Live Threat Intelligence Radar

CVE-2026-112302 is a path traversal vulnerability in the kiwilan php-archive library up to version 2.3.02. It affects the ArchiveZip::extract function in the src/Readers/ArchiveZip.php file. This vulnerability allows remote attackers to manipulate file extraction paths, potentially leading to unauthorized file access or overwriting. The vulnerability has a medium severity with a CVSS score of 5.3. The vendor was notified but has not responded or provided a fix. Public exploit code is available, but no active exploitation in the wild has been reported.

A heap-based buffer overflow vulnerability exists in the Pillow Python imaging library's tiled-TIFF decoder in versions from 8.2.0 up to but not including 13.0.0. This occurs because the decoder can read beyond the allocated tile buffer when copying four-byte pixels, potentially exposing adjacent heap data or causing a crash. The issue is fixed in version 13.0.0.

Plack::Middleware::ETag versions from 0.04 up to but not including 0.06 for Perl disclose file inode numbers in the default ETag header when the response body is a filehandle and the file_etag option is not set. This exposure allows clients to obtain inode numbers, which may aid in backend fingerprinting and correlation of files served through different URLs.

A buffer over-read vulnerability exists in python-pillow Pillow versions prior to 13.0.0. The issue occurs in the P;2L and P;4L raw decoders, where the decoders can read past the end of an input buffer due to a mismatch between calculated packed-pixel row size and actual unpacker footprint. This can lead to disclosure of up to three adjacent heap bytes or cause a process crash. The vulnerability is fixed in version 13.0.0.

A heap-based buffer overflow and stale-heap disclosure vulnerability exists in the python-pillow Pillow library from versions 2.0.0 up to but not including 13.0.0. The flaw occurs in the _tiffWriteProc function when saving compressed TIFF data to targets without a usable file descriptor, such as BytesIO. This can lead to a crash or potential code execution. The issue is fixed in version 13.0.0.

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability in the python-pillow Pillow library versions 5.1.0 through 12.x allows an attacker to cause a denial of service via an infinite recursion in the PDF parser when processing deeply nested PDF objects. This occurs because the PdfParser.get_value() method can recurse without limit when reading nested arrays and dictionaries in PDFs opened for append. The issue is fixed in version 13.0.0.

CVE-2026-76788 is a high-severity vulnerability in the Zephyr project's OSDP Control Panel reply parser. It involves a lack of proper bounds checking on payload lengths for certain reply types, allowing an attacker with access to the RS-485 bus to cause a stack buffer overflow. This can lead to crashes or potential control-flow hijacking in the OSDP receive thread. The vulnerability affects Zephyr versions from 3.3.0 through 4.4.2. A fix has been implemented that adds proper bounds checking to prevent overflow.

CVE-2026-76787 is a memory-safety vulnerability in the Zephyr project's UpdateHub firmware-over-the-air client. The flaw arises when the client parses CoAP probe responses using Zephyr's JSON library without validating the presence of the "sha256sum" field, leading to a NULL pointer dereference. This results in a read at address zero, causing a denial of service by halting the system on certain architectures. The vulnerability can be triggered remotely without user interaction when DTLS is disabled, allowing an attacker to send malformed metadata over unauthenticated CoAP. The issue impacts availability only and does not lead to information disclosure or code execution. A fix has been implemented by adding explicit NULL checks before dereferencing the sha256sum field.

A high-severity vulnerability (CVE-2026-112390) affects the Python Pillow imaging library versions from 7.2.0 up to but not including 13.0.0. The issue is an infinite loop triggered when processing MIC image files with embedded TIFF frames, causing the frame traversal to never advance and potentially leading to a worker thread consuming full CPU indefinitely. This occurs due to a mismatch in frame indexing and state resetting in the MicImageFile class. The vulnerability is fixed in Pillow version 13.0.0.