Eclipse Vert.x MQTT client versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0 have a vulnerability where inbound QoS 2 PUBLISH messages are stored indefinitely in an internal map without size limits. A malicious MQTT broker can exploit this by sending many distinct QoS 2 PUBLISH messages and withholding PUBREL packets, causing unbounded memory growth and potential application degradation or out-of-memory crashes.
"ゲオアプリ" for Android by GEO CORPORATION has an improper authorization vulnerability in its custom URL scheme handler. This flaw allows an attacker to cause the app's in-app browser to open arbitrary websites, which could lead to phishing attacks or leakage of session IDs. The vulnerability affects versions from 0 up to and including 11.8.6. The CVSS score is 5.4, indicating a medium severity risk.
"ゲオアプリ" for Android by GEO CORPORATION has a vulnerability involving cleartext storage of sensitive information, potentially exposing user passwords to attackers. This issue affects versions from 0 up to and including 11.8.6. The vulnerability has a medium severity with a CVSS score of 4.3, indicating that an attacker with local access and low privileges could obtain sensitive data without user interaction.
CVE-2026-102461 is a high-severity vulnerability in Eclipse Vert.x affecting versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0. The issue lies in the uniqueItems keyword validation within the vertx-json-schema component, which uses an inefficient O(n²) pairwise comparison without short-circuiting or size limits. This allows a remote unauthenticated attacker to cause a denial of service by submitting a moderately-sized JSON array that consumes excessive CPU resources. Several Vert.x modules depending on vertx-json-schema are also affected. No patch information is provided, and no known exploits are reported in the wild.
CVE-2026-103224 is a high-severity vulnerability in Eclipse Vert.x's MySQL client component. It affects versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0. The vulnerability arises from the MySQL message decoder aggregating inbound multi-packet payloads into a composite direct-memory buffer without enforcing a cumulative size limit. A malicious or compromised MySQL server can exploit this by sending a continuous stream of maximum-length packets, preventing the end-of-message condition and causing unbounded memory allocation on the client, leading to an out-of-memory crash before authentication completes.
CVE-2024-22031 is a high-severity authorization vulnerability in SUSE Rancher. It allows a user who can create a project in one cluster to create a project with the same name in another cluster, thereby gaining unauthorized access to the other project. This occurs because the namespace for storing project-related resources is based on the project name, leading to privilege escalation across clusters.
CVE-2026-103223 is a high-severity vulnerability in Eclipse Vert.x's PostgreSQL client (io.vertx:vertx-pg-client). In affected versions, the PostgreSQL message decoder reads a 4-byte message length field without validating its maximum size. A malicious or compromised PostgreSQL server can send a message with an extremely large length value, causing unbounded memory allocation on the client and potentially leading to an out-of-memory crash before authentication completes.
CVE-2025-23390 is a medium severity vulnerability in SUSE Fleet where the software improperly validates SSH server certificates by automatically trusting certificates not present in the known_hosts file. This flaw could allow a man-in-the-middle (MitM) attack if the server's certificate is not pre-registered. When the server's certificate is in the known_hosts file, Fleet correctly verifies authenticity. The vulnerability affects multiple Fleet versions prior to 0.10.12, 0.11.7, and 0.12.2.
Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0 contain a vulnerability in the vertx-mysql-client component. The client pre-allocates an array for column definitions based on a server-declared column count without validating an upper bound. A malicious or compromised MySQL server or a man-in-the-middle attacker can exploit this by sending a result set with an extremely large column count, causing an OutOfMemoryError that crashes the Netty event loop thread and results in a denial of service for all connections and verticles in the application.
CVE-2026-102463 is a high-severity vulnerability in Eclipse Vert.x's vertx-pg-client component. It affects versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0. The issue arises from the binary array decoder allocating a Java array based on a server-declared 32-bit dimension count without an upper bound. A malicious PostgreSQL server or an attacker intercepting unencrypted connections can exploit this to cause excessive memory allocation, leading to an OutOfMemoryError crash in the client.
CVE-2026-102469 is a critical vulnerability in Eclipse Vert.x's DB2 client component (vertx-db2-client) affecting versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0. The vulnerability arises from unsafe deserialization of User Defined Type (UDT) column data using Java's ObjectInputStream.readObject() without any filtering or class allowlisting. This unsafe deserialization can be triggered by a malicious or man-in-the-middle DRDA server sending a crafted response with a 0x50-tagged column, which legitimate DB2 servers do not send. Exploitation can lead to remote code execution if a suitable Java deserialization gadget chain is present, or denial of service otherwise. TLS is disabled by default, increasing the risk of man-in-the-middle attacks.
Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0 contain a vulnerability in the vertx-mssql-client component. The TDS message decoder aggregates inbound TDS packets into a composite direct-memory buffer without a cumulative size limit. A malicious or compromised SQL Server can exploit this by sending continuous TDS packets without the END_OF_MESSAGE flag, causing unbounded memory allocation and an out-of-memory crash before authentication completes.
The UK Legal Aid Agency (LAA), part of the Ministry of Justice, suffered a data breach in April 2025 where attackers stole records dating back to 1978. The breach involved unauthorized access to the agency's IT systems, resulting in the compromise of historical data. No specific technical details or exploitation methods have been disclosed. There is no information about remediation or patch availability. The incident highlights a significant data exposure affecting a government agency responsible for public defense services.
The Blog2Social – Social Media Auto Post & Scheduler WordPress plugin versions up to and including 9.1.4 contain an authorization bypass vulnerability. Authenticated users with Contributor-level access or higher can exploit insecure direct object references in AJAX handlers to read titles and content of posts they do not own, including private and pending posts.
Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0 contain a vulnerability in the Redis client RESP parser. The parser pre-allocates arrays based on server-declared lengths without enforcing an upper bound. A malicious or compromised Redis server or a man-in-the-middle attacker can exploit this by sending a crafted RESP response with an extremely large array length, causing excessive memory allocation and crashing the Vert.x event loop thread. This results in denial of service for all connections and verticles sharing that event loop.
CVE-2026-102475 is a high-severity vulnerability in Eclipse Vert.x HTTP proxy component versions 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and 5.2.0. The issue arises from the body transformer interceptor relying on a maximum buffered bytes limit to bound request buffers, which can be exploited to cause indefinite heap allocation. This vulnerability requires the use of an intercepting body transformer to be triggered.
Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0 contain a vulnerability in their WebSocket implementation. The issue arises because there is no defined maximum byte allocation when decompressing frames or messages, which can be exploited to conduct denial-of-service (DoS) attacks using zip bombs.
The 'Iron Man System' is a commercial Phishing-as-a-Service (PhaaS) operation that provides criminal buyers with a self-hosted phishing kit. It includes over 2,360 phishing templates impersonating trusted entities such as postal services, banks, and government agencies, targeting 130 countries. The system features a bilingual Chinese-English interface, a subscription licensing model tied to vendor-controlled authorization servers, and a build registry with 911 published versions. Resecurity, in collaboration with Microsoft's Digital Crimes Unit and industry partners, mapped and disrupted this infrastructure. The kit was used to send approximately 1 billion phishing emails targeting 75,000 organizations, capturing around 17.4GB of telemetry data. Multiple domains associated with the infrastructure have been identified as indicators of compromise.
This report details the first confirmed incident where AI-driven agents executed a complex attack on an Apache Tomcat server running Spring Batch. Attackers exploited an exposed job-submission endpoint that required no authentication or zero-day vulnerabilities. Using the open-source Cairn AI agent orchestration platform, the attackers executed commands via JavaScript through the Nashorn engine, extracting data in small chunks over many requests. They obtained plaintext database credentials, enabled xp_cmdshell, and escalated privileges to SYSTEM using known tools such as PrintSpoofer and GodPotato. The attackers extracted registry hives, created administrator accounts, and deleted artifacts. The attack was characterized by automated, rapid command execution and structured output formatting, indicating machine-driven orchestration.
CVE-2026-19377 is a medium severity vulnerability in Cato Networks Cato Client for Windows involving improper certificate validation during the tunnel handshake. This flaw allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic. The vulnerability affects multiple versions prior to 6.12.6, 6.1.1, 5.8.1, 5.9, and 5.6.2. No patch or remediation information is provided in the available data.