Threat Intelligence Database

gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_files in inline mode read any file path supplied in the files argument without confining it to the working directory, then forwarded the contents to the Gemini CLI. Because the caller also controls query, the file contents are echoed back through the Gemini round-trip (and sent to Google), making this an arbitrary local file read. This issue is fixed in version 1.3.1.

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. An adjacent, authenticated attacker can exploit this by importing a specially crafted VPN client configuration file. This allows execution of arbitrary commands on the device, potentially leading to full device compromise affecting configuration, network security, and service availability.

A vulnerability in pion/stun, a Go implementation of STUN, allows remote denial of service due to improper input validation. Specifically, prior to version 3.1.3, the XORMappedAddress.GetFromAs function can panic when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response messages. This causes the application to crash. The issue is fixed in version 3.1.3.

sigstore-go versions prior to 1.2.1 do not verify that a signing timestamp falls within the validity period of an ExpiringKey, allowing use of expired key material to sign bundles. This vulnerability is fixed in version 1.2.1.

GeoNetwork core-geonetwork versions prior to 4.2.16 and 4.4.11 contain an open redirect vulnerability in the GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter. This allows an attacker to control redirect URLs after login, potentially redirecting users to untrusted external sites. The vulnerability is fixed in versions 4.2.16 and 4.4.11.

Amgen, a biotechnology company, experienced a data breach involving unauthorized access to corporate and patient data stored in multiple cloud systems managed by third-party providers. The breach was detected in July 2026, and the company responded by activating its cybersecurity response plan and engaging forensic experts. Stolen data includes proprietary information and protected health information. The investigation is ongoing, with no confirmed link to known threat actors or details on the extent of affected individuals. Amgen is evaluating legal notification requirements and has not reported any financial impact at this time.

ComfyUI version 0.23.0 contains a critical deserialization vulnerability in the LoadTrainingDataset node. This flaw allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file via the unauthenticated POST /upload/image endpoint. When the uploaded file is referenced in a workflow graph queued via POST /prompt, the application deserializes the malicious pickle payload using torch.load, leading to code execution as the ComfyUI process user.

CVE-2026-52371 is a Server-Side Request Forgery (SSRF) vulnerability in the xxl-job component, specifically in the jobinfo/trigger interface of version 3.4.0. It allows authenticated attackers to scan internal or external resources by sending crafted HTTP requests. No CVSS score or patch information is currently available.

A reflected cross-site scripting (XSS) vulnerability exists in the /logo.asp component of FS Inc S3150-8T2F Switch version 2.2.0D Build 118101. This vulnerability allows attackers to execute arbitrary JavaScript in the context of a victim's browser via a crafted URL. The affected product is a cloud service. No CVSS score is provided for this vulnerability.

A vulnerability exists in the parseGoosePayload() function of libiec61850 version 1.6 that allows attackers to bypass authentication by using a captured GOOSE frame. This issue could enable unauthorized access or actions within systems using this library. No patch or official remediation guidance is currently available.