CVE-2026-109812 is a missing authorization vulnerability in the internal API `/api/v1/secrets/` of Moxa AIG-302 Series industrial computing products. It allows a low-privileged authenticated attacker with adjacent network access to potentially access sensitive information, including cryptographic key material. The vulnerability affects versions from 1.0.0 through 1.4.0. The CVSS 4.0 base score is 6.9, indicating a medium severity level.
The Popup Box plugin for WordPress versions 6.4.1 to 6.4.2 contains a vulnerability that allows unauthenticated attackers to execute arbitrary registered shortcodes on the server. This occurs because the plugin processes client-controlled HTTP headers containing IP address information without properly escaping shortcode syntax characters before passing the content to the do_shortcode() function. Exploitation requires that an administrator has included the %%user_ip_address%% token in a popup's Custom Content body. The vulnerability is classified as CWE-94 (Improper Control of Generation of Code) and has a CVSS 3.1 base score of 4.8 (medium severity). No official patch or vendor advisory is provided in the data, and no known exploits are reported in the wild.
Variola is a modular Windows malware implant linked to a ClickFix intrusion, designed for persistent host identity and secure command-and-control communications. It supports dynamic loading of modules for credential theft, browser manipulation, and session hijacking, with capabilities typical of banking trojans such as Chromium browser injection and VNC-style remote access. The implant uses strong cryptographic methods for communication security and shows active development with multiple builds found in a public GitHub repository. No patch or remediation information is provided, and no known exploits in the wild have been reported.
This entry is a daily update from the SANS Internet Storm Center (ISC) titled 'ISC Stormcast For Friday, October 16th, 2026.' It provides general information about the ISC's activities and resources but does not describe any specific security threat or vulnerability.
CVE-2026-105228 is a high-severity vulnerability in Deltaww ISPSoft that allows remote attackers to perform out-of-bounds reads, potentially disclosing sensitive information. It affects versions from 0 up to but not including 3.25. The vulnerability requires no privileges and no user interaction but has low attack complexity. There is no indication of active exploitation in the wild or available patches as of the publication date.
CVE-2026-105227 is a high-severity vulnerability in Deltaww ISPSoft that allows remote attackers to perform out-of-bounds reads, potentially disclosing sensitive information. It affects versions from 0 up to but not including 3.25. The vulnerability requires no privileges and no user interaction, but the attacker must be remote. There is no information about available patches or vendor advisories. No known exploits are reported in the wild.
CVE-2026-111389 is a SQL injection vulnerability in Frappe HRMS affecting versions 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0. The flaw arises from missing input validation in certain endpoints, allowing any authenticated user, even with low privileges, to craft requests that can extract sensitive database information. The vulnerability has a high severity score of 8.3 (CVSS 4.0).
Nezha versions from 2.2.5 up to but not including 2.3.15 have an information disclosure vulnerability. Authenticated users with the nezha:ddns:read scope can retrieve third-party credentials because the listDDNS API endpoint does not redact sensitive fields such as WebhookURL and WebhookRequestBody. This allows reading cleartext tokens embedded in users' DDNS webhook profiles.
Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential responses. Attackers can sweep sequential IDs against getServerConfig and setServerConfig, distinguishing 'permission denied' from success payloads to map other users' servers.
Nezha versions from 2.1.0 up to but not including 2.3.15 contain a host header injection vulnerability in the mintTransferTool component. This vulnerability allows attackers who can control the Host header in a victim's MCP request to manipulate file upload and download URLs. Exploitation could enable redirection of file uploads or capture and replay of one-time download tokens to exfiltrate files. The vulnerability has a medium severity with a CVSS 4.0 score of 6.3.
Nezha versions 1.0.0 up to but not including 2.3.15 have a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint. This occurs because the fmStream component does not set a read limit on incoming messages, allowing authenticated users with file manager permissions to send an oversized binary message. Exploiting this can cause an out-of-memory (OOM) kill, which disrupts agent monitoring.
Nezha versions from 2.0.13 up to but not including 2.3.15 have a resource exhaustion vulnerability. Authenticated users can open unlimited concurrent WebSocket connections to the /api/v1/ws/transfer endpoint, causing exhaustion of file descriptors, memory, and goroutines. This can block agent gRPC reconnections and degrade service availability.
CVE-2026-111237 is a medium-severity vulnerability in Ultralytics FastSAM affecting the AutoBackend Model Loading component. It involves improper neutralization of directives in dynamically evaluated code due to manipulation of certain function arguments. The vulnerability requires local access to exploit. The product uses a rolling release model, so specific affected versions are not clearly defined. No vendor response or patch information is currently available.
This content discusses the challenges and approaches to securing AI agents in cybersecurity. It argues that relying on broad, general-purpose AI agents with extensive permissions and then trying to contain them with monitoring and guardrails is flawed. Instead, it advocates for building smaller, single-purpose AI agents with minimal required access, following the principle of least privilege and separation of duties. The article references Check Point's Dangerous Deviation Detection, which evaluates AI tool calls for dangerous or unwarranted actions, but emphasizes that proper access control boundaries must exist in code and credentials, not just in monitoring. The discussion highlights risks of agents expanding their scope beyond intended tasks and the importance of strict authorization checks in multi-agent workflows.
CVE-2026-111212 is a low-severity vulnerability in ImprintLab Medical-SAM-Adapter versions 0.1.0 and 0.1.0-alpha. It involves improper neutralization of directives in dynamically evaluated code within the session.get_modelmeta.custom_metadata_map function. The flaw arises from manipulation of the imgsz, names, or kpt_shape arguments, allowing local attackers to influence code execution. The vulnerability requires local access and user interaction to exploit. Although exploit code has been publicly released, no known exploitation in the wild has been reported. The vendor has not yet responded or provided a fix.
An improper input validation vulnerability in the Desktop version of Google Chrome prior to 155.0.8059.84 allows a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high severity score and affects confidentiality, integrity, and availability.
CVE-2026-111210 is a server-side request forgery (SSRF) vulnerability in bitcoinj versions 0.1 through 0.17. The flaw exists in the Payment Request Handler component, specifically in the url.openConnection function of PaymentSession.java. Manipulating the pki_type argument can trigger SSRF, allowing an attacker to make unauthorized requests from the server. The vulnerability can be exploited remotely. The issue was reported early to the project, but no response or fix has been provided yet. The CVSS 4.0 score rates this vulnerability as medium severity (6.9).
CVE-2025-66969 is an integer overflow vulnerability in OpenModSim versions up to and including 1.11.0. This flaw can lead to a denial of service condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No information about available patches or vendor advisories is provided.
GPAC MP4Box version 2.4 contains a vulnerability in the gf_parse_lfrac function where processing a crafted MP4 file with a zero-denominator fraction string causes a division by zero, resulting in a floating point exception and process termination. This leads to a denial of service condition without impacting confidentiality or integrity.
A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.