---METADATA---
VENDOR: Guardian
PRODUCT: language-system
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
Guardian language-system is vulnerable to error-based SQL injection via the 'id' GET parameter in text_file.php, allowing authenticated attackers to extract sensitive database contents.

Executive Summary:
An authenticated SQL injection vulnerability in the Guardian language-system poses a critical risk of unauthorized database data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-34101

Affected Software: Guardian language-system

Affected Versions: See vendor advisory

Vulnerability: The application fails to sanitize the 'id' GET parameter before incorporating it into a SQL query within text_file.php. This allows an authenticated attacker to manipulate query logic and extract sensitive information from the backend database.

Business Impact

Successful exploitation of this vulnerability allows an attacker to bypass data access controls and exfiltrate sensitive files and metadata stored in the database. Given the critical CVSS score of 9.8, this flaw represents a significant risk to data confidentiality and integrity, potentially leading to a complete compromise of the application's data layer.

Remediation Plan

Immediate Action: Apply the latest security update provided by Guardian to address the SQL injection flaw in text_file.php.

Proactive Monitoring: Review application access logs for unusual patterns in GET requests to 'text_file.php', particularly those containing SQL syntax characters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the 'id' parameter.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jul 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a critical risk to the security of your database environment. IT administrators must prioritize patching this specific component immediately. While the vulnerability requires authentication, the ease of exploitation once access is obtained necessitates urgent remediation to prevent unauthorized data access.

---METADATA---
VENDOR: Guardian
PRODUCT: Language-system
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
The Guardian language-system contains an authenticated error-based SQL injection vulnerability in media.php, allowing an attacker to extract database contents.

Executive Summary:
An authenticated SQL injection vulnerability in the Guardian language-system allows an attacker to compromise sensitive database information through the media.php component.

Vulnerability Details

CVE-ID: CVE-2026-34100

Affected Software: Guardian Language-system

Affected Versions: See vendor advisory

Vulnerability: The application fails to sanitize the 'id' GET parameter in 'media.php', leading to error-based SQL injection. This requires the attacker to have an authenticated session to exploit the vulnerability effectively.

Business Impact

With a CVSS score of 9.8, the impact is severe as it allows lateral movement or privilege escalation for an attacker who has already achieved low-level access. Unauthorized access to the database could result in the compromise of sensitive organizational information, undermining the confidentiality and integrity of the application.

Remediation Plan

Immediate Action: Upgrade to the latest version of the Guardian language-system as recommended by the vendor.

Proactive Monitoring: Monitor application logs for suspicious activity following authentication, specifically looking for unusual patterns in database queries originating from authenticated user sessions.

Compensating Controls: Ensure strict input validation is applied at the application level and utilize WAF rules to filter out suspicious SQL syntax in requests.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Although this vulnerability requires an authenticated session, the potential for data exfiltration remains critical. Administrators should prioritize updating the system and enforcing the principle of least privilege to minimize the potential impact should a user account be compromised.

---METADATA---
VENDOR: itsourcecode
PRODUCT: Society Management System
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A security weakness has been identified in itsourcecode Society Management System version 1, potentially allowing for unauthorized data access.

Executive Summary:
The Society Management System is affected by a high-severity vulnerability that could allow attackers to compromise administrative functions or sensitive resident data.

Vulnerability Details

CVE-ID: CVE-2026-3410

Affected Software: itsourcecode Society Management System

Affected Versions: Version 1

Vulnerability: A weakness has been identified in the system's architecture. In similar management software, this often relates to improper access controls or input validation flaws that allow for unauthorized data manipulation.

Business Impact

A successful exploit could lead to the exposure of sensitive personal information belonging to society members or unauthorized changes to financial and management records. The CVSS score of 7.3 indicates a High severity, highlighting the potential for significant reputational and legal consequences for the managing entity.

Remediation Plan

Immediate Action: Update to the latest version of the Society Management System or apply any security hotfixes released by the vendor.

Proactive Monitoring: Review web server access logs for suspicious GET or POST requests directed at administrative directories or sensitive database endpoints.

Compensating Controls: Restrict access to the management system interface to authorized IP addresses only and implement multi-factor authentication (MFA) for all users.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, management systems are frequent targets for data theft.

Analyst Recommendation

Administrators should prioritize securing the Society Management System by applying available updates. Given the sensitivity of the data handled by such systems, immediate remediation is strongly advised.

---METADATA---
VENDOR: Guardian
PRODUCT: Language-system
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
The Guardian language-system is affected by an unauthenticated error-based SQL injection vulnerability in job_info.php, allowing unauthorized database content extraction.

Executive Summary:
The Guardian language-system contains a critical SQL injection flaw that allows unauthenticated attackers to extract sensitive database information, leading to potential data breach.

Vulnerability Details

CVE-ID: CVE-2026-34099

Affected Software: Guardian Language-system

Affected Versions: See vendor advisory

Vulnerability: The application fails to sanitize the 'id' GET parameter before passing it into a database query in 'job_info.php'. This allows an unauthenticated attacker to inject SQL commands and exfiltrate database schemas and contents.

Business Impact

The CVSS score of 9.8 highlights the severity of this vulnerability. An attacker can gain unauthorized access to proprietary data, user records, or configuration settings stored within the database, resulting in significant reputational damage and potential regulatory non-compliance regarding data privacy.

Remediation Plan

Immediate Action: Update the Guardian language-system to the latest version provided by the vendor to remediate the input sanitization flaw.

Proactive Monitoring: Review database access logs for anomalous query patterns, specifically those involving error-based SQL injection techniques or unexpected character sequences.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block SQL injection payloads targeting the 'id' parameter in GET requests.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jul 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability presents a high risk of information disclosure. It is imperative that administrators apply the vendor-supplied security patches as soon as they become available to prevent unauthorized access to sensitive database contents.

---METADATA---
VENDOR: eosphoros-ai
PRODUCT: db-gpt
AFFECTED_VERSIONS: 0
---END_METADATA---

Description Summary:
A security vulnerability has been identified in eosphoros-ai db-gpt version 0, potentially impacting the security of AI-driven database interactions.

Executive Summary:
The db-gpt software by eosphoros-ai contains a high-severity security flaw that could lead to unauthorized access or manipulation of database-integrated AI services.

Vulnerability Details

CVE-ID: CVE-2026-3409

Affected Software: eosphoros-ai db-gpt

Affected Versions: Version 0

Vulnerability: A security flaw has been discovered in the db-gpt framework. Given the nature of the product, this likely involves improper handling of database queries or AI model inputs, though specific technical details are currently limited.

Business Impact

Exploitation of this flaw could allow attackers to bypass security controls in AI-database workflows, potentially leading to unauthorized data access or the injection of malicious queries. The CVSS score of 7.3 justifies the High severity rating, reflecting a substantial risk to data privacy and system trust.

Remediation Plan

Immediate Action: Apply the latest security patches or version updates provided by eosphoros-ai for the db-gpt project.

Proactive Monitoring: Audit database logs for unusual query patterns and monitor AI model interaction logs for evidence of prompt injection or unauthorized access.

Compensating Controls: Use strict database permissions (Least Privilege) to limit the potential impact of a compromised AI interface and implement input validation for all AI prompts.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. AI-integrated tools are increasingly targeted, making proactive patching essential.

Analyst Recommendation

The integration of AI and databases requires robust security. We recommend that developers and administrators using db-gpt update their environments immediately to the latest secure release to mitigate potential exploitation risks.

---METADATA---
VENDOR: CrnMaster
PRODUCT: CrnMaster
AFFECTED_VERSIONS: Prior to 2.2.0
---END_METADATA---

Description Summary:
An authentication bypass in Cr*nMaster allows unauthenticated users to execute privileged actions by manipulating session cookies.

Executive Summary:
A critical authentication bypass in Cr*nMaster permits unauthenticated attackers to gain administrative control, necessitating an immediate update to version 2.2.0.

Vulnerability Details

CVE-ID: CVE-2026-34072

Affected Software: Cr*nMaster

Affected Versions: Prior to 2.2.0

Vulnerability: The middleware responsible for session validation fails to correctly handle failed fetches, inadvertently treating unauthenticated requests with invalid session cookies as authenticated. This allows an unauthenticated attacker to execute privileged Next.js Server Actions without a valid session.

Business Impact

With a CVSS score of 8.3, this vulnerability allows unauthorized users to interact with sensitive cronjob management functions. This could lead to the modification of scheduled tasks, execution of arbitrary commands on the server, or unauthorized access to sensitive system logs, causing significant operational disruption.

Remediation Plan

Immediate Action: Update Cr*nMaster to version 2.2.0 or later to resolve the session validation flaw.

Proactive Monitoring: Review audit logs for unauthorized access attempts or unexpected execution of administrative Server Actions within the Cr*nMaster interface.

Compensating Controls: Place the Cr*nMaster management UI behind a robust reverse proxy that requires secondary authentication (e.g., OIDC, mTLS) before accessing the application.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 4, 2026, there is no public information indicating active exploitation of this vulnerability. However, given the impact of an authentication bypass, the potential for exploitation is significant.

Analyst Recommendation

This vulnerability represents a high-risk security flaw that grants attackers unauthorized administrative access. Organizations using Cr*nMaster should prioritize the update to version 2.2.0 to ensure session integrity and prevent unauthorized command execution on their infrastructure.

---METADATA---
VENDOR: projectworlds
PRODUCT: Online Art Gallery Shop
AFFECTED_VERSIONS: 1
---END_METADATA---

Description Summary:
A vulnerability in projectworlds Online Art Gallery Shop version 1 could allow attackers to compromise the e-commerce platform's security.

Executive Summary:
The Online Art Gallery Shop software contains a high-severity vulnerability that puts customer data and transaction security at risk.

Vulnerability Details

CVE-ID: CVE-2026-3406

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: Version 1

Vulnerability: A vulnerability was found in the Online Art Gallery Shop application. In e-commerce contexts, such flaws typically involve Cross-Site Scripting (XSS), SQL injection, or insecure direct object references.

Business Impact

A successful exploit could lead to the theft of customer information, unauthorized access to the shop's management backend, or the manipulation of order data. The CVSS score of 7.3 indicates a High severity, which could result in financial loss and damage to the brand's reputation.

Remediation Plan

Immediate Action: Apply the latest security patches for the Online Art Gallery Shop or migrate to a supported, secure version of the software.

Proactive Monitoring: Monitor transaction logs for fraudulent activity and review web server logs for suspicious injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) to protect the shop from common web exploits and ensure all payment processing is handled by secure, third-party providers.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. Small e-commerce platforms are often targeted due to perceived lower security maturity.

Analyst Recommendation

We recommend that administrators of the Online Art Gallery Shop apply security updates immediately. Protecting customer data is paramount to maintaining business operations and consumer trust.

---METADATA---
VENDOR: CoolLabs
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.471
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify contains an OS Command Injection vulnerability allowing authenticated attackers to execute arbitrary commands on the host system via improper input neutralization.

Executive Summary:
An authenticated OS Command Injection vulnerability in Coolify permits remote code execution, posing a critical risk to host server security.

Vulnerability Details

CVE-ID: CVE-2026-34058

Affected Software: CoolLabs Coolify

Affected Versions: < 4.0.0-beta.471

Vulnerability: This flaw is classified as CWE-78, where the application fails to properly sanitize user-supplied input before passing it to a system shell. Authenticated users can leverage this weakness to execute arbitrary OS commands, bypassing intended application restrictions.

Business Impact

An attacker exploiting this vulnerability could gain unauthorized control over the server, potentially leading to the compromise of hosted databases and application data. With a CVSS score of 8.8, the potential for full system takeover makes this an urgent security concern for organizations relying on Coolify for infrastructure management.

Remediation Plan

Immediate Action: Update the Coolify installation to version 4.0.0-beta.471 or higher to patch the command injection vulnerability.

Proactive Monitoring: Monitor system logs for unusual shell activity or unauthorized process spawning associated with the Coolify service.

Compensating Controls: Implement strict network segmentation and egress filtering to prevent the application from making unauthorized outbound connections if the server is compromised.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS severity, failure to remediate this vulnerability exposes the entire server environment to potential takeover. Organizations must treat this as a high-priority update and apply the patch to all affected instances immediately.

---METADATA---
VENDOR: CoolLabs
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.471
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify is susceptible to an OS Command Injection vulnerability that allows authenticated attackers to execute arbitrary system commands on the host server.

Executive Summary:
A critical OS Command Injection vulnerability in Coolify allows authenticated attackers to achieve remote code execution on the underlying host system.

Vulnerability Details

CVE-ID: CVE-2026-34057

Affected Software: CoolLabs Coolify

Affected Versions: < 4.0.0-beta.471

Vulnerability: This vulnerability involves improper neutralization of special elements used in an OS command (CWE-78). An attacker with low-level authenticated access can manipulate input parameters to execute arbitrary commands with the privileges of the Coolify application.

Business Impact

Successful exploitation of this vulnerability poses a severe risk to the confidentiality, integrity, and availability of the host environment. An attacker achieving remote code execution could gain full control over the server, leading to data exfiltration, lateral movement within the network, or total system compromise. Given the CVSS score of 8.8, this represents a high-severity threat that requires immediate attention.

Remediation Plan

Immediate Action: Upgrade to Coolify version 4.0.0-beta.471 or later immediately to resolve the vulnerable code path.

Proactive Monitoring: Review application and system audit logs for suspicious process execution patterns or unexpected command-line arguments originating from the Coolify service account.

Compensating Controls: Ensure the Coolify application runs with the principle of least privilege, utilizing containerization or restricted service accounts to limit the impact of potential command execution.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The presence of an OS command injection vulnerability in a self-hosted management tool is highly dangerous. Administrators should prioritize upgrading their Coolify instances to version 4.0.0-beta.471 immediately to mitigate the risk of unauthorized system-level access.

---METADATA---
VENDOR: Coollabsio
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.471
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify terminal WebSocket routes fail to enforce team-based authorization, enabling low-privileged team members to execute commands on servers belonging to other teams.

Executive Summary:
A critical missing authorization flaw in Coolify allows low-privileged users to execute commands on unauthorized servers, creating a high risk of cross-team privilege escalation.

Vulnerability Details

CVE-ID: CVE-2026-34048

Affected Software: Coollabsio Coolify

Affected Versions: < 4.0.0-beta.471

Vulnerability: The vulnerability exists because terminal WebSocket bootstrap routes only verify general authentication rather than specific team-based authorization. This allows a low-privileged user to establish terminal connections to resources they are not permitted to access, facilitating unauthorized command execution.

Business Impact

With a CVSS score of 9.9, this vulnerability carries severe business risk, including the potential for cross-team data compromise and unauthorized infrastructure manipulation. If exploited, a malicious insider or compromised low-privileged account could gain control over servers they are not authorized to manage, leading to significant security breaches and operational disruption.

Remediation Plan

Immediate Action: Update Coolify to version 4.0.0-beta.471 or later to enforce mandatory terminal authorization checks.

Proactive Monitoring: Monitor logs for unauthorized terminal connection attempts or unexpected shell activity initiated by low-privileged user accounts.

Compensating Controls: Implement strict network-level segmentation to isolate team environments, reducing the ability for cross-resource terminal connections if the application layer is compromised.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The missing authorization control in Coolify presents an urgent security risk that must be addressed. Administrators should deploy the provided update immediately to ensure that terminal access is correctly gated by team permissions and to prevent unauthorized command execution across the server fleet.

---METADATA---
VENDOR: Coollabsio
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.471
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify terminal WebSocket routes fail to enforce authorization, allowing authenticated users to access and execute commands on unauthorized resources.

Executive Summary:
A critical authorization vulnerability in Coolify allows authenticated users to bypass scope restrictions and execute arbitrary commands, posing a severe risk of unauthorized system control.

Vulnerability Details

CVE-ID: CVE-2026-34047

Affected Software: Coollabsio Coolify

Affected Versions: < 4.0.0-beta.471

Vulnerability: This vulnerability involves an improper authorization flaw where terminal WebSocket bootstrap routes fail to validate user permissions. An authenticated user can leverage this to access terminal functionality for resources outside their authorized scope, potentially leading to arbitrary command execution.

Business Impact

The impact of this vulnerability is critical, as it allows for unauthorized lateral movement and command execution within the infrastructure managed by Coolify. Given the CVSS score of 9.9, the potential for total system compromise is extremely high, which could lead to data exfiltration, service disruption, and complete loss of integrity for the managed applications and databases.

Remediation Plan

Immediate Action: Upgrade Coolify to version 4.0.0-beta.471 or later immediately to apply the necessary authorization middleware fixes.

Proactive Monitoring: Review system and application access logs for unusual terminal session activity or commands executed by users outside of their assigned project scopes.

Compensating Controls: If immediate patching is not possible, restrict network access to the Coolify administrative interface to trusted management subnets only to limit the attack surface.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability represents a significant security risk due to the potential for unauthorized command execution across managed environments. Organizations should prioritize upgrading to version 4.0.0-beta.471 as soon as possible to ensure proper authorization enforcement and prevent unauthorized access to critical infrastructure.

---METADATA---
VENDOR: CoolLabs
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.466
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify is affected by an authorization bypass vulnerability, allowing authenticated users to access resources they are not permitted to view via user-controlled keys.

Executive Summary:
An authorization bypass vulnerability in Coolify allows authenticated users to access sensitive data outside their scope, posing a significant risk to internal data confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-34044

Affected Software: CoolLabs Coolify

Affected Versions: < 4.0.0-beta.466

Vulnerability: This flaw involves an Authorization Bypass Through User-Controlled Key (CWE-639). An authenticated user can manipulate identifiers to access resources or data belonging to other users or system areas they are not authorized to interact with.

Business Impact

The CVSS score of 7.7 reflects a high risk of unauthorized information disclosure. By bypassing authorization controls, an attacker can access sensitive environment configurations, database credentials, or other critical data, leading to severe reputational and security consequences for the organization.

Remediation Plan

Immediate Action: Upgrade to Coolify version 4.0.0-beta.466 or later to enforce proper authorization checks.

Proactive Monitoring: Analyze application access logs for patterns of unusual resource requests, particularly those involving sequential IDs or out-of-bounds object access.

Compensating Controls: Use a Web Application Firewall (WAF) to filter and inspect requests for suspicious parameter manipulation if an immediate update is not feasible.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Authorization bypass flaws undermine the fundamental security model of any multi-user application. Administrators must apply the vendor-provided security update to version 4.0.0-beta.466 to ensure that resource access control policies are correctly enforced and data privacy is restored.

---METADATA---
VENDOR: Moby Project
PRODUCT: Moby (Container Framework)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability within the Moby open-source container framework potentially exposes containerized environments to unauthorized access or execution risks.

Executive Summary:
A high-severity vulnerability in the Moby container framework requires immediate attention to prevent potential unauthorized access to container environments.

Vulnerability Details

CVE-ID: CVE-2026-34040

Affected Software: Moby (Container Framework)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The Moby framework contains a security flaw, the specifics of which should be verified against the vendor's security advisory, that may allow for unauthorized operations within the container ecosystem.

Business Impact

The CVSS score of 8.8 highlights the high severity of this issue. As Moby is a foundational component for many containerized applications, a successful exploit could lead to the compromise of container isolation, unauthorized data access, or the execution of arbitrary code within the container host.

Remediation Plan

Immediate Action: Check the Moby project's official security advisories and apply the latest security patches or container runtime updates provided by the vendor.

Proactive Monitoring: Monitor container orchestration logs for unusual spikes in resource consumption or unauthorized container image execution attempts.

Compensating Controls: Ensure that container environments are running with minimal privileges and utilize security profiles such as AppArmor or SELinux to restrict container capabilities.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of June 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Due to the criticality of container infrastructure, administrators must prioritize identifying affected Moby versions. Applying patches promptly is essential to maintaining the integrity of containerized microservices and preventing lateral movement within the cluster.

---METADATA---
VENDOR: Coollabsio
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.469
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify contains an authenticated remote command injection vulnerability in application deployment handling, allowing remote code execution and sensitive data exfiltration.

Executive Summary:
An authenticated remote code execution vulnerability in Coolify allows attackers with application write permissions to compromise host environments and exfiltrate sensitive configuration data.

Vulnerability Details

CVE-ID: CVE-2026-34038

Affected Software: Coollabsio Coolify

Affected Versions: < 4.0.0-beta.469

Vulnerability: This is an OS command injection vulnerability triggered via application deployment fields like dockerfile_location and deployment commands. An attacker must possess authenticated application write permissions to exploit the flaw.

Business Impact

The vulnerability carries a CVSS score of 9.9, reflecting its ability to grant full system control to an attacker. Successful exploitation allows for the exfiltration of environment variables, which often contain database credentials, API keys, and other sensitive infrastructure secrets, leading to a complete compromise of the hosted application stack.

Remediation Plan

Immediate Action: Upgrade Coolify to version 4.0.0-beta.469 or later immediately to patch the command injection vulnerability.

Proactive Monitoring: Review deployment logs and audit application configuration changes for suspicious entries within the dockerfile_location or deployment command fields.

Compensating Controls: Implement strict Role-Based Access Control (RBAC) to limit the number of users with application write permissions until the patch is applied.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of Jul 6, 2026, a public proof-of-concept exploit is available. Given the availability of exploit code, the risk of active exploitation is significant.

Analyst Recommendation

The presence of a public exploit combined with the high CVSS score makes this a critical priority. Administrators must prioritize updating to version 4.0.0-beta.469 to prevent potential full-system compromise and data theft.

---METADATA---
VENDOR: coollabsio
PRODUCT: coolify
AFFECTED_VERSIONS: < 4.0.0-beta.464
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An authorization bypass vulnerability in Coolify allows authenticated users to access and manipulate resources belonging to other tenants.

Executive Summary:
An authorization flaw in Coolify allows authenticated users to bypass tenant isolation and clone resources into unauthorized cross-tenant environments.

Vulnerability Details

CVE-ID: CVE-2026-34037

Affected Software: coollabsio coolify

Affected Versions: < 4.0.0-beta.464

Vulnerability: The vulnerability exists in the cloneTo() Livewire action, which performs unscoped Eloquent lookups for destination resources. An authenticated user can leverage this to clone resources into destinations owned by other teams, effectively bypassing cross-tenant access controls.

Business Impact

This flaw breaks the fundamental multi-tenancy isolation of the Coolify platform. An attacker could gain unauthorized access to sensitive application or database configurations, leading to cross-tenant data exposure and potential privilege escalation within the management console. With a CVSS score of 9.9, this vulnerability represents a severe breach of trust and data integrity for any organization managing multiple teams or clients on a single instance.

Remediation Plan

Immediate Action: Upgrade Coolify to version 4.0.0-beta.464 or later to enforce proper scoping in resource operations.

Proactive Monitoring: Audit recent resource cloning activities and team access logs to identify any unauthorized cross-tenant resource movement.

Compensating Controls: Limit access to the Coolify management interface to trusted users only and implement strict internal network access controls until the patch is applied.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high impact on data confidentiality and integrity, administrators should update their Coolify instance immediately. Following the update, an audit of current resource permissions is recommended to ensure no unauthorized cross-tenant actions occurred prior to the fix.

---METADATA---
VENDOR: CoolLabs
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.466
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify is susceptible to an OS command injection vulnerability, enabling authenticated users to perform unauthorized command execution on the host machine.

Executive Summary:
An OS command injection vulnerability in Coolify allows authenticated attackers to execute arbitrary system commands, posing a substantial risk to the confidentiality and integrity of the system.

Vulnerability Details

CVE-ID: CVE-2026-34035

Affected Software: CoolLabs Coolify

Affected Versions: < 4.0.0-beta.466

Vulnerability: This vulnerability is classified as an OS Command Injection (CWE-78) occurring when the application fails to properly validate user-supplied input before passing it to system-level commands. Authenticated users can exploit this to achieve unauthorized code execution.

Business Impact

With a CVSS score of 8.8, the vulnerability presents a high risk of total system compromise. Successful exploitation could result in the breach of sensitive data, disruption of critical business services, and potential lateral movement within the network.

Remediation Plan

Immediate Action: Upgrade to Coolify version 4.0.0-beta.466 or newer immediately.

Proactive Monitoring: Review logs for unusual system calls and monitor for unauthorized changes to system configurations or files.

Compensating Controls: Restrict administrative access to the Coolify dashboard using multi-factor authentication and IP allowlisting to mitigate the risk of unauthorized exploitation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of command injection flaws, immediate patching is necessary to secure the environment. Ensure that all affected Coolify instances are updated to the specified version to neutralize this high-severity threat.

---METADATA---
VENDOR: CoolLabs
PRODUCT: Coolify
AFFECTED_VERSIONS: < 4.0.0-beta.466
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
Coolify contains an OS command injection vulnerability that allows an authenticated user to execute arbitrary commands on the host server.

Executive Summary:
An OS command injection vulnerability in Coolify allows authenticated attackers to execute arbitrary system commands, leading to potential full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-34034

Affected Software: CoolLabs Coolify

Affected Versions: < 4.0.0-beta.466

Vulnerability: This is an OS Command Injection vulnerability (CWE-78) triggered by the improper sanitization of inputs processed by the application. An authenticated user can leverage this flaw to run unauthorized commands on the underlying operating system.

Business Impact

A CVSS score of 8.8 underscores the severity of this issue, as it allows attackers to bypass security controls and gain unauthorized access to the host server. This could lead to severe consequences, including data theft, manipulation of hosted databases, or the total loss of server availability.

Remediation Plan

Immediate Action: Update Coolify to version 4.0.0-beta.466 or later to apply the security fix.

Proactive Monitoring: Continuously audit access logs for suspicious command patterns and monitor server performance for unauthorized background processes.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common shell injection signatures.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 7, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The risk posed by this OS command injection is severe and requires prompt attention. Security teams must ensure all Coolify deployments are patched to the fixed version to prevent authenticated actors from escalating their privileges to the OS level.

---METADATA---
VENDOR: Xiongmai
PRODUCT: Sofia on DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P)
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A critical vulnerability exists in the Sofia component of Xiongmai DVR/NVR devices. This flaw allows attackers to potentially compromise the surveillance system's integrity and availability.

Executive Summary:
Xiongmai DVR and NVR devices utilizing the Sofia component are subject to a high-severity vulnerability that could lead to unauthorized system access or control.

Vulnerability Details

CVE-ID: CVE-2026-34005

Affected Software: Xiongmai DVR/NVR

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The Sofia service, commonly used for remote management and video streaming on Xiongmai hardware, contains a flaw that may permit remote exploitation. Based on the technical context, an attacker could potentially interact with the service at a low authentication level to disrupt operations.

Business Impact

A successful exploit could result in the total compromise of physical security infrastructure, allowing unauthorized parties to view, delete, or manipulate surveillance footage. The CVSS score of 8.8 reflects a high severity, indicating that the vulnerability could lead to significant operational downtime and a loss of data confidentiality. Organizations relying on these devices for premises security face substantial reputational and physical risk.

Remediation Plan

Immediate Action: Administrators should immediately apply the latest firmware updates provided by Xiongmai or their respective OEM providers to patch the Sofia service.

Proactive Monitoring: Monitor network traffic for unusual connections to ports associated with DVR management and review system logs for unauthorized login attempts or configuration changes.

Compensating Controls: Isolate DVR/NVR hardware on a dedicated VLAN with no direct internet exposure and implement strict Access Control Lists (ACLs) to limit management access to trusted IP addresses.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw in a critical security component, the potential for exploitation is high.

Analyst Recommendation

The high CVSS score of 8.8 necessitates an immediate response to prevent unauthorized access to sensitive surveillance environments. Security teams must prioritize firmware deployment and network isolation to mitigate the risk of remote compromise.

---METADATA---
VENDOR: Infor
PRODUCT: Multiple Products
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security flaw has been identified in an unspecified component of Infor products.

Executive Summary:
A high-severity vulnerability in Infor products necessitates immediate attention to prevent potential system compromise.

Vulnerability Details

CVE-ID: CVE-2026-34003

Affected Software: Infor Multiple Products

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: A flaw was identified in an X component of the software, which, depending on the implementation, could be exploited to bypass security restrictions or access sensitive data.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a significant risk to business operations relying on Infor software. Successful exploitation could lead to unauthorized access to enterprise data, potential system downtime, and a disruption of core business processes.

Remediation Plan

Immediate Action: Consult the official Infor security advisory to identify specific patches or configuration changes required for your product deployment and apply them immediately.

Proactive Monitoring: Review enterprise application logs for suspicious activity and unusual access patterns that could indicate unauthorized attempts to exploit the flaw.

Compensating Controls: Utilize network segmentation and access control lists to limit exposure of the Infor software to untrusted networks while patches are being applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations using Infor products must treat this vulnerability with high priority. It is essential to monitor vendor communications for specific remediation instructions and apply all relevant security updates to mitigate the risk of unauthorized system access.

---METADATA---
VENDOR: Unknown
PRODUCT: Unknown
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security flaw has been identified in an unspecified product, necessitating immediate review and update procedures.

Executive Summary:
A high-severity security flaw has been identified in the affected software, which may allow for unauthorized operations or system compromise.

Vulnerability Details

CVE-ID: CVE-2026-34001

Affected Software: Unknown

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a flaw in the affected software's processing logic. The lack of specific details necessitates that administrators monitor vendor communications closely to understand the attack vector and the required mitigation steps.

Business Impact

The CVSS score of 7.8 indicates a high potential for adverse impact on business operations. Exploitation could lead to the compromise of sensitive information or unauthorized system modifications, impacting the overall security posture of the affected network environment.

Remediation Plan

Immediate Action: Consult the vendor’s security advisories and apply any available patches or configuration changes immediately.

Proactive Monitoring: Monitor for anomalous system behavior, particularly requests originating from untrusted sources.

Compensating Controls: Utilize intrusion detection systems (IDS) and firewalls to mitigate potential exploitation attempts while awaiting further vendor guidance.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Security teams must maintain vigilance regarding this CVE. Until further technical details are provided, it is recommended to apply a defense-in-depth strategy, ensuring that all software is updated to the latest available vendor-supported versions.

---METADATA---
VENDOR: Unknown
PRODUCT: Unknown
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A security flaw has been identified in an unspecified product, requiring immediate investigation and remediation.

Executive Summary:
A high-severity security flaw has been identified in the affected software, posing a risk of unauthorized access and system compromise.

Vulnerability Details

CVE-ID: CVE-2026-33999

Affected Software: Unknown

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: A vulnerability has been discovered in the software's implementation, the details of which are currently limited. Further analysis is required to determine the specific entry point and the level of authentication required for exploitation.

Business Impact

With a CVSS score of 7.8, this vulnerability poses a significant risk to the availability and confidentiality of the affected systems. Successful exploitation could lead to data breaches, unauthorized administrative access, or service disruption, necessitating an immediate review of the vendor’s security bulletins.

Remediation Plan

Immediate Action: Check the official vendor security portal for the latest patches and apply them immediately.

Proactive Monitoring: Review system and application logs for unusual authentication patterns or unauthorized process execution.

Compensating Controls: Implement network-level restrictions or WAF rules to minimize the attack surface until a formal vendor patch is verified and deployed.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the lack of specific vendor information, security teams should conduct an asset inventory to identify all instances of the affected software. Once identified, prioritize the application of vendor-provided patches to mitigate potential risks to organizational infrastructure.

---METADATA---
VENDOR: FreeRDP
PRODUCT: FreeRDP
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
FreeRDP is affected by a security vulnerability that could lead to unauthorized access or data compromise. This issue resides within the protocol implementation and affects various versions of the software.

Executive Summary:
FreeRDP contains a high-severity vulnerability that could allow unauthenticated remote attackers to compromise the security of Remote Desktop sessions.

Vulnerability Details

CVE-ID: CVE-2026-33986

Affected Software: FreeRDP (Remote Desktop Protocol Implementation)

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability exists in the FreeRDP implementation of the Remote Desktop Protocol. Similar to other RDP flaws, it likely allows a remote, unauthenticated attacker to exploit the way the software parses specific RDP messages or handles session negotiation, leading to a high-severity security breach.

Business Impact

Exploitation of RDP vulnerabilities can result in total loss of control over the affected endpoint. For businesses, this translates to potential data breaches, unauthorized installation of malware, and disruption of remote work capabilities. The CVSS score of 7.5 highlights the significant risk to organizational assets that rely on FreeRDP for remote management and access.

Remediation Plan

Immediate Action: Deploy the latest security updates for FreeRDP across all affected systems immediately.

Proactive Monitoring: Implement network-level logging to track RDP session durations and source locations, looking for patterns that deviate from established baselines.

Compensating Controls: Use Network Level Authentication (NLA) where possible and ensure RDP traffic is encapsulated within an encrypted tunnel, such as an SSH or VPN connection.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 31, 2026, there is no public information indicating active exploitation. However, the discovery of multiple vulnerabilities (including CVE-2026-33984) suggests a period of high risk for FreeRDP users as attackers may attempt to reverse-engineer the patches.

Analyst Recommendation

The repeated occurrence of vulnerabilities in RDP implementations underscores the need for a layered security approach. Apply the primary patch immediately, but also ensure that RDP is never directly exposed to the internet and that all remote access is protected by robust authentication mechanisms.

---METADATA---
VENDOR: FreeRDP
PRODUCT: FreeRDP
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
FreeRDP, an open-source Remote Desktop Protocol implementation, contains a security vulnerability. This flaw could potentially allow remote attackers to compromise RDP sessions or execute unauthorized actions.

Executive Summary:
A high-severity vulnerability in FreeRDP exposes Remote Desktop sessions to potential compromise, necessitating immediate updates to protect remote access infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-33984

Affected Software: FreeRDP (Remote Desktop Protocol Implementation)

Affected Versions: See vendor advisory for affected versions

Vulnerability: FreeRDP is a widely used implementation of the Remote Desktop Protocol. The vulnerability likely involves an unauthenticated remote attacker who can send malformed RDP packets to a client or server running the software. Given the CVSS score of 7.5, the flaw likely impacts the confidentiality or integrity of the remote session.

Business Impact

Remote Desktop Protocol is a high-value target for attackers. A vulnerability in a common implementation like FreeRDP could lead to unauthorized access to corporate desktops, session hijacking, or the theft of credentials. The CVSS score of 7.5 justifies a high-priority response to prevent potential lateral movement within the network following a successful exploit.

Remediation Plan

Immediate Action: Update all FreeRDP clients and server-side implementations to the latest version provided by the project or your software distribution.

Proactive Monitoring: Monitor for anomalous RDP connection attempts, particularly those originating from unknown external IP addresses or characterized by repeated connection failures.

Compensating Controls: Restrict RDP access to authorized users via a VPN or a secure Gateway, and implement Multi-Factor Authentication (MFA) to mitigate the risk of credential-based attacks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 31, 2026, there is no public information indicating active exploitation. However, RDP-related vulnerabilities are frequently targeted by ransomware groups and advanced persistent threat (APT) actors.

Analyst Recommendation

Organizations relying on FreeRDP for remote connectivity should apply patches immediately. In addition to patching, ensure that the "Least Privilege" principle is applied to RDP access and that all RDP endpoints are shielded from the public internet.

---METADATA---
VENDOR: Tenda
PRODUCT: F453
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability has been determined in the Tenda F453 router, which could lead to unauthorized administrative access or system failure.

Executive Summary:
The Tenda F453 router is affected by a high-severity vulnerability that could permit an attacker to gain unauthorized control over the device and its traffic.

Vulnerability Details

CVE-ID: CVE-2026-3398

Affected Software: Tenda F453

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: A vulnerability has been determined in the Tenda F453 router. The CVSS score of 8.8 suggests a severe flaw, likely involving improper input validation or a failure in the authentication logic within the device's operating system.

Business Impact

With a CVSS score of 8.8, this is a High-severity threat. Successful exploitation could allow an attacker to disrupt all network communications, steal administrative credentials, or use the router as a botnet node, leading to significant legal, financial, and operational consequences.

Remediation Plan

Immediate Action: Immediately download and install the latest firmware patch from Tenda’s official support channels to secure the F453 router.

Proactive Monitoring: Enable and review system alerts for any unauthorized configuration changes or attempts to access restricted system files on the router.

Compensating Controls: Restrict administrative access to the router to physical console connections or a dedicated, isolated management VLAN to reduce the attack surface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. The high severity indicates that the vulnerability is likely critical to the device's security architecture.

Analyst Recommendation

This vulnerability presents an unacceptable risk to any network utilizing the affected Tenda F453 hardware. Immediate remediation via the manufacturer's patch is required to prevent potential exploitation and ensure the security of the network infrastructure.

---METADATA---
VENDOR: Notesnook
PRODUCT: Notesnook
AFFECTED_VERSIONS: Web/Desktop < 3.3.11, Android/iOS < 3.3.17
---END_METADATA---

Description Summary:
Notesnook suffers from a stored XSS vulnerability in its Web Clipper that can be escalated to Remote Code Execution in the desktop application due to insecure Electron configurations.

Executive Summary:
A stored XSS vulnerability in the Notesnook Web Clipper allows an unauthenticated attacker to achieve full Remote Code Execution on desktop clients by exploiting insecure Electron settings.

Vulnerability Details

CVE-ID: CVE-2026-33976

Affected Software: Notesnook Notesnook

Affected Versions: Web/Desktop prior to 3.3.11; Android/iOS prior to 3.3.17

Vulnerability: The Web Clipper preserves malicious event-handler attributes (e.g., onload) from source pages. Because the desktop app uses Electron with nodeIntegration: true and contextIsolation: false, an unauthenticated attacker can use a stored XSS payload to execute arbitrary Node.js code on the victim's machine.

Business Impact

This vulnerability represents a severe risk to end-user data and local system security. Successful exploitation leads to full compromise of the user's workstation, including the ability to read, modify, or delete sensitive notes and access local files. The CVSS score of 9.6 highlights the critical nature of this "XSS-to-RCE" chain.

Remediation Plan

Immediate Action: Update the Notesnook application to version 3.3.11 (Web/Desktop) or 3.3.17 (Mobile) immediately.

Proactive Monitoring: Security teams should monitor for unusual outbound network connections from the Notesnook desktop application process.

Compensating Controls: Restrict the use of the Web Clipper feature on untrusted or high-risk websites until the application has been fully patched across the fleet.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 27, 2026, there is no public information indicating active exploitation of this vulnerability. The vulnerability is particularly dangerous because it leverages standard note-taking workflows to deliver the malicious payload.

Analyst Recommendation

Users must update their Notesnook clients immediately to the patched versions. The combination of stored XSS and insecure Electron defaults creates a direct path to system compromise. Organizations should ensure that all managed endpoints have received the update to prevent targeted attacks against employees using the software.

---METADATA---
VENDOR: Notesnook
PRODUCT: Notesnook
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability in the Notesnook note-taking application could lead to unauthorized data access or a compromise of user information.

Executive Summary:
Notesnook users face a significant security risk due to a high-severity flaw that could compromise the confidentiality and integrity of stored private notes.

Vulnerability Details

CVE-ID: CVE-2026-33955

Affected Software: Notesnook

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: While specific technical details are not fully disclosed, the vulnerability affects the core Notesnook application. The CVSS score of 8.6 suggests a high-impact flaw, possibly involving an authentication bypass or a breakdown in the encryption implementation used to protect user notes.

Business Impact

For organizations or individuals using Notesnook for sensitive data, this vulnerability presents a major risk of data exfiltration. A successful exploit could result in the exposure of proprietary information, credentials, or personal data stored within the app. The CVSS score of 8.6 justifies an urgent response to prevent reputational and legal damage following a potential data breach.

Remediation Plan

Immediate Action: Users should update the Notesnook application across all platforms (mobile, desktop, and web) to the latest secured version immediately.

Proactive Monitoring: Review account access logs for any unrecognized login sessions or unusual data synchronization patterns.

Compensating Controls: Ensure that multi-factor authentication (MFA) is enabled for the Notesnook account to provide an additional layer of security against unauthorized access.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 29, 2026, there is no public information indicating active exploitation of this vulnerability. Given the high CVSS score, the technical community is likely to investigate the flaw quickly, increasing the risk of a future exploit.

Analyst Recommendation

Due to the high severity and the sensitive nature of the data handled by Notesnook, immediate patching is mandatory. Users should verify they are running the latest version and remain vigilant for any signs of account compromise until the update is confirmed.

---METADATA---
VENDOR: Signal
PRODUCT: Signal K Server
AFFECTED_VERSIONS: Prior to 2.24.0-beta.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An unauthenticated privilege escalation vulnerability via Admin Role Injection in Signal K Server allows attackers to gain full administrative access.

Executive Summary:
A critical privilege escalation vulnerability in Signal K Server prior to version 2.24.0-beta.4 allows unauthenticated attackers to hijack administrative control.

Vulnerability Details

CVE-ID: CVE-2026-33950

Affected Software: Signal K Server

Affected Versions: Prior to 2.24.0-beta.4

Vulnerability: The vulnerability allows an unauthenticated attacker to inject an administrative role via the /enableSecurity endpoint, resulting in full control over the server.

Business Impact

The CVSS score of 9.4 highlights the severe impact of this vulnerability, which grants an attacker full administrative privileges. This could lead to the compromise of vessel routing data, modification of critical system configurations, and total server takeover, creating significant operational and safety risks.

Remediation Plan

Immediate Action: Upgrade Signal K Server to version 2.24.0-beta.4 or higher to remediate the administrative role injection flaw.

Proactive Monitoring: Monitor server logs for suspicious access to the /enableSecurity endpoint and verify the list of authorized administrators for any unauthorized additions.

Compensating Controls: Restrict network access to the Signal K Server management interface to trusted IP addresses only, using a VPN or firewall to limit exposure to the public internet.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the potential for complete administrative compromise, users of Signal K Server must upgrade to the latest version immediately. Furthermore, administrators should conduct an audit of current user permissions and security configurations to ensure no unauthorized administrative accounts were created while the system was vulnerable.

---METADATA---
VENDOR: MaxSite
PRODUCT: MaxSite CMS
AFFECTED_VERSIONS: Up to 109
---END_METADATA---

Description Summary:
A security flaw in MaxSite CMS up to version 109 presents a high-severity risk to the integrity of the content management system.

Executive Summary:
MaxSite CMS versions up to 109 contain a security vulnerability that could allow attackers to compromise the application's integrity and availability.

Vulnerability Details

CVE-ID: CVE-2026-3395

Affected Software: MaxSite CMS

Affected Versions: All versions up to and including 109

Vulnerability: A security flaw exists in the MaxSite CMS architecture. While the specific technical vector is not detailed in the summary, the vulnerability is categorized as high severity and impacts the core CMS functionality.

Business Impact

A successful exploit could result in unauthorized modifications to website content, potential data leakage, or service disruption. The CVSS score of 7.3 indicates a High severity level, suggesting that while exploitation may require specific conditions, the impact on business operations and reputation is significant.

Remediation Plan

Immediate Action: Upgrade MaxSite CMS to a version higher than 109 immediately to mitigate the identified security risks.

Proactive Monitoring: Monitor CMS administrative logs for unauthorized login attempts or unexpected changes to system configurations and file structures.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter suspicious traffic and enforce strong access control policies for the CMS administrative interface.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. The lack of a public exploit provides a window for administrators to patch before widespread scanning begins.

Analyst Recommendation

Organizations using MaxSite CMS should treat this as a high-priority update. Ensure that all CMS installations are moved to a supported, patched version to maintain a secure web presence.

---METADATA---
VENDOR: Incus
PRODUCT: Incus
AFFECTED_VERSIONS: Versions prior to 6.23.0
---END_METADATA---

Description Summary:
Incus versions prior to 6.23.0 are vulnerable to an arbitrary file write flaw where path traversal in systemd credential keys allows root-level writes to the host filesystem.

Executive Summary:
Incus virtual machine and container managers are vulnerable to a critical privilege escalation where an attacker can write arbitrary files as root on the host server, leading to full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-33945

Affected Software: Incus

Affected Versions: Versions prior to 6.23.0

Vulnerability: The vulnerability exists in the handling of systemd.credential configuration keys. Because Incus allows periods in credential names, an attacker can use traversal sequences (e.g., ../../../root/.bashrc) to escape the intended directory and write files to the host filesystem with root privileges.

Business Impact

A successful exploit allows an attacker with instance configuration privileges to escalate to root on the host server. This can result in a total loss of host integrity, permanent denial of service, or the ability to compromise all other instances running on the same hardware. The CVSS score of 9.9 highlights the extreme severity of this host-escape scenario.

Remediation Plan

Immediate Action: Update Incus to version 6.23.0 or later to patch the configuration key parsing logic.

Proactive Monitoring: Audit instance configuration logs for any keys containing suspicious path traversal patterns or excessive use of periods in systemd.credential fields.

Compensating Controls: Limit the ability to modify instance configurations to highly trusted administrators and use mandatory access control (MAC) systems like AppArmor to restrict where the Incus daemon can write files.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Host-escape vulnerabilities in virtualization platforms are among the most critical security risks. Administrators must apply the version 6.23.0 update immediately to prevent instance-to-host privilege escalation.