LiteLLM versions from 1.87.0 up to but not including 1.100.4, and certain subsequent minor versions, contain an improper privilege management vulnerability. The proxy server reuses a cryptographic context for secrets and session tokens, enabling an authenticated internal user to forge administrator credentials. This allows escalation to administrative access and execution of arbitrary commands via the MCP stdio endpoint. Early vulnerable versions require an experimental login feature enabled, while later versions are exploitable by default. The issue is fixed in versions 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2.
CVE-2026-114611 is a critical vulnerability in schorschii OCO-Server versions prior to 1.2.3. The Apple MDM enrollment endpoint improperly validates PKCS#7 signatures by disabling certificate chain and trust verification, allowing acceptance of self-signed certificates from attackers. This flaw enables an attacker who knows a registered device's serial number to forge enrollment requests and obtain the victim device's MDM identity certificate and private key. Consequently, the attacker can impersonate the victim device in MDM communications, hijacking device management and disrupting enrollment. The issue is fixed in version 1.2.3.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68. These include unauthorized access to internal state files in mod_dav_fs, out-of-bounds write on Windows, improper privilege management in mod_ssl, FTP PASV reply address validation issues in mod_proxy_ftp, stack-based buffer overflow in mod_vhost_alias, NULL pointer dereference in mod_xml2enc, HTTP request smuggling via mod_proxy_uwsgi, path equivalence issues in mod_userdir, and integer overflow in mod_dav_fs. All these issues are fixed in version 2.4.69. Users are strongly recommended to upgrade to 2.4.69 to address these critical security flaws.
Multiple critical vulnerabilities have been identified in Apache HTTP Server versions from 2.4.0 through 2.4.68, including memory calculation bugs, NULL pointer dereferences, out-of-bounds writes, use-after-free conditions, information exposure, privilege management flaws, and HTTP request smuggling. These issues affect various modules such as mod_dav, mod_heartmonitor, mod_session_cookie, mod_charset_lite, mod_rewrite, mod_http2, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The vulnerabilities can lead to denial of service, information disclosure, arbitrary code execution, and privilege escalation. Users are strongly recommended to upgrade to Apache HTTP Server version 2.4.69, which addresses all these vulnerabilities.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68, including out-of-bounds writes, use-after-free, improper privilege management, and HTTP request smuggling. These flaws impact various modules such as mod_charset_lite, mod_rewrite, mod_http2, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The vulnerabilities can lead to remote code execution, denial of service, information disclosure, and privilege escalation. Users are strongly recommended to upgrade to version 2.4.69, which addresses all these issues.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68, including authentication bypass, denial of service, information disclosure, buffer overflow, and privilege management issues. These vulnerabilities impact various modules such as mod_auth_digest, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The issues allow unauthenticated remote attackers to cause denial of service, read unauthorized data, execute arbitrary code, or bypass authentication under certain configurations. Apache HTTP Server version 2.4.69 addresses all these vulnerabilities and is recommended for upgrade.
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input validation. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file patappointtime.php of the component Booking Handler. The manipulation results in enforcement of behavioral workflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The patch is identified as e9ee77a8827a1446220fa07ee693dc4d9a29a578. It is advisable to implement a patch to correct this issue. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-115247 is a vulnerability in the subhajitkhan online-clinic-management-system affecting patientregistration.php. It involves missing encryption of sensitive data in the pat_pswd/doc_pswd parameters, allowing remote attackers to access unencrypted sensitive information. The vulnerability has been publicly disclosed and may be exploited. No patch or vendor response has been reported yet.
CVE-2026-115246 is a cross-site scripting (XSS) vulnerability in the subhajitkhan online-clinic-management-system affecting the patdocmsg.php file. It results from improper handling of the 'Query' argument, enabling remote attackers to execute script code. The vulnerability has been publicly disclosed with available exploit code, but no fix or response has been issued by the project. It has a medium severity rating with a CVSS 4.0 score of 5.1.
Shadow AI refers to the unauthorized and ungoverned use of AI tools and models within enterprise environments, spanning from simple chatbots to complex autonomous agents and local AI models. This phenomenon has grown significantly, creating blind spots in security and increasing risks such as data loss, operational disruption, and regulatory fines. Shadow AI incidents have more than doubled recently, with associated breach costs exceeding the global average. Enterprises face challenges detecting and controlling shadow AI due to its diverse forms and rapid adoption outpacing governance. Mitigation involves employee training, establishing AI usage policies, and integrating shadow AI management into exposure management programs.
YouDataSum CPAS Audit Management System version 4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files on the system. This is achieved by manipulating the fileId parameter in GET requests to the /cpasm4/plugInManController/downPlugs endpoint with directory traversal sequences (../). Exploitation evidence was first observed on 2025-01-13. The vulnerability has a high severity score of 8.7 (CVSS 4.0).
The HIPAA Forms WordPress plugin versions before 3.3.2 contain a vulnerability where the plugin does not verify user capabilities when rebuilding its custom user role. This flaw allows users who already have that role to escalate their privileges by granting themselves administrator-level capabilities.
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization (CVE-2026-96512)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A missing authorization vulnerability exists in the Grav Login plugin versions 3.6.0 up to but not including 3.9.13. This flaw in the login.invite task allows unauthenticated attackers to create invitation forms that grant super user access, enabling them to register accounts with full site control.
CVE-2026-114576 is a medium severity vulnerability in Linksys RE6250 version 1.0.04.001. It involves insufficiently random values generated in the Web Management Interface's strcmp function due to manipulation of the session_id argument. The vulnerability can be exploited remotely but requires high attack complexity and no privileges or user interaction. Public exploit code has been disclosed, though exploitation is considered difficult.
CVE-2026-76287 is a vulnerability in Splunk Enterprise versions 10.4 up to but not including 10.4.4. It allows users with specific roles (preview_data_management_pipeline or edit_data_management_pipeline_job) to read or delete Data Management SPL2 preview jobs and results that they do not own. This occurs because the Data Management REST API checks user capabilities but does not verify ownership of the preview job. The vulnerability only affects systems with the Edge Processor feature enabled, which is off by default. A fix is available in version 10.4.4.