WWBN AVideo versions 12.4 through 29.7.1 have a path traversal vulnerability in the ADs plugin's deleteImage.json.php endpoint. Authenticated users with custom ads can exploit this flaw by manipulating the is_regular_user parameter to delete arbitrary files, including other users' ads or critical site files such as videos/configuration.php. This can lead to site downtime and re-exposure of the installer.
Hydro @hydrooj/ui-default versions before 4.59.1 have a stored cross-site scripting (XSS) vulnerability. Registered users can inject malicious scripts via double quotes in language-class tokens within markdown-it-xss.ts. This allows attackers to store payloads in their profile bios that execute when viewed by administrators or other users, potentially stealing session cookies and enabling session hijacking.
Rote through version 2.6.0 has a privilege escalation vulnerability that enables authenticated administrators to gain super_admin rights. This is achieved by accessing or modifying JWT signing secrets through the /v2/api/admin/settings endpoint. Exploiting this flaw allows attackers to retrieve the unmasked jwtSecret and forge HS256 tokens for the super administrator, enabling them to change user roles and escalate privileges.
Rote versions 1.2.0 through 2.6.0 have an authorization bypass vulnerability in the OAuth bind/merge endpoint. This flaw allows authenticated users to merge any OAuth-bound account into their own by submitting a public existingUserId along with a GitHub or Apple user ID. Exploitation enables attackers to take over victims' notes, attachments, API keys, and delete the victim's account.
CVE-2026-0330 is a remote code execution vulnerability in Palo Alto Networks PAN-OS software on Panorama. It allows an authenticated administrator with network access to execute arbitrary code with root privileges. The vulnerability does not affect Cloud NGFW, Prisma Access, or standalone PAN-OS firewalls. Restricting management interface access to trusted internal IP addresses significantly reduces the risk.
Gotenberg versions 8.31.0 up to but not including 8.38.0 contain a server-side request forgery (SSRF) vulnerability in the IsPublicIP() function. This flaw allows unauthenticated attackers to bypass private IP deny-list protections by exploiting IPv6 zone identifiers. By appending a zone such as %25eth0 to certain IPv6 addresses in parameters like downloadFrom, webhook, or Chromium/LibreOffice URLs, attackers can access internal services and extract data included in generated PDFs.
Lagarto Chivato versions 0.4.1 and earlier have a vulnerability in the publicar_aviso RPC function where there is no rate limiting, per-account submission quota, or geographic validation. This allows remote authenticated attackers to flood the moderation queue by submitting unlimited notices with arbitrary coordinates. The vulnerability has a medium severity rating with a CVSS score of 4.3.
A privilege escalation vulnerability exists in the GlobalProtect gateway component of Palo Alto Networks PAN-OS software. This flaw allows an authenticated user with lower privileges to escalate their access and obtain the privileges and configuration of a higher-privileged user. The vulnerability does not affect Cloud NGFW or Panorama products. The CVSS 4.0 base score is 6.0, indicating a medium severity level.
NextScan versions 1.1.0 through 1.2.0 have an authentication bypass vulnerability in the ns-admin component. This flaw allows unauthenticated attackers to forge administrator tokens by exploiting a hardcoded JWT signing key. Using this, attackers can create an HS256 X-Access-Token with a super administrator role, granting full control over user management, scan tasks, and stored vulnerability data.
A pre-account hijacking vulnerability exists in the authentication flow of Lagarto Chivato version 0.4.1 and earlier on the web. This flaw allows remote unauthenticated attackers to take over arbitrary user accounts by planting a password on an unregistered email address, which becomes valid when the victim performs their first passwordless login.
NextScan versions 1.1.0 through 1.2.0 contain hardcoded HTTP Basic Authentication credentials in the ns-admin component's AuthAgent and AuthExternal routers. This vulnerability allows unauthenticated attackers to access protected APIs. Exploiting this flaw, attackers can retrieve sensitive configuration data such as Redis passwords, etcd details, and server tokens by calling the /agent/config endpoint. Additionally, attackers can impersonate scan nodes by interacting with registration, heartbeat, and logging endpoints.
An information disclosure vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated remote attacker with network access to obtain sensitive firewall and session information by sending traffic to or through a dataplane interface. Panorama management software is not affected by this issue. The vulnerability has a high severity rating with a CVSS score of 8.7.
NextScan versions 1.1.0 through 1.2.0 have a stored cross-site scripting (XSS) vulnerability in the ns-admin URL asset detail dialog. This flaw occurs because the application renders crawled form request bodies using innerHTML without proper encoding. An attacker can exploit this by hosting malicious forms on crawled sites, which store JavaScript that executes when users view asset details. This can lead to theft of localStorage access tokens and session hijacking, including for administrator accounts.
CVE-2026-0328 is an authentication bypass vulnerability in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS software. This flaw allows an unauthenticated attacker to bypass security controls and establish an unauthorized VPN connection. Other Palo Alto products such as Panorama, Cloud NGFW, and Prisma Access are not affected. The vulnerability has a high severity rating with a CVSS score of 7. No fixed versions or patches are currently specified in the available data.
A local authenticated user with control over a target account's home directory in Cockpit can exploit a privileged symlink dereference vulnerability in the ssh-add-public-key.sh helper. This vulnerability allows the attacker to manipulate symlinks within .ssh or authorized_keys paths, causing arbitrary changes to file ownership and permissions. This can lead to local privilege escalation and impact system integrity, confidentiality, and availability. Exploitation requires user interaction and elevated privileges, preventing remote or unauthenticated attacks.
A buffer overflow vulnerability exists in Palo Alto Networks PAN-OS software that allows an unauthenticated attacker with network access to cause a denial of service (DoS) by sending specially crafted network traffic to or through a dataplane interface. Cloud NGFW and Panorama products are not affected by this issue.
AsiaInfo BSS Platform versions before 9.2.38 contain a stored cross-site scripting (XSS) vulnerability in the menu icon upload function. An authenticated user with ordinary privileges can upload an SVG files with embedded JavaScript. The script executes only if a victim loads the SVG directly as a document, such as via direct URL navigation or embedding in an object or iframe element, running under the application origin.
Dell Terraform Provider for PowerFlex versions prior to 1.9.0 contain a vulnerability that may allow the use of deprecated cryptographic protocols during secure communications. This could potentially be exploited by an unauthenticated remote attacker to expose information. The vulnerability has a low severity rating and does not impact integrity or availability.
Dell OpenManage Ansible Modules versions 9.2.0 through 10.0.3 have an improper certificate validation vulnerability in the SessionAPI component. This flaw allows an unauthenticated remote attacker to potentially cause information exposure and unauthorized access. The vulnerability is rated high severity with a CVSS score of 8.7. No patch or remediation details are provided in the available data.
CVE-2026-0325 is an authorization bypass vulnerability in the GlobalProtect gateway component of Palo Alto Networks PAN-OS software. It allows an authenticated user with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. The vulnerability does not affect the Cloud NGFW product. The CVSS score is 5.3, indicating a medium severity. No known exploits in the wild have been reported, and no patch or remediation details are provided in the available data.