Tag
#security
Flowise RCE Exploited by the Greeter Framework (CVE-2024-58351)
Flowise before 2.1.4 lets overrideConfig replace the JavaScript of a Custom JS Function node; the Greeter framework exploited it, and 2.1.4 fixes it.
Nov 08, 2026
OpenAM Session Token Theft and SAML Bypass (CVE-2026-123551)
OpenAM before 16.1.4 leaks live session tokens and accepts unsigned SAML assertions, letting unau...
Nov 08, 2026
Cronicle Task Scheduler Privilege Escalation (CVE-2026-85076)
A non-admin Cronicle user can inject environment variables through event params and run code in a...
Nov 07, 2026
LatePoint Booking Plugin Account Takeover (CVE-2026-118066)
An unauthenticated SQL injection in LatePoint lets an attacker take over a customer account. Fixe...
Nov 07, 2026
More tagged #security
SonicWall SSLVPN SAML Bypass, Exploited in the Wild (CVE-2026-19868)
A SonicOS SSLVPN flaw lets an account with valid alternate-method credentials skip SAML and its MFA; exploited, fixed in 7.3.4-7013 and 8.2.3-8015.
Nov 07, 2026
Kubeflow Pipelines Cross-Tenant RCE (CVE-2026-77596)
Kubeflow Pipelines before 2.18.0 skips authorization for shared pipeline uploads, letting a low-privilege tenant run code in another namespace. Fixed in 2.18.0.
Nov 06, 2026
OpenEMR IDOR Exposes Any Patient Document (CVE-2026-102940)
Any signed-in OpenEMR user can move another patient's document to a record they can read, bypassing document access controls. Fixed in 8.4.0.
Nov 06, 2026
kaniko Azure Token Leak to Lookalike Registries (CVE-2026-105769)
kaniko before 1.25.20 sends the build's Azure Resource Manager token to any registry host containing .azurecr.io, including attacker lookalikes.
Nov 06, 2026
FreeSWITCH SIP MESSAGE RCE, Exploited in the Wild (CVE-2026-116779)
A SIP MESSAGE to a stock FreeSWITCH profile can run FreeSWITCH API and OS commands; fixed in 1.11.3 and exploited in the wild.
Nov 06, 2026
OpenSSH musl Password Bypass, Fixed in 10.6p2 (CVE-2026-123158)
OpenSSH on musl libc without PAM accepts a 257-byte password for locked accounts; fixed in 10.6p2 and Alpine's packages.
Nov 06, 2026
Keycloak SAML Auth Bypass, Fixed in 26.8.2 (CVE-2026-117691)
Keycloak's SAML redirect binding verifies a different parameter than it processes, letting an attacker log in as any federated user; fixed in 26.8.2.
Nov 05, 2026
GPUStack Auth Bypass RCE, Exploited in the Wild (CVE-2026-102895)
GPUStack before 2.2.0 trusts a loopback request source, so a same-host reverse proxy turns a remote request into admin access and code execution.
Nov 05, 2026
Malicious ARTEX Docker Image Hands Out Root Shells
A copycat ARTEX Docker image added a hidden login handler that runs shell commands as root, and 62 internet consoles served it in November 2026.
Nov 05, 2026
APT29 Watering Holes Exploit Mobile n-Days (CVE-2024-27834)
APT29 compromised Plerdy's analytics script and legitimate sites to serve patched iOS and Android exploit chains; CISA added a chain CVE to KEV.
Nov 05, 2026