CVE-2026-63267 is a server-side request forgery (SSRF) vulnerability in LibreOffice Calc version 26.2. It allows a document to link a cell range to an external CSV data source, which is fetched when the document loads. This behavior could enable reading local files into the spreadsheet or making requests to arbitrary hosts chosen by the document. The vulnerability is addressed in fixed versions where external data links are updated under the same control as other spreadsheet links.
CVE-2026-63266 is a path traversal vulnerability in LibreOffice Calc version 26.2. It involves linking a cell range to an external data source, allowing a document to open an embedded Firebird database that could write files to any location writable by the user. Fixed versions restrict the embedded Firebird database to operate only within its private directory.
SalesBleed was a zero-click attack chain disclosed by Zenity Labs that exploited Salesforce Agentforce's broad role-based permissions to leak CRM data via DNS exfiltration. The attack leveraged a poisoned lead submitted through a contact form, which the AI agent processed with excessive permissions, allowing data leakage despite patched parsing bugs. The root cause was an authorization design flaw where agents operate with broad role permissions without task-scoped authority, enabling shadow delegation attacks. This highlights the need for AI agents to have task-scoped permissions rather than broad role-based access to prevent misuse. Salesforce has fixed the specific bugs exploited, but the underlying authorization model risk remains in many agent deployments. The concept of a 'valet key'—scoped, limited authority per task—is proposed as a better security model for AI agents.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml data providers are restored when a document is loaded.
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in a Java class path has to be a file URL.
A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to attacker domains, capturing capability tokens to submit decisions executed with owner credentials.
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
The US Senate has passed the bipartisan Health Care Cybersecurity and Resilience Act to strengthen cybersecurity in the healthcare sector. The Act aims to reduce successful cyberattacks, particularly ransomware and data extortion, which have severely impacted healthcare providers and patient data. It includes provisions for grants, training, improved interagency coordination, and updated regulations to enhance cybersecurity practices. The legislation now moves to the House of Representatives for consideration. Healthcare breaches have affected over 270 million Americans recently, with significant financial and operational impacts. The Act seeks to improve resilience and response capabilities across healthcare organizations, including rural providers.
CVE-2026-105290 is a server-side request forgery (SSRF) vulnerability in feelcrm-os version 1.0.0. It affects the getCurlData endpoint in the GoogleController.class.php file. An attacker can remotely manipulate the 'url' argument to make the server perform unauthorized requests. The vulnerability has a medium severity with a CVSS score of 6.9. The issue was reported early to the project but no response or patch has been provided yet. Exploit details have been publicly disclosed, but no known exploitation in the wild has been reported.
OpenAI plans to introduce visual advertisements in ChatGPT during image generation sessions. This change represents an expansion of ads within the ChatGPT interface but does not describe a security vulnerability or threat.
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customer_form[remark] results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirect_url leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups[] causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
The Microsoft Windows KB5124010 preview update released in September 2026 causes crashes in some games and applications that use AC-3 (Dolby Digital) audio decoding. The issue affects legacy applications relying on Windows built-in audio decoding, leading to failures to launch or unexpected closures when audio features are used. Modern applications that use their own audio decoding components are generally not impacted. The update is optional unless automatic updates are enabled on Windows 11 24H2 devices. Microsoft is aware of the problem and working on a fix but has not provided a timeline.