BusyBox httpd contains a vulnerability where IP deny rules with invalid CIDR prefix lengths fail open, resulting in a parsed IP with a zeroed mask that matches no clients. This issue affects multiple BusyBox versions including various Ubuntu and Red Hat Hardened Images releases. The vulnerability has a CVSS score of 5.3 (medium severity). Red Hat has released updated BusyBox packages (version 1.37.0-9.1.hum1) addressing this and related CVEs.
Red Hat has released a security advisory for Red Hat Hardened Images RPMs, including multiple PHP packages version 8.5.11-2.hum1 for aarch64 and x86_64 architectures. This update addresses several vulnerabilities identified by multiple CVEs, including CVE-2025-1218. The advisory marks the severity as high but does not provide detailed technical descriptions or CVSS scores. Updated RPM packages are available to fix bugs and enhance security in these PHP packages.
A high severity security vulnerability identified as CVE-2026-9496 affects the grafana12.4 package within Red Hat Hardened Images RPMs. Red Hat has released updated RPM packages for aarch64 and x86_64 architectures to address this issue. No detailed technical information or CVSS score is provided in the advisory. The update is available and should be applied to remediate the vulnerability.
CVE-2026-100739 is a medium severity SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the viewresult.php file. The vulnerability arises from manipulation of the 'seno' argument, allowing remote attackers to perform SQL injection. The vendor has not responded to disclosure attempts, and no patch or fixed version information is available due to the product's rolling release model. Exploit code is publicly available, but no confirmed exploitation in the wild has been reported.
CVE-2026-82300 is a medium severity vulnerability in Elastic Elasticsearch involving uncontrolled resource consumption (CWE-400). This flaw can lead to denial of service (DoS) through excessive allocation of resources. The vulnerability affects multiple Elasticsearch versions from 8.0.0 through 9.5.3 in various ranges. No known exploits are reported in the wild, and no explicit patch information is provided in the source data.
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks that Fleet would otherwise apply.
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline feature privilege in a Kibana space could enumerate, read, modify, and delete draft Timeline objects belonging to other users in the same space. Read access is sufficient for enumeration and disclosure; the Timeline write privilege is required for modification and deletion.
CVE-2026-72668 is a high-severity vulnerability in Elastic Kibana versions 9.4.0 through 9.4.6 involving an unintended proxy or intermediary ('Confused Deputy') issue in the Kibana Agent Builder. This flaw allows a non-administrative user who can edit a shared agent to cause privileged operations to be executed under the identity of a higher-privileged user. If the same user can also author workflows, this can escalate to full administrative control of Kibana and the Elasticsearch cluster.
This content describes the development of custom Red Team tooling by a cybersecurity researcher to address common challenges in penetration testing workflows. The tools focus on reconnaissance, vulnerability scanning, proxy rotation, and AI-assisted security operations, aiming to integrate these functions into a cohesive workflow. No specific vulnerability or exploit is reported.
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the 'uacf7_wpcf7_mail_components' function in all versions up to, and including, 3.5.50. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: This is only exploitable when the plugin's PDF Generator module is enabled, which is disabled by default.
The US and China have agreed to establish a communication channel specifically for artificial intelligence-related incidents as part of broader diplomatic talks. This initiative aims to facilitate dialogue on AI risks and benefits and to prevent crises related to AI developments. The agreement was reached during a summit between the two countries' leaders, alongside continued cooperation on trade and military crisis communications. No specific technical vulnerabilities or exploits are described. The agreement reflects diplomatic efforts to manage AI risks at a governmental level rather than addressing a direct cybersecurity threat.
An independent white paper discusses the challenge that AI capability is advancing faster than accountability mechanisms. It highlights issues such as unclear responsibility when AI causes harm, limited auditability, risk transfer to users, workforce impacts without accountability, concentration of AI power, and difficulties in international governance. The paper proposes an international governance framework inspired by nuclear oversight models to address these gaps. It is a conceptual analysis rather than a specific vulnerability or exploit.
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groups_join() function deriving group-join eligibility from the ambient post's author capabilities via the global $post->post_author rather than from the currently authenticated user's own capabilities, while simultaneously minting and returning a valid groups-join-data hash and WordPress nonce for the caller in the same response — eliminating all authorization barriers to self-enrollment. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enroll themselves into any group including privileged groups carrying the groups_admin_groups capability, and to subsequently create and join a group containing every registered WordPress capability, effectively escalating their privileges to Administrator. Exploitation requires the attacker to supply an Administrator-authored post ID via the post_ID parameter of the authenticated wp_ajax_parse_media_shortcode handler in order to establish the privileged ambient post context used by the flawed authorization check.