A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
Hadrian is an Amsterdam-based company that offers an AI-driven autonomous offensive security platform designed to help defenders operate at the same speed as attackers. The platform continuously discovers, validates, prioritizes, and remediates externally exposed cyber risks using agentic AI systems that emulate attacker behavior. Hadrian recently raised $40 million in funding to expand its platform and engineering capabilities. The platform aims to address the limitations of manual penetration testing by providing faster, more accurate identification and validation of exploitable vulnerabilities. It is designed to improve visibility into critical risks and accelerate remediation efforts by automating offensive security tasks with AI.
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use (TOCTOU) gap allowed an attacker who could write to the workspace to atomically replace a project file with a symlink, causing Claude Code to follow the symlink and write its output to an arbitrary file outside the project sandbox. Exploitation required the ability to win a race condition against the write operation and write access to the shared workspace, enabling a lower-privileged attacker to redirect benign edits to sensitive files (e.g., shell configuration) in a higher-privileged session.
Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to the latest version.
Thank you to hackerone.com/c_h4ck_0 for reporting this issue.
Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the default crypto.cipherKey 'sensitiveKey'. Attackers who can read Redis can decrypt tokenEncrypted values and combine them with stored token IDs to obtain valid bearer tokens for any user.
Express Gateway versions up to 1.16.11 have an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant flow. The flaw allows attackers with valid client credentials and the identifier part of another user's refresh token to obtain that user's access token, enabling impersonation against OAuth2-protected APIs.
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null pointer without proper validation. This issue causes the application to crash, resulting in a Denial of Service (DoS).
Advantest, a Japanese chip testing company, disclosed a data breach months after a ransomware attack in February 2026. Hackers stole personally identifiable information (PII) including names, dates of birth, contact details, Social Security numbers, passport and driver’s license numbers, and medical and financial information. The company has not indicated public misuse of the data but warned of increased risk of identity theft or fraud. Notifications indicate that over 500 California residents and smaller numbers in Massachusetts and Vermont were affected. No ransomware group has claimed responsibility for the attack.
A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.
CVE-2026-107151 is a vulnerability in Red Hat Satellite 6 involving missing authentication in the smart_proxy_dynflow package's remote-execution task updates. Specifically, progress and completion callbacks accept reports without requiring a one-time token, allowing an attacker who knows a running job's identifier to send fake job outputs and mark jobs as successful or failed. This affects configurations where remote execution is set to pull or pull-mqtt mode.
CVE-2026-105140 is a race condition vulnerability in obot-platform's obot product affecting versions 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1. The flaw occurs during concurrent auth provider group refreshes, allowing revoked group memberships to be temporarily restored due to out-of-order commits. This results in users retaining revoked group-based access for approximately ten minutes.
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates through the vMCP owner's shared component connection.
Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/{entry_id} to obtain plaintext API keys or tokens and abuse them against backend services.
CVE-2026-107159 is a divide-by-zero vulnerability in miniupnpd up to version 2.3.11 when built with the --strict option. This flaw occurs in the ProcessSSDPData() function and can be triggered by unauthenticated local network attackers sending a multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900. Exploitation causes the daemon to crash, resulting in denial of UPnP IGD service.
patool versions prior to 4.0.6 on Windows contain an OS command injection vulnerability due to improper escaping of cmd.exe metacharacters and embedded double quotes in archive filenames. This allows attackers to craft malicious filenames that can execute arbitrary commands with the privileges of the patool process when single-file formats are run with shell=True.
A sophisticated phishing campaign impersonates AI advertising products from major platforms using a Browser-in-the-Browser technique to steal credentials and bypass multi-factor authentication (MFA) in real-time. The campaign targets advertising account managers and recruiters, leveraging a shared backend infrastructure and reusing code across multiple fake brands. It also includes refund scams and fake recruitment sites connected to the same infrastructure.
CVE-2026-42708 is a high severity SQL Injection vulnerability in the AF themes WP Post Author plugin, affecting versions from initial release up to 4.0.0. It allows an attacker with high privileges to perform blind SQL injection, potentially leading to data confidentiality breaches and partial denial of service. The vulnerability does not require user interaction but does require high privileges. No patch information is provided in the source data.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects Slider by 10Web: from n/a through 1.2.63.
SonicWall SMA1000 series appliances have a maximum-severity server-side request forgery (SSRF) vulnerability (CVE-2026-102255) in the Appliance WorkPlace interface affecting models 6210, 7210, and 8200v. This flaw allows remote unauthenticated attackers to exploit an unintended alternate access path to make the appliance issue requests on their behalf, potentially reaching internal functionality and performing unauthorized operations. SonicWall has released hotfixes to address this vulnerability and strongly advises users to apply them. There is currently no evidence of active exploitation in the wild. The SMA1000 series is widely used by government agencies, MSSPs, and large enterprises for secure remote access, making it a high-value target for attackers. Previous SMA1000 vulnerabilities have been exploited in zero-day attacks linked to ransomware gangs. SonicWall continues to monitor and respond to these threats.
CVE-2026-42713 is a high-severity SQL Injection vulnerability affecting the Gopiplus Post title marquee scroll plugin versions up to and including 9.9. It allows an attacker with high privileges to perform blind SQL injection, potentially leading to complete confidentiality compromise and partial availability impact. There is no explicit patch or remediation information provided.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Piggly Dev Pix por Piggly (para Woocommerce) pix-por-piggly allows Blind SQL Injection.This issue affects Pix por Piggly (para Woocommerce): from n/a through 2.1.2.