CVE-2026-117869 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla. No public exploits or in-the-wild exploitation have been reported as of the advisory date.
CVE-2026-117866 is a high-impact privilege escalation vulnerability caused by a use-after-free flaw in the Graphics: Canvas2D component of Firefox. This vulnerability allows an attacker to escalate privileges within the affected environment. The issue was fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6.
CVE-2026-117864 is a high-impact sandbox escape vulnerability in the Form Manager component of Firefox. This flaw allows an attacker to break out of the sandbox environment, potentially leading to unauthorized actions beyond the intended security boundaries. The vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
Kali-GPT contains an OS command injection vulnerability in the execute_tool() function within kali_gpt/tools/mcp_server.py. This flaw allows MCP clients to execute arbitrary shell commands by injecting shell metacharacters into parameters such as target, ports, domain, wordlist, or url. The vulnerability arises because these parameters are passed unsanitized to subprocess.run with shell=True, running with the MCP server user's privileges.
CVE-2026-117867 is a use-after-free vulnerability in the Layout component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. There are no known exploits in the wild at this time.
An OS command injection vulnerability exists in hagent through commit 761eec6. This flaw allows MCP clients to execute arbitrary shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. The vulnerability arises because crafted args are interpolated unsafely into arduino-cli and idf.py commands executed with subprocess.run(shell=True), enabling command execution with the privileges of the MCP server user.
CVE-2026-117861 is a high-impact vulnerability involving a sandbox escape in the DOM Navigation component of Firefox. This flaw allows code running in a restricted environment to break out of the sandbox, potentially leading to unauthorized actions. The issue was fixed in Firefox 159 and Firefox ESR 153.6.
Vorota-ai nmap-mcp through commit 3636afa has an improper allowlist validation vulnerability in the scan_vulnerabilities tool. This flaw allows callers to bypass restrictions and run blocked NSE script categories such as exploit, dos, brute, or intrusive. As a result, MCP clients or prompt-injected agents can execute potentially harmful scripts against scan targets.
CVE-2026-117865 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117863 is an information disclosure vulnerability caused by uninitialized memory in the Audio/Video component of Firefox. This flaw could potentially allow sensitive information to be exposed. The issue was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6.
mcp-ffmpeg versions through 1.0.5 have an OS command injection vulnerability. This flaw allows attackers to execute arbitrary shell commands by providing specially crafted videoPath or outputDir inputs to certain tools. The vulnerability arises from improper handling of these inputs in child_process.exec calls, enabling command injection via shell metacharacters.
Flexible GraphRAG contains a Cypher injection vulnerability due to incorrect string escaping in its FalkorDB adapter's _escape() function. The flawed escaping order allows crafted input to break out of string literals in Cypher queries, enabling injection of arbitrary Cypher clauses. This can lead to destructive actions such as wiping the entire graph database. The vulnerability affects versions from 0.6.0 up to but not including 0.8.2 and has been assigned CVE-2026-114510. A fix is available in version 0.8.2.
nest-admin versions before 1.0.1 have an authentication bypass vulnerability due to a hardcoded JWT secret in the production environment file. This allows unauthenticated attackers to forge administrator tokens and impersonate any user or claim admin roles, gaining full administrative access.
Artalk versions prior to 2.10.1 have a server-side request forgery (SSRF) vulnerability that can be exploited without authentication. Remote attackers can submit anonymous comments to the /api/v2/comments endpoint with a crafted page_key pointing to internal URLs. The server fetches the URL to retrieve the page title with only scheme validation, allowing attackers to read internal page titles via the public comment list. This vulnerability has a medium severity with a CVSS score of 5.3.
EasyImages versions 2.0 through 2.8.6 have an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php, and app/info.php. This flaw allows attackers to read files outside the intended upload directory by using ../ sequences in specific parameters. The vulnerability permits reading files with allowed upload extensions from the server without authentication.
An OS command injection vulnerability exists in esp-mcp through commit 28afddf. This flaw allows attackers to execute arbitrary commands by injecting shell metacharacters into parameters used by the MCP tool. Specifically, attackers can influence agent tool calls via prompt injection to pass malicious values to asyncio.create_subprocess_shell, resulting in command execution with the MCP server user's privileges.
MrDoc versions through 1.1.1 have a broken access control vulnerability in the manage_doc_share functionality. Authenticated users can modify other users' document share settings without proper ownership verification. This flaw allows attackers to compute predictable share tokens and manipulate share settings, potentially exposing private documents.
rssant versions 1.9.0 through 1.9.1 have an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds via the anonymous publish.story_get endpoint. The vulnerability arises because the function UnionStory.get_by_feed_offset ignores the only_publish flag, enabling attackers to enumerate feed IDs and offsets to access private feed stories.
A heap out-of-bounds read vulnerability exists in zchunk versions before 1.5.5 in the read_preface() function. This flaw occurs because the function passes the total header length instead of the remaining bytes to compressed integer parsing functions, allowing crafted .zck files to cause reads beyond the heap buffer and crash the application.
ATXP Gemini CLI extension versions through 1.0.0 contain an OS command injection vulnerability in the runAtxp() function. This flaw allows attackers to execute arbitrary shell commands by injecting malicious input into unsanitized parameters such as message_id, subject, or query. The injection can be triggered via crafted email or SMS content using shell substitution syntax like $() or backticks, resulting in command execution with the privileges of the user running the CLI extension.