Search: 17.9-6

CVE-2026-55245 is a Server-Side Request Forgery (SSRF) vulnerability in maximhq bifrost, an enterprise AI gateway. The issue arises from incorrect classification of certain IP address ranges as public in the isPublicIP function prior to version 1.5.17. This misclassification allows a remote attacker controlling a multimodal request URL to make the gateway fetch internal services, including cloud instance metadata endpoints encoded via IPv6 6to4 or NAT64. The vulnerability has a high severity with a CVSS score of 8.7 and is fixed in version 1.5.17.

Kubeflow Pipelines versions prior to 2.17.0 contain an unauthenticated server-side request forgery (SSRF) vulnerability in the frontend proxy middleware. This flaw allows attackers to send arbitrary HTTP or HTTPS requests to internal services without authentication, bypassing authorization controls. The vulnerability arises because the proxy route does not filter or restrict target addresses and remains accessible even when authorization is enabled. Exploitation can lead to unauthorized access to sensitive internal endpoints, including cloud metadata services and Kubernetes APIs. The issue is fixed in version 2.17.0.

The wpForo Forum plugin for WordPress contains an SQL Injection vulnerability in the 'referer' parameter affecting all versions up to and including 2.4.17. This vulnerability allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and preparation of the SQL statement. Exploitation can lead to unauthorized extraction of sensitive database information. The vulnerability has a high severity score of 7.5 (CVSS 3.1). No official patch or remediation guidance is currently available from the vendor.

CVE-2026-37751 is a critical OS command injection vulnerability in the killSessionSync function of 23blocks-OS ai-maestro version 0.24.17. This flaw allows attackers to execute arbitrary commands by supplying crafted input. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch or remediation information is currently available, and no known exploits are reported in the wild.

The Ebyte NA111-M firmware version 9013-2-17 contains a vulnerability where its vendor configuration utility does not require authentication for certain administrative actions if default credentials remain unchanged. This allows an unauthenticated attacker on the adjacent network to reboot the device or restore factory settings, resulting in loss of configuration and service availability.

The Ebyte NA111-M firmware version 9013-2-17 transmits MQTT credentials and control traffic in cleartext, exposing sensitive information to attackers on the network. This vulnerability is classified as CWE-319 and has a critical CVSS score of 9.8. Exploitation could allow unauthorized device impersonation and disruption of messaging functions.

A critical vulnerability (CVE-2026-30612) exists in Time4 Popcorn applications for Windows (<= 6.2.1.18), MacOS (<= 6.2.1.17), and Android (<= 3.5.0.173). It allows a remote attacker to execute arbitrary code via specific updater components (updater.exe on Windows and PT.updd on MacOS). The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-75548 is a medium severity vulnerability in the Ebyte NA111-M firmware version 9013-2-17. The web management interface does not prevent rendering inside an external frame, which could allow an unauthenticated remote attacker to trick an authenticated administrator into performing unintended actions via UI redressing.

The Ebyte NA111-M Firmware version 9013-2-17 lacks rate limiting and account lockout mechanisms for authentication attempts. This vulnerability (CWE-307) enables attackers to perform automated password guessing attacks, potentially leading to unauthorized access. The issue affects password-based authentication and has a CVSS score of 7.5, indicating high severity. No official patch or remediation guidance is currently available, and no exploits are known in the wild.

CVE-2026-75814 is a high-severity Cross-Site Request Forgery (CWE-352) vulnerability in the Ebyte NA111-M firmware version 9013-2-17. The device's web management interface fails to properly verify the origin or authenticity of requests, allowing an unauthenticated remote attacker to trick an authenticated administrator into performing unauthorized actions. This can lead to unauthorized configuration changes or disruption of device availability.

CVE-2026-76179 is a critical vulnerability in the Ebyte NA111-M Firmware version 9013-2-17. It involves improper protection of authentication tokens in the web management interface, allowing attackers who can access session information to reuse valid tokens. This can lead to unauthorized access to device management functions without any user interaction.

CVE-2026-71187 is a critical vulnerability in the Ebyte NA111-M Firmware version 9013-2-17. The firmware uses client-side authentication logic that can be replicated by unauthenticated attackers. This allows attackers to generate valid authentication requests and bypass authentication controls, gaining administrative access to the device.

CVE-2026-73809 is a vulnerability in the Ebyte NA111-M Firmware version 9013-2-17 where sensitive information is transmitted in cleartext via the web management interface. This allows attackers with network access to intercept authentication or session data. The vulnerability has a high severity with a CVSS score of 7.5 and could lead to unauthorized access to device management functions.

The Ebyte NA111-M firmware version 9013-2-17 contains a critical vulnerability (CVE-2026-73125) due to inconsistent enforcement of authentication in its web management interface. This allows unauthenticated remote attackers to access administrative functions, which may lead to exposure of sensitive configuration data, unauthorized modification of device settings, or disruption of device availability.

Bilibili Desktop version 1.17.9 contains a critical vulnerability that allows remote attackers to execute arbitrary code via the bili-inject.js and bili-bridge.js components. This vulnerability is identified as CVE-2026-75357 and has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability.

A command injection vulnerability exists in the setInitAction function of luci-app-https-dns-proxy on OpenWrt PR #15 versions before 2026-01-17. Authenticated users can exploit shell metacharacters in the name parameter to execute arbitrary shell commands.

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue.

CVE-2026-75020 is an LDAP Injection vulnerability in Apache APISIX that allows a user with valid LDAP credentials to authenticate as a different consumer than intended. This affects versions from 2.11.0 through 3.17.0. The issue is fixed in version 3.18.0. The vulnerability has a high severity score of 7.0.

CVE-2026-32479 is a critical unauthenticated SQL Injection vulnerability in Visitor Traffic Real Time Statistics Pro versions up to and including 11.17. This flaw allows an attacker to inject malicious SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance is currently available from the vendor.

The 12 Step Meeting List WordPress plugin before version 3.19.17 contains a stored Cross-Site Scripting (XSS) vulnerability. This occurs because the plugin does not properly sanitize and escape input submitted by unauthenticated users before storing it in its activity log and displaying it in the admin area. This vulnerability could allow attackers to execute malicious scripts in the context of high privilege users such as administrators.