A security vulnerability in the sudo utility allows bypass of time-based authorization controls via the TZ environment variable. This affects Red Hat Enterprise Linux 7 Extended Lifecycle Support versions. The flaw permits users to circumvent NOTBEFORE/NOTAFTER restrictions that control when sudo commands can be executed. Red Hat has issued an important security update to address this issue.
CVE-2026-116578 is an open redirect vulnerability in Tornado's RedirectHandler. It occurs when URL templates use regex capture groups that influence the scheme or host of the redirect target, allowing attackers to craft URLs that redirect users to arbitrary external sites. This can facilitate phishing attacks. The vulnerability is fixed in Tornado 6.6, which rejects redirects that alter the scheme or host. Applications using static URLs or substitutions only after a fixed host and slash are not affected.
Tornado HTTP servers have a vulnerability where parsing HTTP headers with obsolete line folding causes quadratic CPU usage, leading to event loop blocking and degraded availability. This affects all Tornado HTTP servers before version 6.6. The issue is fixed by removing support for obsolete line folding in Tornado 6.6. The vulnerability impacts availability only, with no confidentiality or integrity risks.
Tornado HTTP servers are vulnerable to event loop blocking and excessive memory use when processing HTTP/1.1 chunked transfer encoded bodies composed of many small chunks. An attacker can send a request body with millions of 1-byte chunks, causing the server to block the event loop for extended periods and consume significantly more memory than the actual body size. This affects any handler that reads the request body without prior rejection and requires no authentication. The issue also impacts Tornado's SimpleAsyncHTTPClient when reading responses from malicious servers. The vulnerability is fixed in Tornado 6.6.
A misconfigured wildcard TLS certificate causes a stack read overflow.
This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.
This issue affects Apache Qpid Proton C: through 0.40.0.
Users are recommended to upgrade to version 0.41.1, which fixes the issue.
When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass. However there will be no user name set so the effects depend on how the application deals with this condition - which otherwise means that authentication has not completed yet.
This issue affects Apache Qpid Proton C: through 0.40.0.
Users are recommended to upgrade to version 0.41.1, which fixes the issue.
A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash.
This issue affects Apache Qpid Proton C: through 0.40.0.
Users are recommended to upgrade to version 0.41.1, which fixes the issue.
When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates.
This can be worked around by setting the SSL_CERT_FILE environment variable for the application to /dev/null.
This issue does not affect the Win32 SChannel TLS implementation.
This issue affects Apache Qpid Proton C: through 0.40.0.
Users are recommended to upgrade to version 0.41.1, which fixes the issue.
Two memory-safety vulnerabilities in the PHP runtime bundled with Welotec's SMART EMS product up to version 3.5.3 allow unauthenticated remote attackers to execute arbitrary code in the PHP web worker context. Exploitability depends on server interface, configuration, application behavior, and worker reuse. Public exploit code is available.
NIK C2 is a newly observed AI-enabled command-and-control (C2) framework targeting Windows systems. It features a Go-based implant that provides persistent remote access with capabilities including credential dumping, keystroke streaming, RDP session hijacking, process hollowing, and deployment of screen-locking ransomware demanding cryptocurrency payments. The implant uniquely integrates the OpenAI Chat Completions API, allowing threat actors to analyze harvested data using AI in real time within the compromised session. This integration collapses traditional offline data processing delays, complicating detection and response efforts. The implant communicates over encrypted channels with resilient fallback mechanisms and has been observed in multiple evolving versions compiled no earlier than late 2024. Active infrastructure associated with NIK C2 has been identified in the wild, confirming its operational status.
CVE-2026-76418 is a high-severity vulnerability in Cisco Secure Firewall ASA and FTD software affecting the Remote Access SSL VPN service. It allows unauthenticated remote attackers to cause the firewall device to restart unexpectedly, disrupting availability. The flaw stems from logic errors in tunnel groups configured with secondary authentication. Cisco has released patches to fix this issue and recommends upgrading. No workarounds exist, though disabling secondary authentication or tunnel group lists can reduce exposure but weaken security. This is the second zero-day exploited in Cisco ASA and FTD VPN services in recent months.
A use-after-free vulnerability exists in the librsvg2 library when XML includes contain duplicated entities. This flaw could potentially lead to memory corruption or application crashes. Red Hat has issued a security update addressing this issue in their librsvg2 packages for Red Hat Enterprise Linux 8.6. The vulnerability is rated as having an important security impact by Red Hat Product Security.
A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users.
A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service. Support for ZIP-formatted input can bypass restrictions on requests to internal IP addresses, potentially allowing discovery of internal network resources.
A sensitive information exposure vulnerability exists on the Foxit official website because JavaScript code contains third-party authorization information. This may allow unauthorized parties to obtain or misuse the exposed credentials.
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
The Contact Form by Supsystic WordPress plugin versions prior to 1.11.1 improperly handle CR/LF characters and do not re-validate submitted field values before including them in email headers. This allows unauthenticated users to inject arbitrary email headers such as additional Bcc or Cc recipients into notification emails.
A vulnerability in polkit's authentication agent helper causes an integer underflow when processing input starting with a null byte, leading to an out-of-bounds memory read. This flaw can be triggered by a local or adjacent low-privileged user supplying crafted input, potentially causing the affected application to crash and resulting in a denial of service. No information disclosure or integrity impact has been observed. The issue is rated as low severity.
CVE-2026-114358 is a critical SQL injection vulnerability in the Radius Xenia M2M Platform's password recovery functionality. It arises from insufficient validation of user-supplied input in the web management interface. An unauthenticated remote attacker can exploit this flaw by submitting crafted SQL queries, potentially gaining unauthorized access to sensitive data, enumerating the database structure, or modifying database records.
CVE-2026-7190 is a cross-site scripting (XSS) vulnerability in the ICTBroadcast software demo environment. It occurs in the 'login.php' endpoint where the 'editForm[extension_username]' parameter is reflected without proper filtering. This flaw could allow attackers to execute arbitrary JavaScript in a victim's browser if the victim visits a crafted URL. The vulnerability has a medium severity rating with a CVSS score of 5.1. No affected versions or patches are currently specified.