A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data—such as API tokens, passwords, or environment variables containing secrets—in the terminal, this unredacted information is transmitted across trust boundaries. This can lead to sensitive information disclosure, exposing confidential credentials to external service providers and logs.
A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected. Consequently, the utility can create files in arbitrary locations with the permissions of the executing user.
Cisco released patches addressing 34 vulnerabilities across multiple products including Expressway Series, IOS XR, Snort 3, and Unified Communications. The vulnerabilities include critical remote code execution, authentication bypass, and cross-site scripting issues. Notably, a critical remote code execution flaw in Expressway Series could allow attackers to execute arbitrary commands as root. Other critical issues affect Unified Communications and Snort 3 products. Cisco is not aware of any active exploitation of these vulnerabilities in the wild.
A PHP Remote File Inclusion vulnerability (CVE-2026-112820) exists in the Elated-Themes Academist Core plugin up to version 1.4.1. This vulnerability arises from improper control of filenames used in include/require statements, allowing potential local file inclusion. The issue affects Academist Core versions through 1.4.1 and has a high severity rating with a CVSS score of 8.1.
PHP2Shell refers to two critical remote code execution vulnerabilities in PHP disclosed in October 2026. Exploitation attempts began days before official patches were released, with mass scanning and exploitation activity observed immediately after patch publication. Although multiple proof-of-concept exploits circulated rapidly, many were ineffective or caused crashes rather than successful exploitation. The vulnerabilities affect a large number of internet-facing PHP servers, many running end-of-life versions. US cybersecurity authorities have urged immediate patching to PHP versions 8.5.12, 8.4.27, 8.3.36, or 8.2.35 to mitigate the risk. The vulnerabilities have been compared in impact potential to Log4Shell due to widespread presence and forgotten PHP infrastructure. Mitigations include applying patches promptly and restricting web-facing process permissions as a temporary control.
An authorization bypass vulnerability exists in myCred up to version 4.0.0-beta.1 due to incorrectly configured access control security levels that can be exploited via a user-controlled key. This vulnerability allows an attacker with limited privileges to bypass authorization checks, potentially leading to integrity and availability impacts. The CVSS score is 5.4, indicating a medium severity level.
A stored cross-site scripting (XSS) vulnerability exists in WP Mailster through version 1.9.1.0. This vulnerability results from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts. The vulnerability has a high severity with a CVSS score of 7.1.
A stored cross-site scripting (XSS) vulnerability exists in H5P through version 1.17.9 due to improper neutralization of input during web page generation. This vulnerability allows an attacker with low privileges to inject malicious scripts that can be executed in the context of other users. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level. No patch or remediation details are provided in the available data.
A missing authorization vulnerability exists in ACF Extended up to version 0.9.2.7. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized access to sensitive data. The vulnerability has a high severity rating with a CVSS score of 7.5, indicating network exploitable conditions without privileges or user interaction. No patch or remediation information is currently available.
ACF Extended versions up to 0.9.2.7 are affected by a Path Traversal vulnerability that allows improper limitation of pathnames to restricted directories. This vulnerability can lead to limited integrity and availability impacts without confidentiality loss. The CVSS score is 6.5, indicating a medium severity level. No patch or remediation information is currently provided.
OpenClaw CLI versions from 2026.1.29 up to but not including 2026.6.6 contain a policy bypass vulnerability in the browser CDP discovery feature. This flaw allows acceptance of WebSocket URLs that should be blocked by OpenClaw policies, potentially enabling attackers with lower-trust access to reach restricted network destinations. The vulnerability is rated high severity with a CVSS score of 8.5. No known exploits have been reported in the wild. A patch is available to address this issue.
A vulnerability in the OpenVPN 3 Core library versions 3.4 through 3.11.7 allows attackers to bypass extended key usage restrictions due to improper certificate validation.
A vulnerability in Pillow's libtiff encoder allows crafted TIFF files to cause memory disclosure or process crashes during TIFF re-saving. The flaw arises from a mismatch between Pillow's argument passing to libtiff's TIFFSetField() and libtiff's internal tag definitions, leading to reading unintended memory or segfaults. This occurs when Pillow forwards unrecognized TIFF tags from the source file without properly consulting libtiff's field table. The issue affects applications that open and then save TIFF images, especially when metadata is preserved. No out-of-bounds writes were observed, only reads. The vulnerability was introduced in Pillow 5.4.0 and affects versions from 0.86.1_1 onward as per the provided data.
GitLab has fixed 12 vulnerabilities in both the Community Edition (CE) and Enterprise Edition (EE) versions. Among these, one vulnerability is rated as critical. The affected versions span from 7.0 up to certain 19.x releases. No CVSS score is provided for these vulnerabilities. There are no known exploits in the wild reported at this time.
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
CVE-2026-21811 is an information disclosure vulnerability in HCL AppScan Azure Boards Plugin that may expose secrets in plaintext during pipeline execution. These secrets can be revealed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface. The vulnerability has a low severity rating and requires privileged access to exploit.
A stored cross-site scripting (XSS) vulnerability exists in hupe13 Extensions for Leaflet Map through version 6.0. This vulnerability involves improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in the context of affected users. The issue has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No specific patch or remediation details are provided in the available data.
A stored cross-site scripting (XSS) vulnerability exists in nicdark ND Shortcodes For Visual Composer up to version 7.8. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts. The CVSS 3.1 base score is 6.5, indicating a medium severity level.
A stored cross-site scripting (XSS) vulnerability exists in the xootix Waitlist Woocommerce (Back in stock notifier) plugin, affecting versions up to 2.9.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with limited privileges to inject malicious scripts. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.