CVE-2026-48996 is a critical cross-site scripting (XSS) vulnerability in Trilium, an open-source note-taking application. Versions up to and including 0.103.0 have a flaw where the "Safe import" filter does not sanitize note titles properly. The GeoMap note view renders marker note titles as raw HTML, allowing attacker-supplied scripts to execute when the map is displayed. On the desktop client, this XSS can escalate to remote code execution due to Node integration in the Electron renderer. The issue is fixed in version 0.104.0.
Silverstripe UserForms versions from 6.0.0 up to but not including 6.4.9, 7.0.7, and 7.1.1 contain a code injection vulnerability in the email recipient subject field. An authenticated CMS user with permission to configure email recipients can inject and execute arbitrary server-side code, impacting confidentiality, integrity, and availability. The issue is fixed in versions 6.4.9, 7.0.7, and 7.1.1.
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side template that leads to remote code execution. The relation is omitted from the built-in list of dangerous attributes, so unlike other code-loading relations it is not disabled on import, and when the victim later publishes the imported note the public share renderer feeds the linked EJS code note's raw bytes into ejs.render, which compiles them in the server's Node process. An unauthenticated request to the shared note then executes the attacker's JavaScript with full access to require, process, the filesystem, and the network. This issue is fixed in version 0.104.0.
CVE-2026-19225 is a code injection vulnerability in the Defender Security WordPress plugin before version 6.2.0. It allows any single site administrator on a multisite network to execute arbitrary code across the entire network due to improper restriction of a network-wide setting. This vulnerability affects version 5.0.0 of the plugin. The issue is classified under CWE-94, indicating improper control of code generation.
CVE-2026-19223 is a high severity vulnerability in the Smush WordPress plugin before version 4.3.2. It allows any single site administrator on a multisite network to execute arbitrary code across the entire network by exploiting improper restriction of a network-wide setting. This is a code injection vulnerability classified under CWE-94.
CVE-2026-74851 is a high-severity vulnerability in the Pods WordPress plugin before version 3.3.9.1. It affects sites using the restricted display-callback mode, which is the default on installations with Pods versions predating 3.1. The flaw allows users with author-level privileges or higher to execute arbitrary code on the server due to improper comparison of display callbacks against a blocked functions list.
Compliance-trestle versions prior to 3.12.4 and 4.0.0 through 4.0.3 contain a server-side template injection vulnerability due to improper handling of Jinja2 include tags. These tags re-parse included Markdown files as Jinja2 templates in a non-sandboxed environment, allowing arbitrary code execution. The issue is fixed in version 4.1.0.
Compliance-trestle is vulnerable to server-side template injection in versions before 3.12.4 and 4.0.0 through 4.0.3. This vulnerability allows remote code execution via crafted Markdown or YAML content due to unsafe Jinja2 template parsing. The issue is fixed in versions 3.12.4 and 4.1.0.
NVIDIA NemoClaw for Linux has a vulnerability in its migration command that allows a local attacker to perform code injection. Exploiting this flaw could lead to code execution, data tampering, information disclosure, and denial of service. The vulnerability is identified as CWE-94 and has a high severity with a CVSS score of 7. No patch or official remediation has been confirmed yet.
CVE-2026-55585 is a high-severity code injection vulnerability in the QWED-AI qwed-verification package prior to version 5.1.2. The vulnerability arises because user-supplied math expressions are passed directly to SymPy's parse_expr() function without restricting the global and local namespaces, allowing arbitrary Python code execution. The API endpoints /verify/math and /verify/batch accept these expressions with minimal normalization and no sanitization. An attacker with any valid tenant API key, which can be obtained via the default-enabled signup and API key issuance endpoints, can exploit this flaw to execute arbitrary code, read or write files, run OS commands, terminate the service, and compromise other tenants in shared deployments. This issue is fixed in version 5.1.2.
CVE-2026-55546 is a critical code injection vulnerability in QWED-AI's qwed-mcp prior to version 0.2.1. The function verify_math_expression() improperly passes attacker-controlled input to SymPy's parse_expr() without restricting built-ins or validating the expression, allowing arbitrary code execution. Exploitation requires a downstream integration that invokes this function with untrusted input. The issue is fixed in version 0.2.1.
CVE-2026-57909 is a critical path traversal vulnerability in WatchGuard Agent that allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on the affected system. The vulnerability is identified as CWE-306 and has a CVSS 4.0 base score of 9.4, indicating high impact and exploitability. No patch or official remediation has been confirmed yet. There are no known exploits in the wild at this time.
CVE-2026-49845 is a critical code injection vulnerability in Apache Hive versions 4.0.0 through 4.2.0. It arises from SQL injection in the Hive Metastore's direct SQL partition-name resolution when direct SQL is enabled (default true). Authenticated users with access to Hive Metastore APIs can exploit crafted partition names containing malicious SQL to read or modify unintended partition metadata, affecting operations such as statistics updates, truncation targets, and file-metadata cache. The issue is fixed in Apache Hive version 4.2.1.
Combodo iTop versions prior to 3.2.3 contain a vulnerability in the user preference functionality that allows PHP object injection, potentially leading to remote code execution. This vulnerability is identified as CWE-502 (Deserialization of Untrusted Data) and CWE-94 (Code Injection). The issue has been resolved in version 3.2.3.
Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in version 3.2.3.
A vulnerability in vLLM, the inference engine used by Red Hat AI Inference Server, allows unauthenticated attackers to execute arbitrary code by loading malicious HuggingFace models when vLLM runs in Python optimized mode. This affects Red Hat AI Inference Server versions prior to 0.22.0 that include the vulnerable pooler activation loader. Exploitation requires supplying untrusted models and running with Python optimization enabled. Red Hat rates the impact as Important for AI Inference Server and OpenShift AI vLLM serving images, and Moderate for RHEL AI bootc images bundling vLLM. No fix is currently available. Mitigations include avoiding Python optimization mode, loading models only from trusted sources, restricting deployment permissions, and applying network controls.
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb).
CVE-2026-19200 is a high-severity vulnerability in Rapid7 Velociraptor versions prior to 0.77.2. It involves a missing authorization check in the verify() VQL function, which allows users with NOTEBOOK_EDIT permission to overwrite existing artifacts in the global artifact repository without proper permissions. This flaw could lead to significant confidentiality, integrity, and availability impacts.
SourceCodester Class and Exam Timetabling System version 1.0 has a cross-site scripting (XSS) vulnerability in the /BSIT2.php file due to improper handling of the 'course' parameter. This allows remote attackers to inject malicious scripts. The issue has a medium severity rating with a CVSS score of 5.3. No exploits are known in the wild, and no vendor patch or official remediation guidance is currently available.
A critical remote code execution vulnerability (CWE-94) exists in the Fabrik extension for Joomla versions 1.0.0 through 4.7.1. The flaw allows an attacker to execute arbitrary code via the image element. This vulnerability has a CVSS 4.0 base score of 10, indicating maximum severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.