CVE-2026-102298 is a high-severity authorization bypass vulnerability in TP-Link Omada Software Controller (Windows) versions prior to 6.3.0.45. In MSP mode, the user-confirmation endpoint does not properly enforce permission checks, allowing authenticated users to supply a manipulated identifier parameter. This flaw enables user enumeration, credential verification, and unauthorized access to MSP resources or targeted accounts.
CVE-2026-110698 is a medium severity vulnerability in Praat version 7.0.02. It involves an out-of-bounds write in the function whisper_model_load within the Model Loader component. The vulnerability is triggered by manipulation of the argument n_dims and can be exploited remotely. A quick fix has been applied in Praat version 7.0.03, with a more comprehensive fix planned. The vulnerability has a CVSS 4.0 score of 5.3, indicating moderate risk.
CVE-2026-108337 is a vulnerability in Hitachi Vantara Remot Ops Agent versions 1.6.0 through 2.0 that allows an administrator to retrieve password reset codes for any user via an API. These reset codes can be used to take over user accounts. The API is restricted to administrator accounts, so exploitation requires prior administrative access. The vulnerability does not allow access to device credentials or customer data.
CVE-2026-108336 is a critical vulnerability in Hitachi Vantara Remot Ops Agent versions 1.60 through 2.0. The vulnerability arises from the use of a default self-signed SSL certificate to sign JWT access tokens for user authentication. An attacker who exploits this can sign JWT tokens and bypass login, gaining administrative access to the application. However, device credentials and customer data are not accessible through this vulnerability.
CVE-2026-108335 is a critical vulnerability in Hitachi Vantara Remote Ops Agent versions 1.6.0 through 2.0. It involves a weak password recovery mechanism where the password reset functionality lacks rate limiting on reset code attempts. This allows an attacker to brute-force the reset code and take over any account, potentially gaining administrative access to the application. However, device credentials and customer data are not accessible through this vulnerability.
A vulnerability in OpenSIPS up to versions 3.6.8 and 4.0.1 affects the rtpproxy component's rtpproxy_offer and rtpproxy_answer functions, causing an out-of-bounds read. This flaw can be exploited remotely and has a CVSS score of 7.3 (medium severity). Upgrading to versions 3.6.9 or 4.0.2 resolves the issue.
Cemtan sar2html version 4.0.0 contains a remote SQL injection vulnerability in the updateDb function of the sar2html.py file within the Archive Processing component. This flaw allows an attacker to manipulate the s2host argument to execute unauthorized SQL commands. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. The project has been informed but has not yet responded or issued a fix.
A vulnerability in OAID Tengine up to version 1.12.0 allows remote attackers to cause an out-of-bounds read via manipulation of the offset_root argument in the get_tm_file_model function of the tmfile Model Loader component. The issue is publicly disclosed with available exploit details. No official response or patch has been provided by the project as of the publication date.
A stack-based buffer overflow vulnerability exists in the log processing functionality of Palo Alto Networks PAN-OS software on Panorama. This vulnerability can be exploited by an attacker to cause a denial of service (DoS) condition, potentially forcing Panorama into maintenance mode after repeated attempts. Other Palo Alto Networks products such as Cloud NGFW, Prisma Access, and standalone PAN-OS firewalls are not affected.
CVE-2026-0317 is a denial of service vulnerability in Palo Alto Networks PAN-OS software that allows an authenticated user with a read-only administrator role to cause a DoS condition by sending a specially crafted API request. The risk is mitigated by restricting management web interface access to trusted internal IP addresses. Cloud NGFW, Panorama, and Prisma Access are not affected by this issue. No patch information is provided, and no known exploits are reported in the wild.
A local privilege escalation vulnerability exists in the Palo Alto Networks GlobalProtect app for macOS. This flaw allows a local non-administrative user to escalate privileges to root, enabling execution of arbitrary commands with administrative rights. Other platforms including Linux, Windows, iOS, Android, and Chrome OS are not affected by this issue.
A type confusion vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows. This flaw allows a local user with low privileges to cause a denial of service (DoS) condition. Other platforms including Linux, macOS, iOS, Android, and Chrome OS are not affected by this vulnerability.
The saeka package on PyPI is identified as malicious software designed to perform mass credit card checking by abusing legitimate online retail services. It is part of a campaign with clear malicious intent, involving the unauthorized use of third-party APIs to validate stolen credit card data.
A security vulnerability in cemtan sar2html version 4.0.0 affects the functions deleteHost, deleteRange, and deleteAll in the sar2html.py file. This flaw allows missing authentication, enabling remote attackers to perform unauthorized actions. The vulnerability has a CVSS score of 6.5 (medium severity) and has been publicly disclosed. The project has been informed but has not yet responded or issued a fix.
Databasus versions 3.7.0 through 3.61.0 have an authentication bypass vulnerability that enables unauthenticated attackers to brute-force six-digit password reset codes without any rate limiting, lockout, or invalidation. This flaw allows attackers to take over user accounts, including administrator accounts.
GrowChief versions through 0.3.0 have a missing authorization vulnerability in the getAllUsers handler. This flaw allows any authenticated user, including those with low privileges, to list users across all organizations because the IsSuperAdmin authorization check is missing. Exploitation involves sending a GET request to /users/all-users with an empty or short search value, enabling enumeration of user IDs, emails, names, and organization IDs for all tenants.
Shopizer versions through 3.2.5 have an authorization bypass vulnerability that allows authenticated customers to post product reviews as other customers by manipulating the customerId field. This flaw enables attackers to submit reviews and ratings attributed to different store customers, thereby corrupting the authenticity of authorship and product ratings.
bbPress versions before 2.6.19 have an information disclosure vulnerability that allows unauthenticated visitors to view posts in restricted subforums. This occurs because the hide_sitewide function does not properly consider ancestor forum visibility, exposing content in public subforums nested under private or hidden parents via the BuddyPress activity stream and REST endpoint. The vulnerability has a medium severity rating with a CVSS score of 3.7.
A path traversal vulnerability exists in cemtan sar2html version 4.0.0 in the updateDb function of sar2html.py. This vulnerability allows remote attackers to manipulate file paths, potentially leading to unauthorized file access or modification. The issue was reported to the project, but no response or fix has been provided yet. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
A critical vulnerability exists in D-Link DIR-868L firmware version 2.01b05 affecting the HNAP CGI Handler component. The flaw involves OS command injection via manipulation of the SOAPACTION argument in the /htdocs/cgibin system function. This vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed. The vulnerability has a CVSS 3.1 score of 10.0, indicating maximum severity.