Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-12 02:30Z
2026-04-06
2026-04-06 20:16Z
HIGH

CVE-2026-35020 — Anthropic: Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35020

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the command lookup helper and deep-link terminal launcher that allows local attackers to execute arbitrary commands by manipulating the TERMINAL environment variable. Attackers can inject shell metacharacters into the TERMINAL variable which are interpreted by /bin/sh when the command lookup helper constructs and executes shell commands with shell=true. The vulnerability can be tri CVSSv3.1 8.4 (HIGH)

CWECWE 78VNDAnthropicTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2026-04-06
2026-04-06 20:16Z
CRIT

CVE-2025-54328 — Samsung Exynos_980_firmware: A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-54328

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages. CVSSv3.1 10.0 (CRITICAL)

CWECWE 121VNDSamsungVNDSmsTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-04-06
2026-04-06 20:04Z
CRIT

CVE-2026-35616 — Fortinet: Active exploitation in the wild was confirmed before public disclosure, with ~2,000

Horizon3.ai·horizon3.aiCVE-2026-35616in the wild0day

CVE-2026-35616 is a critical pre-authentication API access control bypass in Fortinet FortiClient EMS 7.4.5–7.4.6 enabling unauthenticated remote code execution. Active exploitation in the wild was confirmed before public disclosure, with ~2,000 internet-exposed instances identified. CISA added it to the KEV catalog with an April 9 remediation deadline for federal agencies.

SRFApplicationTACTA0001TACTA0002SRFNetworkVNDFortinetTYPVulnerabilityTYPAdvisorySTGExecution
9.8
CVSS v3.1
92
Edit Score
2026-04-06
2026-04-06 19:16Z
CRIT

CVE-2025-58349 — Samsung Exynos_990_firmware: Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-58349

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes. CVSSv3.1 9.1 (CRITICAL)

CWECWE 400VNDSamsungTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 18:49Z
HIGH

AI Red Teaming Still Comes Back to Identity, Access, and Attack Paths

SpecterOps·specterops.io

SpecterOps VP Russel Van Tuyl discusses AI red teaming methodology, arguing that enterprise AI risk stems primarily from familiar identity and access control failures rather than novel model exploits. The article emphasizes that AI systems amplify traditional attack paths by concentrating access, enabling token theft, OAuth abuse, and lateral movement across integrated platforms—with prompt injection being the main genuinely new attack vector, but still fundamentally a social engineering problem.

TACTA0001TACTA0006TACTA0007SRFIdentitySRFWebTACTA0003SRFCloudSRFAi
78
Edit Score
2026-04-06
2026-04-06 18:16Z
HIGH

CVE-2026-35470 — Devcode Openstamanager: Prior to 2.10.2, confronta_righe.php files across different modules in OpenSTAManager contain an SQL Injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35470

OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to 2.10.2, confronta_righe.php files across different modules in OpenSTAManager contain an SQL Injection vulnerability. The righe parameter received via $_GET['righe'] is directly concatenated into an SQL query without any sanitization, parameterization or validation. An authenticated attacker can inject arbitrary SQL statements to extract sensitive data from the database, inclu CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDDevcodeVNDOpenstamanagerTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 18:16Z
CRIT

CVE-2026-35174 — Chyrplite Chyrp_lite: Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35174

Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, a path traversal vulnerability exists in the administration console that allows an administrator or a user with Change Settings permission to change the uploads path to any folder. This vulnerability allows the user to download any file on the server, including config.json.php with database credentials and overwrite critical system files, leading to remote code execution. This vulnerability is fixed in 2026 CVSSv3.1 9.1 (CRITICAL)

CWECWE 434CWECWE 22CWECWE 73VNDChyrpliteVNDChyrpTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-04-06
2026-04-06 18:16Z
CRIT

CVE-2026-35171 — Linuxfoundation Kedro: Prior to 1.3.0, Kedro allows the logging configuration file path to be set via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35171

Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG environment variable and loads it without validation. The logging configuration schema supports the special () key, which enables arbitrary callable instantiation. An attacker can exploit this to execute arbitrary system commands during application startup. This is a critical remote code execution (RCE) vulnerability cau CVSSv3.1 9.8 (CRITICAL)

CWECWE 94CWECWE 502VNDLinuxfoundationVNDKedroTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 18:16Z
HIGH

CVE-2026-35164 — Ajax30 Bravecms: This allows an authenticated user to upload executable PHP scripts and gain Remote Code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35164

Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboard/CkEditorController.php within the ckupload method. The method fails to validate uploaded file types and relies entirely on user input. This allows an authenticated user to upload executable PHP scripts and gain Remote Code Execution. This vulnerability is fixed in 2.0.6. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDAjax30VNDBraveTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 18:16Z
CRIT

CVE-2026-35050 — This allows to overwrite python files, for instance the "download-model.py" file could be overwritten.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35050

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1. CVSSv3.1 9.1 (CRITICAL)

CWECWE 22TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 18:16Z
CRIT

CVE-2026-35047 — Ajax30 Bravecms: Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35047

Brave CMS is an open-source CMS. Prior to 2.0.6, an Unrestricted File Upload vulnerability in the CKEditor endpoint allows attackers to upload arbitrary files, including executable scripts. This may lead to Remote Code Execution (RCE) on the server, potentially resulting in full system compromise, data exfiltration, or service disruption. All users running affected versions of BraveCMS are impacted. This vulnerability is fixed in 2.0.6. CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDAjax30VNDBraveTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 18:16Z
HIGH

CVE-2026-35045 — Tandoor Recipes: Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35045

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users. This bypasses all object-level authorization checks enforced on standard single-recipe endpoints (PUT /api/recipe/{id}/), enabling forced exposure of private recipes, u CVSSv3.1 8.1 (HIGH)

CWECWE 639VNDTandoorTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-06
2026-04-06 18:16Z
HIGH

CVE-2026-35044 — Bentoml Bentoml: Prior to 1.4.38, the Dockerfile generation function generate_containerfile() in src/bentoml/_internal/container/generate.py uses an unsandboxed jinja2.Environment

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35044

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generate_containerfile() in src/bentoml/_internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extension to render user-provided dockerfile_template files. When a victim imports a malicious bento archive and runs bentoml containerize, attacker-controlled Jinja2 template code execut CVSSv3.1 8.8 (HIGH)

CWECWE 1336VNDBentomlTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 17:24Z
INFO

v9.0.0-rc1

BloodHound releases·github.com

BloodHound v9.0.0-rc1 released with numerous feature additions and bug fixes including OpenGraph extension management improvements, API key expiration support, JIT account opt-out functionality, and UI/UX enhancements across the graph visualization and reporting interfaces.

VNDBloodhoundVNDSpecter OpsTYPTool
35
Edit Score
2026-04-06
2026-04-06 17:17Z
CRIT

CVE-2026-35039 — JSON: From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35039

fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuilder method which does not properly create unique keys for different tokens can lead to cache collisions. This could cause tokens to be mis-identified during the verification process leading to valid tokens returning claims from different valid tokens and users being mis-identified as other users based on the wrong token. Version 6.2.0 contains a patch. CVSSv3.1 9.1 (CRITICAL)

CWECWE 345CWECWE 1289CWECWE 706TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 17:17Z
CRIT

CVE-2026-35030 — Litellm Litellm: Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35030

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a le CVSSv3.1 9.1 (CRITICAL)

CWECWE 287VNDLitellmTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 17:17Z
HIGH

CVE-2026-35029 — Litellm Litellm: A user who is already authenticated into the platform can then use this endpoint

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-35029

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_L CVSSv3.1 8.8 (HIGH)

CWECWE 863VNDLitellmTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-04-06
2026-04-06 17:17Z
CRIT

CVE-2026-34989 — Ci4-cms-erp Ci4ms: This stored payload is later rendered unsafely in multiple application views without proper output

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34989

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name (e.g., full name / username). An attacker can inject a malicious JavaScript payload into their profile name, which is then stored server-side. This stored payload is later rendered unsafely in multiple application vie CVSSv3.1 9.0 (CRITICAL) · EPSS 16th percentile

CWECWE 79VNDCi4 Cms ErpVNDCi4msTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-04-06
2026-04-06 17:17Z
CRIT

CVE-2026-34976 — Dgraph: An unauthenticated attacker can overwrite the entire database, read server-side files, and perform SSRF.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34976

Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from the authorization middleware config (admin.go), making it completely unauthenticated. Unlike the similar restore mutation which requires Guardian-of-Galaxy authentication, restoreTenant executes with zero middleware. This mutation accepts attacker-controlled backup source URLs (including file:// for local filesystem access), S3/MinIO credentials, encryption CVSSv3.1 10.0 (CRITICAL)

CWECWE 862VNDDgraphTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-04-06
2026-04-06 17:17Z
HIGH

CVE-2026-34975 — Plunk: Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34975

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME messages without sanitization. An authenticated API user could inject arbitrary email headers (e.g. Bcc, Reply-To) by embedding carriage return/line feed characters in these fields, ena CVSSv3.1 8.5 (HIGH)

CWECWE 93VNDPlunkTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-04-06
2026-04-06 17:17Z
CRIT

CVE-2026-34841 — Bruno: Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34841

Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan (RAT). Users of @usebruno/cli who ran npm install between 00:21 UTC and ~03:30 UTC on March 31, 2026 may have been impacted. Upgrade to 3.2.1 CVSSv3.1 9.8 (CRITICAL)

CWECWE 506CWECWE 494VNDBrunoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-04-06
2026-04-06 17:17Z
HIGH

CVE-2026-34783 — Montferret Ferret: Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34783

Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret. When an operator scrapes a website that returns filenames containing ../ sequences, and uses those filenames to construct output paths (a standard scraping pattern), the attacker controls both the destination path CVSSv3.1 8.1 (HIGH)

CWECWE 22CWECWE 73VNDMontferretVNDFerretTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-04-06
2026-04-06 16:16Z
HIGH

CVE-2026-34982 — Vim: Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34982

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue. CVSSv3.1 8.2 (HIGH)

CWECWE 78VNDVimTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-04-06
2026-04-06 16:16Z
CRIT

CVE-2026-34950 — JSON: fast-jwt provides fast JSON Web Token (JWT) implementation.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34950

fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publicKeyPemMatcher regex in fast-jwt/src/crypto.js uses a ^ anchor that is defeated by any leading whitespace in the key string, re-enabling the exact same JWT algorithm confusion attack that CVE-2023-48223 patched. CVSSv3.1 9.1 (CRITICAL)

CWECWE 327TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-04-06
2026-04-06 16:16Z
HIGH

CVE-2026-34940 — Kubeai Kubeai: Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34940

KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vuln CVSSv3.1 8.8 (HIGH)

CWECWE 78VNDKubeaiTYPVulnerability
8.8
CVSS v3.1
94
Edit Score