/PR:N) allows any remote attacker to interact with the database layer directly.

Business Impact

Successful exploitation allows an attacker to bypass security controls, extract sensitive information, modify database contents, or gain administrative control over the underlying server. Given the CVSS score of 9.8, this vulnerability represents a critical threat to data confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Update UMAI Vision Traffic Analysis System to version 34 or later to remediate the underlying code vulnerability.

Proactive Monitoring: Review database audit logs for unusual queries, specifically those containing common SQL injection patterns or unexpected administrative commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block malicious SQL injection payloads targeting the application interface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature and the potential for full system access.

Analyst Recommendation

Due to the critical severity and the potential for complete system takeover, administrators should prioritize patching the UMAI Vision Traffic Analysis System immediately. If immediate patching is not feasible, restrict network access to the system to trusted segments only until the update is applied.

---METADATA---
VENDOR: ShapedPlugin
PRODUCT: Product Slider Pro for WooCommerce
AFFECTED_VERSIONS: from n/a before 3.5.3
---END_METADATA---

Description Summary:
An improper validation vulnerability in ShapedPlugin Product Slider Pro for WooCommerce allows unauthenticated attackers to perform malicious software implantation.

Executive Summary:
A critical input validation vulnerability in the Product Slider Pro for WooCommerce plugin allows for malicious software implantation, requiring immediate attention.

Vulnerability Details

CVE-ID: CVE-2026-49777

Affected Software: ShapedPlugin Product Slider Pro for WooCommerce

Affected Versions: from n/a before 3.5.3

Vulnerability: This is an improper validation of specified quantity in input. The vulnerability allows an attacker to implant malicious software into the WordPress environment, bypassing intended security controls.

Business Impact

With a CVSS score of 10.0, this vulnerability is critical. It allows an attacker to achieve full control over the affected WordPress instance, leading to data theft, site defacement, or the distribution of malware to site visitors. The lack of a clear versioning change for the patch makes remediation confirmation difficult.

Remediation Plan

Immediate Action: Update to version 3.5.3. Even if the version number previously matched, ensure the latest code distribution is downloaded and re-installed to ensure the patch is applied.

Proactive Monitoring: Monitor site files for unexpected modifications and check for unauthorized user account creation or suspicious background processes.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious input patterns in WooCommerce-related plugins.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 5, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this vulnerability and the ambiguity regarding the patch release, users are strongly urged to perform a clean re-installation of the plugin using the 3.5.3 version. Security teams should treat all older installations as compromised until validated.

---METADATA---
VENDOR: Filipe Nasc
PRODUCT: RD Station
AFFECTED_VERSIONS: From n/a through 5.6.0
---END_METADATA---

Description Summary:
A code injection vulnerability in Filipe Nasc RD Station allows for remote code inclusion, potentially leading to full system compromise.

Executive Summary:
A critical remote code injection vulnerability in Filipe Nasc RD Station allows attackers to execute arbitrary code on the host server.

Vulnerability Details

CVE-ID: CVE-2026-49774

Affected Software: Filipe Nasc RD Station

Affected Versions: n/a through 5.6.0

Vulnerability: The vulnerability is characterized as improper control of code generation (code injection), enabling remote code inclusion. This allows an attacker to inject and execute malicious instructions on the server hosting the application.

Business Impact

With a CVSS score of 9.9, this vulnerability is extremely severe. Successful exploitation could lead to full system compromise, data breaches, and the deployment of persistent backdoors, posing a catastrophic risk to organizational security and data integrity.

Remediation Plan

Immediate Action: Update Filipe Nasc RD Station to the latest version that contains the security patch for this code injection flaw.

Proactive Monitoring: Monitor server logs for unexpected process execution or suspicious network traffic originating from the web application.

Compensating Controls: Implement WAF rules to detect and block common code injection payloads targeting the RD Station application.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation. However, the high CVSS score and the nature of code injection vulnerabilities make the potential for widespread exploitation very high.

Analyst Recommendation

Given the critical nature of code injection vulnerabilities, organizations should treat this update with high priority. Patching is the only effective way to mitigate this risk, and it should be performed in the next available maintenance window to avoid potential compromise.

---METADATA---
VENDOR: WordPress
PRODUCT: WP Travel Engine
AFFECTED_VERSIONS: <= 6.7.12
---END_METADATA---

Description Summary:
The WP Travel Engine plugin for WordPress contains an unauthenticated PHP Object Injection vulnerability, which could be exploited to compromise the system.

Executive Summary:
A critical unauthenticated PHP Object Injection vulnerability in the WP Travel Engine WordPress plugin requires immediate attention to prevent unauthorized system access.

Vulnerability Details

CVE-ID: CVE-2026-49770

Affected Software: WordPress WP Travel Engine

Affected Versions: <= 6.7.12

Vulnerability: This vulnerability, identified as CWE-502, occurs due to the insecure deserialization of untrusted data. Unauthenticated attackers can inject arbitrary PHP objects, which may facilitate further malicious actions, including remote code execution, depending on the environment's configuration.

Business Impact

With a CVSS score of 9.8, this is a critical vulnerability. Successful exploitation could lead to data breach, unauthorized modification of travel bookings or business information, and potential administrative takeover of the WordPress site, resulting in significant business impact.

Remediation Plan

Immediate Action: Update the WP Travel Engine plugin to the latest available version.

Proactive Monitoring: Audit site logs for unusual request patterns and monitor for any unexplained changes to site configuration or database content.

Compensating Controls: Deploy WAF rules to detect and intercept malicious serialized object payloads directed at the WordPress instance.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must prioritize updating the WP Travel Engine plugin to mitigate this critical risk. Prompt action is essential to prevent potential exploitation and maintain the security posture of the WordPress environment.

---METADATA---
VENDOR: WordPress
PRODUCT: wpForo Forum
AFFECTED_VERSIONS: <= 3.1.0
---END_METADATA---

Description Summary:
The wpForo Forum plugin for WordPress is vulnerable to unauthenticated PHP Object Injection, enabling potential remote code execution via untrusted input deserialization.

Executive Summary:
A critical unauthenticated PHP Object Injection vulnerability in the wpForo Forum WordPress plugin poses a severe risk of complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-49769

Affected Software: WordPress wpForo Forum

Affected Versions: <= 3.1.0

Vulnerability: The plugin improperly deserializes untrusted input, granting unauthenticated attackers the ability to inject malicious PHP objects. This vulnerability provides a pathway for code execution if a POP chain is available within the plugin or other installed components.

Business Impact

The CVSS score of 9.8 reflects the high potential for total system takeover. Successful exploitation could lead to the compromise of user forum accounts, unauthorized access to backend administrative functions, and exfiltration of sensitive forum database content.

Remediation Plan

Immediate Action: Update the wpForo Forum plugin to the latest version provided by the vendor.

Proactive Monitoring: Review forum activity logs and system access logs for signs of unauthorized object instantiation or suspicious administrative activity.

Compensating Controls: Use a WAF to monitor and block requests that contain serialized PHP payloads targeting the plugin.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity, administrators should update the wpForo Forum plugin immediately. Failure to address this vulnerability increases the risk of a full site breach and unauthorized data access.

---METADATA---
VENDOR: WordPress
PRODUCT: Happyforms
AFFECTED_VERSIONS: <= 1.26.13
---END_METADATA---

Description Summary:
The Happyforms plugin for WordPress is susceptible to unauthenticated PHP Object Injection, which could allow attackers to execute arbitrary code or retrieve sensitive data.

Executive Summary:
A critical unauthenticated PHP Object Injection vulnerability in the Happyforms WordPress plugin requires immediate patching to version 1.26.14 or later.

Vulnerability Details

CVE-ID: CVE-2026-49768

Affected Software: WordPress Happyforms

Affected Versions: <= 1.26.13

Vulnerability: This vulnerability stems from the insecure deserialization of untrusted user input by the plugin. Unauthenticated attackers can inject malicious objects, which may lead to full system compromise if suitable POP chains are present in the underlying environment.

Business Impact

With a CVSS score of 9.8, this flaw represents a major security risk. Exploitation could result in the destruction of site data, unauthorized access to form submissions, and long-term persistence, severely impacting business operations and data privacy.

Remediation Plan

Immediate Action: Update the Happyforms plugin to version 1.26.14 or the latest available release.

Proactive Monitoring: Monitor server logs for suspicious requests involving serialized objects and audit plugin settings for unauthorized changes.

Compensating Controls: Implement WAF filtering to block requests containing serialized PHP objects to prevent exploitation until patching is complete.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators must prioritize the update to version 1.26.14. The severity of this vulnerability necessitates prompt action to protect the integrity of the WordPress site and the data collected through the Happyforms plugin.

---METADATA---
VENDOR: WordPress
PRODUCT: WP User Manager
AFFECTED_VERSIONS: <= 2.9.16
---END_METADATA---

Description Summary:
An arbitrary file deletion vulnerability in the WP User Manager plugin for WordPress allows authenticated users to delete sensitive system files.

Executive Summary:
A critical arbitrary file deletion vulnerability in the WP User Manager plugin for WordPress permits authenticated attackers to remove critical system files, leading to potential service disruption.

Vulnerability Details

CVE-ID: CVE-2026-49766

Affected Software: WordPress WP User Manager

Affected Versions: <= 2.9.16

Vulnerability: The plugin contains a flaw that allows authenticated subscribers to trigger arbitrary file deletion on the server filesystem. By manipulating specific parameters, an attacker can delete sensitive configuration files or core application files.

Business Impact

With a CVSS score of 9.9, this vulnerability poses a Critical risk to business operations. Exploitation can lead to complete service denial, loss of administrative control, and potential site instability, resulting in significant operational downtime.

Remediation Plan

Immediate Action: Update the WP User Manager plugin to the latest available version provided by the vendor.

Proactive Monitoring: Monitor server access logs for unusual requests targeting file-handling functions or deletion operations.

Compensating Controls: Restrict file system permissions for the web server user account to the minimum necessary level to prevent unauthorized deletion of sensitive paths.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical severity of this vulnerability, immediate remediation via plugin update is required. Organizations should evaluate their reliance on the affected plugin and ensure that all user permissions are strictly enforced to minimize the attack surface.

---METADATA---
VENDOR: WordPress
PRODUCT: Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms
AFFECTED_VERSIONS: <= 1.1.8
---END_METADATA---

Description Summary:
The Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress suffers from unauthenticated PHP Object Injection via deserialization of untrusted input.

Executive Summary:
A critical unauthenticated PHP Object Injection flaw in the Integration for Mailchimp and Contact Form 7 plugin exposes WordPress environments to potential remote compromise.

Vulnerability Details

CVE-ID: CVE-2026-49765

Affected Software: WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms

Affected Versions: <= 1.1.8

Vulnerability: The plugin fails to securely handle untrusted input during deserialization, allowing unauthenticated attackers to inject arbitrary PHP objects. This mechanism can be leveraged as a vector for remote code execution if a compatible POP chain is identified within the environment.

Business Impact

The CVSS score of 9.8 underscores the severity of this flaw. Exploitation could allow attackers to bypass standard authentication, leading to unauthorized data exfiltration, modification of application logic, or total administrative takeover of the WordPress instance.

Remediation Plan

Immediate Action: Update the affected plugin to the latest version provided by the vendor.

Proactive Monitoring: Review application and database logs for unusual activity or unauthorized administrative actions following plugin usage.

Compensating Controls: Utilize a WAF to inspect and filter incoming traffic for serialized object signatures that could indicate an injection attempt.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a high risk of unauthorized access. It is imperative that security teams audit their WordPress installations and apply the necessary updates immediately to eliminate this attack surface.

---METADATA---
VENDOR: WordPress
PRODUCT: RegistrationMagic
AFFECTED_VERSIONS: <= 6.0.8.6
---END_METADATA---

Description Summary:
A broken authentication vulnerability in the RegistrationMagic plugin for WordPress allows unauthenticated attackers to bypass security controls.

Executive Summary:
A critical broken authentication vulnerability in the RegistrationMagic plugin for WordPress allows unauthenticated attackers to potentially gain unauthorized administrative access.

Vulnerability Details

CVE-ID: CVE-2026-49764

Affected Software: WordPress RegistrationMagic

Affected Versions: <= 6.0.8.6

Vulnerability: This vulnerability involves a failure in the authentication mechanism, allowing unauthenticated parties to interact with restricted functions. This effectively bypasses standard login requirements, granting unauthorized access to the application.

Business Impact

The 9.8 CVSS score identifies this as a Critical vulnerability. Unauthorized access to registration and administrative functions can lead to total account takeover, data exfiltration of user records, and complete compromise of the WordPress environment.

Remediation Plan

Immediate Action: Update the RegistrationMagic plugin to the latest version immediately to resolve the authentication flaw.

Proactive Monitoring: Review authentication logs for anomalous login patterns or access from unauthorized IP addresses.

Compensating Controls: Implement multi-factor authentication (MFA) for administrative accounts to add an extra layer of defense against unauthorized access attempts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Broken authentication is a high-risk vulnerability that requires immediate attention. Organizations should prioritize updating the RegistrationMagic plugin and conduct an audit of user accounts to detect any unauthorized modifications or privilege escalations that may have already occurred.

---METADATA---
VENDOR: WordPress
PRODUCT: Integration for Contact Form 7 HubSpot
AFFECTED_VERSIONS: <= 1.3.7
---END_METADATA---

Description Summary:
The Integration for Contact Form 7 HubSpot plugin for WordPress is vulnerable to unauthenticated PHP Object Injection, potentially allowing remote code execution via serialized input.

Executive Summary:
A critical unauthenticated PHP Object Injection vulnerability in the Integration for Contact Form 7 HubSpot WordPress plugin poses a severe risk of remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-49763

Affected Software: WordPress Integration for Contact Form 7 HubSpot

Affected Versions: <= 1.3.7

Vulnerability: This vulnerability involves the insecure deserialization of untrusted input, enabling unauthenticated attackers to inject malicious PHP objects. While the plugin itself may lack a native POP chain, the presence of such chains in other installed themes or plugins could facilitate arbitrary file deletion, data theft, or system compromise.

Business Impact

With a CVSS score of 9.8, this vulnerability is classified as critical. Successful exploitation could lead to full site compromise, unauthorized access to sensitive customer data, and potential long-term persistence within the web environment, causing significant reputational and operational damage.

Remediation Plan

Immediate Action: Update the Integration for Contact Form 7 HubSpot plugin to the latest available version immediately.

Proactive Monitoring: Monitor server access logs for anomalous deserialization patterns or unexpected requests targeting plugin-specific endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block malicious serialized objects and suspicious input strings.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jun 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this vulnerability and the ease of unauthenticated access, administrators must prioritize patching. If an immediate update is not feasible, consider disabling the plugin until a secure version is deployed to mitigate the risk of remote execution.

---METADATA---
VENDOR: Erlang
PRODUCT: OTP erts
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A stack-based buffer overflow in the Erlang OTP erts inet_drv component allows unauthenticated remote attackers to crash the BEAM VM via a crafted SCTP ERROR chunk.

Executive Summary:
A critical stack-based buffer overflow in Erlang OTP erts allows unauthenticated remote attackers to cause a denial-of-service condition by crashing the BEAM virtual machine.

Vulnerability Details

CVE-ID: CVE-2026-49759

Affected Software: Erlang OTP erts

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability is a stack-based buffer overflow located within the inet_drv component. It permits an unauthenticated remote attacker to trigger a crash of the BEAM VM by sending a specially crafted SCTP ERROR chunk.

Business Impact

The ability for an unauthenticated attacker to remotely crash the BEAM VM poses a significant risk to service availability. Given the CVSS score of 8.2, this vulnerability is classified as high severity, as it can lead to unplanned system downtime for any application relying on the Erlang runtime, potentially disrupting critical business operations.

Remediation Plan

Immediate Action: Identify and update all instances of Erlang OTP to the latest patched version provided by the vendor.

Proactive Monitoring: Monitor system logs for unusual SCTP traffic or unexpected process terminations of the BEAM VM.

Compensating Controls: Utilize network-level filtering or an Intrusion Prevention System (IPS) to block malformed SCTP packets targeting the Erlang runtime environment.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for remote service disruption without the need for authentication, organizations should treat this vulnerability with high priority. Administrators must prioritize patching the Erlang runtime across their infrastructure to mitigate the risk of denial-of-service attacks.

---METADATA---
VENDOR: Imagination Technologies
PRODUCT: Graphics DDK
AFFECTED_VERSIONS: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A vulnerability in the Imagination Graphics DDK allows a guest virtual machine to trigger out-of-range memory writes via improper GPU firmware commands.

Executive Summary:
A high-severity out-of-range pointer vulnerability in the Imagination Graphics DDK could allow a guest VM to perform unauthorized memory writes outside its permitted address space.

Vulnerability Details

CVE-ID: CVE-2026-49745

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This is an out-of-range pointer offset vulnerability (CWE-823) where improper commands sent from a Guest VM to the GPU firmware result in memory corruption. The flaw allows an attacker within a virtualized guest to bypass memory isolation constraints.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a significant risk to the integrity and confidentiality of virtualized systems. An attacker may be able to manipulate data in memory outside of the guest, leading to potential privilege escalation or the theft of sensitive data from the host or other guests.

Remediation Plan

Immediate Action: Update the Graphics DDK to version 26.1 RTM2 or later to address the memory safety issue.

Proactive Monitoring: Review audit logs for suspicious GPU command activity and monitor for memory access errors or unexpected system behavior on hosts supporting guest GPU pass-through.

Compensating Controls: If patching is not immediately feasible, restrict the use of GPU pass-through features for untrusted or public-facing virtual machines.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires specific access to a guest environment, the impact of breaking out of these bounds is severe.

Analyst Recommendation

The risk of memory corruption in a virtualized environment necessitates prompt remediation. Administrators should verify their current DDK versions and apply the recommended updates to prevent potential unauthorized access to protected memory regions.

---METADATA---
VENDOR: Imagination Technologies
PRODUCT: Graphics DDK
AFFECTED_VERSIONS: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An out-of-range pointer offset vulnerability in the Imagination Graphics DDK allows a guest virtual machine to trigger unauthorized writes outside of its allocated GPU memory.

Executive Summary:
A high-severity memory safety vulnerability in the Imagination Graphics DDK allows a malicious guest VM to write data outside of its virtualized memory boundaries.

Vulnerability Details

CVE-ID: CVE-2026-49744

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 through 25.3 RTM

Vulnerability: This vulnerability (CWE-823) involves the use of an out-of-range pointer offset when processing commands sent from a Guest VM to the GPU firmware. An attacker with access to a Guest VM can trigger memory writes outside the intended memory region, potentially affecting the host or other virtual machines.

Business Impact

The CVSS score of 7.8 indicates a critical threat to virtualized environments. Exploitation could lead to cross-VM data leakage or host-level compromise, undermining the security guarantees of the virtualization platform and exposing sensitive information to unauthorized actors.

Remediation Plan

Immediate Action: Upgrade to the Graphics DDK version 26.1 RTM1 or later to resolve the pointer offset error.

Proactive Monitoring: Monitor hypervisor and GPU firmware logs for irregular command sequences or unexpected memory access violations occurring within guest environments.

Compensating Controls: Isolate sensitive virtual machines that utilize GPU acceleration until the patch can be applied, as this reduces the attack surface for potential inter-VM exploitation.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of this flaw makes it a high-value target for attackers looking to break out of virtualized environments.

Analyst Recommendation

This vulnerability represents a serious threat to multi-tenant or virtualized infrastructure. Security teams must ensure that all affected virtualization hosts and guest drivers are updated immediately to prevent potential cross-boundary memory corruption.

---METADATA---
VENDOR: Imagination Technologies
PRODUCT: Graphics DDK
AFFECTED_VERSIONS: 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A Use After Free vulnerability in the Imagination Graphics DDK allows a local authenticated user to manipulate kernel synchronization objects via improper GPU system calls.

Executive Summary:
A high-severity Use After Free vulnerability in the Imagination Graphics DDK could allow an authenticated local attacker to achieve kernel-level memory corruption.

Vulnerability Details

CVE-ID: CVE-2026-49743

Affected Software: Imagination Technologies Graphics DDK

Affected Versions: 24.2 RTM2, 25.1 RTM2 through 25.3 RTM, 26.1 RTM1

Vulnerability: This is a Use After Free (CWE-416) vulnerability occurring within the kernel due to improper handling of GPU system calls. An attacker with local access and low privileges can influence the lifetime of synchronization objects, resulting in read or write operations on freed memory.

Business Impact

The CVSS score of 7.8 reflects a high-severity risk that could lead to full system compromise. Successful exploitation allows an attacker to gain elevated privileges or cause a system crash, resulting in significant data exposure and potential denial of service for mission-critical graphics workloads.

Remediation Plan

Immediate Action: Update the Imagination Graphics DDK to the fixed versions, which include 1.18 RTM2, 23.2 RTM2, or 26.1 RTM2, depending on your deployment branch.

Proactive Monitoring: Monitor system logs for unusual kernel-level activity or repeated application crashes that may indicate exploitation attempts targeting GPU drivers.

Compensating Controls: Limit access to the affected system to trusted users only, as the attack requires local execution capabilities to initiate the malicious GPU system calls.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it involves kernel-level memory management, which is a common target for privilege escalation attacks.

Analyst Recommendation

Given the potential for kernel-level memory corruption and privilege escalation, this vulnerability presents a significant security risk. System administrators should prioritize the deployment of the vendor-provided patches to the Graphics DDK to ensure kernel stability and prevent unauthorized access.

---METADATA---
VENDOR: Dell
PRODUCT: PowerProtect Data Manager
AFFECTED_VERSIONS: 0 up to (excluding) 20.2.0.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Dell PowerProtect Data Manager is vulnerable to an incorrect security token generation flaw, which may allow an authenticated attacker to bypass security controls.

Executive Summary:
A security token generation vulnerability in Dell PowerProtect Data Manager allows an authenticated attacker to compromise the integrity and confidentiality of the system.

Vulnerability Details

CVE-ID: CVE-2026-49499

Affected Software: Dell PowerProtect Data Manager

Affected Versions: Prior to 20.2.0.0

Vulnerability: This vulnerability (CWE-1270) involves the generation of incorrect security tokens. An authenticated attacker can exploit this flaw to perform unauthorized actions or bypass intended security restrictions within the application environment.

Business Impact

By manipulating security tokens, an attacker can escalate their access or perform actions they are not authorized to execute. The CVSS score of 8.8 reflects the high risk posed to the confidentiality and integrity of protected data, potentially resulting in unauthorized access to sensitive backups or system configurations within the PowerProtect environment.

Remediation Plan

Immediate Action: Upgrade Dell PowerProtect Data Manager to version 20.2.0.0 or later as specified in the vendor security advisory.

Proactive Monitoring: Review audit logs for suspicious activity, specifically looking for irregular token usage or unauthorized administrative actions.

Compensating Controls: Ensure that access to the management interface is strictly limited to authorized personnel and protected by multi-factor authentication where possible.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 23, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires an authenticated user to initiate, limiting the attack surface to those already inside the system.

Analyst Recommendation

Given the significant impact on administrative security, organizations should treat this update with high priority. Apply the provided patch to version 20.2.0.0 immediately to secure the PowerProtect Data Manager against unauthorized token manipulation.

---METADATA---
VENDOR: National Security Agency (NSA)
PRODUCT: Ghidra
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
Ghidra 11 is affected by a high-severity vulnerability related to superuser privilege handling.

Executive Summary:
A vulnerability in Ghidra 11 could potentially be leveraged to escalate privileges or bypass security constraints.

Vulnerability Details

CVE-ID: CVE-2026-49498

Affected Software: NSA Ghidra

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability involves the handling of superuser privileges within the Ghidra software suite. It potentially allows an attacker to perform unauthorized actions by manipulating privilege levels.

Business Impact

With a CVSS score of 8.8, the potential for privilege escalation is significant. If an attacker gains unauthorized administrative control over the Ghidra instance, they could manipulate sensitive reverse-engineering projects, leading to intellectual property theft or the alteration of analysis results.

Remediation Plan

Immediate Action: Apply the latest security updates provided by the vendor immediately to address the privilege management flaw.

Proactive Monitoring: Review access logs for any unauthorized attempts to access administrative functions or perform actions outside of standard user roles.

Compensating Controls: Implement strict access controls and ensure that Ghidra is run within an isolated or containerized environment with limited system permissions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 11, 2026, there is no public information indicating active exploitation of this vulnerability. The severity score warrants immediate proactive patching.

Analyst Recommendation

Users of Ghidra should prioritize this update to prevent unauthorized privilege escalation. Verify the current version and apply the latest security patch as soon as possible to maintain the integrity of your analysis environment.

---METADATA---
VENDOR: Comodo
PRODUCT: Internet Security
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability exists within the firewall driver component of Comodo Internet Security.

Executive Summary:
A critical security flaw in the Comodo Internet Security firewall driver could allow attackers to bypass security controls or impact system stability.

Vulnerability Details

CVE-ID: CVE-2026-49494

Affected Software: Comodo Internet Security

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability specifically resides within the firewall driver component, which is responsible for inspecting network traffic; failure to secure this driver may allow for unauthorized bypass or system-level interference.

Business Impact

With a CVSS score of 7.5, this vulnerability represents a high risk to endpoints protected by Comodo Internet Security. Successful exploitation may result in the complete bypass of firewall protections, exposing the host system to external threats and potential unauthorized access, leading to significant security degradation.

Remediation Plan

Immediate Action: Update the Comodo Internet Security suite to the latest version provided by the vendor to ensure the firewall driver is properly patched.

Proactive Monitoring: Monitor endpoint systems for unexpected network behavior or attempts to disable security features.

Compensating Controls: Utilize host-based intrusion detection systems and ensure that secondary security layers are enabled to provide defense-in-depth.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given that this vulnerability affects a security-critical component, it is imperative that all affected endpoints are updated immediately. Administrators should verify the successful application of the patch and continue to monitor for anomalous system activity.

---METADATA---
VENDOR: Markdown Preview Enhanced
PRODUCT: Markdown Preview Enhanced
AFFECTED_VERSIONS: Markdown Preview Enhanced before 0.8.28
---END_METADATA---

Description Summary:
Markdown Preview Enhanced contains a remote code execution vulnerability due to improper parsing of Bitfield fenced code blocks using unsafe JavaScript evaluation.

Executive Summary:
A critical remote code execution vulnerability in Markdown Preview Enhanced allows unauthenticated attackers to execute arbitrary code via crafted markdown documents.

Vulnerability Details

CVE-ID: CVE-2026-49493

Affected Software: Markdown Preview Enhanced

Affected Versions: Markdown Preview Enhanced before 0.8.28

Vulnerability: The application utilizes the interpretJS() function to parse Bitfield fenced code blocks, which evaluates content via vm.runInNewContext(). This allows an unauthenticated attacker to trigger arbitrary code execution on the server side when a malicious markdown document is rendered or exported.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe risk to organizational infrastructure. Successful exploitation grants an attacker the ability to execute code with the privileges of the application process, potentially leading to full system compromise, unauthorized data access, and lateral movement within the network.

Remediation Plan

Immediate Action: Upgrade to version 0.8.28 or later immediately to implement secure JSON5 parsing for bitfield definitions.

Proactive Monitoring: Audit server logs for unexpected child process creation or unusual outbound network connections originating from the markdown rendering service.

Compensating Controls: Implement strict input validation or utilize a Web Application Firewall (WAF) to inspect incoming markdown content for suspicious Bitfield patterns, though patching remains the only definitive fix.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of June 7, 2026, public proof-of-concept exploits exist for this vulnerability. Given the ease of triggering this flaw through document rendering, the potential for exploitation is extremely high.

Analyst Recommendation

The severity of this vulnerability, combined with the availability of public exploit code, necessitates immediate action. Administrators must prioritize updating to version 0.8.28 to mitigate the risk of remote code execution.

---METADATA---
VENDOR: Markdown Preview Enhanced
PRODUCT: Markdown Preview Enhanced
AFFECTED_VERSIONS: Markdown Preview Enhanced before 0.8.28
---END_METADATA---

Description Summary:
Markdown Preview Enhanced contains vulnerabilities allowing for OS command injection and arbitrary JavaScript execution via untrusted markdown content.

Executive Summary:
Markdown Preview Enhanced is vulnerable to OS command injection and arbitrary JavaScript execution, enabling attackers to compromise systems through malicious markdown documents.

Vulnerability Details

CVE-ID: CVE-2026-49492

Affected Software: Markdown Preview Enhanced

Affected Versions: Markdown Preview Enhanced before 0.8.28

Vulnerability: The plugin suffers from OS command injection when opening external files/links due to lack of input validation. Furthermore, it parses WaveDrom diagrams by evaluating untrusted content with eval(), leading to arbitrary JavaScript execution.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a high risk to developer workstations and systems where Markdown Preview Enhanced is utilized. Successful exploitation allows for complete control over the user's local environment, potentially leading to the theft of sensitive development credentials or source code.

Remediation Plan

Immediate Action: Update the Markdown Preview Enhanced extension to version 0.8.28 or later.

Proactive Monitoring: Review system logs for suspicious process creation or unexpected network connections originating from the editor environment.

Compensating Controls: Disable the automatic rendering of untrusted markdown files or diagrams until the update can be applied, and restrict the editor's permissions if possible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The combination of command injection and arbitrary code execution makes this a severe risk for any software development environment. Users should upgrade to version 0.8.28 immediately and exercise caution when opening markdown documents from untrusted sources.

---METADATA---
VENDOR: OpenCATS
PRODUCT: OpenCATS
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in the OpenCATS software that may allow for unauthorized system interaction.

Executive Summary:
OpenCATS is affected by a high-severity vulnerability that could allow unauthorized actors to gain elevated access or compromise the applicant tracking environment.

Vulnerability Details

CVE-ID: CVE-2026-49490

Affected Software: OpenCATS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability affects the OpenCATS applicant tracking software. The flaw may allow an attacker to bypass authentication or manipulate application data, potentially leading to unauthorized system access.

Business Impact

A CVSS score of 8.1 indicates a high risk of compromise to the OpenCATS platform. As this system often handles sensitive candidate data, unauthorized access could lead to significant data privacy violations, reputational damage, and non-compliance with data protection regulations.

Remediation Plan

Immediate Action: Update the OpenCATS installation to the latest version provided by the vendor to remediate the vulnerability.

Proactive Monitoring: Monitor database query logs and application access logs for unusual activity or unauthorized attempts to access candidate records.

Compensating Controls: Use a Web Application Firewall (WAF) to filter malicious traffic and block known attack patterns targeting recruitment software.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the sensitive nature of the data stored in OpenCATS, immediate remediation is required. Security teams should verify the integrity of their installation and ensure all security patches are applied to prevent potential data breaches.

---METADATA---
VENDOR: OpenCATS
PRODUCT: OpenCATS
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
OpenCATS contains a high-severity vulnerability that could allow for unauthorized actions, requiring immediate attention from security administrators.

Executive Summary:
OpenCATS is affected by a high-severity vulnerability that poses a significant risk of unauthorized access or system compromise.

Vulnerability Details

CVE-ID: CVE-2026-49489

Affected Software: OpenCATS

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability involves a critical flaw in the OpenCATS software that may allow an attacker to bypass security controls or perform unauthorized operations within the application.

Business Impact

With a CVSS score of 8.5, this vulnerability presents a substantial risk to the confidentiality and integrity of the data managed within the OpenCATS platform. Unauthorized access could result in the exposure of sensitive applicant or organizational data, leading to significant reputational and legal consequences.

Remediation Plan

Immediate Action: Update to the most recent version of OpenCATS provided by the vendor. Consult the official OpenCATS security advisories for specific version requirements and mitigation instructions.

Proactive Monitoring: Monitor application logs for unauthorized access attempts or unusual administrative activities that may indicate an exploitation attempt.

Compensating Controls: Ensure that the OpenCATS instance is isolated behind a secure network perimeter and utilize a WAF to inspect incoming web traffic for malicious payloads.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score, it is imperative that organizations running OpenCATS prioritize the application of security patches. Failure to remediate this issue promptly could leave the system vulnerable to exploitation by remote attackers.

---METADATA---
VENDOR: hapifhir
PRODUCT: org.hl7.fhir.core
AFFECTED_VERSIONS: < 6.9.4.2, >= 6.9.5, < 6.9.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
HAPI FHIR is susceptible to uncontrolled resource consumption due to inefficient regular expression complexity, which can be triggered by unauthenticated attackers to cause a denial of service.

Executive Summary:
A high-severity denial of service vulnerability in HAPI FHIR allows attackers to exhaust system resources through complex regular expression processing.

Vulnerability Details

CVE-ID: CVE-2026-49485

Affected Software: hapifhir org.hl7.fhir.core

Affected Versions: < 6.9.4.2, >= 6.9.5, < 6.9.9

Vulnerability: The library is vulnerable to inefficient regular expression complexity (CWE-1333) and uncontrolled resource consumption (CWE-400). This permits unauthenticated attackers to send specially crafted payloads that force the application to consume excessive CPU or memory.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a significant risk to service availability. Exploitation can lead to application crashes or severe performance degradation, effectively causing a denial of service for critical healthcare interoperability workflows.

Remediation Plan

Immediate Action: Upgrade to version 6.9.4.2 or 6.9.9 to resolve the underlying regex inefficiency.

Proactive Monitoring: Monitor application CPU and memory utilization patterns for sudden, unexplained spikes that may indicate a resource exhaustion attack.

Compensating Controls: Implement input length limits and request timeouts at the gateway level to mitigate the impact of complex payload processing.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any user capable of submitting input to the affected FHIR endpoints.

Analyst Recommendation

System administrators must update the HAPI FHIR core library to the recommended versions immediately. Ensuring the library is patched is essential to maintaining the stability of FHIR-based services and preventing potential service outages.

---METADATA---
VENDOR: sigstore
PRODUCT: fulcio
AFFECTED_VERSIONS: < 1.8.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The sigstore fulcio certificate authority is vulnerable to Server-Side Request Forgery, which could allow unauthorized certificate issuance.

Executive Summary:
A server-side request forgery vulnerability in sigstore fulcio presents a high-risk scenario where an attacker could compromise the integrity of the code signing certificate process.

Vulnerability Details

CVE-ID: CVE-2026-49478

Affected Software: sigstore fulcio

Affected Versions: < 1.8.6

Vulnerability: The vulnerability is a Server-Side Request Forgery (SSRF) flaw, classified as CWE-918. It allows an attacker to manipulate the certificate authority into making unauthorized requests, potentially leading to the issuance of fraudulent code signing certificates.

Business Impact

With a CVSS score of 8.7, the impact on integrity is severe. If exploited, an attacker could issue trusted code signing certificates for malicious software, bypassing security controls that rely on sigstore for provenance verification. This undermines the trust model of the entire supply chain, potentially leading to widespread reputational and security damage.

Remediation Plan

Immediate Action: Update the fulcio deployment to version 1.8.6 or later to incorporate the security fix.

Proactive Monitoring: Audit certificate issuance logs for anomalous requests or certificates issued to unexpected identities.

Compensating Controls: Restrict outbound network access from the fulcio service to only essential endpoints to mitigate the impact of potential SSRF attempts.

Exploitation Status

Public Exploit Available: No (exploit_available unknown).

Analyst Notes: As of August 14, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SSRF vulnerabilities in identity-related services are highly critical as they often bypass perimeter defenses.

Analyst Recommendation

Given the critical role of fulcio in the software supply chain, this update is essential to maintain the integrity of code signing operations. Organizations should prioritize the deployment of version 1.8.6 to prevent potential misuse of the certificate authority.

---METADATA---
VENDOR: cedar-policy
PRODUCT: authorization-for-expressjs
AFFECTED_VERSIONS: < 0.3.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An interpretation conflict and authorization flaw in the @cedar-policy/authorization-for-expressjs package allows authenticated users to bypass intended security controls.

Executive Summary:
An authorization bypass vulnerability in @cedar-policy/authorization-for-expressjs permits authenticated attackers to circumvent security policies, leading to unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-49473

Affected Software: cedar-policy authorization-for-expressjs

Affected Versions: < 0.3.0

Vulnerability: The package suffers from an interpretation conflict (CWE-436) and incorrect authorization logic (CWE-863), which can be exploited by authenticated users to gain unauthorized access to protected resources.

Business Impact

This vulnerability undermines the core authorization enforcement of ExpressJS applications using this library. An attacker could potentially gain access to unauthorized data or perform actions they are not permitted to execute. Given the CVSS score of 8.8, this flaw represents a significant risk to the overall security architecture of affected applications.

Remediation Plan

Immediate Action: Update the @cedar-policy/authorization-for-expressjs package to version 0.3.0 or later.

Proactive Monitoring: Review application authorization logs and audit access patterns to identify attempts to access restricted endpoints.

Compensating Controls: Implement additional server-side authorization checks as a secondary layer of defense while the primary update is being applied.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is rooted in fundamental logic errors, which generally require a deep understanding of the policy engine to exploit.

Analyst Recommendation

Developers should treat this authorization flaw with high priority. Updating to the latest version is the only effective way to remediate the underlying logic failure and restore the integrity of the authorization layer.

---METADATA---
VENDOR: Oraios
PRODUCT: Serena
AFFECTED_VERSIONS: < 1.5.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Oraios Serena is vulnerable to missing authentication and Cross-Site Request Forgery (CSRF), allowing unauthorized users to potentially trigger critical functions.

Executive Summary:
A high-severity vulnerability in the Oraios Serena MCP toolkit allows unauthenticated attackers to perform unauthorized actions, posing a significant risk to data integrity and system control.

Vulnerability Details

CVE-ID: CVE-2026-49471

Affected Software: Oraios Serena

Affected Versions: < 1.5.2

Vulnerability: The application suffers from missing authentication for critical functions (CWE-306) and Cross-Site Request Forgery (CWE-352) flaws. These vulnerabilities allow an unauthenticated attacker to bypass security controls and perform unauthorized operations via malicious requests.

Business Impact

With a CVSS score of 8.3, this vulnerability represents a severe threat to business operations. Exploitation could lead to unauthorized modification of code, semantic retrieval data leakage, or total system compromise, resulting in significant reputational damage and loss of intellectual property.

Remediation Plan

Immediate Action: Upgrade to Oraios Serena version 1.5.2 or later immediately to resolve the authentication and CSRF flaws.

Proactive Monitoring: Review application access logs for unusual patterns, such as unauthorized API calls or unexpected state-changing requests originating from untrusted sources.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict CSRF protection rules to filter malicious traffic until the software can be patched.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of the affected component and the potential for unauthenticated access, organizations must prioritize patching this vulnerability. Apply the version 1.5.2 update as the primary mitigation to eliminate the security gap.

---METADATA---
VENDOR: BerriAI
PRODUCT: LiteLLM
AFFECTED_VERSIONS: prior to version 1.84.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A critical authentication bypass in LiteLLM allows unauthenticated remote attackers to access restricted management endpoints by spoofing request attributes.

Executive Summary:
A critical authentication bypass vulnerability in BerriAI LiteLLM prior to version 1.84.0 enables unauthenticated remote attackers to gain unauthorized access to the AI gateway.

Vulnerability Details

CVE-ID: CVE-2026-49468

Affected Software: BerriAI LiteLLM

Affected Versions: prior to version 1.84.0

Vulnerability: This vulnerability [CWE-290] exists in the get_request_route() function, where improper validation of request paths allows an unauthenticated attacker to manipulate the Host header. This creates a discrepancy between the authentication layer and the FastAPI routing, permitting unauthorized access to restricted management endpoints.

Business Impact

Successful exploitation allows an unauthorized actor to bypass credential checks, leading to full control or manipulation of the AI proxy server. With a CVSS score of 9.5, this flaw poses a severe risk to confidentiality, integrity, and availability, potentially exposing sensitive downstream AI systems and credentials.

Remediation Plan

Immediate Action: Update BerriAI LiteLLM to version 1.84.0 or later immediately to resolve the authentication logic flaw.

Proactive Monitoring: Review access logs for anomalous requests featuring unusual Host headers or attempts to access internal management paths.

Compensating Controls: Ensure the LiteLLM proxy is deployed behind a robust upstream CDN, WAF, or reverse proxy configured to strictly validate and sanitize the Host header.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jun 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of crafting the malicious Host header and the high CVSS score, the potential for exploitation is significant.

Analyst Recommendation

Given the critical nature of this authentication bypass, organizations must prioritize patching to version 1.84.0. If immediate patching is not possible, ensure the proxy is not directly exposed to the internet and enforce strict header validation at the network perimeter.

---METADATA---
VENDOR: smp46
PRODUCT: pingvin-share-x
AFFECTED_VERSIONS: >= 1.5.0, < 1.18.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Pingvin Share X contains authentication vulnerabilities involving incorrect implementation and missing critical steps in the authentication algorithm.

Executive Summary:
A vulnerability in Pingvin Share X allows authenticated attackers to potentially bypass security controls due to flaws in the authentication implementation.

Vulnerability Details

CVE-ID: CVE-2026-49467

Affected Software: smp46 pingvin-share-x

Affected Versions: >= 1.5.0, < 1.18.1

Vulnerability: This issue involves CWE-303 and CWE-304, where the application fails to correctly implement authentication algorithms or misses critical verification steps. The CVSS vector indicates that while the attacker must be authenticated, they can achieve high impacts on confidentiality, integrity, and availability.

Business Impact

The CVSS score of 8.8 reflects the high potential for unauthorized access to sensitive file shares, data manipulation, or service disruption. Successful exploitation could lead to significant data breaches and loss of control over the self-hosted file sharing environment.

Remediation Plan

Immediate Action: Update pingvin-share-x to version 1.18.1 or later to resolve the authentication flaws.

Proactive Monitoring: Monitor application access logs for unusual patterns or privilege escalation attempts originating from standard user accounts.

Compensating Controls: Ensure the application is behind a robust firewall and restrict network access to trusted IP ranges to limit the exposure of the authentication interface.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability.

Analyst Recommendation

Given the high severity of this authentication flaw, administrators should prioritize updating their instances of pingvin-share-x. Failure to patch allows authenticated users to potentially compromise the integrity of the entire file-sharing platform.

---METADATA---
VENDOR: authentik
PRODUCT: authentik
AFFECTED_VERSIONS: Prior to 2025.12.6, 2026.2.4, and 2026.5.1
---END_METADATA---

Description Summary:
An authentication bypass vulnerability in the authentik Source stage allows unauthenticated attackers to bypass security checks by sending an empty POST request.

Executive Summary:
A critical authentication bypass in the authentik identity provider allows unauthenticated attackers to potentially gain unauthorized access to protected services.

Vulnerability Details

CVE-ID: CVE-2026-49448

Affected Software: authentik

Affected Versions: Prior to 2025.12.6, 2026.2.4, and 2026.5.1

Vulnerability: The vulnerability exists in the Source stage of the authentik identity provider. An unauthenticated attacker can bypass the intended authentication flow simply by submitting an empty POST request, effectively circumventing identity verification.

Business Impact

With a CVSS score of 9.8, this flaw is extremely critical as it undermines the foundation of identity and access management. Unauthorized access to the identity provider can lead to a complete compromise of all downstream applications integrated with authentik, resulting in massive data breaches and loss of control over organizational resources.

Remediation Plan

Immediate Action: Upgrade all instances of authentik to versions 2025.12.6, 2026.2.4, 2026.5.1, or later immediately.

Proactive Monitoring: Review authentication logs for anomalous login patterns or spikes in empty POST requests targeting the Source stage.

Compensating Controls: Implement additional network-level access controls or WAF rules to block malformed or unexpected requests directed at the identity provider's authentication endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of June 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the ease of exploitation and the criticality of the target, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is a high-severity authentication bypass that should be remediated immediately. Given that it affects the identity provider, any delay in patching significantly increases the risk of unauthorized access across the entire integrated application ecosystem.

---METADATA---
VENDOR: authentik
PRODUCT: authentik
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A security vulnerability has been identified in authentik, an open-source identity provider, requiring immediate attention from security administrators.

Executive Summary:
A high-severity vulnerability in the authentik identity provider platform mandates immediate review and patching to ensure secure authentication services.

Vulnerability Details

CVE-ID: CVE-2026-49443

Affected Software: authentik

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability affects the authentik identity provider. While specific technical details are pending further disclosure, identity provider flaws typically involve unauthorized access or authentication bypass vectors.

Business Impact

The compromise of an identity provider like authentik can lead to widespread unauthorized access across all integrated applications, resulting in total loss of confidentiality and integrity for managed user accounts. With a CVSS score of 8.8, the potential for catastrophic failure of access control mechanisms is high. Organizations should treat this as a critical threat to their authentication infrastructure and overall security perimeter.

Remediation Plan

Immediate Action: Check the official authentik security repository or vendor advisory for the latest release and apply the update immediately.

Proactive Monitoring: Review authentication logs for unusual login patterns, unexpected administrative access, or failed authentication attempts that may indicate probing.

Compensating Controls: Enforce strict Multi-Factor Authentication (MFA) across all integrated services and consider placing the authentik instance behind a restricted-access network or VPN.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Identity providers are high-value targets for attackers. Administrators should prioritize the update of their authentik instance. If an immediate patch is not currently available, ensure that monitoring is heightened and that all administrative interfaces are shielded from public access to minimize the attack surface.

---METADATA---
VENDOR: vllm-project
PRODUCT: vllm
AFFECTED_VERSIONS: unspecified through latest
CONFIDENCE: medium
MISSING: patch
---END_METADATA---

Description Summary:
The vllm library is vulnerable to path traversal, allowing attackers to potentially access or manipulate files outside of the intended directory.

Executive Summary:
A path traversal vulnerability in the vllm library poses a significant risk of unauthorized file access and potential system compromise.

Vulnerability Details

CVE-ID: CVE-2026-4944

Affected Software: vllm-project vllm

Affected Versions: unspecified through latest

Vulnerability: This vulnerability is a Path Traversal (CWE-22) issue, where improper limitation of a pathname allows unauthorized file system access. The attack vector is network-based and does not require authentication, though it may require user interaction.

Business Impact

Successful exploitation allows an attacker to read or potentially write arbitrary files on the host system, leading to full confidentiality, integrity, and availability impact. With a CVSS score of 8.8, this flaw represents a high-severity risk that could facilitate credential theft or further lateral movement within the infrastructure.

Remediation Plan

Immediate Action: Monitor official repository channels for a security patch; if no fix is available, restrict network access to the vllm service to trusted segments only.

Proactive Monitoring: Inspect system logs for unusual file access patterns or attempts to navigate directory structures outside of expected application paths.

Compensating Controls: Deploy a Web Application Firewall (WAF) or file system monitoring tools to detect and block path traversal sequences (e.g., ../) in incoming traffic.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of May 29, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible.

Analyst Recommendation

Given the high CVSS score and the existence of a proof-of-concept, users should prioritize isolating vulnerable instances from external networks. Organizations must monitor the vllm-project repository for release updates and apply the necessary patches as soon as they become available.

---METADATA---
VENDOR: Keysight
PRODUCT: Hawkeye, IxChariot, IxTap, IxProbe, IxByPass
AFFECTED_VERSIONS: See enrichment data in Vulnerability Details
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Multiple Keysight products contain a stack-based buffer overflow vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code with administrative privileges.

Executive Summary:
A critical stack-based buffer overflow across several Keysight products allows unauthenticated remote attackers to achieve administrative code execution, requiring immediate patching across the enterprise.

Vulnerability Details

CVE-ID: CVE-2026-49435

Affected Software: Keysight Hawkeye, IxChariot, IxTap, IxProbe, and IxByPass.

Affected Versions: Hawkeye (< 6.0.7), IxChariot (< 10.0.254), IxTap (< 3.13.0), IxProbe (< 3.13.0), IxByPass (< 3.13.0.69).

Vulnerability: This is a stack-based buffer overflow (CWE-121) that permits an unauthenticated attacker to send crafted packets to the affected software. Successful exploitation results in arbitrary code execution running with administrative privileges.

Business Impact

This vulnerability carries a CVSS score of 9.8 and allows for full administrative control over the affected hardware and software. Such a compromise could lead to complete loss of confidentiality, integrity, and availability of network testing infrastructure, potentially exposing sensitive internal network traffic or configuration data to adversaries.

Remediation Plan

Immediate Action: Update all affected software and firmware to the specified fixed versions: Hawkeye 6.0.7, IxChariot 10.0.254, IxTap 3.13.0, IxProbe 3.13.0, and IxByPass 3.13.0.69.

Proactive Monitoring: Watch for unusual administrative login activity or service behavior on all updated devices.

Compensating Controls: Isolate testing and monitoring segments from general-purpose network traffic to minimize the attack surface until all systems can be updated.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Aug 4, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The administrative privilege level associated with this flaw makes it a highly attractive target for sophisticated threat actors.

Analyst Recommendation

Given the broad impact across multiple Keysight product lines and the administrative level of access granted to attackers, this update should be prioritized across all affected environments. Failure to address this vulnerability poses a severe risk to the entire network monitoring and testing infrastructure.