Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM600): through 2.14.
CVE-2026-101070 is a path traversal vulnerability in dbgate affecting versions 7.3.0 and 7.3.1. The flaw exists in the Files Endpoint component, specifically in the function handling the 'runid' argument in packages/api/src/controllers/runners.js. This vulnerability allows remote attackers to manipulate the 'runid' parameter to perform path traversal attacks. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity). The vendor was contacted but did not respond, and no patch or fix information is currently available. Public exploit details have been disclosed, but no known exploits in the wild have been reported.
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection.
This issue affects enVision: before 260655.
Dayforce ESS Excelity contains a critical path traversal vulnerability (CWE-22) in its file download functionality. An unauthenticated attacker can exploit this flaw by sending a crafted GET request with a file path parameter that references arbitrary local files. This vulnerability allows unauthorized access to restricted files on the server. The issue has been fixed in version 4 of the product.
Dayforce ESS Excelity contains a reflected cross-site scripting (XSS) vulnerability in multiple endpoints. This allows an attacker to craft a malicious URL that executes arbitrary JavaScript in a victim's browser when opened. The vulnerability is fixed in version 4.
Dayforce ESS Excelity has a critical SQL injection vulnerability (CVE-2026-73640) in its password recovery functionality. An unauthenticated attacker can exploit a parameter in a GET request to perform time-based blind SQL injection. This vulnerability allows attackers to execute arbitrary SQL queries via the vulnerable parameter. The issue was fixed in version 3 of the product.
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM600): through 2.14.
The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker to obtain a valid session identifier without providing credentials, resulting in an authentication bypass. With this access, the attacker can perform unauthorized actions on upgrade-related functionalities. These actions can be abused to force the router to issue GET requests to arbitrarily chosen domains.
This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.
The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the router inoperable for a substantial period of time.
This issue was identified in firmware versions up to 4.2.17. Status of newer versions remains unknown.
A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2.
SoftPerfect NetScan is a network scanning tool that may be found on workstations. Its presence alone does not definitively indicate malicious activity such as ransomware, but it warrants further investigation with contextual telemetry to determine intent. The tool can run in GUI mode or headless mode, with the latter potentially indicating scripted or automated network discovery. Analysts should use endpoint telemetry and query languages like KQL or ES|QL to differentiate between benign IT scanning and potentially malicious reconnaissance.
A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. PR #1530 / commit 5f99b4d82 (7.2.5) hardened other export endpoints with checkSecureExportFilePath but omitted this endpoint. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-101292 is an unsafe reflection vulnerability in Apache ActiveMQ Artemis before version 2.34.0, affecting Red Hat JBoss Enterprise Application Platform 7.4.25. The vulnerability arises from the method FederationStreamConnectMessage.getFederationPolicy() invoking Class.forName() on unvalidated input from an authenticated federation peer, allowing arbitrary class loading. This can lead to denial of service conditions such as system-property poisoning, out-of-memory errors, or broker state manipulation.
Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers.
This issue affects Enocta Platform: through 2026-09-28.
Cameron John Wagenius, a former US Army soldier, was sentenced to 70 months in prison for hacking into AT&T and Verizon systems between April 2023 and December 2024. He stole and publicly disclosed confidential call detail records of a government official and conspired with others to extort and defraud multiple organizations by using stolen credentials obtained via brute force attacks. The conspirators also sold stolen data on cybercrime forums and attempted to extort at least $1 million from victims. Wagenius pleaded guilty to wire fraud conspiracy and extortion charges and was ordered to pay restitution. His accomplices were involved in other significant hacking campaigns affecting hundreds of organizations.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows XSS Targeting HTML Attributes.
This issue affects Enocta Platform: through 2026-09-28.
CVE-2026-18825 is a medium severity vulnerability in the connect-cors npm package maintained by github.com/antono. It involves an origin validation error in the middleware that allows attackers to bypass origin verification and perform cross-domain authenticated requests. The affected versions are from 0 up to and including 0.5.6. No patch or fix information is provided in the available data.
CVE-2026-101067 is a path traversal vulnerability in dbgate affecting multiple versions up to 7.3.1. It involves the saveUploadedFile function in files.js, where manipulation of filePath or fileName parameters can lead to unauthorized file system access. The vulnerability can be exploited remotely without authentication. Public exploit code is available, but no vendor response or patch has been provided.
This content discusses the potential security benefits of using the full range of Unicode characters and symbols in passwords. It highlights that incorporating a vast set of Unicode characters, including emojis and ancient scripts, could significantly increase password complexity and resistance to brute-force attacks. The discussion is speculative and focuses on future-proofing password security rather than describing a specific vulnerability or exploit.