CVE-2026-104036 is an out-of-bounds write vulnerability in the SSSD NFS idmap plugin on Red Hat Enterprise Linux 10. The flaw occurs when the plugin attempts to copy cached user or group names that exceed the destination buffer size without aborting the operation. A local attacker can exploit this by triggering identity lookups that resolve to oversized cached entries, causing an out-of-bounds write. This primarily results in a denial of service by crashing the identity mapping service and may also corrupt adjacent process memory.
CVE-2026-104035 is a vulnerability in the Kerberos Credential Manager (KCM) responder component of SSSD on Red Hat Enterprise Linux 10. A local user can cause a denial of service by repeatedly storing and destroying credentials, which leads to memory exhaustion due to failure to release cached objects. This results in the service becoming unresponsive.
CVE-2026-104034 is a use-after-free vulnerability in the Kerberos Credential Manager (KCM) responder component of SSSD on Red Hat Enterprise Linux 10. It occurs during Kerberos ticket-granting ticket (TGT) renewal when a deferred callback accesses memory that has already been freed. An authenticated local user with a renewable Kerberos ticket can exploit this to crash the KCM responder service, causing a denial of service (DoS). The vulnerability has a medium severity rating with a CVSS score of 4.7.
CVE-2026-104033 is a medium severity vulnerability in Red Hat Enterprise Linux 10's SSSD component. It involves an off-by-one error where SSSD does not treat an LDAP shadow attribute expiration value of zero as an expired account. This flaw allows users with valid credentials for accounts intended to be expired to bypass access controls and authenticate, enabling unauthorized access to persist beyond intended deactivation.
CVE-2026-104032 is a vulnerability in SSSD on Red Hat Enterprise Linux 10 where an unprivileged local user can repeatedly request master automount map updates without proper authorization checks. This causes global cache invalidation and forces repeated backend directory lookups, resulting in denial of service due to degraded automount availability and increased resource consumption.
CVE-2026-104031 is a medium severity vulnerability in Red Hat Enterprise Linux 10's SSSD component. When the autofs responder service is enabled, memory allocated during request processing is not released until the client connection closes. A local attacker can exploit this by keeping a connection open and sending repeated valid requests, causing memory exhaustion and denial of service.
LogicalDOC Enterprise versions up to 9.1.1 contain a blind SQL injection vulnerability in the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by crafting the workflow template name. The vulnerability has a high severity rating with a CVSS score of 8.1, indicating a significant impact on confidentiality and integrity but no impact on availability.
kkFileView versions 5.0.0 through 5.0.2 have a directory traversal vulnerability in FileController.java. The vulnerability arises because the fileUpload, createFolder, and existsFile endpoints accept a 'path' parameter that is concatenated into the upload base path without proper validation. This allows unauthenticated attackers to create directories and write files outside the intended file directory via crafted multipart requests. The vulnerability has a CVSS score of 7.5, indicating high severity.
Dbit WIFI4 N300 1.0.0 devices contain a stack-based buffer overflow vulnerability in the /api/addStaticDHCP comment field that allows local Wi-Fi network administrators to execute operating system commands. This vulnerability has a CVSS score of 6.7, indicating a medium severity level. No patch or remediation information is currently available.
CVE-2025-71383 is a critical vulnerability in Dbit WIFI4 N300 1.0.0 devices where the management interface can be crashed by sending a specially crafted request from the local Wi-Fi network. The issue arises due to an error in the JSON parser when processing requests missing the /api/login username or password fields.
An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.
Mercusys AC12 V2 contains a vulnerability where a hardcoded 512-bit RSA private key allows a local attacker to execute arbitrary code. This issue is identified as CVE-2026-78861 and has a high severity rating with a CVSS score of 7.7. The vulnerability requires local access and does not require user interaction. No patch or remediation information is currently provided.
A vulnerability in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the device's printed circuit board. This issue requires physical or local access to the hardware and can lead to full compromise of confidentiality, integrity, and availability of the device.
Mercusys AC12 V2 contains a vulnerability that allows a local attacker to execute arbitrary code by exploiting the storage of sensitive information in plaintext. This issue is identified as CVE-2026-78860 and has a high severity rating with a CVSS score of 7.8. The vulnerability requires local access and low attack complexity, with no user interaction needed. There is no information about available patches or fixes at this time.
A race condition vulnerability exists in Apache Struts where concurrent requests share a date/time formatter without proper synchronization. This can cause data leakage between users or server errors during rendering. The issue affects specific versions of Apache Struts and is fixed in versions 6.12.0 and 7.4.0.
A vulnerability in the Apache Struts REST plugin allows unbounded allocation of memory when processing a request body, potentially exhausting the Java heap and causing denial of service. This affects multiple versions of Apache Struts, specifically from 2.1.8 through 2.3.37, 2.5.0 through 2.5.33, 6.0.0 through 6.11.0, and 7.0.0 through 7.3.0. The issue does not require any additional settings to be enabled and only impacts applications using the REST plugin. Upgrading to Apache Struts versions 6.12.0 or 7.4.0 resolves the vulnerability.
An asymmetric resource consumption (amplification) vulnerability exists in Apache Struts that allows an unauthenticated remote attacker to exhaust server CPU and outbound network capacity by sending low-volume requests. This occurs when a request parameter is bound to a BigDecimal property and rendered through the Struts tag library, producing a disproportionately large response. The vulnerability affects specific versions of Apache Struts and is fixed in versions 6.12.0 and 7.4.0.
CVE-2026-104711 is a critical Expression Language Injection vulnerability in Apache Struts affecting versions from 2.0.0 through 2.3.37, 2.5.0 through 2.5.33, 6.0.0 through 6.11.0, and 7.0.0 through 7.3.0. It occurs when the legacy RESTful action mapper is used and allows injection of OGNL expressions that may lead to remote code execution. Struts 7 is only affected if the OGNL allowlist is disabled, which is not the default. Applications using the default action mapper, restful2 mapper, or Struts REST plugin are not vulnerable. Fixed versions are 6.12.0 and 7.4.0.
This entry reports on ThreatFox Indicators of Compromise (IOCs) dated 2026-10-05. It is categorized as open-source intelligence (OSINT) related to network activity and payload delivery. No specific malware details, affected software versions, or exploitation techniques are provided. There is no indication of active exploitation or available patches.