Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-09 04:49Z
2026-05-12
2026-05-12 17:16Z
CRIT

CVE-2026-43992 — JunoClaw: Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_transfer, etc.) accepted

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43992

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_transfer, etc.) accepted 'mnemonic: string' as an explicit tool-call parameter. The BIP-39 seed was consequently embedded in the LLM tool-call JSON, exposing it to any transport, log, or telemetry surface in the path between the LLM provider and the MCP process. This vulnerability is fixed in 0.x.y-sec CVSSv3.1 9.8 (CRITICAL)

CWECWE 200CWECWE 532CWECWE 522CWECWE 312VNDJunoclawTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 17:16Z
HIGH

CVE-2026-43991 — JunoClaw: Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43991

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constructions, allowing unauthorized command execution on the host when combined with the companion advisory. Pre-patch, the check was applied to the raw command string rather than the parsed first token. This vulnerability is fixed in 0.x.y-security-1. CVSSv3.1 8.4 (HIGH)

CWECWE 78CWECWE 184VNDJunoclawTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-05-12
2026-05-12 17:16Z
HIGH

CVE-2026-43990 — JunoClaw: Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43990

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument string to the shell's parser, allowing shell metacharacters in agent-supplied arguments to be interpreted as command syntax. This vulnerability is fixed in 0.x.y-security-1. CVSSv3.1 8.4 (HIGH)

CWECWE 77CWECWE 78VNDJunoclawTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-05-12
2026-05-12 17:16Z
HIGH

CVE-2026-43989 — JunoClaw: Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43989

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is fixed in 0.x.y-security-1. CVSSv3.1 8.5 (HIGH)

CWECWE 22CWECWE 73CWECWE 20CWECWE 59VNDJunoclawTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-05-12
2026-05-12 17:16Z
CRIT

CVE-2025-65719 — Open: An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-65719

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page. CVSSv3.1 9.8 (CRITICAL)

CWECWE 94TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 17:16Z
HIGH

CVE-2025-35990 — Intel Endpoint_management_assistant: Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-35990

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. Th CVSSv3.1 8.8 (HIGH) · EPSS 9th percentile

CWECWE 20VNDIntelTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-43515 — Authorization: Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43515

Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. CVSSv3.1 9.1 (CRITICAL)

CWECWE 285TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-43512 — DEPRECATED: DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-43512

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported versions any also be affect Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. CVSSv3.1 9.8 (CRITICAL)

CWECWE 592VNDDeprecatedTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-41293 — Input: Improper Input Validation vulnerability in Apache Tomcat.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41293

Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0-M1 through 10.0.27. Older, end of support versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue. CVSSv3.1 9.8 (CRITICAL)

CWECWE 20VNDInputTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-34187 — Artica Pandora_fms: Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34187

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800 CVSSv3.1 9.8 (CRITICAL)

CWECWE 89VNDArticaTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31228 — Adversarial: The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31228

The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe eval() function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters without any sanitization or security restrictions. An attacker can exploit this by providing a specially crafted string that contains arbitrary Python code, which will be executed w CVSSv3.1 9.8 (CRITICAL)

CWECWE 94VNDAdversarialTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31226 — TinyZero: The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31226

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities. The vulnerability arises from the unsafe construction and execution of shell commands via os.system() without proper input sanitization or escaping. User-controlled input (such as file paths) is directly interpolated into shell command strings using f-strings within the _copy() function. An at CVSSv3.1 9.8 (CRITICAL)

CWECWE 78VNDTinyzeroTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31225 — The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31225

The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function to dynamically evaluate user-supplied query operands without proper sanitization or restriction. Although the function attempts to limit the execution context by providing a restricted global namespace, it does not block access to dangerous built-in functions. A remote attacker can CVSSv3.1 8.8 (HIGH)

CWECWE 94TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31224 — Snorkel Snorkel: The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31224

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method loads model weight files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, lea CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDSnorkelTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31223 — Snorkel Snorkel: The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31223

The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load() function on user-supplied file paths without any validation or security controls. Python's pickle module is inherently dangerous for deserializing untrusted data, as it can execute arbitrary code during the deserialization process. A remote atta CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDSnorkelTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31222 — Snorkel Snorkel: The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31222

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted model file, leading to arbitrary co CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDSnorkelTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31220 — PySyft: (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31220

PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions (via @sy.syft_function()) for remote execution on the server. While a code approval mechanism exists, the submitted code undergoes no security checks for dangerous operations (e.g., file access, command execution). Once approved, the code is execu CVSSv3.1 9.8 (CRITICAL)

CWECWE 94VNDPysyftTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31219 — The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31219

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CWE-502). When a user provides a single model file path (e.g., .pt or .pth) via the --model command-line argument, the function loads the file using torch.load() without enabling the weights_only=True security parameter. This allows the deserialization of arbitrary Python objects th CVSSv3.1 8.8 (HIGH)

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-31218 — The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31218

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CWE-502). When loading a model state dictionary from a state_dict.pt file via torch.load(), the function does not enable the weights_only=True security parameter. This allows the deserialization of arbitrary Python objects through the Pickle module. A remote attacker can exploit thi CVSSv3.1 8.8 (HIGH)

CWECWE 502TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31217 — The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31217

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from that directory and executes its contents directly using Python's exec() function. This design does not validate or sanitize the file's content, allowing an attacker who contro CVSSv3.1 9.8 (CRITICAL)

CWECWE 94TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31216 — The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31216

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. The DELETE /storage/{object_name:path} endpoint lacks authentication, authorization, and input validation mechanisms. Unauthenticated remote attackers can send crafted requests with a user-controlled object_name path parameter to delete arbitrary files from the underlying MinIO storage system. Successful exploitation leads to data loss and den CVSSv3.1 9.1 (CRITICAL)

CWECWE 552TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31215 — The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31215

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /{index_name}/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied path_or_url parameter. This allows unauthenticated remote attackers to send crafted requests that trigger the deletion of arbitrary documents from ElasticSearch indices and corresponding files from the CVSSv3.1 9.1 (CRITICAL)

CWECWE 552TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-05-12
2026-05-12 16:16Z
CRIT

CVE-2026-31214 — The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-31214

The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerability (CWE-502). The script uses torch.load() to process PyTorch checkpoint files (.pt) without enabling the security-restrictive weights_only=True parameter. This oversight allows the deserialization of arbitrary Python objects via the pickle module. A remote attacker can exploit this by providing a m CVSSv3.1 9.8 (CRITICAL)

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-30810 — Artica Pandora_fms: Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30810

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pandora FMS: from 777 through 800 CVSSv3.1 8.8 (HIGH)

CWECWE 918VNDArticaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-12
2026-05-12 16:16Z
HIGH

CVE-2026-30808 — Artica Pandora_fms: Session Fixation vulnerability allows Session Hijacking via crafted session ID.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-30808

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800 CVSSv3.1 8.1 (HIGH)

CWECWE 384VNDArticaTYPVulnerability
8.1
CVSS v3.1
91
Edit Score