CVE-2026-115569 is a path traversal vulnerability in the fallow-rs fallow codebase intelligence tool for TypeScript and JavaScript. Versions from 2.68.0 up to but not including 3.34.0 allow attacker-controlled Jest and Vitest project paths to reference files outside the project root via absolute paths, parent directory segments, wildcard globs, or symlinks. This causes fallow to parse external files as test-runner configurations, potentially affecting dependency and file usage analysis. The vulnerability does not expose file contents externally. The issue is fixed in version 3.34.0.
CVE-2026-115813 is a server-side request forgery (SSRF) vulnerability in AWS Multi Model Server version 1.1.11 and earlier. This flaw allows remote attackers to send requests to internal network destinations by exploiting the model download path with a crafted URL. The product is end-of-life with no fixed version available. Users are advised to discontinue use and migrate to supported model serving solutions. The vulnerability has a medium severity with a CVSS score of 5.8.
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive.
Multi Model Server is end of life and no fixed version is available. Users should discontinue use of Multi Model Server and migrate to a supported model serving solution.
A race condition vulnerability (CWE-362) exists in tokio-rs tokio version 1.54.0 involving improper synchronization between tokio::time::Interval::poll_tick and the multi-threaded runtime's time driver. This can cause use-after-free issues leading to assertion panics, task reference-count corruption, or heap memory corruption. The issue is fixed in version 1.54.1.
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration with no field-exclusion strategy. As a result, the authentication secrets stored for each configured monitoring datasource (basic-auth passwords, bearer tokens, API keys, and OAuth2 client secrets) were returned in cleartext to any client able to reach the service. An attacker with network access to Autotune could harvest these credentials and reuse them to authenticate to the backing monitoring stack.
Quest Diagnostics, a major American clinical laboratory company, disclosed a data breach involving unauthorized access to its Quanum LSM system, resulting in exposure of patient records. The breach was confirmed publicly but specific technical details and affected versions were not provided. No known exploits or active attacks have been reported. The incident highlights risks to sensitive healthcare data due to unauthorized system access.
Microsoft announced that Windows Server 2016 will reach its end of support in January 2027, after which it will no longer receive security updates or patches.
Tandoor Recipes versions from 2.0.0 up to but not including 2.7.0 contain a server-side request forgery (SSRF) vulnerability in the Pestle importer. This flaw allows authenticated low-privileged users to craft malicious image URLs in Pestle JSON import files that cause the server to issue arbitrary GET requests. The vulnerability arises from a raw requests.get call that bypasses the application's centralized SSRF protections, enabling attackers to access internal-only endpoints, perform port and service discovery, and exfiltrate internal responses via stored recipe images.
A business logic flaw in Node.js 26.x's zlib.ZipFile API can cause it to return incorrect bytes from a ZIP archive when local and central headers do not match. This occurs because the local header is cached without a content offset after validation failure, allowing attacker-controlled bytes to be returned while CRC-32 verification still passes. This discrepancy can cause Node.js-based scanners to approve different content than other ZIP implementations extract.
University Hospital in Ohio has taken its IT systems offline after detecting unusual server activity indicative of a potential security breach. The incident was reported on October 23, 2026, and involves the hospital's digital services being shut down as a precautionary measure. No specific technical details or confirmed exploits have been disclosed at this time.
e-SIC Livre (esiclivre) version 0.2.2 and earlier contains a vulnerability in the captcha generation script that allows remote attackers to cause denial of service by exhausting server resources. This occurs because user-supplied parameters are not validated before being used to generate CAPTCHA images, leading to excessive memory and CPU consumption.
A vulnerability in Nitro Software, Inc Nitro PDF Pro for macOS version 14.7 allows a local attacker to execute arbitrary code by using a specially crafted PDF file. This issue enables code execution on the affected system if exploited locally.
An OS command injection vulnerability exists in the /htdocs/web/diagnostic.php endpoint of the D-Link DAP1160L A1_FW101WWb04 device. This flaw allows attackers to execute arbitrary commands by injecting shell metacharacters. No patch or remediation information is provided, and no known exploits are reported in the wild.
A new remote code execution (RCE) vulnerability (CVE-2026-115560) in PHP affects systems with a rare combination of configuration settings involving session serialization handlers and upload progress. No patch is currently available. The PHP security team recommends disabling session upload progress as a mitigation. This vulnerability is distinct from recently patched critical PHP2Shell RCE flaws. Exploitation requires unusual runtime changes to session serialization handlers, making it unlikely in typical deployments.
Hugging Face Datasets versions up to 5.1.0 contain a deserialization vulnerability in the deprecated pandas packaged builder. This flaw allows attackers to execute arbitrary Python code by supplying a malicious pickle file that is loaded without validation. When a victim loads such a dataset using datasets.load_dataset("pandas", data_files=...), the embedded payload executes with the victim process's privileges.
Kitodo.Production versions prior to 3.9.2 contain an XML External Entity (XXE) vulnerability due to insecure XML parser configurations that allow processing of external entities. Authenticated users uploading crafted EAD/XML files can exploit this to perform local file disclosure and server-side request forgery (SSRF). The issue is fixed in version 3.9.2.
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious web page could send a CORS simple POST request, such as text/plain, to the local /mcp endpoint and deliver a JSON-RPC body to the dispatcher. If the user had started the local MCP HTTP transport, that page could drive tools/call requests against the user's local Uni-CLI server. The Streamable HTTP transport already enforced this browser-to-localhost boundary. The legacy stateless HTTP path did not, so the two HTTP transports had drifted. This issue is about the browser-to-localhost boundary; it does not change Uni-CLI's local-code-execution trust model. This issue has been patched in version 0.225.2.
This content describes a technology used by Kaspersky to detect and block email spam domains generated by domain generation algorithms (DGAs). Spammers use DGAs to create many similar domain names automatically, making it difficult to block spam by individual domain names. Kaspersky's solution clusters similar domains and creates rules to block entire batches of these generated domains, improving spam filtering efficiency. The technology is part of Kaspersky's corporate email security solutions and helps reduce spam, phishing, and malware emails.
Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one that executes Isar) instead of root. If the calling user's id is identical to one of an unprivileged user inside the image, this user is able to alter existing keys and deploy new ones, silently breaking the apt repo integrity protection. The issue is has no impact on those images that use an immutable rootfs, or if apt is never invoked. Changing only the keys does not trigger an exploit, it's just one step in a chain. An attacker would also have to manipulate a remote repo or intercept non-secure communication with it. This issue has been patched via commit 29e84ed.