A security vulnerability (CVE-2026-126757) exists in Moonshot AI Kimi Code up to version 2.5.2 affecting the Web UI component. The flaw is an open redirect caused by manipulation of the 'kimi_origin' argument in the isOriginAllowed function within a JavaScript file. This vulnerability can be exploited remotely and public exploit details have been disclosed. The vendor has not responded to the disclosure. The CVSS score is 4.3, indicating medium severity.
CVE-2026-125637 is a vulnerability in the Konflux UI proxy where hostname values from the KonfluxUI custom resource are inserted into proxy configuration files without proper validation. An authenticated user with permission to modify this resource can inject malicious configuration directives to bypass authentication and authorization controls, potentially exposing internal backend services. Malformed input can also cause the proxy configuration generator to fail, resulting in a denial of service by preventing the proxy from starting. Exploitation requires administrative privileges to modify the custom resource or manage GitOps manifests.
A vulnerability in Moonshot AI Kimi Code up to version 2.0.2 involves improper handling of the additional_dir argument in the WorkspaceDirsService component, leading to reliance on untrusted inputs in a security decision. This local attack can cause integrity and availability impacts. The issue is fixed in version 2.1.0. Exploit code is publicly available.
A development regression in ThinkSystem v4 XClarity Controller 3 (XCC3) versions 2.51 IHX432Y through 2.56 IHX436K re-introduces the default OpenBMC root password after performing an XCC Reset to Default operation. This allows an attacker with administrative privileges to gain access to enabled administrative interfaces and the underlying XCC Operating System, which is normally inaccessible. These affected versions are no longer available for download, and process improvements have been implemented to prevent similar regressions.
CVE-2026-65949 is a vulnerability in Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0. It involves improper neutralization of special elements in an OS command, allowing an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname. The vulnerability has a high severity with a CVSS score of 7.2.
An improper access control vulnerability exists in the autofill vault search feature of Devolutions Server version 2026.3.13.0 and earlier. This flaw allows an authenticated user with only view permissions on a shared entry to retrieve the password in clear text by leveraging a linked credential entry in their private vault.
A path traversal vulnerability exists in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux. This flaw could allow an attacker to write arbitrary files with the privileges of the OneCLI process if a user processes a specially crafted ZIP-based update package. The vulnerability has a CVSS score of 5.8, indicating a medium severity level. No affected versions or patch information are explicitly provided.
An authenticated user with delegated user-viewing permissions in Devolutions Server 2026.3.13.0 and earlier can obtain users' API key secret hashes via the user list API response due to insertion of sensitive information into sent data in the user list endpoint.
CVE-2026-65952 is a high-severity vulnerability in Lenovo XClarity Essentials OneCLI 5.5.0 for Linux. It involves improper neutralization of special elements in OS commands within the remote SSH operation functionality. An attacker could exploit this flaw by supplying a specially crafted remote path, potentially executing arbitrary OS commands with the privileges of the configured SSH account on a managed server.
Devolutions Server versions 2026.3.13.0 and earlier contain a vulnerability where sensitive information, specifically users' MFA shared secrets, can be inserted into data sent by user endpoints. This allows an authenticated user with delegated user-viewing permissions to access these secrets via the user API responses.
Devolutions Server 2026.3.13.0 contains an improper access control vulnerability in its connection history feature. This flaw allows an authenticated user who lacks permission to view passwords to access historical passwords via the connection history API.
An SQL injection vulnerability exists in Fortinet FortiMail versions 7.4.0 through 7.4.6, 7.6.0 through 7.6.4, and 8.0.0 through 8.0.1. This flaw allows an authenticated attacker to execute unauthorized code or commands by sending specially crafted requests. The vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
An SQL injection vulnerability exists in Fortinet FortiAnalyzer and FortiManager products across multiple versions. This flaw allows an unauthenticated attacker with access to the OFTP port to execute arbitrary code or commands via specially crafted OFTP packets. The vulnerability affects FortiAnalyzer versions 7.2.0 through 8.0.1 and FortiManager versions 7.2.0 through 8.0.0. The CVSS score is 9.8, indicating critical severity.
A critical vulnerability in Fortinet FortiOS versions 8.0.0, 7.6.0 through 7.6.7, 7.4.0 through 7.4.12, and 7.2.0 through 7.2.13 allows an unauthenticated attacker to execute commands as super admin via crafted HA packets when HA FGSP + standalone-config-sync or autoscale features are enabled.
A path traversal vulnerability exists in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux. This flaw could allow an attacker to write arbitrary files with the privileges of the OneCLI process by tricking a user into processing a specially crafted TAR.GZ update package. The vulnerability has a medium severity rating with a CVSS score of 5.8.
Devolutions Server versions 2026.3.13.0 and earlier contain an improper access control vulnerability in the administrative role assignment endpoint. This flaw allows an authenticated user with limited vault assignment management rights to escalate their privileges and access vault entry passwords by sending a specially crafted role assignment request.
A stack-based buffer overflow vulnerability exists in Fortinet FortiOS versions 8.0.0 and 7.6.7. This flaw may allow an unauthenticated attacker with access to the wad port to crash proxy or ZTNA sessions by sending specially crafted HTTP or HTTPS requests. The vulnerability has a high severity rating with a CVSS score of 7.5 and impacts availability without affecting confidentiality or integrity.
An SQL injection vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability is classified as high severity with a CVSS score of 8.3.
A null pointer dereference vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) by sending crafted HTTP requests. The vulnerability does not impact confidentiality or integrity but results in service disruption.
A critical authentication bypass vulnerability exists in Fortinet FortiOS versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.12, and 7.2.0 through 7.2.13. This flaw may allow an unauthenticated attacker to broadcast Link State Advertisements (LSA) via specially crafted requests, potentially impacting system integrity and availability.