Null Severity Threats

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback()

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline

Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms. An authenticated client can spoof clientId when removing a durable topic subscription. This issue affects Apache ActiveMQ Broker: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ All: before 5.19.11, from 6.0.0 before 6.3.2; Apache ActiveMQ: before 5.19.11, from 6.0.0 before 6.3.2. Users are recommended to upgrade to version 6.3.2 or 5.19.11 which fixes the issue.

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer

CVE-2026-39255 is a buffer overflow vulnerability in SteelSeries GG for macOS version 107.0.0. It involves the libSSEdevice.dylib and dup_wcs components and could allow a remote attacker to execute arbitrary code. No patch or official remediation information is currently available. There is no known exploitation in the wild at this time.

CVE-2026-67925 is a Cross Site Scripting (XSS) vulnerability affecting JeecgBoot version 3.9.2. It allows a remote attacker to execute arbitrary code via the /airag/chat/upload endpoint. No CVSS score or detailed vendor remediation information is available at this time.

CVE-2026-67965 is a vulnerability in Tneda W20E version 16.01.0.6(2782) that allows a remote attacker to execute arbitrary code via the url_need_login function. No patch or remediation information is currently available. There is no CVSS score assigned, and no known exploits in the wild have been reported. The affected versions are not explicitly stated beyond the single version mentioned. The vulnerability is published but lacks detailed technical or impact data.

An arbitrary code execution vulnerability exists in JeecgBoot version 3.9.2 within its AI Chat Module. The flaw is triggered via the files parameter, allowing a remote attacker to execute code. No patch or official remediation information is currently available. There is no evidence of exploitation in the wild at this time.