CVE-2026-53713 is a critical vulnerability in Envoy Gateway prior to versions 1.7.4 and 1.8.1. It involves improper input validation in the Lua validator component, where redundant path separators are not collapsed before security checks. This flaw allows crafted Lua code submitted via EnvoyExtensionPolicy to read arbitrary files from the gateway controller pod, potentially exposing sensitive Kubernetes service-account tokens, TLS certificates, and environment data. The vulnerability is fixed in versions 1.7.4 and 1.8.1.
SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficient length checks, while UdpReceiver.EndReceiveFrom closes the channel when those operations raise a non-socket exception. A remote party can send a single short RTP packet or malformed zero-to-seven-byte STUN address attribute to the shared RTP/ICE socket, including during ICE connectivity checks before DTLS or STUN MESSAGE-INTEGRITY verification, and terminate the active RTP or WebRTC media session. The attacker must reach or learn the advertised ephemeral RTP/ICE port, but no authentication or user interaction is required, and the impact is limited to availability. This issue is fixed in version 10.0.9.
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit unauthorized values, potentially resulting in unintended application behavior.
backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from BackpackServiceProvider::boot() and constructs a shell command with a URL influenced by the HTTP Host header, which it passes to exec() without adequate shell neutralization. An unauthenticated attacker whose malformed Host value reaches PHP can inject operating-system commands when exec() and curl are available and the 1-in-100 random gate is reached. Repeated requests can reach the random gate. Successful exploitation executes commands as the web-server user, exposing environment secrets, files, and reachable services and permitting data modification or service disruption. Common reverse-proxy Host validation and hardened PHP configurations that disable exec() reduce reachability but do not correct the vulnerable construction. This issue is fixed in versions 4.1.70, 5.6.2, 6.8.13, and 7.0.36.
SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to 0.27.1, ModelView.sort_query in sqladmin/models.py accepts the attacker-controlled sortBy list-view query parameter without enforcing the configured column_sortable_list server-side allow-list in self._sort_fields. The value is resolved with getattr and passed to relationship joins and order_by, allowing requests to sort by columns hidden from column_list and by related-model columns through dotted paths. The resulting row order forms an information-exposure oracle for unexposed values, and reversing ascending and descending order confirms their relative ordering. Pairing sortBy with searchable or filterable columns and pagination can narrow the oracle toward specific values, but exact recovery depends on the application's available fields and data. This issue is fixed in version 0.27.1.
On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates LLM-controlled from_addr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can escape the intended criterion and alter IMAP operations when search_emails, reply_email, or archive_email is exposed to an agent with configured email credentials, allowing mailbox data access, modification, deletion, or connection disruption. This issue is fixed in praisonaiagents 1.6.59.
Description
A submitted topology carries two lists of blobstore keys, `dependency_jars` and `dependency_artifacts`,
which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their
contents on the submission path, yet acts on them in two places.
During cleanup of a finished topology, Nimbus deletes the keys named in those lists, and the deletion is
performed as the Nimbus subject, for which the blobstore short-circuits its ACL check. A submitter who
listed a key belonging to another topology, such as its `-stormjar.jar`, could therefore cause
that blob to be deleted when their own topology was cleaned up.
Separately, on acquiring leadership a Nimbus compares the dependency keys of all active topologies against
the blobstore contents and surrenders leadership if any is missing. A single key that does not exist, on a
single active topology, therefore causes every Nimbus to acquire leadership, surrender it and requeue
indefinitely, leaving the cluster without a leader and unable to schedule, clean up or accept submissions.
Mitigation
Upgrade to 3.1.0, where a submission is refused unless every entry in both lists is a dependency blob key
and exists in the blobstore.
Note that this validates new submissions only; a topology stored by an affected version with an invalid list
is unaffected by the upgrade. An operator whose cluster is failing to retain a leader should inspect the
Nimbus log for the dependency keys reported as missing and remove or resubmit the topology naming them.
Users who cannot upgrade immediately should restrict topology submission to trusted principals.
Credit
This issue was discovered by rzo1 while investigating an unrelated blobstore defect.
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount discount values, persists them in sh_discounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and vendor/shopper/cart/src/Pipelines/Calculate.php without enforcing a positive-value invariant. Because the calculation subtracts discountTotal from the subtotal, a negative discount increases the resulting order total instead of reducing it. Malformed discount records can therefore cause incorrect pricing and financial data integrity failures, although the advisory does not establish a customer-facing exploitation path. This issue is fixed in version 2.9.0.
Puppet Enterprise versions 2023.8.0 through 2023.8.10 and 2025.0.0 through 2025.11.2 contain a command injection vulnerability (CWE-78). An authenticated user with Puppet administrative privileges can inject arbitrary shell commands due to insufficient sanitization of input passed to a shell execution context. Exploitation allows execution of commands with root privileges, potentially leading to full system compromise. The issue is resolved in Puppet Enterprise 2023.8.11 and 2025.11.3.
CVE-2026-3096 is an improper input validation vulnerability in WSO2 API Control Plane web portals. It arises because external links can be opened in a new browser tab while the originating window retains access to the new page. This allows interaction between the two browser contexts, potentially enabling an attacker to manipulate the original trusted window after a user clicks a malicious external link. Such manipulation can lead to phishing redirections or unauthorized actions within the trusted site context. The vulnerability has a medium severity with a CVSS score of 4.7.
CVE-2026-54694 is a critical improper input validation vulnerability in the NationalSecurityAgency's skills-service (SkillTree platform) prior to version 4.4.2. It involves unfiltered HTML input in user registration fields that leads to cross-site scripting (XSS) attacks when administrators view quiz runs. There are three escalating exploitation paths: basic XSS, remote script loading allowing arbitrary admin actions, and full cross-site request forgery (CSRF) token theft enabling API abuse. The vulnerability is patched in version 4.4.2.
CVE-2026-74761 is an improper input validation vulnerability in the TopicRegion component of Apache ActiveMQ Broker. An authenticated client can spoof the clientId when removing a durable topic subscription, potentially impacting the integrity of subscription management. This affects Apache ActiveMQ Broker versions before 5.19.11 and versions from 6.0.0 before 6.3.2. Upgrading to versions 5.19.11 or 6.3.2 resolves the issue.
CVE-2026-73334 is a high-severity vulnerability in Apache Parquet Hadoop versions 1.12 through 1.18. It involves improper input validation in the org.apache.parquet.crypto.keytools package, which handles encryption of Parquet files using envelope encryption with a Key Management Service (KMS). The vulnerability arises when the KMS URL parameter is controlled by the file rather than the application, potentially allowing a malicious file to direct KMS tokens to an attacker-controlled host. Users are advised to enforce application control over the KMS URL parameter until the issue is fixed in a future release (presumably version 1.19), which will disable file-controlled KMS URLs by default and require explicit validation and authentication if enabled.
A stored cross-site scripting (XSS) vulnerability exists in the H5P module h5p-nodejs-library by Lumi Education UG in versions up to and including 10.0.4. This vulnerability allows attackers to upload H5P content containing malicious JavaScript, which executes in the browsers of users viewing the content. The issue is categorized under CWE-20 and has a moderate severity rating. No patch or official fix information is currently available.
CVE-2026-21112 is a medium severity vulnerability in Samsung Tips prior to Android 17. It involves improper input validation that allows local attackers to launch arbitrary activities with Samsung Tips privileges. Exploitation requires user interaction.
CVE-2026-21086 is a medium severity vulnerability in the ProxyHandler component prior to SMR Aug-2026 Release 1. It involves improper authorization that allows local attackers to access proxy configuration settings without proper permissions. No patch or remediation information is provided in the available data. The vulnerability requires local access and does not involve user interaction. There are no known exploits in the wild at this time.
CVE-2026-21094 is a medium severity vulnerability in wpa_supplicant prior to SMR Sep-2026 Release 1. It involves improper input validation that allows adjacent attackers to write out-of-bounds memory. This memory corruption could lead to undefined behavior or compromise of the affected system. No specific affected versions are provided. There is no information on available patches or vendor advisories. No known exploits are reported in the wild.