/r/netsec's Q4 2026 Information Security Hiring Thread is a community post on Reddit inviting companies to share open information security job and internship positions with the /r/netsec user base. It serves as a platform for recruiting cybersecurity professionals and students nearing graduation.
CVE-2026-120236 is a medium severity vulnerability in the ag-ui-protocol ag-ui component up to version 0.0.20. It involves improper input validation in the Transport Decoder Handler, which can be exploited remotely. Public exploit code is available. A patch identified by commit 660182b973a44b8eda5484b14b88eb9cc251edc4 addresses this issue. Users are advised to upgrade to a fixed version.
Google::Auth versions 0.11 through 0.12 for Perl contain an origin validation error where the OAuth state parameter is not verified during the gcloud-auth login callback. This allows a local attacker to submit an authorization code for their own Google account, causing the CLI to store the attacker's refresh token as the user's credentials. Consequently, the user's tools operate under the attacker's account.
Google::Auth version 0.12 for Perl contains a server-side request forgery (SSRF) vulnerability due to unvalidated URLs in AWS external account credentials. This flaw allows attackers to make unauthorized HTTP GET and PUT requests to arbitrary hosts specified in the credential configuration, including internal and link-local metadata endpoints.
CVE-2026-120235 is a medium severity vulnerability in the ag-ui-protocol ag-ui component up to version 0.0.20. It affects the parseSSEStream function in the SSE Parser, leading to resource consumption when exploited remotely. Public exploit details have been disclosed. A patch identified by commit 9e7b2b00bce215bbf731f1e6094f63812527c432 is available, and upgrading the affected component is recommended.
CVE-2026-66570 is a stored cross-site scripting (XSS) vulnerability in the Nickboss WordPress File Upload plugin (versions before 5.2.2). It allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The vulnerability is rated high severity with a CVSS score of 7.1. A fix is available in version 5.2.2.
CVE-2026-119480 is a path traversal vulnerability in Crocoblock's JetFormBuilder plugin affecting versions before 3.6.8. This flaw allows an attacker with limited privileges to potentially cause a denial of service by improper limitation of pathnames to restricted directories. The issue is fixed in version 3.6.8.
CVE-2026-62048 is a critical SQL Injection vulnerability in the Liquid Web / StellarWP BookIt plugin affecting versions before 2.6.0.7. The flaw allows an attacker to inject SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability can lead to high confidentiality impact and limited availability impact but does not affect integrity. A fix is available in version 2.6.0.7.
CVE-2026-120230 is a critical vulnerability in the WAVLINK WN701AE 260105 device affecting the del_vlan_group function of the ioos Web Backend component. It allows remote attackers with low privileges to perform OS command injection by manipulating the vlan_name argument. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. Public exploit code exists, but no official patch or remediation information is provided.
A critical command injection vulnerability exists in WAVLINK WN553X1-B V260403_2.0.0 in the OpenVPN CLI Handler component. The flaw is in the function sub_416568 of the /bin/ioos file, where improper handling of the argument file_id allows remote attackers to execute arbitrary OS commands. The vulnerability has a high CVSS score of 9.9 and has been publicly disclosed with exploit code available. No patch or remediation information is currently provided by the vendor.
A high-severity vulnerability (CVE-2026-120232) exists in Horizon DataSys Reboot Restore Standard up to version 13.2. It involves a memory corruption issue in the function sub_23908 within the shield.sys kernel driver component. Exploitation requires local access and does not need user interaction. Public exploit code is available. A fix is planned but not yet released.
A critical command injection vulnerability exists in WAVLINK WN553X1-B V260403_2.0.0 in the ioos Service component. The flaw is in the sub_416D88 function of /bin/ioos, where manipulation of the group_id or group_name argument can lead to remote OS command injection. Exploit code has been published, increasing the risk of exploitation. The vendor was notified early, but no patch information is currently available.
CVE-2026-120308 is a critical vulnerability affecting Beta9 tenants who can attach arbitrary volumes when deploying functions, endpoints, or task queues. The issue arises because the gateway improperly constructs host paths for volume mounts without validating ownership or path traversal, allowing tenants to access and modify files outside their workspace, including other tenants' data. This vulnerability was confirmed in gateway version 0.1.769 and worker version 0.1.745 and fixed in gateway 0.1.776 and worker 0.1.756 by adding validation of volume identifiers and mount paths.
CVE-2026-120306 is a critical vulnerability in Beta9's tenant image build process where shell commands in tenant image definitions are executed with insufficient isolation. The build worker runs these commands with Buildah using chroot isolation, retaining shared PID, network, IPC namespaces, and running as root with CAP_DAC_OVERRIDE. This allows tenant builds to access and potentially modify the worker container's filesystem, including sensitive binaries and Kubernetes service account tokens. The issue is fixed in worker version 0.1.756 by enforcing OCI isolation with private namespaces and restricting tenant ARG propagation.
CVE-2026-120227 is a critical OS command injection vulnerability in the WAVLINK WN701AE M01AE_V260105 device. It affects the del_staticrule function in the static_route_setting.sh script of the ioos Web Backend component. An attacker can remotely manipulate the rule_name argument to execute arbitrary OS commands. Public exploit code is available, increasing the risk of exploitation.
CVE-2026-120307 is a critical vulnerability in the Beta9 worker where the sandbox file API is improperly served from outside the container. This flaw allows a tenant with a workspace token and a running sandbox to access and manipulate files on the hosting worker as root, including files belonging to other tenants. The vulnerability arises from path resolution issues that allow directory traversal and symbolic link exploitation, enabling unauthorized file operations on the worker host. The issue is fixed in worker version 0.1.756 by restricting file operations to stay within the container root or mount source.
A critical remote OS command injection vulnerability exists in WAVLINK WN553X1-B 260403_2.0.0 affecting the sub_416B50 function in /bin/ioos. Manipulating the file_id argument can lead to full system compromise. Public exploit code is available. The vendor was notified early but no patch information is provided.
CVE-2026-120234 is a medium severity vulnerability in ag-ui-protocol's ag-ui component up to version 0.0.20. It affects the HTTP Transport component's e.text function, allowing remote attackers to cause resource consumption. Public exploit code is available, but a fix is pending acceptance of a pull request.
PrefabHQ prefab-ui versions 0.14.0 through 0.20.2 contain a critical protection mechanism failure in their Generative UI sandbox. The sandbox runs caller-supplied Python code inside Pyodide within a Deno subprocess but starts Deno with unrestricted read, write, and network permissions. This allows an attacker supplying code to read and write files as the server OS user and persist code execution by writing files into the server's virtual environment. The vulnerability is fixed in version 0.21.0 by revoking these permissions before accepting code and restricting network access.
CVE-2026-120233 is an information disclosure vulnerability in the ag-ui-protocol ag-ui component, specifically affecting versions 0.0.1 through 0.0.20. The flaw exists in the HttpAgent component within the file sdks/typescript/packages/client/src/agent/http.ts. An attacker can remotely manipulate this vulnerability to disclose information. Public exploit code has been released, and a fix is pending acceptance of a pull request.