A vulnerability in the Linux kernel's nvme-multipath subsystem was addressed by changing when the BLK_FEAT_ZONED feature flag is set. Previously, the namespace head was marked as zoned at allocation based solely on the command set identifier, which could lead to incorrect zoned capability reporting and a zero zone size causing invalid shifts. The fix delays setting the zoned feature until the zone information is confirmed, preventing erroneous behavior.
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced URLs into local network access through FileUrl with force_download='allow-local' or web_fetch_tool with allow_local_urls=True can bypass the cloud-metadata blocklist by appending an IPv6 zone identifier to an IPv6 metadata address. IPv6Address equality and hashing include the zone identifier, so the blocklist comparison fails even though the network stack ignores the zone on a non-link-local destination and reaches the metadata service, potentially exposing cloud IAM credentials. The opt-in settings are disabled by default, and the issue requires an IPv6-enabled environment. This issue is fixed in versions 1.107.6 and 2.44.0.
Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to the privileged uaa (system) identity zone, by referring to the zone identifier in a non-lowercase form (e.g. UAA) in the request path and body. The authorization layer performs a case-sensitive comparison against the system zone identifier, while the underlying MySQL persistence layer resolves identifiers case-insensitively under its default collation, so the request is authorized incorrectly and is then resolved against the real system zone record. This allows the attacker to overwrite the system zone's JWT signing key with attacker-controlled key material, forge JWTs claiming the admin client and administrator scopes, and fully compromise UAA and any Cloud Foundry deployment that trusts it. This issue only affects UAA deployments backed by MySQL using its default collation; PostgreSQL and HSQLDB backends are not affected.
CVE-2026-18674 is a vulnerability in Kong Inc.'s Kong Mesh affecting specific versions where the global control plane incorrectly attributes resources received over the zone-to-global KDS sync using a sender-controlled identifier rather than the authenticated zone identity. This flaw allows an authenticated zone to inject, attribute, and overwrite resources in another zone's namespace, resulting in a cross-zone isolation bypass.
Progress Software confirmed a high-severity zero-day path traversal vulnerability in ShareFile Storage Zone Controllers, leading to an emergency shutdown of these customer-managed Windows servers. The flaw affects all 5.x and 6.x versions and allows an authenticated administrative user to read arbitrary files, write attacker-controlled content to arbitrary directories, or enumerate the server filesystem. Progress has released security updates in versions 5.12.5 and 6.0.2 to patch the vulnerability and urges immediate installation. There is currently no indication of active exploitation or unauthorized access to customer data. Storage Zone Controllers enable on-premises file storage integrated with ShareFile's cloud platform, making them valuable targets for data theft. The CVE identifier is reserved and will be published in two weeks.
In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Bandizip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, Bandizip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. NOTE: this is disputed because Mark-of-the-Web propagation can increase risk via security-warning habituation, and because the intended control sphere for file-origin metadata (e.g., HostUrl in Zone.Identifier) may be narrower than that for reading the file's content.