CVE-2026-103405 is an injection vulnerability in the web server component of Juniper Networks Session Smart Router and Session Smart Conductor. It allows an attacker to inject arbitrary HTTP headers through unsanitized request body parameters. The flaw is classified as CWE-74, indicating improper neutralization of special elements in output used by a downstream component. This vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS 3.1 base score is 5.8, reflecting a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. No known exploits are reported in the wild.
CVE-2026-103404 is a vulnerability in Juniper Networks Session Smart Conductor's RoutingManager component where incorrect permission assignment allows a local user to access sensitive routing credentials. This occurs through triggering processes that write to the /tmp directory. The issue affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The vulnerability has a CVSS score of 6.8, indicating a medium severity impact with high confidentiality impact but no integrity or availability impact.
CVE-2026-103403 is an OS Command Injection vulnerability in the AccessManager component of Juniper Networks Session Smart Router and Session Smart Conductor. It allows an attacker with limited privileges to execute arbitrary commands and delete files by exploiting improper neutralization of special elements during audit rule deletion. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. It has a high severity with a CVSS score of 8.8.
CVE-2026-103402 is a high-severity vulnerability in Juniper Networks Session Smart Router and Session Smart Conductor. It involves insufficient verification of data authenticity in the PCLI component, allowing an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3.
CVE-2026-103401 is a high-severity vulnerability in Juniper Networks Session Smart Router and Session Smart Conductor. It involves improper link resolution before file access in unauthenticated web server handlers, allowing a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. This affects Mist-managed routers and unmanaged routers not onboarded to a Conductor. Routers managed by Conductor are not vulnerable. Fixed versions are 7.0.5, 7.1.7, and 7.2.3.
CVE-2026-103400 is an injection vulnerability (CWE-74) in the ember service of Juniper Networks Session Smart Router and Session Smart Conductor. It allows a local attacker to create specially named directories that can lead to unmounting arbitrary filesystems or cause a denial of service when the service is restarted. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS v3.1 base score is 5.5, indicating medium severity, with an attack vector requiring local access and no impact on confidentiality or integrity but causing availability disruption.
Red Hat OpenShift Dev Spaces 3.31.1 has been released, providing a cloud developer workspace server and browser-based IDE for container-based development. The release is based on Eclipse Che 7.123.x and supports devfile v2.1 and v2.2 standards. Users still using the older v1 devfile standard are advised to migrate promptly. The product supports OpenShift EUS releases v4.16 and higher. No specific vulnerability details or fixes are provided in the advisory.
CVE-2026-103391 is an out-of-bounds write vulnerability in the TCP proxy/optimization path of Juniper Networks Session Smart Router. It allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash by sending a transit TCP packet with a specially crafted TCP option length. The vulnerability affects multiple versions prior to fixed releases 7.0.5, 7.1.7, and 7.2.3. The CVSS score is 5.3, indicating a medium severity level.
CVE-2026-93522 is a heap-based buffer overflow vulnerability in X.Org X Server and XWayland caused by a mismatched size usage in the CopyArea CPU-to-FBO path. It affects X.Org X Server versions before 21.1.25 and XWayland versions before 24.1.14. Authenticated X clients could exploit this flaw to crash the X server or potentially execute arbitrary code within the server context. The vulnerability has a high severity rating with a CVSS score of 7.8. Fixed versions 21.1.25 for X.Org X Server and 24.1.14 for XWayland address this issue.
CVE-2026-47235 is a heap-based buffer overflow vulnerability in SimulationCraft's simc tool affecting builds after release-820-01 and before a May 7, 2026 nightly build. The flaw arises from improper bounds checking on a JSON sockets array, leading to out-of-bounds writes that corrupt adjacent memory. This can cause crashes and potentially allow code execution. Attack vectors include malicious .simc profiles, compromised addon exports, or manipulated Battle.net API responses. A fix is included in the nightly build simc-1205-01-516b5d7, but no official release tag contains the patch yet.
A deserialization of untrusted data vulnerability exists in the Filter Everything plugin for WordPress and WooCommerce, allowing object injection. This affects all versions up to and including 1.9.7. The vulnerability has a high severity score and can lead to full compromise of confidentiality, integrity, and availability if exploited.
A deserialization of untrusted data vulnerability exists in weDevs Dokan dokan-lite up to version 5.3.1. This flaw allows object injection, potentially leading to high impact on confidentiality, integrity, and availability. The vulnerability is identified as CVE-2026-115590 with a CVSS 3.1 score of 7.2, indicating a high severity. No patch or remediation information is currently provided.
A missing authorization vulnerability exists in iHomefinder, Inc.'s Optima Express software up to version 9.0.0. This flaw allows unauthorized network attackers to access functionality without proper access control, potentially leading to high confidentiality impact. The vulnerability is identified as CVE-2026-116393 with a CVSS 3.1 base score of 7.5, indicating high severity. No public exploits or patches are currently documented.
A deserialization of untrusted data vulnerability exists in PickPlugins Accordion accordions, allowing object injection. This affects versions up to and including 2.3.25. The vulnerability has a high severity with a CVSS score of 7.2. No patch or remediation details are provided in the available data.
A stored cross-site scripting (XSS) vulnerability exists in Stiofan GetPaid invoicing software, affecting versions up to 2.8.62. This vulnerability allows improper neutralization of input during web page generation, which can lead to script injection. The flaw has a high severity rating with a CVSS score of 7.1.
A stored cross-site scripting (XSS) vulnerability exists in Crowd Favorite DXP ToolKit up to version 2.0.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and affects confidentiality, integrity, and availability.
The n0n ransomware operation is an AI-assisted extortion campaign revealed in 2026 through an exposed staging server. It targets organizations globally using credential stuffing attacks against FortiGate SSL-VPN devices, exposed cloud keys, and compromised management portals. The operation combines data exfiltration with destructive actions such as encryption and backup deletion. The attacker uses an AI coding agent with numerous models to generate attack scripts, enhancing human-directed operations. At least 23 victims across 14 countries were identified initially, with 93 victims listed by October 2026 and ransom demands totaling $283.7 million. No software vulnerabilities were exploited; all compromises relied on weak or stolen credentials.
CVE-2026-93519 is a heap-based buffer overflow vulnerability in the XFIXES extension handling of pointer barriers in X.Org X server versions before 21.1.25 and XWayland versions before 24.1.14. Authenticated X clients can exploit this flaw to crash the X server or potentially execute arbitrary code within the server context. The vulnerability has a high severity with a CVSS score of 7.8. Fixed versions 21.1.25 for X.Org X server and 24.1.14 for XWayland have been released to address this issue.
Since July 2025, a financially motivated threat actor named CyberDakait has conducted a sophisticated Android malware campaign targeting India's financial services sector. The campaign uses seven distinct Android trojan families distributed via smishing and vishing, impersonating bank representatives to trick victims into installing malicious APKs. These trojans steal banking credentials, credit card details, and intercept SMS messages including OTPs through overlay attacks. Additionally, the malware performs cryptojacking using XMRig. The malicious apps are hosted on GitHub to appear legitimate, with initial droppers delivering the main payload and mining modules. At least 17,960 devices have been compromised with 7.6 million intercepted SMS messages reported.
