CVE-2026-119706

LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named_tensors, which ForkingPickler.loads deserializes without validation, executing commands as the api_server process.

CVSS 4.0 · 9.3 Critical EPSS 1.0% KEV · Not listed

Vendors

Internlm

Products

Lmdeploy

CVE-2026-119568

vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Vsftpd Project

Products

Vsftpd

CVE-2026-112408

Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Aws

Products

Amazon Sagemaker Python Sdk

CVE-2026-103093

Sandbox Escape via Table Rotation in ServiceNow AI Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating system, potentially enabling further unintended access. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. We are not currently aware of malicious exploitation against ServiceNow instances. We recommend customers promptly apply appropriate updates or upgrade to a patched release if they have not already done so.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Servicenow

Products

Servicenow Ai Platform

CVE-2026-82854

Nodemailer before 8.0.4 SMTP Command Injection via envelope.size

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail(), the value is concatenated into the SMTP MAIL FROM command (as SIZE=...) without sanitization, allowing injection of arbitrary SMTP commands such as RCPT TO to silently add attacker-controlled recipients. Exploitation requires the application to expose the envelope size to attacker-controlled input, as Nodemailer does not include size in the default auto-constructed envelope.

CVSS 4.0 · 9.3 Critical EPSS 2.0% KEV · Not listed

Vendors

Nodemailer

Products

Nodemailer

CVE-2026-81694

openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command

openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifest) before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control bytes that repaint a forged PASSED verdict on screen, masking actual tamper detection. Fixed in 1.4.9 by routing drive-derived names through sanitize_for_display().

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Jahlives

Products

Openssl Encrypt

CVE-2026-73608

SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttributeViewSearchTarget

SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4-alpha.3) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization checks (no CheckReadonly, no publish-access or encrypted-notebook gating). Given a database identifier taken from a published page and a keyword, an anonymous reader can query the endpoint to retrieve matching database row content, including rows that publish filters (FilterAttributeViewByPublishAccess) would otherwise withhold. No released stable version is affected.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

B3log Siyuan

Products

Siyuan Siyuan

CVE-2026-65689

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attackers to read arbitrary files from the server filesystem by supplying a crafted request. Attackers can exploit this path traversal weakness to disclose sensitive server files, including authentication credentials, enabling full unauthorized access to the application. The vulnerability is specific to the DataHub module, which was introduced in Bold Reports 6.3. Therefore, versions prior to 6.3 are not affected.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Bold Reports Syncfusion

Products

Standalone Report Designer Standalone Report Designer

CVE-2026-6257

Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management

Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by first uploading a text file and renaming it to .htaccess to inject Apache directives that register PHP-executable MIME types, then uploading another file and renaming it to .php to execute arbitrary operating system commands as the www-data user.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Vvveb

Products

Vvveb

CVE-2026-61451

Grav API Plugin before 1.0.4 Password Reset Token Poisoning via admin_base_url

The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in the POST /api/v1/auth/forgot-password endpoint. The sanitizeHttpUrl() function only checks that the URL scheme is http/https and never verifies the host against the server's own origin, so an attacker can supply an arbitrary host. As a result, an unauthenticated attacker can cause the password reset email sent to a victim to contain a reset link pointing at an attacker-controlled server; when the victim follows the link, the valid reset token is disclosed to the attacker, enabling full account takeover. The vulnerable base URL can also be influenced via the Referer or Origin headers.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Getgrav

Products

Grav Grav-plugin-api

CVE-2025-71334

Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling operations. By supplying a path-traversal value (e.g., '../../../../../tmp') as the chatflow id, an unauthenticated attacker can use the /api/v1/chatflows endpoint (via addBase64FilesToStorage) to write arbitrary files, and the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints (via streamStorageFile) to read arbitrary files. Arbitrary file write may lead to remote code execution.

CVSS 4.0 · 9.3 Critical EPSS 4.4% KEV · Not listed

Vendors

Flowiseai

Products

Flowise

CVE-2024-58366

SurrealDB before 1.1.1 Format String via Scripting Functions

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Delskayn Surrealdb

Products

Rquickjs Surrealdb

CVE-2023-53982

PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter

PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements to extract information or perform time-based blind SQL injection attacks.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Sigb

Products

Pmb

CVE-2026-112380

Missing authorization in the WhatsApp channel in Kiro Crew

Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kiro Crew via messages sent to the group. To remediate this issue, users should upgrade to version 0.7.2.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Amazon

Products

Kiro Crew

CVE-2026-89010

WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync_server daemon on TCP port 13136. The daemon interpolates attacker-controlled filename input containing shell metacharacters into a shell command string via sprintf() and passes it to system() without sanitization, enabling root-level command execution on the device.

CVSS 4.0 · 9.3 Critical EPSS 3.2% KEV · Not listed

Vendors

Wavlink

Products

Wn535m1 Wn535m3

CVE-2026-118690

Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs

Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. Attackers can extract the JWT secretKey from security.json in the ZIP, forge administrator tokens, and create persistent admin accounts for full server control.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Signalk

Products

Signal K Server

CVE-2026-118579

D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

D-link

Products

Dir-505

CVE-2026-119145

Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload

Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage directory to achieve remote code execution on the server.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Frappe

Products

Frappe

CVE-2026-115995

Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78)."

CVSS 4.0 · 9.4 Critical EPSS 1.4% KEV · Not listed

Vendors

Unitree Robotics Unitreerobotics

Products

Unitree Go2 Unitree Go2

CVE-2026-114358

SQL Injection Vulnerability in Radius Xenia M2M Platform

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input fields to the targeted system.  Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to sensitive information, enumerate database structure or modify database records on the targeted system.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Radius Synergies

Products

Radius Xenia M2m Platform