Threat database

CVE-2026-14984 is a critical vulnerability in Teledyne FLIR Aware2 up to version 6.9.0.2 that involves cleartext transmission of sensitive information. This flaw allows remote unauthenticated attackers to intercept, hijack, or modify session traffic to Teledyne FLIR PackBot robots by sniffing or hijacking network communications. The vulnerability affects primary control endpoints and poses a high risk to confidentiality, integrity, and availability of the affected systems.

CVE-2026-14983 is a vulnerability in Teledyne FLIR Aware2 versions up to 6.9.0.2 where the web interface lacks authentication for a critical reboot function. This allows remote unauthenticated attackers to cause denial of service by misusing the reboot endpoint on Teledyne FLIR PackBot robots running the affected software.

CVE-2026-53964 is a high-severity vulnerability in adfinis document-merge-service prior to version 9.1.0. It allows remote code execution via server-side template injection in XLSX templates processed by the xltpl library using a non-sandboxed Jinja environment. The flaw enables execution of user-supplied code with the privileges of the document-merge-server user, potentially compromising the container. This issue has been fixed in version 9.1.0.

CVE-2026-55251 is a code injection vulnerability in the netbox-community devicetype-library repository. The issue arises because the continuous integration (CI) workflow executed code from pull requests before any maintainer review, allowing an unprivileged contributor to run arbitrary code on the CI runner by modifying certain configuration files. This vulnerability has been patched by commit f41fc1e.

CVE-2026-102628 is a critical vulnerability in the Eummena Cadmos LTI application caused by Laravel debug mode being enabled in a publicly accessible environment. This misconfiguration allows an unauthenticated attacker to trigger an unhandled exception via a GET request, exposing the entire server environment including sensitive .env configuration variables in plaintext. The issue was fixed on or before 2026-09-02.

Wormhole.app versions prior to 2026-08-22 contain a Server-Side Request Forgery (SSRF) vulnerability due to misconfiguration of the coturn TURN server. This flaw allows unauthenticated attackers to access instance metadata or initiate TCP connections from the Wormhole relay's IP address. The vulnerability has a medium severity with a CVSS score of 6.5.

CVE-2026-93832 is a medium severity vulnerability in the Motorola Setup App where a component is exported without proper authorization. This flaw allows an attacker with limited privileges to revoke runtime permissions from other apps on the device. The vulnerability does not require user interaction and has a low attack complexity but requires local access with some privileges.

Joyland.ai contains a vulnerability where its app accepts invalid SSL certificates in the invisible advertisement WebView by default. This improper certificate validation is classified under CWE-295. The vulnerability has a medium severity with a CVSS score of 5.3 and does not affect confidentiality or availability but impacts integrity. All versions of Joyland.ai are affected. No patch or remediation guidance is currently provided.

Joyland.ai, an Android application, permits cleartext HTTP traffic on Android 9 and later versions, where the default behavior is to block such traffic. This vulnerability (CVE-2026-102670) is classified under CWE-319, indicating the cleartext transmission of sensitive information. The issue affects all versions of Joyland.ai. The CVSS 4.0 base score is 5.3, indicating a medium severity vulnerability with network attack vector and low complexity. No official patch or remediation information is provided, and no known exploits are reported in the wild.

Joyland.ai suffers from improper validation of TLS certificates, specifically failing to verify hostnames. This flaw allows a malicious host to connect or intercept chat messages by presenting a certificate with a mismatched hostname. The vulnerability affects all versions of Joyland.ai. It has a medium severity with a CVSS score of 5.3. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-54049 is a stored cross-site scripting (XSS) vulnerability in the Sakai Conversations tool affecting versions 23.0 to before 23.5 and 25.0 to before 25.3. The vulnerability arises because topic and post messages are stored without HTML sanitization and rendered using LitElement's unsafeHTML() directive. Authenticated users with access to a site using the Conversations tool can inject arbitrary HTML and JavaScript, which executes in the browsers of other users viewing the content. This issue has been fixed in versions 23.5, 25.3, and 26.0.

Joyland.ai has a vulnerability (CVE-2026-102668) due to improper TLS certificate validation. The app accepts any TLS certificates from servers without validating them, which can undermine secure communications. This vulnerability has a medium severity with a CVSS score of 6.9. No patch or remediation information is currently available.

Joyland.ai contains a critical vulnerability (CVE-2026-102667) that allows an attacker with shared network access to inject JavaScript into WebView content. This can lead to unauthorized access to clipboard data, arbitrary HTTP requests, and app-internal storage. If the app has previously granted permissions, the attacker could access sensitive device features such as the file system, camera, microphone, and GPS tracking.

CVE-2026-82358 is an authorization bypass vulnerability in RT-Labs AB C-Open CANopen protocol stack. The flaw exists in the SDO server implementation where write permissions are not properly validated during download-segment frames processing. This allows an unauthenticated attacker on the CAN bus to overwrite read-only Object Dictionary entries by sending crafted SDO frames. The vulnerability is fixed in version 1.1.1.

Joyland.ai contains hard-coded credentials for the GeTui push notification service. This vulnerability allows an attacker to use these credentials to access the GeTui REST API and send arbitrary push notifications to any user or group of users within the app. The issue affects all versions of Joyland.ai. The CVSS score is 6.5, indicating a medium severity vulnerability.

CVE-2026-82357 is a NULL pointer dereference vulnerability in RT-Labs AB C-Open CANopen software. It occurs when the LSS protocol is used to configure a device with a misconfigured identity object lacking required subindexes. An unauthenticated remote attacker with CAN bus access can trigger the vulnerability, potentially causing the device to crash. The issue is fixed in version 1.1.1.

Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace. [...]

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

Polish dental software vendor FELG Dent suffered a data breach involving patient records and received a ransom demand. An attacker exploited insecure API endpoints to access sensitive patient and staff data, including personal identifiers and medical information. FELG estimates about 2 million patient records were affected. The attacker claims to hold about 10% of the database and threatens to sell it on a dark web forum after failed ransom negotiations. FELG has notified Polish authorities and is assisting affected dental practices with breach notifications under GDPR.

CVE-2026-27872 is an improper privilege management vulnerability in Johnson Controls Easy IO FG affecting versions before 2.0b52. The flaw allows privilege escalation through brute force attacks. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.6.