CVE-2026-114493

LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those internal responses as gallery content.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Mudler

Products

Localai

CVE-2026-105474

Server‑Side Template Injection in SolusVM 2 Enabling Remote Code Execution

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Webpros

Products

Solusvm

CVE-2026-111687

WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass traversal bypasses the eval denylist to run OS commands as the service account.

CVSS 4.0 · 9.3 Critical EPSS 1.0% KEV · Not listed

Vendors

Rachelos

Products

Werss

CVE-2026-102503

Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)

Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass Biscuit capability policy enforcement and invoke arbitrary registered backend services (including command/stdio-backed MCP servers, A2A, and inference endpoints). While the MCP protocol stream handler enforces WithBiscuitAuth and Authorize checks, the parallel /libp2p-http ingress routes requests directly to backend service handlers without verifying a Biscuit token or mesh enrollment. Users should upgrade to version 0.1.0-alpha.3 or later.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Google

Products

Sam

CVE-2026-103091

Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)

Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registration flow (GET /info and POST /register in internal/controlplane/server.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8 allow a remote attacker to self-enroll into the mesh and invoke arbitrary tools across all connected MCP backend nodes. Because GET /info publicly discloses OIDC configuration, POST /register auto-enrolls any valid OIDC token holder without claim filtering or ban checks, and the default policy binds sam:system:authenticated to wildcard services and targets, an attacker can obtain a mesh credential with full read, write, and execution access on backend services. Users should upgrade to version 0.1.0-alpha.9 or later, which enforces a fail-closed default policy, explicit policy-binding requirements on enrollment, and ban checks.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Google

Products

Sam

CVE-2026-112292

CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules

CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and delete records because shipped PocketBase collections use empty API rules. Attackers can query /api/collections/<name>/records endpoints to steal server_token values and alert_configurations secrets, disable alerting, alter status pages, or delete monitoring data.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Operacle

Products

Checkcle

CVE-2026-112377

CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack

CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine attester and replay its Evidence to impersonate the attested workload and intercept data.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Ccc-attestation

Products

Attested-tls-poc

CVE-2026-109437

Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/messages without credentials, causing the Deep Agents ReAct loop to run attacker-directed shell commands through the local shell backend, resulting in remote code execution as the server process.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Cognicellai

Products

Cognition

CVE-2026-109442

piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell

piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list, exposing environment secrets such as LLM API keys and database credentials.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Cas-bigdatalab

Products

Piflow

CVE-2026-105772

Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files (when an agent tool invokes saveArtifact) outside the intended artifact storage root via crafted relative or percent-encoded path traversal sequences (such as ../ or ..%2F) in the userId or sessionId parameters when the ADK API server is exposed with the non-default FileArtifactService enabled. Applications using the default InMemoryArtifactService are unaffected. Upgrade to @google/adk version 0.6.0 or later.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Google

Products

Adk Typescript

CVE-2026-113802

Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler

Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.

CVSS 4.0 · 9.3 Critical EPSS 3.5% KEV · Not listed

Vendors

Wavlink

Products

Wl-wn530be1-a

CVE-2026-113613

FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python files into the plugins directory for code execution.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Flexget

Products

Flexget

CVE-2026-111281

Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen authserverip and authcode, making the jooandiag daemon execute their commands through /bin/sh, giving full device control.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Jooan

Products

Ja-a12

CVE-2026-43838

Stack-Based Buffer Overflow in Advantech ADAM-3600 Login Function

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

Adam-3600

CVE-2026-43836

Packet Forgery Vulnerability Enabling Remote Command Execution on Advantech ADAM‑3600

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

Adam-3600

CVE-2026-43845

Password Reset Mechanism Bypass Enables Authentication Breach

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

Adam-3600

CVE-2026-107806

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key, decrypts attacker-controlled contents, and replaces the live app.ini, including protected nginx command settings such as TestConfigCmd. Triggering POST /api/nginx/test then executes the restored command in the Nginx UI runtime context, affecting confidentiality, integrity, and availability. This issue is fixed in version 2.5.0.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

0xjacky Nginxui

Products

Nginx-ui Nginx Ui

CVE-2026-102182

Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be vulnerable. This issue affects Junos OS on MX Series: * All versions before 21.2R3-S11; * from 21.4 before 21.4R3-S12; * from 22.2 before 22.2R3-S8; * from 22.3 before 22.3R3-S5; * from 22.4 before 22.4R3-S9;

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Juniper Networks

Products

Junos Os

CVE-2026-86471

Apache CouchDB: Admin credentials leading to code execution as operating system user

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Apache

Products

Couchdb

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed

Vendors

Acymailing Acymailing.com

Products

Acymailing Acymailing.com Acymailing Extension For Joomla