Heimdall versions prior to 0.17.17 have an improper input validation vulnerability in proxy mode. The software constructs the Forwarded HTTP header by directly inserting the incoming request's Host header without sanitizing commas or semicolons. This allows attackers to inject additional parameters into the Forwarded header, potentially spoofing IP addresses for upstream services. The issue is patched in version 0.17.17.
XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to resources. The sharing of the token transfers access to the resource and is supposed to happen out of band. The tokens were generated with g_random_int or g_uuid_string_random, both of which use GLib's GRand based on the Mersenne Twister PRNG which created a stream of reproducible random numbers. By generating enough tokens, the state of the GRand can be recover and with it, the next tokens can be predictedinsufin. This issue has been patched in version 1.22.1.
A path traversal vulnerability (CWE-22) exists in flatpak's xdg-desktop-portal prior to version 1.22.1. Malicious sandboxed applications can exploit the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host system, limited to files accessible by the user. The vulnerability arises because filenames passed to the method are not properly validated by the frontend or common backends, allowing path traversal. This issue has been patched in version 1.22.1.
CVE-2026-55422 is a medium severity cross-site scripting (XSS) vulnerability in the conda-forge.github.io website. The issue arises because two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML without sanitization. These strings include raw output from build logs, patch outputs, and tracebacks generated by the conda-forge autotick bot. No patches are publicly available at the time of publication.
CVE-2026-115730 is a low-severity vulnerability in i18next-http-backend versions 4.0.2 up to but not including 4.0.3. It involves an incomplete fix in the interpolateUrl() function that allows attackers controlling the namespace (ns) value to redirect translation requests by supplying a namespace starting with a slash. This can lead to loading attacker-hosted translations, enabling UI content injection and cross-site scripting (XSS).
CVE-2026-115729 is a server-side request forgery (SSRF) vulnerability in the pdfme common library versions from 5.5.10 up to but not including 6.2.6. The flaw allows attackers to bypass the isUrlSafeToFetch denylist in the getB64BasePdf function by using specially crafted basePdf URLs with IPv4-mapped IPv6, [::], NAT64, or localhost alias hostnames. This enables reading of loopback, internal, or cloud metadata responses through generated PDF documents.
@hapi/content versions 6.0.1 through before 6.0.3 contain a regular expression denial of service (ReDoS) vulnerability in the Content.disposition() function. This issue arises from an incomplete fix for a previous vulnerability (CVE-2026-35213). An unauthenticated remote attacker can exploit this by sending multipart uploads with a long Content-Disposition parameter that lacks an equals sign, causing quadratic backtracking that blocks the event loop.
Hewlett Packard Enterprise (HPE) released security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity flaws involving authentication bypass and remote code execution (RCE). These critical vulnerabilities affect multiple versions of AOS-8 and AOS-10 and can be exploited remotely without privileges or user interaction. HPE strongly urges customers to apply patches promptly and recommends restricting access to management interfaces to reduce exploitation risk. No public exploit code or active exploitation has been reported as of the advisory date.
PHP2Shell refers to two critical PHP engine vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote code execution. These flaws have been exploited in attempts to spread a Mirai-derived botnet variant named Potassium. Despite multiple exploitation attempts and the emergence of an ASLR bypass exploit, no confirmed successful compromises have been reported. The vulnerabilities were patched on October 21, 2026, with PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Organizations have taken precautionary measures including taking systems offline during patching. Exploits require uncommon server configurations and detailed knowledge, limiting their effectiveness in typical production environments.
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, or Azure) to execute arbitrary file writes and directory creation outside the designated PostgreSQL data directory (pgdata). When a database administrator executes a restore operation (via pghoard_restore get-basebackup), a maliciously crafted delta backup manifest with path traversal sequences (e.g., ../../../../etc/cron.d/backdoor) will write arbitrary payloads to the host system. This issue has been patched in version 2.7.2.
PraisonAI versions from 4.5.115 up to but not including 4.6.61 have a vulnerability where unauthenticated access to A2U event streaming routes is possible when using the documented CLI entrypoint. This occurs because the CLI wrapper does not enforce API key authentication, allowing exposure of sensitive information without authorization. The issue is fixed in version 4.6.61.
CVE-2026-57144 is a high-severity vulnerability in MervinPraison's PraisonAI multi-agent teams system affecting versions from 4.5.110 up to but not including 4.6.61. The issue arises when the SandlockSandbox fallback mechanism does not enforce filesystem or network restrictions if the Landlock module is unavailable, allowing sandboxed code to access unauthorized files and network despite restrictions. This vulnerability has been fixed in version 4.6.61.
CVE-2026-57142 is a high-severity OS command injection vulnerability in MervinPraison PraisonAI versions 4.5.87 up to but not including 4.6.61. The vulnerability arises because the recipe execution policy that blocks dangerous tools only checks tools declared in TEMPLATE.yaml, but the actual workflow execution loads tools from workflow.yaml, allowing untrusted recipes to self-approve critical shell tools without explicit permission. This flaw enables unauthorized execution of shell commands. The issue has been fixed in version 4.6.61.
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members. All six content DELETE endpoints enforce workspace membership but perform no ownership or role check. A single malicious or compromised member account can wipe an entire workspace's content irreversibly. This issue has been patched in version 0.1.5.
CVE-2026-57117 is an OS command injection vulnerability in MervinPraison PraisonAI versions 4.6.10 up to but not including 4.6.59. The vulnerability arises because file operation commands are constructed using raw path arguments without proper neutralization, allowing an attacker to inject arbitrary shell commands. This affects local subprocess execution and Docker container execution environments. The issue has been patched in version 4.6.59.
PraisonAI versions from 4.2.1 up to but not including 4.6.59 have an unauthenticated AgentOS FastAPI deployment surface. This allows unauthorized actors to invoke agent.chat endpoints without authentication, potentially exposing sensitive information and enabling unauthorized agent operations. The issue has been patched in version 4.6.59.
CVE-2026-57114 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in MervinPraison PraisonAI versions 4.5.126 up to but not including 4.6.59. The Async Jobs API validates webhook URLs during job request parsing and again when constructing the internal Job object, blocking loopback/private targets at validation time. However, the actual webhook delivery does not re-validate the hostname, allowing an attacker to exploit DNS resolution changes to bypass SSRF protections. This vulnerability has been fixed in version 4.6.59.
PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/repo/template@v1.0.0. The resolver stores the user-controlled template path and ref verbatim, and the cache layer later joins those values into ~/.praison/cache/templates/github/<owner>/<repo>/<template>/<ref> without normalizing each segment or checking that the final path remains inside the template cache root. A crafted ref such as ../../../../../../outside-delete-target therefore escapes the cache directory. The first load can write .cache_meta.json outside the cache. If the normal cache hierarchy for the same owner/repo/template has already been created, the same path reaches shutil.rmtree(cache_path) and removes an attacker-selected outside directory before replacing it with cache metadata. This issue has been patched in version 4.6.59.
A vulnerability in pghoard, a PostgreSQL backup daemon, prior to version 2.7.1 causes sensitive database connection information, including username and password, to be logged at the debug level when using .pgpass. This issue has been fixed in version 2.7.1.
This is a medium-severity phishing campaign observed in late 2026 targeting organizations during year-end and fiscal close periods. Attackers exploit increased legitimate administrative communications in finance, HR, and IT by impersonating compensation adjustments, Q4 financial documents, access reviews, invoice follow-ups, and benefits statements. The campaign uses themes from SharePoint, Docusign, and Microsoft 365 to deliver credential harvesting pages disguised as document-sharing portals. It affects multiple sectors including aviation, telecommunications, manufacturing, real estate, technology, and financial services, with a concentration in the Middle East. The phishing lures are generic and require minimal customization, making them effective during busy periods when employees expect increased document requests.