CVE-2026-25892 is a high-severity vulnerability in Adminer versions 4.6.2 up to 5.4.1, caused by improper input validation in the version check mechanism. The vulnerability arises because the ? script=version endpoint accepts POST requests from any origin without validating the source, allowing an attacker to send a crafted version[] parameter. This parameter is converted by PHP into an array instead of a string, causing openssl_verify() to throw a TypeError and resulting in an HTTP 500 error that disrupts service for all users. No authentication or user interaction is required to exploit this remotely over the network. The impact is a denial-of-service condition affecting availability.
n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation allowed an authenticated attacker to send requests with credentials to unintended domains, potentially leading to credential exfiltration. This only might affect user who have credentials that use wildcard domain patterns (e.g., *.example.com) in the "Allowed domains" setting. This issue is fixed in version 1.121.0 and later.
Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude folder and paths outside the project scope. Exploiting this required the ability to execute commands through Claude Code with the "accept edits" feature enabled. This issue has been patched in version 2.0.55.
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protection and create or modify files without user confirmation. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.57.
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
CVE-2026-25513 is a high-severity SQL injection vulnerability in FacturaScripts ERP and accounting software versions prior to 2025.81. It affects the REST API's sorting functionality, where user input in the sort parameter is unsafely concatenated into SQL ORDER BY clauses without validation. Authenticated API users can exploit this flaw to execute arbitrary SQL commands, potentially compromising data confidentiality and integrity. The vulnerability has been patched in version 2025.81. No known exploits are reported in the wild yet. European organizations using affected versions of FacturaScripts should prioritize updating to mitigate risks. The vulnerability requires authentication but no user interaction, and it impacts all API endpoints supporting sorting. This threat is particularly relevant to countries with significant SME adoption of FacturaScripts and those with critical accounting and ERP infrastructure relying on this software.
CVE-2026-25514 is a critical SQL injection vulnerability in FacturaScripts versions prior to 2025.81, affecting the autocomplete functionality. It allows authenticated attackers to execute arbitrary SQL queries by exploiting improper input validation in the CodeModel::all() method, leading to potential extraction of sensitive data such as user credentials, configuration settings, and business data. The vulnerability requires authentication but no user interaction and has a high CVSS score of 8.7. Although no known exploits are reported in the wild yet, the impact on confidentiality, integrity, and availability is significant. The issue has been patched in version 2025.81. European organizations using FacturaScripts should prioritize updating to the patched version and implement strict input validation and database query parameterization to mitigate risks. Countries with higher adoption of FacturaScripts and significant SME sectors relying on ERP/accounting software are more likely to be affected.
n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s community package installation functionality. The issue allowed authenticated users with administrative permissions to execute arbitrary system commands on the n8n host under specific conditions. This issue has been patched in version 1.120.3.
CVE-2026-20985 is a high-severity vulnerability in Samsung Members app prior to version 5.6.00.11, caused by improper input validation. It allows remote attackers to connect to arbitrary URLs and launch arbitrary activities with Samsung Members privileges. Exploitation requires user interaction but no authentication. The vulnerability could lead to privilege escalation and unauthorized actions within the app. No known exploits are currently reported in the wild. The CVSS 4.0 score is 7.
CVE-2026-20981 is a medium severity vulnerability in Samsung Mobile devices caused by improper input validation in the FacAtFunction component prior to the SMR February 2026 Release 1. This flaw allows a privileged physical attacker to execute arbitrary commands with system-level privileges. Exploitation requires physical access and privileged status, with no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability due to the potential for full system compromise. No known exploits are currently in the wild, and no patches have been linked yet. European organizations using Samsung Mobile devices could be at risk, especially in countries with high Samsung market penetration and critical infrastructure relying on these devices. Mitigation involves restricting physical access, monitoring for unusual system commands, and promptly applying Samsung's security updates once released. Countries like Germany, the UK, France, Italy, and Spain are most likely affected due to their large Samsung user bases and strategic importance. The vulnerability's medium severity reflects the balance between high impact and the requirement for physical privileged access.
CVE-2026-20980 is a high-severity vulnerability affecting Samsung Mobile devices due to improper input validation in the PACM component prior to the SMR Feb-2026 Release 1. This flaw allows a physical attacker to execute arbitrary commands on the device without requiring authentication or user interaction. The vulnerability has a CVSS 4.0 score of 7.0, reflecting its significant impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the ease of exploitation and the critical nature of mobile devices make this a serious threat. European organizations using Samsung Mobile devices, especially those with sensitive data or critical communications, could face risks of device compromise and data breaches. Mitigation requires timely application of Samsung’s security updates once available, physical device security controls, and monitoring for unusual device behavior. Countries with high Samsung mobile market penetration and strategic importance in technology sectors, such as Germany, the UK, France, and Italy, are most likely to be affected. Defenders should prioritize patch management and physical security to reduce exposure to this vulnerability.
A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
CVE-2026-22220 is a medium severity vulnerability in TP-Link Archer BE230 v1.2 devices prior to firmware version 1.2.4. It stems from improper input validation in the HTTP processing path of the device's web modules. A network-adjacent attacker with high privileges can send crafted requests that cause the device's web service to become unresponsive, resulting in a denial of service (DoS) condition. The device’s web interface may stop responding temporarily until recovery or reboot. Exploitation does not require user interaction but does require high privileges on the network. No known exploits are currently reported in the wild. This vulnerability primarily impacts availability and requires patching or device reboot to restore service.
When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability, attackers can overwrite critical system files, leading to a complete system compromise.
Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1.
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback. In versions 5.0.9 through 5.3.3, a RangeError vulnerability exists in the numeric entity processing of fast-xml-parser when parsing XML with out-of-range entity code points (e.g., `�` or `�`). This causes the parser to throw an uncaught exception, crashing any application that processes untrusted XML input. Version 5.3.4 fixes the issue.
