CVE-2026-120234 is a medium severity vulnerability in ag-ui-protocol's ag-ui component up to version 0.0.20. It affects the HTTP Transport component's e.text function, allowing remote attackers to cause resource consumption. Public exploit code is available, but a fix is pending acceptance of a pull request.
PrefabHQ prefab-ui versions 0.14.0 through 0.20.2 contain a critical protection mechanism failure in their Generative UI sandbox. The sandbox runs caller-supplied Python code inside Pyodide within a Deno subprocess but starts Deno with unrestricted read, write, and network permissions. This allows an attacker supplying code to read and write files as the server OS user and persist code execution by writing files into the server's virtual environment. The vulnerability is fixed in version 0.21.0 by revoking these permissions before accepting code and restricting network access.
CVE-2026-120233 is an information disclosure vulnerability in the ag-ui-protocol ag-ui component, specifically affecting versions 0.0.1 through 0.0.20. The flaw exists in the HttpAgent component within the file sdks/typescript/packages/client/src/agent/http.ts. An attacker can remotely manipulate this vulnerability to disclose information. Public exploit code has been released, and a fix is pending acceptance of a pull request.
CVE-2026-120232 is a critical memory corruption vulnerability in Horizon DataSys Reboot Restore Standard versions 13.0, 13.1, and 13.2. It affects the kernel driver component shield.sys, specifically the function sub_23908. The vulnerability requires local access to exploit and does not require user interaction. Public exploit code is available, but no active exploitation in the wild has been reported. A fix is planned for a future release but is not yet available.
CVE-2026-120231 is a critical OS command injection vulnerability in the WAVLINK WN553X1-B device, specifically in the OpenVPN CLI Handler component. The flaw exists in the function sub_416568 within /bin/ioos, where manipulation of the file_id argument allows remote attackers to execute arbitrary OS commands. The vulnerability has a high CVSS 4.0 score of 9.4 and public exploit code has been disclosed. No patch or fixed version information is currently available.
CVE-2026-120230 is a critical OS command injection vulnerability in the WAVLINK WN701AE device, specifically in the del_vlan_group function of the ioos Web Backend component. The vulnerability arises from improper handling of the vlan_name argument, allowing remote attackers to execute arbitrary OS commands. The affected version is 260105. Public exploit code exists, increasing the risk of exploitation.
CVE-2026-120229 is a critical OS command injection vulnerability in the WAVLINK WN553X1-B device, specifically in version 260403_2.0.0. The flaw exists in the function sub_416B50 within the /bin/ioos file, where improper handling of the file_id argument allows remote attackers to execute arbitrary OS commands. Public exploit code has been disclosed, increasing the risk of exploitation. The vendor was notified early about this issue. No patch or remediation information is currently available.
CVE-2026-120228 is a critical OS command injection vulnerability in the WAVLINK WN553X1-B device, specifically in the ioos service's /bin/ioos component. The flaw arises from improper handling of the group_id/group_name arguments in the sub_416D88 function, allowing remote attackers to execute arbitrary OS commands. Exploit code has been published, increasing the risk of exploitation. No affected versions or patch information are provided.
CVE-2026-117680 is a low-severity vulnerability in the lud jsv library affecting versions from 0.1.0 up to but not including 0.26.2. It involves an improper check for unusual or exceptional conditions in schema validation related to regex backtracking limits. An unauthenticated remote attacker can bypass schema validation by exploiting regex patterns that cause heavy backtracking, leading to incorrect acceptance of invalid data. The issue is fixed in version 0.26.2.
CVE-2026-120308 is a critical path traversal vulnerability in the beam-cloud Beta9 gateway that allows a tenant with a workspace token to read and write arbitrary files on the worker's filesystem. This occurs because the gateway improperly validates volume identifiers when attaching volumes during function, endpoint, or task queue deployment. The vulnerability affects gateway versions prior to 0.1.776 and worker versions prior to 0.1.756. The issue has been fixed by validating volume identifiers and mount paths and rejecting unauthorized volumes.
CVE-2026-120307 is a critical path traversal vulnerability in the beam-cloud Beta9 worker prior to version 0.1.756. It allows a tenant with a workspace token and running sandbox to perform file operations on the hosting worker's filesystem as root, including accessing files of other tenants. The flaw arises from improper path resolution that enables escaping the container root and accessing arbitrary paths on the worker. This includes reading sensitive files such as the Kubernetes service account token, which in default configurations has cluster-admin privileges. The issue is fixed in version 0.1.756 by restricting file operations to stay within container roots or mount sources.
CVE-2026-120306 is a critical vulnerability in the beam-cloud Beta9 worker component. The issue arises because Buildah RUN steps execute with chroot isolation, sharing PID, network, IPC, and user namespaces with the privileged worker pod, which runs as root and holds CAP_DAC_OVERRIDE. This improper isolation allows tenant builds to access sensitive host resources, including the worker's binaries, Kubernetes service account token, and mounted host directories. The vulnerability is fixed in version 0.1.756 by switching to OCI isolation with private namespaces and restricting tenant ARG values.
A vulnerability in Oray Pugongying X5 Pro up to version 7.6.1 affects the session_get function in session.lua, related to the Session ID Handler. The flaw involves insufficient randomness in the _user argument, which can be exploited remotely. The attack complexity is high and exploitability is difficult. Public exploit code exists, but no vendor response or patch is available. The CVSS score rates this as a low-severity issue with limited impact on confidentiality and no impact on integrity or availability.
HTTP::Session versions before 0.54 for Perl contain a vulnerability in the HTTP::Session::Store::CHI module that allows memcached command injection via unfiltered session IDs. The session ID from the client's cookie is passed unchanged to the CHI cache, which does not validate or escape keys for memcached drivers. This allows an attacker to inject control characters (CR and LF) into the session ID, prematurely ending the cache command and causing the server to interpret subsequent bytes as additional commands.
A critical security vulnerability (CVE-2026-120224) exists in Oray Pugongying X5 Pro up to version 7.6.1. The flaw affects the API Authorization component, specifically the run_apis_by_json and run_async_task functions, allowing improper authorization. This vulnerability can be exploited remotely and has a very high CVSS score of 9.9. Public exploit code is available, but the vendor has not responded or issued a patch.
A critical path traversal vulnerability exists in Oray Pugongying X5 Pro firmware up to version 7.6.1. The flaw is in the config_restore_ex function of the /etc/openwrt_release file, allowing remote attackers with high privileges to manipulate file paths. Exploit code is publicly available, but the vendor has not responded or provided a fix.
CVE-2026-120227 is a critical OS command injection vulnerability in the WAVLINK WN701AE device, specifically in the del_staticrule function of the static_route_setting.sh script within the ioos Web Backend component. The flaw allows remote attackers to manipulate the rule_name argument to execute arbitrary OS commands. Public exploit code is available, increasing the risk of exploitation.
A URL associated with attacker activity was observed in the wild by OffSeq Mirage honeypot sensors on 2026-11-01. The URL, dbj8e4hhhsec5qnnue906fprppz3d315h.oast.live, was used as an out-of-band callback or command-and-control (C2) endpoint employing the T1071 technique (Application Layer Protocol). The attacker infrastructure was identified in Brazil. Security teams are advised to block and monitor this URL and search their proxy, web, and WAF logs for any requests to it.
CVE-2026-120226 is a buffer overflow vulnerability in the P2PAPI.dll version 1.3.3.32 from Hangzhou Xiongmai Technology on Windows. It affects the P2PAPI_Connect function of the P2P SDK component. The vulnerability arises from improper handling of string input arguments, leading to a buffer overflow. Exploitation requires local access. Public exploit code has been disclosed. The vendor was contacted but did not respond or provide a fix.