Network-AI versions from 5.13.4 up to but not including 5.15.5 contain a path traversal vulnerability in the AgentVCR component. This flaw allows attackers who can control the cassette name parameter to read or write arbitrary JSON files. Exploitation can lead to disclosure of sensitive JSON data or overwriting of critical policy files such as AuthGuardian trust-level configurations.
Network-AI versions from 5.13.4 up to but not including 5.15.5 contain a path traversal vulnerability in the FileJobStore component. This flaw allows attackers who can control the job id parameter to read or delete arbitrary .json files by using directory traversal sequences. Exploitation can lead to disclosure of sensitive credentials and grant tokens or deletion of configuration files, potentially weakening the authorization mechanism of AuthGuardian.
A critical vulnerability exists in WAVLINK WN536AX6-A firmware version V260507, involving an OS command injection flaw in the openvpn_cli handler component. The flaw is triggered by manipulation of the argument file_id in the /protocol.csp file. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation. No patch or remediation information is currently provided by the vendor.
A critical stack-based buffer overflow vulnerability exists in WAVLINK WN536AX6-A version V260507 in the OpenVPN Handler component. The flaw arises from improper handling of the openvpn_ip argument in the strcpy function within /protocol.csp. This vulnerability can be exploited remotely without authentication, potentially allowing full system compromise. Public exploit code is available. No patch or remediation information is currently provided by the vendor.
Nuxt versions from 4.6.0 up to but not including 4.6.2 contain a route parameter confusion vulnerability in the getRouterParam and getRouterParams functions. This flaw allows attackers to send paths with encoded question marks (%3F) to obtain parameter values different from those matched by the h3 router. As a result, attackers can craft requests where authorization checks rely on the Nuxt helper value, while resource selection uses event.context.params, potentially granting unauthorized access to resources.
A critical stack-based buffer overflow vulnerability exists in the Linksys E8450 firmware version 1.2.00.360516. The flaw is in the strcpy function handling the hidden_timezone argument in /www/cgi-bin/portal.cgi, allowing remote attackers to execute code. The vendor has not responded to disclosure attempts, and no patch is currently available.
A critical vulnerability exists in WAVLINK WN536AX6-A version V260507 in the WireGuard component. The flaw is an OS command injection via the wireguard_cli_group handler function in /protocol.csp, triggered by manipulation of group_id or group_name arguments. This vulnerability can be exploited remotely without authentication and has a maximum CVSS score of 10. Public exploit code has been disclosed, increasing the risk of exploitation. The vendor was notified early, but no patch information is currently available.
A deserialization vulnerability exists in jxxghp MoviePilot versions up to 3.1.2 in the WorkflowExecutor.restore_context function of the Workflow Fork Endpoint component. This vulnerability can be exploited remotely and has been publicly disclosed. Upgrading to version 3.1.3 resolves the issue.
CVE-2026-120282 is a critical vulnerability in WAVLINK WN536AX6-A version V260507 affecting the host_black function in /protocol.csp. It allows remote OS command injection via manipulation of the mac argument. The vulnerability has a high CVSS score of 9.9 and has been publicly disclosed with exploit code available. No patch information is currently provided.
CVE-2026-120322 is a critical path traversal vulnerability in Termix-SSH Termix up to version 2.9.2. It involves improper handling of the destPath argument in the /plugin-api/file-manager/transferToHost endpoint, allowing remote attackers to traverse directories. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. The issue was mitigated by removing the vulnerable shortcut in the standalone File Manager plugin v1.0.0 and core v26.10.0. No official vendor response or patch is currently available.
A vulnerability in Sanluan PublicCMS versions 4.x, 5.x, and 6.x affects the TradeRefundService.updateAmound function in the publiccms-trade component. Manipulating the refundId argument can lead to an authorization bypass, allowing remote attackers to exploit this flaw. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available. The vendor has not responded to disclosure attempts, and no patch or remediation guidance is currently provided.
CVE-2026-120337 is a use-after-free vulnerability in VStarcam O-KAM SuperIPCam version 1.3.3.32. It affects the function FUN_005a2d44 in the P2P Session Teardown component of SuperIPCam.exe. The flaw can be exploited remotely without authentication. Public exploit code has been disclosed, but the vendor has not responded or issued a fix. The vulnerability has a medium severity rating with a CVSS 4.0 score of 6.9.
Multiple security vulnerabilities have been identified and fixed in the libxml2 library used in Red Hat Enterprise Linux 8.4. These include stack and heap-based buffer overflows, use-after-free conditions, integer overflow leading to data integrity issues, arbitrary code execution, denial of service, information disclosure, and SSRF. The issues affect various components such as xmllint, xmlcatalog, xmlSnprintfElements, xmlXPtrEval, and Python bindings. Red Hat has released an important security update addressing these vulnerabilities.
Red Hat Identity Management (IdM) has multiple critical security vulnerabilities affecting authentication, authorization, and LDAP operations. These include unauthenticated denial of service via unbounded request body reads, privilege escalation through krbCanonicalName manipulation, unauthorized LDAP writes via trust relationships, cross-site scripting allowing arbitrary code execution, and unauthorized access to administrator credentials. The vulnerabilities impact FreeIPA components and trust relationships in IdM. Red Hat has issued security updates addressing these issues for Red Hat Enterprise Linux 8.4 variants.
A denial of service vulnerability exists in the perl-XML-LibXML module due to truncated UTF-8 sequences in XML node names. This module provides a Perl interface to the GNOME libxml2 library for XML parsing and manipulation. The vulnerability is identified as CVE-2026-8177 and affects Red Hat Enterprise Linux 8.4 variants. Red Hat has issued a security update to address this issue.
CVE-2026-120336 is a stack-based buffer overflow vulnerability in the VStarcam O-KAM Client version 1.3.3.32. The flaw exists in the function FUN_10003EA0 within the DevDll_925.dll library. This vulnerability can be exploited remotely without authentication. Public exploit code is available, but no vendor response or patch has been provided.
This Red Hat Security Advisory addresses multiple security vulnerabilities in Mozilla Thunderbird and Firefox components, including denial of service, privilege escalation, information disclosure, use-after-free, sandbox escapes, mitigation bypasses, spoofing, race conditions, integer overflows, and other issues. The update also includes bug fixes and enhancements such as the Thunderbird ESR 153 rebase. The advisory rates the security impact as Important and covers Red Hat Enterprise Linux 9 and its Extended Update Support variants.
CVE-2026-120335 is a path traversal vulnerability in the deepset-ai farm product up to version 0.8.0. The flaw exists in the WordEmbedding_LM.load function within the farm/modeling/language_model.py file, where manipulation of the embeddings_filename argument allows local attackers to perform path traversal. The vulnerability affects only unsupported versions of the product. Public exploit details have been disclosed, but no vendor response or patch is available. The severity is rated low with a CVSS 4.0 score of 2.4.
The Core Temp kernel driver by ALCPU has a vulnerability due to an exposed IOCTL interface that lacks sufficient access control. This could potentially allow unauthorized interactions with the driver.
CVE-2026-120334 is a path traversal vulnerability in deepset-ai farm versions up to 0.8.0. It affects the EmbeddingTokenizer.from_pretrained function in the farm/modeling/tokenization.py file. Manipulating the vocab_filename argument can allow an attacker to perform path traversal remotely. The vulnerability affects unsupported versions of the product. Exploit code has been published, but no active exploitation in the wild is confirmed.