Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface.
One of those helpers reads a file from the server's disk. A user who connects a channel whose stored token is a file path can have the backend return the contents of any file it can read, including its environment, which holds the secret used to sign login sessions, the database address and the credentials of connected services. Another helper makes the backend process exit with a single request. Self-registration is open by default, so no existing account and no action by another user is needed.
CVE-2026-115938 is a high-severity vulnerability in Craft CMS affecting versions 4.0.0 up to but not including 4.18.9, and 5.0.0 up to but not including 5.11.2. It involves improper neutralization of special elements in the template engine, allowing authenticated control panel users to exploit a sandbox bypass in Twig templates. This leads to leakage of the GeneralConfig::securityKey and enables offline computation of HMAC signatures, which can then be used to pass signed parameters to unsandboxed template rendering, potentially invoking native PHP callables.
CVE-2026-115937 is a high-severity vulnerability in the Craft CMS commerce-mollie plugin where the Mollie webhook endpoint fails to verify the association between two attacker-controlled parameters: commerceTransactionHash and id. This flaw allows an unauthenticated attacker with any paid Mollie payment ID from the merchant's account to mark arbitrary transactions as paid, regardless of the actual payment amount.
CVE-2026-115801 is an out-of-bounds read vulnerability in Kakao khaiii versions 0.1 through 0.4. It occurs in the khaiii::nn::Linear::open function within the JSON Config File Handler component. The flaw arises from improper handling of the hidden_dim/class_num arguments, allowing a local attacker with write access to the resource directory to cause an out-of-bounds read. This vulnerability affects unsupported versions of the product and has a medium severity score of 4.8. Exploit code has been publicly released, but exploitation requires local access and the ability to modify the resource directory, which is already a trusted input. The vendor notes that with such access, an attacker can alter analysis results even without exploiting this vulnerability.
CVE-2026-115935 is a high-severity code injection vulnerability in CraftCMS that allows authenticated non-admin users with control panel access to inject a new security key into the .env file via crafted API response headers. This enables the attacker to forge signed login redirects containing Twig system() callbacks, potentially leading to remote code execution. The vulnerability affects CraftCMS versions 4.0.0 up to but not including 4.18.9, and 5.0.0 up to but not including 5.11.2.
CVE-2026-115897 is a cross-site scripting (XSS) vulnerability in the yahoo serialize-javascript library prior to version 7.1.3. The issue arises because the function-source escaping logic fails to neutralize a bare closing-script prefix when attacker-controlled function source text ends exactly at that prefix. This can allow an attacker to inject live HTML elements into a page if they control the serialized function's source text, such as via a spoofed toString() method. The vulnerability has a low CVSS score of 2.1 and requires high attack complexity and partial user interaction. It is fixed in version 7.1.3.
CVE-2026-115895 is a high-severity code injection vulnerability in the capricorn86 happy-dom JavaScript library. Versions from 17.0.0 up to but not including 21.0.4 improperly validate named ESM import aliases, allowing attacker-controlled input to execute arbitrary code in the Node.js host process when enableJavaScriptEvaluation is enabled. This issue is a residual path from an earlier incomplete fix and is resolved in version 21.0.4.
The Arrakis 2026 Autonomous Agents Threat Report reveals that a significant majority of enterprise autonomous agents remain dormant yet retain active credentials, posing security risks. Notably, 76% of agents have not run in 60 days but still have valid credentials and active triggers. Additionally, 24% of dormant agents can be activated externally via unsigned webhooks, and 20% can delegate tasks to other agents with higher permissions, potentially bypassing intended access controls. The report highlights a common operational gap where agent credentials and approvals are not revoked or expired after inactivity, unlike employee access which is promptly removed upon departure.
CVE-2026-115893 is a critical vulnerability in the bytecodealliance wasmtime runtime for WebAssembly on aarch64 platforms using the Cranelift compiler backend. Versions prior to 36.0.19, between 37.0.0 and before 48.0.7, and between 49.0.0 and before 49.0.4 are affected. The flaw allows a user-controlled WebAssembly module to escape the sandbox by exploiting an incorrect conditional branch target when compiling a br_table instruction with more than approximately 256,000 targets. This can lead to arbitrary code execution outside the sandbox. The issue is fixed in versions 36.0.19, 48.0.7, and 49.0.4.
CVE-2026-115892 is a medium severity vulnerability in the Wasmtime runtime for WebAssembly. It involves a type confusion issue where a host-created component-model stream or future can omit a required payload-type check after passing through guest code. This can cause the host to panic when a type-erased value is passed to a guest expecting a different payload type. The issue affects Wasmtime versions from 46.0.0 up to but not including 48.0.7, and from 49.0.0 up to but not including 49.0.4. The vulnerability is fixed in versions 48.0.7 and 49.0.4.
A numeric truncation error in the Cranelift compiler backend of Wasmtime prior to versions 36.0.19 and 43.0.0 can cause silent overflow when compiling large or specially crafted WebAssembly functions. This overflow leads to incorrect intermediate representation references, resulting in arbitrary miscompilation, type confusion, and potentially attacker-controlled effects that may break out of the Wasm sandbox. The issue is fixed in versions 36.0.19 and 43.0.0.
A high-severity vulnerability (CVE-2026-115887) exists in the graphql-scalars library used by graphql-hive, specifically in the GraphQLPhoneNumber scalar between versions 1.24.1 and before 2.0.1. The issue is caused by inefficient regular expression complexity leading to exponential backtracking when parsing certain phone number inputs. This can block the Node.js event loop and stall the server, resulting in a denial of service. The vulnerability affects parseLiteral, parseValue, and serialize functions. It is fixed in version 2.0.1.
A vulnerability in langgraph CLI versions from 0.4.15 up to but not including 0.4.32 causes sensitive temporary registry push tokens to be logged in verbose mode. This token exposure allows anyone with access to CI logs or terminal recordings to pull or push images to the deployment's image repository within the token's 12-hour validity. The issue does not affect deployments without verbose mode or remote image builds and does not allow updating deployments to execute pushed images. The vulnerability is fixed in version 0.4.32.
CVE-2026-115883 is an improper input validation vulnerability in langchain-ai's langgraph checkpoint savers that use Postgres and SQLite for state persistence. Versions prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2 allow unvalidated dotted namespace labels in certain operations, enabling cross-namespace access including reads, overwrites, or deletions. This issue does not affect InMemoryStore. The vulnerability has a medium severity with a CVSS 4.0 score of 6. A fix is available in the specified versions.
CVE-2026-113951 is a vulnerability in Apple's Container product prior to version 1.5.0. It allows an attacker with write access to the filesystem of a Kubernetes cluster container to plant an exec credential plugin in the cluster's admin.conf file. When the kubeconfig is pulled onto a macOS host and kubectl is run, the malicious plugin executes with the host user's privileges, enabling arbitrary command execution on the host. This vulnerability is fixed in Container version 1.5.0.
The abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, contained a critical remote code execution (RCE) vulnerability in its updater mechanism. The updater contacted an abandoned domain over unencrypted HTTP and accepted unsigned executables, allowing anyone controlling the domain to execute code with SYSTEM/root privileges on millions of Windows and macOS devices. Researchers mitigated the risk by registering the domain and remotely disabling the updater through a remediation payload. However, Android users remain exposed, and the app's outdated embedded Chrome engine presents additional risks. Users are advised to uninstall the software entirely.
OpenReception appointment booking software versions 2.1.0 and earlier contain an authorization vulnerability allowing unauthenticated attackers to inject arbitrary encryption public keys into any tenant's staff recipient directory. This breaks the product's end-to-end encryption guarantee by enabling persistent unauthorized access to appointment encryption keys. No patches are publicly available at this time.
CVE-2026-115800 is a path traversal vulnerability in the UbiquitousLearning mllm software up to version 2.0.2. It affects the load_model function in the pymllm/mobile/convertor/__init__.py file. The vulnerability arises from improper handling of the shard_file argument, allowing local attackers to perform path traversal. Exploit code is publicly available, but exploitation requires local access. The vendor has been informed but has not yet responded or issued a fix.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability exists in OpenReception's appointment booking software prior to version 2.2.2. This flaw allows an attacker to overbook an agent by placing multiple appointments into a single time slot that should be exclusive. The issue arises because the booking token is consumed after insertion, but concurrent requests can still cause overlapping bookings. The vulnerability compromises the integrity of the booking calendar and can deny availability to other clients. It has been patched in version 2.2.2.
OpenReception's appointment booking software versions 2.1.0 and earlier contain a vulnerability that allows brute-forcing of a client's six-digit booking PIN. Successful brute force yields the client's booking access token, enabling access to their encrypted appointment data and the ability to act on their behalf within the appointment tunnel. The vulnerability involves improper restriction of excessive authentication attempts and includes a cross-tenant bypass that removes authentication protections across tenant boundaries. No patches are publicly available at this time.