---METADATA---
VENDOR: Microsoft
PRODUCT: Azure Databricks
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability in Azure Databricks allows unauthenticated attackers to elevate privileges and access internal network resources.

Executive Summary:
Azure Databricks is affected by a critical SSRF vulnerability that allows unauthenticated attackers to escalate privileges and gain unauthorized access to internal systems.

Vulnerability Details

CVE-ID: CVE-2026-33107

Affected Software: Microsoft Azure Databricks

Affected Versions: See vendor advisory

Vulnerability: This vulnerability involves a Server-Side Request Forgery (SSRF) flaw where the application can be coerced into making unauthorized requests. An unauthenticated attacker can leverage this to gain elevated privileges and interact with internal metadata services or other protected network resources.

Business Impact

A successful SSRF attack against Databricks can lead to the exposure of sensitive cloud credentials and internal network mapping. Given the CVSS score of 10.0, the risk includes full privilege escalation, allowing attackers to access, modify, or delete high-value data processed within Databricks clusters, leading to significant regulatory and operational risks.

Remediation Plan

Immediate Action: Update Azure Databricks to the latest version as specified in the Microsoft security advisory to remediate the SSRF vector.

Proactive Monitoring: Review outbound network logs from Databricks clusters for requests to internal IP addresses or metadata services (e.g., 169.254.169.254).

Compensating Controls: Implement egress filtering to restrict clusters from communicating with sensitive internal endpoints and use Azure Policy to enforce secure workspace configurations.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 3, 2026, no public exploits are known to be in use. SSRF in cloud environments is a high-value target for attackers looking to extract instance metadata and credentials.

Analyst Recommendation

The CVSS score of 10.0 demands immediate remediation. Administrators must ensure that their Databricks workspaces are updated and that network-level protections are in place to prevent SSRF-based credential theft. This is a critical security update that should be handled as an emergency change.

---METADATA---
VENDOR: Microsoft
PRODUCT: Azure Kubernetes Service (AKS)
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
A critical improper authorization vulnerability in Microsoft Azure Kubernetes Service allows unauthenticated attackers to elevate privileges over a network, potentially gaining full cluster control.

Executive Summary:
An unauthorized attacker can exploit improper authorization within Microsoft Azure Kubernetes Service to achieve remote privilege escalation, posing a critical risk to cloud infrastructure.

Vulnerability Details

CVE-ID: CVE-2026-33105

Affected Software: Microsoft Azure Kubernetes Service (AKS)

Affected Versions: See vendor advisory

Vulnerability: This vulnerability stems from improper authorization checks within the AKS environment. An unauthenticated attacker can exploit this flaw over a network to escalate their privileges, potentially gaining administrative access to the Kubernetes cluster without valid credentials.

Business Impact

A successful exploit could lead to a complete compromise of the Azure Kubernetes environment, allowing unauthorized access to sensitive containerized workloads and data. The CVSS score of 10.0 reflects the highest possible severity, as it enables remote attackers to bypass security boundaries and take full control of critical cloud infrastructure, resulting in significant operational downtime and data exposure.

Remediation Plan

Immediate Action: Update Microsoft Azure Kubernetes Service components to the latest available version immediately and consult the official Microsoft security advisory for specific patching instructions.

Proactive Monitoring: Review Azure activity logs and Kubernetes audit logs for unusual identity and access management (IAM) changes or unauthorized administrative requests.

Compensating Controls: Implement strict Network Security Group (NSG) rules and utilize Azure Policy to enforce the principle of least privilege across the Kubernetes environment.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of April 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the CVSS score of 10.0 and the nature of privilege escalation in cloud environments, the potential for exploitation is extremely high once technical details become public.

Analyst Recommendation

This vulnerability represents a maximum-risk scenario for organizations utilizing Azure Kubernetes Service. It is imperative that administrators prioritize the application of vendor-provided patches and configuration updates. Failure to secure these clusters could lead to total infrastructure takeover by remote threat actors.

---METADATA---
VENDOR: Microsoft
PRODUCT: M365 Copilot
AFFECTED_VERSIONS: See vendor advisory
CONFIDENCE: medium
MISSING: versions, patch, exploit_status
---END_METADATA---

Description Summary:
M365 Copilot contains an open redirect vulnerability that can be leveraged by an unauthorized attacker to facilitate privilege escalation over a network.

Executive Summary:
An open redirect vulnerability in M365 Copilot allows an unauthorized attacker to manipulate network traffic, potentially leading to unauthorized privilege escalation.

Vulnerability Details

CVE-ID: CVE-2026-33102

Affected Software: Microsoft M365 Copilot

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The application fails to validate destination URLs during redirection, allowing an open redirect flaw. An attacker can exploit this to redirect users to malicious sites, which may subsequently be used in more complex attack chains to achieve privilege escalation.

Business Impact

The CVSS score of 9.3 highlights the critical nature of this flaw. By leveraging the trust in the M365 environment, attackers can perform effective phishing or man-in-the-middle attacks to elevate privileges, potentially gaining unauthorized access to sensitive corporate data and administrative functions.

Remediation Plan

Immediate Action: Apply all security patches and configuration updates released by Microsoft for the M365 Copilot suite.

Proactive Monitoring: Monitor network and proxy logs for suspicious redirection patterns or traffic directed toward unrecognized, external domains.

Compensating Controls: Use URL filtering and browser-based security policies to restrict or warn users about redirects to non-sanctioned domains.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should monitor official Microsoft security bulletins for patches related to M365 Copilot. Given the high severity of potential privilege escalation, immediate application of vendor-provided security updates is strongly advised to protect sensitive internal environments.

---METADATA---
VENDOR: Mesop
PRODUCT: Mesop
AFFECTED_VERSIONS: 1.2.2 and below
---END_METADATA---

Description Summary:
Mesop versions 1.2.2 and below contain an unauthenticated remote code execution (RCE) vulnerability in a debugging endpoint within the AI testing module.

Executive Summary:
The Mesop UI framework is vulnerable to a critical, unauthenticated remote code execution flaw that allows attackers to gain full host-machine command rights.

Vulnerability Details

CVE-ID: CVE-2026-33057

Affected Software: Mesop (Python-based UI framework)

Affected Versions: 1.2.2 and below

Vulnerability: An explicit web endpoint (/exec-py) in the ai/ testing module infrastructure unconditionally ingests and executes base64-encoded Python code strings. This endpoint lacks authentication, allowing any individual who can route HTTP traffic to the server to execute arbitrary commands on the host machine.

Business Impact

This is a worst-case scenario vulnerability with a CVSS score of 9.8. An attacker can gain complete control over the server running the Mesop application, leading to total data compromise, installation of malware, or use of the host for lateral movement. The presence of a "debugging" endpoint in production environments poses an extreme risk.

Remediation Plan

Immediate Action: Update Mesop to version 1.2.3 immediately. If an update is not possible, disable or remove the ai/sandbox/wsgi_app.py module from the deployment.

Proactive Monitoring: Scan for the presence of the /exec-py route in your environment and monitor for any POST requests to this endpoint, which are likely malicious.

Compensating Controls: Use network-level filtering to block access to internal testing or debugging routes and ensure that development frameworks are not deployed with testing modules enabled in production.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 20, 2026, there is no public information indicating active exploitation. However, the nature of this vulnerability—a direct execution endpoint—makes it trivial to exploit once discovered.

Analyst Recommendation

The severity of this RCE flaw cannot be overstated. IT teams must ensure that no Mesop applications are running version 1.2.2 or below in any accessible environment. Immediate patching to version 1.2.3 is mandatory to prevent total system compromise.

---METADATA---
VENDOR: Mesop
PRODUCT: Mesop
AFFECTED_VERSIONS: 1.2.2 and below
---END_METADATA---

Description Summary:
Mesop versions 1.2.2 and below are vulnerable to path traversal, allowing unauthorized users to manipulate or delete arbitrary files on the host disk.

Executive Summary:
A critical path traversal vulnerability in the Mesop framework allows unauthenticated attackers to arbitrarily target, manipulate, or delete files on the server.

Vulnerability Details

CVE-ID: CVE-2026-33054

Affected Software: Mesop (Python-based UI framework)

Affected Versions: 1.2.2 and below

Vulnerability: The vulnerability exists in the handling of the state_token through the UI stream payload. Unauthorized actors can supply crafted tokens to target files outside the application bounds when the FileStateSessionBackend is utilized, leading to arbitrary file manipulation or denial of service.

Business Impact

With a CVSS score of 10.0, this vulnerability represents a total compromise of system integrity and availability. Attackers can delete critical service resources or overwrite configurations, causing permanent data loss or persistent denial of service. This level of access to the underlying filesystem is a critical threat to any organization hosting Mesop-based applications.

Remediation Plan

Immediate Action: Update Mesop to version 1.2.3 immediately to fix the path traversal logic and secure the session backend.

Proactive Monitoring: Monitor for unexpected file system changes or application crash loops that may indicate an attempted exploit of the file-based runtime backend.

Compensating Controls: If using the FileStateSessionBackend, switch to a more secure session management backend or implement strict filesystem permissions to limit the application's write access.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 20, 2026, there is no public information indicating active exploitation. Given the CVSS score of 10.0, this vulnerability is a prime candidate for automated exploit attempts.

Analyst Recommendation

The ability to manipulate arbitrary files on the host system requires immediate corrective action. Organizations must prioritize the update to Mesop 1.2.3. Failure to do so leaves the server highly vulnerable to both data destruction and system instability.

---METADATA---
VENDOR: Nginx UI (Open Source)
PRODUCT: Nginx UI
AFFECTED_VERSIONS: 2.3.5 and prior
---END_METADATA---

Description Summary:
Nginx UI versions 2.3.5 and prior are vulnerable to an authentication bypass on the /mcp_message endpoint, allowing unauthenticated attackers to take full control of the Nginx service.

Executive Summary:
A critical authentication bypass in Nginx UI allows unauthenticated network attackers to modify configurations and take over the Nginx service due to an empty default IP whitelist.

Vulnerability Details

CVE-ID: CVE-2026-33032

Affected Software: Nginx UI Nginx UI

Affected Versions: 2.3.5 and prior

Vulnerability: The /mcp_message endpoint in the Nginx UI MCP integration lacks mandatory authentication. While it relies on an IP whitelist, the default configuration is empty, which the software interprets as "allow all." This allows any network-adjacent attacker to invoke tools for restarting Nginx or modifying its configuration files without credentials.

Business Impact

A successful exploit grants an attacker full control over the Nginx web server's configuration and operational state. This can lead to service downtime, unauthorized redirection of web traffic, and potential exposure of backend services. The CVSS score of 9.8 highlights the severity of allowing unauthenticated administrative actions.

Remediation Plan

Immediate Action: Since no patch is currently available, administrators should immediately restrict access to the /mcp_message and /mcp endpoints via firewall rules or a reverse proxy.

Proactive Monitoring: Monitor Nginx configuration files for unauthorized changes and review Nginx UI logs for unexpected requests to the /mcp_message endpoint.

Compensating Controls: Manually configure the IP whitelist in the Nginx UI settings to include only trusted administrative IP addresses, ensuring it is not left empty.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 30, 2026, there is no public information indicating active exploitation. However, the lack of a patch at the time of publication significantly increases the risk for organizations running the default configuration.

Analyst Recommendation

In the absence of a vendor patch, organizations must implement strict network-level access controls to isolate the Nginx UI management interface. Restricting access to trusted internal IPs is a mandatory step to prevent unauthenticated takeover of the Nginx service.

---METADATA---
VENDOR: MCP (Model Context Protocol)
PRODUCT: mcp-memory-service
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A high-severity vulnerability in the mcp-memory-service, an open-source memory backend for multi-agent systems, could lead to unauthorized memory access or data leakage.

Executive Summary:
A security flaw in the mcp-memory-service could allow attackers to access or manipulate the memory state of AI agents, compromising the integrity of multi-agent systems.

Vulnerability Details

CVE-ID: CVE-2026-33010

Affected Software: MCP mcp-memory-service

Affected Versions: See vendor advisory for affected versions

Vulnerability: The mcp-memory-service contains a vulnerability in its memory backend management. With a CVSS score of 8.1, the flaw likely permits unauthorized retrieval or modification of stored context in AI systems, potentially allowing an attacker to influence agent behavior or extract sensitive information from the agent's memory.

Business Impact

Exploitation could lead to the exposure of sensitive data handled by AI agents or the "poisoning" of agent memory to cause incorrect or malicious actions. This poses a significant risk to organizations deploying multi-agent AI systems, as it directly impacts the reliability and confidentiality of automated processes.

Remediation Plan

Immediate Action: Apply the latest security updates to the mcp-memory-service and review access control policies for the memory backend.

Proactive Monitoring: Audit memory access logs for unusual retrieval patterns or unauthorized attempts to write to the memory service from unknown agents.

Compensating Controls: Implement strong authentication and encryption for all communications between AI agents and the memory service.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 22, 2026, there is no public information indicating active exploitation of this vulnerability. As AI infrastructure becomes a more prominent target, securing memory backends is critical.

Analyst Recommendation

Immediate patching of the mcp-memory-service is essential to protect the integrity of AI-driven workflows. Organizations should ensure that only authorized agents can access the memory service and that all stored data is protected against unauthorized tampering.

---METADATA---
VENDOR: Totolink
PRODUCT: N300RH
AFFECTED_VERSIONS: 6.1c.1353_B20190305
---END_METADATA---

Description Summary:
A remote OS command injection vulnerability exists in the Totolink N300RH Web Management Interface due to improper handling of the webWlanIdx parameter.

Executive Summary:
A critical command injection vulnerability in the Totolink N300RH router allows remote attackers to execute arbitrary OS commands and gain full control of the device.

Vulnerability Details

CVE-ID: CVE-2026-3301

Affected Software: Totolink N300RH

Affected Versions: 6.1c.1353_B20190305

Vulnerability: The vulnerability exists in the setWebWlanIdx function within /cgi-bin/cstecgi.cgi. By manipulating the webWlanIdx argument, a remote, unauthenticated attacker can trigger an OS command injection flaw.

Business Impact

Compromise of edge networking equipment like the N300RH can lead to traffic interception, DNS poisoning, and unauthorized access to the internal network. Attackers can utilize the device as a persistent foothold for further attacks or incorporate it into a botnet. The CVSS score of 9.8 and the availability of a public exploit significantly elevate the risk profile.

Remediation Plan

Immediate Action: Apply the latest firmware update provided by Totolink or replace the device if it has reached End-of-Life (EOL) and no patch is available.

Proactive Monitoring: Monitor network traffic for unusual outbound connections from the router and check for unauthorized changes to the router's configuration.

Compensating Controls: Disable the Web Management Interface on the WAN side and restrict LAN-side access to trusted administrative IP addresses only.

Exploitation Status

Public Exploit Available: Yes

Analyst Notes: As of Feb 27, 2026, a public exploit has been released. This drastically increases the likelihood of active exploitation by script kiddies and automated botnets.

Analyst Recommendation

Due to the availability of a public exploit and the critical nature of remote command execution, this vulnerability must be addressed immediately. Administrators should assume any device exposed to the internet is already at risk and should prioritize firmware updates or hardware replacement.

---METADATA---
VENDOR: Ubiquiti
PRODUCT: UniFi OS
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An improper input validation vulnerability in Ubiquiti UniFi OS allows high-privileged, network-adjacent users to execute arbitrary system commands.

Executive Summary:
A high-severity command injection flaw in Ubiquiti UniFi OS allows authenticated, high-privileged users to execute arbitrary system commands.

Vulnerability Details

CVE-ID: CVE-2026-33000

Affected Software: Ubiquiti UniFi OS

Affected Versions: See vendor advisory

Vulnerability: This is a command injection vulnerability requiring a high-privileged, authenticated user on the network. The flaw arises from inadequate input validation, which allows the execution of arbitrary commands when supplied through specific system interfaces.

Business Impact

With a CVSS score of 9.1, this vulnerability poses a significant risk to internal security by facilitating privilege escalation or lateral movement. Even though it requires high privileges, the potential for a compromised administrative account to gain full control of the underlying OS remains a severe threat to business continuity.

Remediation Plan

Immediate Action: Update all UniFi OS devices to the latest firmware to sanitize input handling processes.

Proactive Monitoring: Audit administrative activity and review command logs for suspicious use of system utilities.

Compensating Controls: Enforce the principle of least privilege for all administrative users and implement multi-factor authentication (MFA) to prevent account compromise.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 22, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should treat this as a high-priority update. Limiting the number of users with administrative access and ensuring those accounts are protected by strong authentication will significantly reduce the risk surface.

---METADATA---
VENDOR: WPEverest
PRODUCT: Everest Forms Pro (WordPress plugin)
AFFECTED_VERSIONS: Up to and including 1.9.12
---END_METADATA---

Description Summary:
Everest Forms Pro is vulnerable to unauthenticated Remote Code Execution via PHP Code Injection in its Calculation Addon, allowing attackers to execute code through unsanitized form fields.

Executive Summary:
Unauthenticated attackers can achieve full server compromise by injecting malicious PHP code into Everest Forms Pro fields that utilize the "Complex Calculation" feature.

Vulnerability Details

CVE-ID: CVE-2026-3300

Affected Software: WPEverest Everest Forms Pro

Affected Versions: Up to and including 1.9.12

Vulnerability: The Calculation Addon's process_filter() function insecurely concatenates user-submitted form values into a string passed to the eval() function. Because the application fails to escape single quotes or PHP control characters, an unauthenticated attacker can break out of the string context and execute arbitrary PHP code.

Business Impact

This vulnerability allows for complete unauthorized access to the WordPress environment and the underlying operating system. Attackers can steal sensitive user data, modify site content, or use the server as a pivot point for further internal network attacks. The CVSS score of 9.8 indicates a critical threat to the organization's digital assets.

Remediation Plan

Immediate Action: Update the Everest Forms Pro plugin and the Calculation Addon to the latest available version immediately to ensure user input is no longer passed to eval() unsafely.

Proactive Monitoring: Review form submission logs for entries containing PHP tags (<?php), backticks, or unusual character sequences in text and select fields.

Compensating Controls: Implement a WAF to block common PHP injection payloads and restrict the use of the "Complex Calculation" feature to trusted administrative users only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 31, 2026, there is no public information indicating active exploitation. The simplicity of the eval() injection makes this a high-priority target for attackers seeking to exploit WordPress environments.

Analyst Recommendation

Applying the vendor-provided patch is the only effective way to mitigate this critical risk. Administrators must ensure that both the core plugin and all associated addons are updated to the latest versions to protect against unauthenticated remote code execution.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.13
---END_METADATA---

Description Summary:
OpenClaw's device pairing process is vulnerable to a replay attack where bootstrap setup codes can be reused to escalate pairing scopes to administrative levels.

Executive Summary:
OpenClaw versions before 2026.3.13 are vulnerable to a critical bootstrap code replay flaw that allows attackers to escalate privileges to administrative levels during device pairing.

Vulnerability Details

CVE-ID: CVE-2026-32987

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.13

Vulnerability: The flaw exists in src/infra/device-bootstrap.ts, where bootstrap setup codes can be replayed during the verification phase. An attacker can exploit this by submitting a valid code multiple times before final approval, effectively escalating pending pairing scopes to operator.admin status.

Business Impact

This vulnerability allows an attacker to bypass the intended security controls of the device pairing process, gaining unauthorized administrative access to the platform. With a CVSS score of 9.8, the risk is critical as it facilitates unauthorized control over the device management infrastructure and potential data exposure.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.13 or later to ensure bootstrap codes are invalidated immediately after their first use or during the verification process.

Proactive Monitoring: Monitor device pairing logs for multiple verification attempts using the same bootstrap code and investigate any unauthorized elevations to operator.admin status.

Compensating Controls: Implement time-limited bootstrap codes and require multi-factor authentication for administrative device pairing approvals.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. The replay nature of this vulnerability makes it a high-priority target for attackers looking to gain a foothold in OpenClaw environments.

Analyst Recommendation

Replay attacks against authentication and pairing mechanisms are high-impact vulnerabilities. Immediate patching to version 2026.3.13 is required to prevent unauthorized administrative access and maintain the integrity of the device bootstrap process.

---METADATA---
VENDOR: Xerte
PRODUCT: Xerte Online Toolkits
AFFECTED_VERSIONS: Versions 3.14 and earlier
---END_METADATA---

Description Summary:
Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability, enabling remote code execution via malicious ZIP archives.

Executive Summary:
Unauthenticated attackers can execute arbitrary code on the host server by exploiting a file upload vulnerability in Xerte Online Toolkits.

Vulnerability Details

CVE-ID: CVE-2026-32985

Affected Software: Xerte Online Toolkits

Affected Versions: Versions 3.14 and earlier

Vulnerability: This is an unauthenticated arbitrary file upload vulnerability located in the template import functionality (import.php). Attackers can bypass authentication checks to upload a crafted ZIP archive containing PHP payloads, which are then extracted to a web-accessible directory for execution.

Business Impact

Successful exploitation allows an attacker to gain unauthorized shell access to the web server. This leads to the potential for complete data exfiltration, system downtime, and long-term persistence within the environment. The CVSS score of 9.8 indicates a critical risk to any organization hosting Xerte Online Toolkits.

Remediation Plan

Immediate Action: Upgrade Xerte Online Toolkits to the latest version (3.15 or higher) to resolve the authentication bypass and secure the file import logic.

Proactive Monitoring: Inspect the media and template directories for unexpected PHP files and monitor for unusual outbound network connections from the web server.

Compensating Controls: Disable PHP execution in directories where user-uploaded content is stored and implement strict file extension filtering at the web server level.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 20, 2026, there is no public information indicating active exploitation. The high CVSS score and the relative ease of exploiting arbitrary file uploads make this a likely target for threat actors.

Analyst Recommendation

Immediate remediation is required to prevent server compromise. Administrators should apply the latest security updates and verify that the import.php file is no longer accessible to unauthenticated users. A full compromise assessment is recommended if the software has been exposed to the internet without updates.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.12
---END_METADATA---

Description Summary:
A weak authorization vulnerability in OpenClaw's Zalouser allowlist mode allows attackers to bypass channel authorization by spoofing mutable group display names.

Executive Summary:
OpenClaw versions prior to 2026.3.12 contain a critical authorization vulnerability that allows attackers to route unauthorized messages to the agent by spoofing group names.

Vulnerability Details

CVE-ID: CVE-2026-32975

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.12

Vulnerability: In Zalouser allowlist mode, OpenClaw matches mutable group display names instead of stable, unique group identifiers. An attacker can create a new group with a name identical to an allowlisted group, thereby bypassing channel authorization and successfully routing messages to the agent.

Business Impact

This flaw allows unauthorized groups to interact with the OpenClaw agent, potentially leading to the disclosure of sensitive information or the execution of unauthorized tasks. The CVSS score of 9.8 emphasizes the critical risk associated with using non-unique, mutable attributes for security-critical authorization decisions.

Remediation Plan

Immediate Action: Update OpenClaw to version 2026.3.12 or later to ensure that the allowlist mechanism uses stable, unique group identifiers rather than mutable display names.

Proactive Monitoring: Review agent interaction logs for messages originating from unexpected or newly created groups that share names with trusted, allowlisted groups.

Compensating Controls: Disable Zalouser allowlist mode if it cannot be immediately patched, or implement manual verification for all new group-agent interactions.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. The reliance on display names for security is a significant design weakness that is easily exploitable by motivated attackers.

Analyst Recommendation

Using mutable strings for authorization is a high-risk practice. Organizations must prioritize the update to version 2026.3.12 to transition to identifier-based authorization and prevent attackers from spoofing trusted groups to gain unauthorized agent access.

---METADATA---
VENDOR: OpenClaw
PRODUCT: OpenClaw
AFFECTED_VERSIONS: Versions before 2026.3.11
---END_METADATA---

Description Summary:
An execution allowlist bypass in OpenClaw due to improper path normalization and glob matching allows attackers to execute unauthorized commands on the system.

Executive Summary:
OpenClaw versions before 2026.3.11 are vulnerable to a critical allowlist bypass that enables attackers to execute unauthorized commands by exploiting improper path normalization.

Vulnerability Details

CVE-ID: CVE-2026-32973

Affected Software: OpenClaw

Affected Versions: Versions before 2026.3.11

Vulnerability: The function matchesExecAllowlistPattern improperly normalizes patterns using lowercasing and glob matching. Attackers can use the ? wildcard to match across path segments on POSIX systems, allowing them to execute paths and commands that were intended to be blocked by the operator's allowlist.

Business Impact

A successful bypass of the execution allowlist allows an attacker to run arbitrary binaries or scripts on the host system. Given the CVSS score of 9.8, this vulnerability poses a severe risk of full system compromise, as the primary defense mechanism against unauthorized execution is rendered ineffective.

Remediation Plan

Immediate Action: Upgrade OpenClaw to version 2026.3.11 or later to implement a more robust and secure allowlist matching mechanism.

Proactive Monitoring: Audit execution logs for any commands that do not strictly match the intended allowlist and look for the use of wildcard characters in execution requests.

Compensating Controls: Use OS-level security features like AppArmor or SELinux to restrict the binaries that the OpenClaw process is permitted to execute, regardless of application-level allowlists.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Mar 29, 2026, there is no public information indicating active exploitation. However, glob-based bypasses are well-understood techniques, and the potential for exploitation is high for any environment relying on execution allowlists.

Analyst Recommendation

The integrity of execution allowlists is vital for preventing unauthorized code execution. It is imperative to apply the 2026.3.11 update immediately to ensure that attackers cannot circumvent these critical security boundaries through pattern manipulation.

---METADATA---
VENDOR: SAP
PRODUCT: com_mb24sysapi module
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
An unauthenticated remote attacker can exploit an OS command injection vulnerability in the SAP com_mb24sysapi module, leading to full system compromise and remote code execution.

Executive Summary:
SAP systems utilizing the com_mb24sysapi module are at critical risk of full remote compromise by unauthenticated attackers due to an improper neutralization of OS command elements.

Vulnerability Details

CVE-ID: CVE-2026-32968

Affected Software: SAP com_mb24sysapi module

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is a critical OS command injection vulnerability located within the com_mb24sysapi module. An unauthenticated remote attacker can inject special elements into system commands, enabling arbitrary code execution with the privileges of the application service.

Business Impact

A successful exploit allows an attacker to gain complete control over the affected SAP server. This could lead to the theft of sensitive business data, disruption of critical financial or supply chain processes, and potential lateral movement within the corporate network. The CVSS score of 9.8 reflects the critical nature of this flaw, as it requires no authentication and results in total loss of confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Apply the latest security patches provided by SAP for the affected products immediately.

Proactive Monitoring: Review system and application logs for unusual OS command executions or unauthorized access attempts originating from the com_mb24sysapi module.

Compensating Controls: Implement network-level filtering to restrict access to the affected module to trusted internal IP addresses only.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, because this is a variant of CVE-2020-10383, the technical path to exploitation is likely well-understood by threat actors, making the potential for exploitation high.

Analyst Recommendation

The severity of an unauthenticated RCE in a core SAP component cannot be overstated. Organizations should treat this as a top priority and apply the vendor-supplied patches during the next available maintenance window or sooner if possible.

---METADATA---
VENDOR: Everest Forms
PRODUCT: Everest Forms
AFFECTED_VERSIONS: Up to and including 3.4.3
---END_METADATA---

Description Summary:
The Everest Forms WordPress plugin is vulnerable to PHP Object Injection via unsafe deserialization of user-supplied form metadata.

Executive Summary:
An unauthenticated PHP Object Injection vulnerability in Everest Forms allows remote attackers to execute arbitrary code on the host server.

Vulnerability Details

CVE-ID: CVE-2026-3296

Affected Software: Everest Forms (WordPress Plugin)

Affected Versions: Up to and including 3.4.3

Vulnerability: The plugin processes stored form entry metadata using an unsafe unserialize() call without class restrictions. This allows unauthenticated attackers to inject malicious serialized objects through form fields, which are then processed by administrative pages.

Business Impact

This vulnerability carries a CVSS score of 9.8, reflecting the potential for full Remote Code Execution (RCE). Successful exploitation could result in complete site takeover, database compromise, and further lateral movement within the hosting environment.

Remediation Plan

Immediate Action: Update the Everest Forms plugin to the latest available version provided by the vendor.

Proactive Monitoring: Monitor for unusual database entries in the wp_evf_entrymeta table and audit server logs for suspicious PHP execution patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block malicious serialized PHP objects in HTTP requests.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Apr 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

PHP Object Injection is a high-risk vulnerability that requires immediate remediation. Users of the Everest Forms plugin must update immediately and review all form entries for signs of malicious injection.

---METADATA---
VENDOR: silex technology, Inc.
PRODUCT: SD-330AC and AMC Manager
AFFECTED_VERSIONS: See vendor advisory
---END_METADATA---

Description Summary:
silex technology SD-330AC and AMC Manager contain a heap-based buffer overflow vulnerability, potentially allowing arbitrary code execution.

Executive Summary:
A heap-based buffer overflow in silex technology devices allows remote attackers to execute arbitrary code, creating a critical risk of device takeover.

Vulnerability Details

CVE-ID: CVE-2026-32956

Affected Software: silex technology SD-330AC and AMC Manager

Affected Versions: See vendor advisory

Vulnerability: The vulnerability is a heap-based buffer overflow occurring during the processing of redirect URLs. Successful exploitation allows an attacker to execute arbitrary code with the privileges of the affected service.

Business Impact

Successful exploitation allows for complete remote control over the affected network devices, which can be leveraged for lateral movement within the network or persistent unauthorized access. With a CVSS score of 9.8, the potential for catastrophic system compromise is significant.

Remediation Plan

Immediate Action: Apply the latest firmware or software updates provided by silex technology, Inc. to address the heap overflow flaw.

Proactive Monitoring: Monitor network traffic for anomalous URL request patterns and review device logs for signs of service crashes or unexpected process restarts.

Compensating Controls: Isolate the affected devices from public-facing networks using VLANs or firewall rules to restrict access to the vulnerable interface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 20, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate action to secure affected hardware. Organizations must update their firmware and restrict access to these management interfaces to mitigate the risk of remote code execution.