Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. Attackers can deliver command execution or Agent configuration tasks to Agents within their authorization scope by exploiting the shared protobuf Task.Type namespace between service monitors and privileged operations.
Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint to crash the dashboard process, which persists the rule and causes repeated crashes on restart, disabling all monitoring and control plane functionality.
obot versions before 0.21.1 contain an authorization bypass vulnerability in the /mcp-connect endpoint. This flaw allows any authenticated user who knows a server ID to connect to restricted MCP servers without proper access control enforcement. Exploiting this issue enables attackers to access and manipulate sensitive backend systems via MCP tool calls using stored OAuth credentials. The vulnerability has a critical severity with a CVSS 4.0 score of 9.3.
CVE-2026-101065 is a critical vulnerability in the obot open-source AI agent platform. The Docker quickstart command, as documented in the README for all versions up to and including commit d7e6970, starts the container with authentication disabled by default and listens on 0.0.0.0:8080. This allows any unauthenticated user who can reach the exposed port to gain full administrative access to the Obot API and UI. The vulnerability is exacerbated by the mounting of /var/run/docker.sock into the container, giving attackers control over the host's Docker environment. The fix is documentation-only, requiring operators to enable authentication by setting OBOT_SERVER_ENABLE_AUTHENTICATION=true before exposing the service to untrusted networks.
Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and cloud metadata endpoints, reading responses in error messages to disclose sensitive credentials.
Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to /v0.1/servers.
CVE-2026-101062 is a high-severity authorization vulnerability in obot-platform's obot product versions before 0.23.0. When OBOT_SERVER_ENABLE_AUTHENTICATION=true, the OAuth dynamic client registration endpoint is exposed without authentication or restrictions on redirect URIs. This allows an attacker to register a malicious client and trick a logged-in user into authorizing it, resulting in the attacker obtaining an access token with the victim's full group privileges. The token is accepted by obot APIs without proper audience validation, enabling unauthorized access to victim resources. Version 0.23.0 fixes this by adding a consent screen, restricting token scope to the MCP server, and enforcing audience validation.
CVE-2026-100879 is a medium severity vulnerability in zhistaredu StarTraining up to versions 3.8.0 and 3.8.1. It involves missing authorization in the checkRoleAllowed function within the SysRoleServiceImpl.java file of the dataScope endpoint. The flaw allows remote attackers with limited privileges to bypass authorization checks. Although an exploit is publicly available, there are no reports of active exploitation in the wild. The vendor has not responded to disclosure requests, and no patch or official fix has been announced.
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. The manipulation of the argument userId/roleIds leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
A numeric truncation error in the OCI delta stream parser of flatpak on 32-bit Red Hat Enterprise Linux 10 systems causes heap buffer overflows. This occurs because 64-bit size values are truncated to 32-bit during memory allocation, leading to undersized buffers. An attacker controlling an OCI registry can exploit this vulnerability during flatpak install or update operations to potentially execute arbitrary code.
CVE-2026-100877 is a cross-site scripting (XSS) vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting an unknown functionality in registrationform.php. The vulnerability arises from improper handling of the FName, LName, and Addrs parameters, allowing remote attackers to execute script code. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The product uses a rolling release model, so specific affected or fixed versions are not available.
CVE-2026-96279 is a vulnerability in Red Hat Enterprise Linux 10 involving improper link resolution before file access during Flatpak application installation or update from an OCI remote. A malicious OCI registry can create hardlinks to arbitrary host files in the extraction directory, potentially exposing sensitive host file contents. For system-wide installs executed as root, this includes critical files such as /etc/shadow. The vulnerability has a CVSS score of 6.5 (medium severity).
CVE-2026-100876 is a medium severity vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting an unknown function in loginlinkstudent.php. Manipulating the 'umail' argument leads to missing authentication, allowing remote exploitation. The vulnerability has a public exploit available. The product uses a rolling release model, so specific affected or fixed versions are not provided. The vendor did not respond to disclosure attempts, and no patch information is available.
CVE-2026-100874 is a medium severity SQL injection vulnerability in the mathurvishal CloudClassroom-PHP-Project affecting the addnewstudent.php file. The flaw allows remote attackers to manipulate SQL queries, potentially compromising data integrity and confidentiality. The product uses a rolling release model, so specific affected versions are not identified. The vendor did not respond to disclosure attempts, and no patch or remediation information is available. Exploit code has been published but is not known to be actively used in the wild.
CVE-2026-100873 is a cross-site request forgery (CSRF) vulnerability in the mathurvishal CloudClassroom-PHP-Project. The vulnerability affects an unknown function and can be exploited remotely. The product does not use versioning, so specific affected versions cannot be identified. The vendor was contacted but did not respond, and no patch or remediation information is available. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Exploit code is publicly available, but no known active exploitation in the wild has been reported.
CVE-2026-88778 is a high-severity vulnerability in Citrix NetScaler ADC and Gateway involving predictable exact values derived from previous values. This weakness can affect versions before 14.1-73.37 and 13.1-64.23 for ADC and Gateway products, including certain FIPS and NDcPP variants. The vulnerability is classified under CWE-342, indicating issues with predictable values that may weaken security mechanisms.
CVE-2026-88777 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway products. It affects versions prior to 14.1-73.37 and 13.1-64.23, including certain FIPS and NDcPP variants. The flaw can cause unpredictable or erroneous behavior, including denial of service conditions. The vulnerability has a high severity rating with a CVSS 4.0 score of 8.8. No known exploits in the wild have been reported. The vendor has not provided explicit patch links or advisories in the provided data.
CVE-2026-88776 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway products. It affects versions prior to 14.1-73.37 and 13.1-64.23, including specific FIPS and NDcPP builds. The flaw can cause unpredictable or erroneous behavior and may lead to Denial of Service conditions. The vulnerability has a high severity rating with a CVSS 4.0 score of 8.8. No known exploits are reported in the wild. This issue is categorized under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
CVE-2026-101050 is an improper authentication vulnerability in heymrun's heym software versions before 0.0.53. The flaw occurs because the software fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints when credential_id is absent or secret_token is empty. This allows remote unauthenticated attackers to post forged Telegram updates, triggering workflows with the owner's configured credentials and potentially executing actions based on attacker-supplied input.
Heym versions before 0.0.53 contain an improper authentication vulnerability where Slack request signatures are not verified if trigger nodes lack credential IDs or have empty signing secrets. This allows remote unauthenticated attackers to send forged Slack events to known webhook URLs, potentially triggering workflows with the owner's credentials.