Published threat advisories for June 12, 2026

An authenticated editor can exploit a flaw in ApostropheCMS, a Node.js content management system, to bypass authorization checks. This prototype pollution vulnerability could allow unauthenticated users to access sensitive content or features for the duration of the application process, impacting internet-facing conten

NVD modified: NVD date unavailable

A critical vulnerability in Nezha Monitoring allows unauthenticated access to sensitive configuration files by exploiting improper URL handling. This could lead to the disclosure of private system details if the monitoring tool is reachable. This issue has been patched in version 2.0.13.

NVD modified: NVD date unavailable

Nezha Monitoring, a server management tool, contains a critical vulnerability allowing a user with RoleMember access to execute arbitrary commands across all servers within the system, including those of other tenants. This could lead to widespread system compromise and operational disruption. This issue is resolved in

NVD modified: NVD date unavailable

A critical vulnerability exists in GPU drivers that can be triggered by malicious web content, leading to memory corruption and potential browser or GPU process crashes. This issue stems from an integer overflow allowing out-of-bounds writes, highlighting a risk in how complex web content is handled.

NVD modified: NVD date unavailable

A vulnerability in the `sanitize-html` library, used by ApostropheCMS, can allow attacker-controlled content within an `xmp` element to be rendered as live HTML or JavaScript. This bypasses intended security, potentially leading to stored cross-site scripting if unsanitized user input is displayed to others. The issue

NVD modified: NVD date unavailable

An improper authorization vulnerability in Zoom Workplace's custom URL scheme handler for Android and iOS could allow an unauthenticated user to escalate privileges via network access. This may lead to unauthorized control over device functions, potentially impacting user data.

NVD modified: NVD date unavailable

A vulnerability in Naxclow devices allows attackers to obtain a persistent relay credential. This credential, which is re-issued on each boot and never rotates, enables long-term impersonation or interception of device communications, even after resets. Organizations should confirm if they use affected Naxclow devices

NVD modified: NVD date unavailable

A vulnerability in Naxclow devices allows attackers to forge requests and impersonate devices or accounts by exploiting a hard-coded salt and unencrypted control traffic. This could enable unauthorized operations across the platform.

NVD modified: NVD date unavailable

Aqara Home Android applications and white-label clients using the same SDK contain hard-coded cryptographic keys, which could allow attackers to access or modify sensitive data. This vulnerability is critical and requires verifying if the affected technology is relevant and exposed within the environment.

NVD modified: NVD date unavailable

A vulnerability in Aqara Cloud's OAuth authorization endpoint allows redirect bypass due to lax domain matching, potentially enabling attackers to redirect users to malicious sites and compromise sensitive information.

NVD modified: NVD date unavailable

The Aqara IAM/SSO gateway has a vulnerability that allows unauthenticated parties to perform cryptographic operations, potentially leading to unauthorized access. This is because it exposes AES encryption/decryption functions without requiring authentication. Organizations should confirm if this gateway is relevant to

NVD modified: NVD date unavailable

A critical authorization vulnerability exists in the Aqara Cloud Production API, where a valid developer token can grant access to any account. This "missing authorization" flaw (CWE-862) could allow unauthorized account access and, when combined with other vulnerabilities, potentially lead to a complete remote takeove

NVD modified: NVD date unavailable

A hard-coded OAuth client credential in the Aqara IAM/SSO Gateway could allow unauthenticated remote takeover of devices, especially when combined with other vulnerabilities. This critical flaw exposes a potential entry point for attackers.

NVD modified: NVD date unavailable

Netty, a network application framework, contains a DNS cache poisoning vulnerability where an attacker controlling a subdomain's name server can manipulate DNS records for parent domains. This could lead to future DNS resolutions being directed to attacker-controlled infrastructure.

NVD modified: NVD date unavailable

A code injection vulnerability in ChromaDB allows an authenticated attacker with specific permissions to execute arbitrary code on the server by sending a malicious model repository. This could impact server integrity and availability.

NVD modified: NVD date unavailable

An improper restriction of excessive authentication attempts vulnerability in the Pause+ Mobile App allows for authentication bypass. If reachable, this could lead to unauthorized access to the application's functions and potentially sensitive information. It is important to determine if this mobile app is deployed and

NVD modified: NVD date unavailable

An unauthenticated arbitrary file upload vulnerability exists in Amasty Order Attributes for Magento 2, allowing attackers to place any file type on the server. This could lead to remote code execution if the media directory allows PHP execution, or enable malware hosting and cross-site scripting.

NVD modified: NVD date unavailable

A critical vulnerability in the Node.js vm2 library allows arbitrary code execution in the host process when untrusted code is executed with async support. This sandbox escape occurs when a Promise interacts with certain JavaScript APIs, breaking the security boundary. Applications using the affected vm2 versions could

NVD modified: NVD date unavailable

The vm2 Node.js sandbox library has a critical vulnerability allowing code to escape its sandbox and execute arbitrary commands on the host system. This could impact system data and service behavior if an attacker can reach and exploit it, making it important to confirm if this technology is in use and exposed within y

NVD modified: NVD date unavailable

A vulnerability in the vm2 Node.js sandboxing library allowed sandboxed code to execute commands on the host system by bypassing restrictions on certain Node.js built-ins. This could lead to compromise of the underlying application or infrastructure. The issue has been patched in version 3.11.4.

NVD modified: NVD date unavailable

A vulnerability in the vm2 Node.js sandbox allows bypassing security checks, potentially enabling code execution. This issue arises from a flawed strict equality check that can be circumvented, leading to unintended configurations. Readers should confirm if their Node.js applications use vm2 and are affected by this by

NVD modified: NVD date unavailable

A critical vulnerability in the Node.js vm2 sandbox library allows attackers to escape the sandbox and execute arbitrary code by manipulating JavaScript's `Buffer` object and Node.js's error handling. This could impact system integrity if the library is used in deployed applications.

NVD modified: NVD date unavailable

A vulnerability in Netty's DNS resolution could allow attackers to intercept network traffic. This issue arises from insufficient validation of CNAME records in DNS responses, potentially enabling the redirection of communication to malicious servers. Given Netty's role as a network application framework, this flaw war

NVD modified: NVD date unavailable

The Yarbo mobile applications contain hard-coded credentials that provide access to cloud MQTT brokers. These brokers carry real-time telemetry for the global Yarbo robot fleet, and the credentials allow unauthorized subscription to telemetry and publishing of commands to any robot. This vulnerability is critical becau

NVD modified: NVD date unavailable

The iRM-IEI Remote Management system contains hard-coded credentials, allowing unauthenticated remote attackers to gain administrative privileges on its database. This vulnerability could expose sensitive data and compromise system integrity. Identification of affected systems and their reachability is crucial.

NVD modified: NVD date unavailable

A JNDI Injection vulnerability in Apache CXF's JCA integration module could allow for code execution. This is a critical vulnerability that could be exploited if an attacker can manipulate JCA deployment descriptors or runtime parameters. The main concern is confirming relevance and exposure to this vulnerability.

NVD modified: NVD date unavailable

A logic error in Apache CXF's OAuthRequestFilter could allow unauthorized access by incorrectly validating IP addresses when a security feature is enabled. This flaw may permit requests from any IP address while blocking legitimate ones, potentially leading to data exposure and service compromise.

NVD modified: NVD date unavailable

A vulnerability in Apache CXF's JwtAccessTokenValidator may allow a JWT intended for one resource server to be accepted by another, enabling token confusion attacks. This could potentially lead to unauthorized access or actions if the affected component is network-reachable. Further assessment is needed to confirm rele

NVD modified: NVD date unavailable

A vulnerability in Apache CXF allows for external entity resolution, which could lead to sensitive information disclosure or denial of service. This issue arises from how certain classes construct a SAXParserFactory without proper hardening. Given Apache CXF's widespread use in building web services and APIs, systems u

NVD modified: NVD date unavailable

An improper input validation vulnerability in UniFi OS devices allows a low-privilege network attacker to execute commands, potentially compromising the device. This issue is critical due to the common use of UniFi OS for network management and control, which may expose these devices to reachability.

NVD modified: NVD date unavailable

An improper input validation vulnerability in certain UniFi OS devices can be exploited by a low-privilege attacker with network access to escalate privileges, potentially leading to unauthorized control and data access. The relevance and exposure of affected devices require confirmation.

NVD modified: NVD date unavailable

An Improper Input Validation vulnerability in the UID Enterprise Agent could allow a low-privilege, network-accessible attacker to execute commands on a host device. This is a concern because unauthorized command execution can impact system integrity and availability.

NVD modified: NVD date unavailable

An argument injection vulnerability in WordPress Toolkit, used within cPanel & WHM, allows authenticated users to bypass authorization and execute arbitrary commands as other accounts. This could impact system integrity and data security if the affected technology is reachable and relevant.

NVD modified: NVD date unavailable