Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-09 13:01Z
2026-05-08
2026-05-08 04:16Z
HIGH

CVE-2026-42271 — Litellm Litellm: From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42271

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spaw CVSSv3.1 8.8 (HIGH)

CWECWE 77CWECWE 78VNDLitellmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-08
2026-05-08 04:16Z
CRIT

CVE-2026-42208 — Litellm Litellm: From version 1.81.16 to before version 1.83.7, a database query used during proxy API

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42208

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling CVSSv3.1 9.8 (CRITICAL)

CWECWE 89VNDLitellmTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-08
2026-05-08 04:16Z
HIGH

CVE-2026-42203 — Litellm Litellm: A crafted template could run arbitrary code inside the LiteLLM Proxy process.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42203

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could reach it. Depending on how the proxy is deployed, this CVSSv3.1 8.8 (HIGH)

CWECWE 1336VNDLitellmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-08
2026-05-08 04:16Z
HIGH

CVE-2026-41900 — OpenLearnX: Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41900

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in version 2.0.3. CVSSv3.1 8.8 (HIGH)

CWECWE 94CWECWE 284CWECWE 78CWECWE 250VNDOpenlearnxTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-08
2026-05-08 04:16Z
CRIT

CVE-2026-41501 — Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41501

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux() function appends attacker-controlled remote version strings directly into an exec("rm -rf ...") command without validation. This issue has been patched in version 3.3.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 77TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-08
2026-05-08 04:16Z
CRIT

CVE-2026-41500 — Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41500

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac() function appends attacker-controlled remote releaseInfo.name directly into an exec("open ...") command without validation. This issue has been patched in version 3.3.8. CVSSv3.1 9.8 (CRITICAL)

CWECWE 77TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-08
2026-05-08 00:00Z
MED

Detecting Web Server Probing & Fuzzing in Traefik with Automated Cloudflare Response

Elastic Security Labs·elastic.co

Elastic Security Labs published a technical guide demonstrating how to detect web server probing and fuzzing activity in Traefik reverse proxy logs using ES|QL detection rules, then automatically block offending IPs at the Cloudflare edge via API-driven workflows. The approach uses statistical thresholds (404/403 error aggregation by source IP) to identify reconnaissance patterns and chains Elastic alerts to Cloudflare WAF rules for perimeter defense.

SRFNetworkSRFWebTACTA0043SWCloudflareSWElasticSWTraefikTYPResearchSTGDefense Evasion
68
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-05-08
2026-05-08 00:00Z
MED

Detecting Web Server Probing & Fuzzing in Traefik with Automated Cloudflare Response

Elastic Security Labs·elastic.co

Elastic Security Labs demonstrates a detection and automated response workflow that identifies web server probing and fuzzing activity in Traefik reverse proxy logs using ES|QL detection rules, then automatically blocks offending source IPs at the Cloudflare edge via API integration. The approach uses statistical thresholds (HTTP 403/404 error aggregation by source IP and distinct URI paths) to distinguish reconnaissance from legitimate traffic, with tunable sensitivity for different environments.

SRFNetworkSRFWebTACTA0043SWTraefikSWAutheliaVNDElasticVNDCloudflareTYPResearch
68
Edit Score
2026-05-07
2026-05-07 23:16Z
CRIT

CVE-2026-42880 — Argo: From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42880

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attacker with read-only access to extract plaintext Kubernetes Secret data from etcd via the Kubernetes API server's Server-Side Apply dry-run mechanism. This issue has been patched in versions 3.2.11 and 3.3.9. CVSSv3.1 9.6 (CRITICAL)

CWECWE 200CWECWE 212VNDArgoTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-8034 — Github Enterprise_server: A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-8034

A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusion between the validation layer and the HTTP request library. The hostname validation used a different URL parser than the request library, enabling a crafted URL to pass validation while directing the request to an unintended host. Exploitation required network access to the GitH CVSSv3.1 9.8 (CRITICAL)

CWECWE 918CWECWE 436VNDGithubVNDSsrfTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-7891 — This documentation gap may lead application developers to unknowingly apply overly permissive access rules

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-7891

A vulnerability has been identified in Mendix Runtime (All versions). Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient guidance to configure access rules securely. This documentation gap may lead application developers to unknowingly apply overly permissive access rules to System.User, resulting in unintended exposure of sensitive user data or privilege escalation within de CVSSv3.1 9.1 (CRITICAL) · EPSS 19th percentile

CWECWE 277TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-42826 — Exposure: of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42826

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 200TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-05-07
2026-05-07 22:16Z
HIGH

CVE-2026-41105 — Server: Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-41105

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.1 (HIGH)

CWECWE 918TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-05-07
2026-05-07 22:16Z
HIGH

CVE-2026-35435 — Azure: Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35435

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 8.6 (HIGH)

CWECWE 284VNDAzureTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-35428 — Improper neutralization of special elements used in a command ('command injection') in Azure Cloud

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35428

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network. CVSSv3.1 9.6 (CRITICAL)

CWECWE 77TYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-05-07
2026-05-07 22:16Z
HIGH

CVE-2026-34327 — Externally: controlled reference to a resource in another sphere in Microsoft Partner Center allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34327

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network. CVSSv3.1 8.2 (HIGH)

CWECWE 610VNDExternallyTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-33844 — Azure: Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33844

Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. CVSSv3.1 9.0 (CRITICAL)

CWECWE 20VNDAzureTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-33823 — Microsoft: Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33823

Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. CVSSv3.1 9.6 (CRITICAL)

CWECWE 285VNDMicrosoftTYPVulnerability
9.6
CVSS v3.1
98
Edit Score
2026-05-07
2026-05-07 22:16Z
CRIT

CVE-2026-33109 — Azure: Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. CVSSv3.1 9.9 (CRITICAL)

CWECWE 284VNDAzureTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-05-07
2026-05-07 22:16Z
HIGH

CVE-2026-32207 — Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-32207

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. CVSSv3.1 8.8 (HIGH)

CWECWE 79TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-05-07
2026-05-07 21:16Z
HIGH

CVE-2026-42449 — MCP: Response bodies are returned to the caller (non-blind SSRF), and the n8nApiKey is forwarded

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42449

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. In versions 2.47.4 through 2.47.13, the SDK embedder path (N8NDocumentationMCPServer constructor, getN8nApiClient(), and validateInstanceContext()), the synchronous URL validator in SSRFProtection.validateUrlSync() had no IPv6 checks. IPv4-mapped IPv6 addresses such as http://[::ffff:169.254.169.254] bypassed the cloud-metadata, localhost, and private-IP range ch CVSSv3.1 8.5 (HIGH)

CWECWE 918VNDMcpTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-05-07
2026-05-07 21:16Z
HIGH

CVE-2026-42047 — Inngest: Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42047

Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows unauthenticated remote attackers to exfiltrate environment variables from the host process via the serve() HTTP handler. The serve() handler implements GET, POST, and PUT methods. Requests using PATCH, OPTIONS, or DELETE fall through to a generic handler that returns diagnostic info CVSSv3.1 8.6 (HIGH)

CWECWE 200CWECWE 497VNDInngestTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-05-07
2026-05-07 20:16Z
HIGH

CVE-2026-42239 — Budibase: This means every XSS becomes a full account takeover — the attacker steals the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42239

Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.ts:218. JavaScript can read this cookie via document.cookie. This means every XSS becomes a full account takeover — the attacker steals the JWT and has persistent access to the victim's account. The cookie also lacks secure: true (sent over plaintext HTTP) and sameSite attribute. CVSSv3.1 8.1 (HIGH)

CWECWE 1004VNDBudibaseTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-05-07
2026-05-07 19:47Z
INFO

v3.4.0.58

Mythic releases·github.com

Mythic v3.4.0.58 released with a bug fix for lazyQuery on the single task view page. This is a minor patch release addressing UI/UX functionality in the command & control framework.

SWMythicTYPTool
15
Edit Score
2026-05-07
2026-05-07 19:16Z
HIGH

CVE-2026-42284 — GitPython: Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split("

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42284

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in vers CVSSv3.1 8.1 (HIGH)

CWECWE 88VNDGitpythonTYPVulnerability
8.1
CVSS v3.1
91
Edit Score