Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-07 06:40Z
2026-06-02
2026-06-02 23:16Z
HIGH

CVE-2026-44654 — Librechat Librechat: In versions up to and including 0.8.3, a shared-agent editor can delete file records

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-44654

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-ag CVSSv3.1 8.1 (HIGH) · EPSS 12th percentile

CWECWE 863VNDLibrechatTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 23:16Z
HIGH

CVE-2026-35482 — Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf.io extension script engine

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35482

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnerability in the alf.io extension script engine allows an authenticated administrator to execute arbitrary operating system commands on the server. The extension system is intended to execute restricted JavaScript in a sandboxed Rhino environment; however, a combination of an unguarded injected Java object (`returnClass`) CVSSv3.1 8.0 (HIGH)

CWECWE 863TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-06-02
2026-06-02 23:16Z
CRIT

CVE-2026-32625 — LibreChat: This enables full compromise of the installation's cryptographic materials and database credentials without requiring

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32625

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders against the server's process.env during Zod schema validation of user-supplied MCP server URLs. Any authenticated user can create a malicious MCP server configuration with a URL pointing to an attacker-controlled domain containing environment variable references, causing the LibreCha CVSSv3.1 9.6 (CRITICAL)

CWECWE 200VNDLibrechatTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-06-02
2026-06-02 22:16Z
HIGH

CVE-2022-4992 — Infinity: Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-4992

Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower (with VG4.2 partially affected) contain a network message handling vulnerability that allows remote attackers to inject spoofed or tampered data and cause denial-of-service conditions. Attackers can compromise network communications to modify device settings such as alarm states or alarm limits, or overwhelm the system with excessive network traffic causing the CVSSv3.1 8.6 (HIGH)

CWECWE 345VNDInfinityTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-06-02
2026-06-02 22:16Z
HIGH

CVE-2021-4481 — Protector: Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-4481

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges. CVSSv3.1 8.2 (HIGH)

CWECWE 732VNDProtectorTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 22:16Z
HIGH

CVE-2021-4480 — Protector: Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-4480

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges. CVSSv3.1 8.2 (HIGH)

CWECWE 732VNDProtectorTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 21:16Z
CRIT

CVE-2026-49448 — authentik is an open-source identity provider.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-49448

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, the Source stage can be bypassed by sending an empty POST. This issue has been patched in versions 2025.12.6, 2026.2.4, and 2026.5.1. CVSSv3.1 9.8 (CRITICAL)

CWECWE 287TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-06-02
2026-06-02 21:16Z
HIGH

CVE-2026-49443 — authentik is an open-source identity provider.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-49443

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue has been patched in versions 2025.12.6, 2026.2.4, and 2026.5.1. CVSSv3.1 8.8 (HIGH)

CWECWE 287TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-02
2026-06-02 21:16Z
HIGH

CVE-2026-49143 — BrowserStack: Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-49143

BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, which passes user-supplied data to vm.runInNewContext() combined with eval(). Attackers can escape the Node.js vm sandbox by leveraging a host-context Function reference through util.format to access the host process via this.construc CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDBrowserstackTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-02
2026-06-02 21:16Z
HIGH

CVE-2026-47201 — Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-47201

authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAML responses. An attacker with any account at the upstream IdP can reuse a valid signed assertion to authenticate as another federated user. This issue has been patched in versions 2025.12.5, 2026.2.3, and 2026.5.1. CVSSv3.1 8.5 (HIGH)

CWECWE 20TYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-06-02
2026-06-02 21:16Z
CRIT

CVE-2026-42849 — Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42849

authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE (Simple Flow Executor) in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issue has been patched in versions 2025.12.5 and 2026.2.3. CVSSv3.1 9.3 (CRITICAL)

CWECWE 79TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-02
2026-06-02 20:16Z
CRIT

CVE-2026-5076 — ARMember: The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-5076

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a user requests a password reset. This is in addition to the hashed key that WordPress core stores securely in `wp_users.user_activation_key`. The plaintext key stored in `wp_usermeta` can be used with the plugin's custom `ar CVSSv3.1 9.8 (CRITICAL)

CWECWE 287VNDArmemberTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2026-49120 — Medplum: before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-49120

Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network requests by creating FHIR Subscription resources with arbitrary endpoint URLs. Attackers can point subscription endpoints at internal addresses such as cloud instance metadata services, internal databases, or container orchestration endpoints to exfiltrate IAM credentials and patient health records via t CVSSv3.1 8.5 (HIGH)

CWECWE 918VNDMedplumTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2026-42211 — React: In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42211

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through external requests. This attack requires the application code to have an existing prototype pollution vulnerability, which can then be leveraged in a 2-step attack where the second step triggers unauthorized RCE on the remote server. This does not impact applications using Declarative Mo CVSSv3.1 8.1 (HIGH)

CWECWE 502VNDReactTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 20:16Z
CRIT

CVE-2026-38967 — CrowCpp: Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-38967

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values. CVSSv3.1 9.8 (CRITICAL)

CWECWE 113VNDCrowcppTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2026-33245 — React: In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33245

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2. CVSSv3.1 8.0 (HIGH)

CWECWE 79VNDReactTYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2026-28299 — SolarWinds: Web Help Desk is found to be affected by a denial-of-service vulnerability, which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-28299

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory. CVSSv3.1 8.2 (HIGH)

CWECWE 770VNDSolarwindsTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2026-1829 — Content: The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-1829

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' shortcode 'cvdb_content_visibility_check' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. CVSSv3.1 8.8 (HIGH)

CWECWE 94VNDContentTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-02
2026-06-02 20:16Z
HIGH

CVE-2021-4478 — Vision: Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-4478

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the underlying system. CVSSv3.1 8.2 (HIGH)

CWECWE 787VNDVisionTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-06-02
2026-06-02 20:15Z
CRIT

CVE-2026-44825 | Apache Solr AuthTool Hardcoded Credentials Vulnerability

Horizon3.ai·horizon3.aiCVE-2026-44825

CVE-2026-44825 is a hardcoded credentials vulnerability in Apache Solr's bin/solr auth enable tool affecting versions 9.4.0–9.10.1 and 10.0.0. When BasicAuth is enabled, the tool silently creates template accounts (superadmin, admin, search, index) with publicly known default credentials (username=password), allowing unauthenticated remote attackers to gain full administrative access to SolrCloud clusters. Patches are available in Solr 9.11.0 and 10.1.0; immediate workarounds include deleting template users or resetting their passwords.

SRFApplicationTACTA0001TACTA0006SWSolrVNDApacheTYPVulnerabilitySTGInitial AccessSTGCred Access
82
Edit Score
2026-06-02
2026-06-02 17:16Z
CRIT

CVE-2026-42074 — Gitlawb Openclaude: Combined with the default allowUnsandboxedCommands: true setting, a prompt-injected model can escape the sandbox

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42074

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per the project's own threat model) can set it to true in any tool_use response. Combined with the default allowUnsandboxedCommands: true setting, a prompt-injected model can escape the sandbox for any arbitrary command, achi CVSSv3.1 9.8 (CRITICAL)

CWECWE 306CWECWE 284VNDGitlawbVNDOpenclaudeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-02
2026-06-02 17:16Z
CRIT

CVE-2026-0611 — Spacelabs: Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-0611

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform arbitrary file read and write operations by supplying valid .NET URI endpoints. Attackers can write ASPX webshells to the IIS wwwroot directory to achieve unauthenticated remote code execution on the system. Port 8989 is not exposed CVSSv3.1 9.8 (CRITICAL)

CWECWE 306VNDSpacelabsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-02
2026-06-02 16:16Z
CRIT

CVE-2026-47117 — OpenMed: before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-47117

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied model_name parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path that loads Hugging Face models with trust_remote_code=True. An unauthenticated attacker can supply a malicious model repository containing custom Transformers code via auto_map in co CVSSv3.1 9.8 (CRITICAL)

CWECWE 94VNDOpenmedTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-02
2026-06-02 16:16Z
HIGH

CVE-2026-30652 — Vivotek Fd8136_firmware: A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30652

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device. CVSSv3.1 8.8 (HIGH)

CWECWE 120VNDVivotekTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-02
2026-06-02 16:16Z
HIGH

CVE-2026-30650 — A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30650

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely. CVSSv3.1 8.8 (HIGH)

CWECWE 120TYPVulnerability
8.8
CVSS v3.1
94
Edit Score