CVE-2026-121771 is a vulnerability in PublishPress Gutenberg Blocks (advanced-gutenberg) that allows insertion of sensitive information into sent data. This issue affects versions from initial releases up to 3.7.6. The vulnerability could lead to retrieval of embedded sensitive data without requiring privileges or user interaction. A fix is available in version 3.7.7.
Dell PowerStore 500T has an improper input validation vulnerability (CWE-20) that can be exploited by an authenticated low-privileged attacker to perform stored cross-site scripting (XSS) in the management interface. This vulnerability could allow limited impact on confidentiality and integrity but does not affect availability. A fix is available in version 5.1.0.0-2798105 or later.
CVE-2026-125815 is a medium severity vulnerability in the Noah Hearle We’re Open! opening-hours product that allows code injection via improper neutralization of script-related HTML tags, resulting in a basic cross-site scripting (XSS) flaw. Versions from 0 up to but not including 2.9 are affected. The issue is fixed in version 2.9.
Apify, a web scraping and automation company, suffered a cyberattack in November 2026 where an intruder accessed customer accounts and internal systems using compromised credentials. The attacker obtained personal information and stored data, including names, emails, billing details, salted password hashes, 2FA recovery codes, phone numbers, and authentication tokens. Payment card information exposure was limited to cardholder names, expiration dates, and last four digits, with no full card numbers or security codes accessed. Apify blocked the attacker, launched an investigation, notified affected customers, and implemented additional monitoring and security measures.
FRRouting versions 8.4 and later contain a vulnerability in bgpd where dynamic BGP neighbors disconnecting can cause a double free of memory if the peer-group used by a "bgp listen range" also has a Site-of-Origin (SoO) configured. This double free leads to bgpd aborting and dropping all BGP sessions on the router. The issue can be triggered by any host within the listen range opening and closing two TCP connections to the BGP port without sending BGP messages or knowing the AS number. If a TCP-MD5 password is set on the peer-group, only hosts with the password can trigger the issue. Legitimate dynamic neighbor flaps can also cause the problem. Only configurations combining a listen range with a SoO on the same peer-group are affected.
CVE-2026-125659 is a vulnerability in the eMudhra emBridge product caused by missing authorization checks in the FileBrowser API endpoints. An unauthenticated attacker on the same LAN can exploit this flaw to enumerate file and directory names and learn about the directory structure. The vulnerability does not allow access to file contents, modification, deletion, code execution, or access to cryptographic keys or hardware token PINs. The CVSS score is low, reflecting limited impact.
A buffer overread vulnerability caused by an integer overflow exists in the Proc/SProcXResQueryClientIds function of X.Org xwayland versions before 24.1.15 and X Server versions before 21.1.26. Authenticated X clients could exploit this flaw to crash the server or potentially leak information.
An out-of-bounds write vulnerability exists in Apache DataSketches C++ versions 2.0.0 through 5.3.0. This flaw occurs when an application deserializes a KLL sketch from an untrusted source without validating the serialized level boundaries, potentially leading to heap memory corruption. The issue is fixed in version 5.3.1.
Cudy TR3000 devices running firmware versions before 2.5.42 have a command injection vulnerability. Authenticated administrators can exploit this flaw by storing a malicious WireGuard private key containing shell substitution syntax. This key is then passed to a shell command via the vpn.export_conf method on the /cgi-bin/luci/rpc/app JSON-RPC endpoint, allowing execution of arbitrary commands as root.
CVE-2026-112182 is an authorization vulnerability in OpenKM Community Edition affecting the management of workflow definitions. The REST endpoints registerProcessDefinition and runProcessDefinition require authentication but fail to verify user roles properly. This allows an attacker with a ROLE_USER privilege to register and execute process definitions containing BeanShell scripts, enabling execution of arbitrary Java code and operating system commands with the service's privileges. In the official Docker image, the process runs as root, increasing potential impact.
A vulnerability in X.Org X Server before version 21.1.26 and xwayland before 24.1.15 allows a buffer overread due to casting a negative integer to an unsigned 32-bit integer (CARD32) in the XvQueryImageAttributes function. This flaw can cause crashes when exploited by authenticated X clients.
An out-of-bounds write vulnerability exists in Apache DataSketches C++ versions 3.0.0 through 5.3.0. This flaw occurs when an application deserializes a REQ sketch from an untrusted source without validating the serialized compactor headers, potentially leading to heap memory corruption. The issue is fixed in version 5.3.1.
Cudy TR3000 devices running firmware versions before 2.5.42 have a command injection vulnerability in the OpenVPN client configuration handling. Authenticated administrators can upload a crafted .ovpn file with a malicious remote host token containing a semicolon, which breaks out of the intended command context and allows execution of arbitrary commands as root.
Cudy TR3000 devices running firmware versions before 2.5.42 have a stack buffer overflow vulnerability in the obuspa getter for the TR-098 WLANConfiguration KeyPassphrase parameter. This occurs because the stored passphrase is copied into a fixed 4,096-byte stack buffer using strcpy() without length validation. A malicious or compromised ACS can set a passphrase longer than the buffer size (e.g., 5,000 bytes) via SetParameterValues, causing a buffer overflow and crashing obuspa, resulting in denial of service.
Cudy TR3000 devices running firmware versions before 2.5.42 have a stack buffer overflow vulnerability in the stun_client TR-111 UDP Connection Request parser. This flaw occurs because the parser processes requests before verifying authentication, allowing remote attackers to send a specially crafted UDP datagram that overflows a 10-byte stack buffer and crashes the stun_client, resulting in denial of service.
Dell SmartFabric OS10 Software versions prior to 10.6.0.10 have an Incorrect Authorization vulnerability (CWE-863) that allows a low privileged remote attacker to execute commands. This vulnerability has a high severity with a CVSS score of 7.5. No public exploits or known active exploitation are reported. A fix is available starting from version 10.6.0.10.
Cudy TR3000 devices running firmware versions before 2.5.42 have an OS command injection vulnerability. This flaw allows a malicious or compromised Auto Configuration Server (ACS) to execute arbitrary commands as root by sending a specially crafted SetParameterValues request. The vulnerability arises because user-supplied input is concatenated unsafely into a command executed by the system, leading to root-level command execution.
Cudy TR3000 devices running firmware versions before 2.5.42 have a command injection vulnerability. Authenticated administrators can exploit this flaw by uploading an OpenVPN configuration file with a specially crafted filename containing shell substitution characters. This filename is not properly validated and is passed to a shell command, allowing execution of arbitrary commands as root.
Cudy TR3000 devices running firmware versions before 2.5.42 have an argument injection vulnerability in the easycwmpd Upload handler. This flaw allows a malicious or compromised Auto Configuration Server (ACS) to inject arbitrary curl command options via unfiltered Username and Password fields. Exploitation can enable attackers to write attacker-controlled HTTP responses to arbitrary files on the device, potentially impacting integrity and availability.
Cudy TR3000 routers with firmware versions before 2.5.42 have a remote code execution vulnerability. This flaw allows unauthenticated attackers on the adjacent network segment to execute root commands by advertising a rogue automesh controller via mDNS. The attack involves advertising _cudycmagent._tcp records that point to a malicious MQTT broker and sending commands encrypted with a fixed AES key, which the router executes with root privileges.