RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the server to issue requests to arbitrary internal or external endpoints by supplying an unvalidated base_url to the POST /v1/llm/set_api_key endpoint handled by set_api_key() in api/apps/llm_app.py. Attackers can exploit this flaw to probe shared-network services such as MySQL, Elasticsearch, Redis, MinIO, the Infinity vector database, and cloud metadata endpoints, with raw upstream exception text returned in the response leaking internal service details, open ports, and configuration fingerprints.
CVE-2026-121623 is a high-severity vulnerability in the Symfony Serializer component affecting versions prior to 5.4.56, 6.4.50, 7.4.23, and 8.1.11. It allows arbitrary local file read via path traversal due to case-sensitive matching of the data: URI scheme in DataUriNormalizer::denormalize(). This flaw enables an attacker to bypass scheme validation by using uppercase schemes like DATA:, causing the application to treat the input as a local file path and read files accessible to the server. Exploitation requires sending a crafted request to an endpoint that deserializes untrusted input into file-related types, with no authentication needed if the endpoint is public.
CVE-2026-80301 is a vulnerability in Gen Digital's Avast Antivirus products where the sandbox on Windows improperly isolates COM interface access to the Task Scheduler service. This flaw allows a local, low-privileged attacker executing inside the sandbox to escape containment by scheduling and executing code with elevated privileges on the host system. The sandbox virtualizes file system and registry access but does not block the Task Scheduler COM pathway, enabling arbitrary code execution outside the sandbox boundaries.
A vulnerability in Avast Antivirus and related products allows a local attacker running inside the Avast sandbox on Windows to write files outside the sandbox containment. This occurs due to improper validation in the sandbox's file virtualization layer, enabling arbitrary file writes to protected system locations. Exploitation can lead to overwriting executables or system libraries, resulting in code execution with host privileges after system operations or reboot.
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.
CVE-2026-80303 is an integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows. It allows denial of service by causing a system crash through improper length calculations during network stream processing. The vulnerability can be triggered remotely via network traffic or locally via crafted data, leading to kernel panic and system crash.
CVE-2026-12067 is a vulnerability in Gen Digital's Avast security products on Windows where missing exception handlers in the native message dispatcher (ashServ.dll) allow local attackers to crash the service by sending specially crafted JSON messages. The flaw affects multiple JSON field conversions without proper type validation or exception handling, causing uncaught exceptions that propagate and crash the service.
Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configuration only defining source ACLs without destination deny rules and the make_request() helper performing no independent destination IP validation. Attackers can use endpoints such as GET /console/api/remote-files/<url>, POST /console/api/remote-files/upload, the HTTP Request workflow node, website crawl, or document import from URL to reach internal components like the sandbox, internal APIs, and PostgreSQL, and on AWS deployments read IAM credentials from the instance metadata service, with the HTTP Request node further enabling POST, PUT, and DELETE writes to internal services relying on network isolation for authorization.
HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resulting in unintended behavior or security impact under certain conditions.
A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Chapter Read Handler. Performing a manipulation of the argument chapterId results in authorization bypass. The attack may be initiated remotely. The exploit has been made public and could be used. The patch is named b8134e774820e0971fa9d8074405b49a01c99bdc. It is suggested to install a patch to address this issue.
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP <Fault> carries a <detail><exceptionName> element, Axis loads the named class and, if a String <data> element is also present, instantiates it through its String constructor before checking that it is an AxisFault. Loading alone runs the class's static initializer. With a suitable class on the application's classpath this leads to remote code execution. The fault is parsed while the engine resolves the target service, before any per-service handler chain runs, so authentication handlers configured on a service do not protect against it. This affects all Apache Axis 1.x versions through 1.4.
As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. Alternatively you could use a build of Axis with the patch from https://github.com/apache/axis-axis1-java/commit/41f3b4e8d04e310ca81f86b92630ab2c11d608bd applied. The Apache Axis project does not expect to create an Axis 1.x release fixing this problem.
HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login attempts, allowing an attacker to make a large number of password guesses against a user account. This may increase the risk of account compromise through brute-force attacks, potentially resulting in unintended behavior or security impact under certain conditions.
HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing the browser to store and suggest previously entered values. A malicious user with access to the same browser or system could retrieve saved credentials, potentially resulting in unintended behavior or security impact under certain conditions.
HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under certain conditions.
A vulnerability exists in Johnson Controls EasyIO Neo IOManager and Tools Installer version 1.1.0.0 that allows inclusion of functionality from an untrusted control sphere, enabling malicious software updates. This flaw could be exploited by an attacker with limited privileges and user interaction, but requires physical access. The vulnerability has a high severity rating with a CVSS 4.0 score of 7.3. No patch or remediation information is currently available.
Jumis (formerly Tildes Jumis) creates a Microsoft SQL Server login named ##Tilde_JumisAdmin## with a password deterministically derived from the SQL Server name, which is publicly discoverable. This login is part of the sysadmin role, granting full administrative access to the SQL Server instance and all hosted accounting databases. The server also enables xp_cmdshell, allowing attackers with sysadmin access to execute operating system commands. This vulnerability allows any party able to reach the Jumis SQL Server to compute the admin password offline and gain full control without prior authentication.
Fluxbox versions through 1.3.7 have an infinite loop vulnerability in the Menu::updateMenu() function. This flaw allows attackers to cause the window manager to hang by supplying a crafted style with an oversized unbounded menu.titleHeight, resulting in a non-terminating column loop. The attack leads to sustained CPU usage and denial of service during startup.