Published threat advisories for June 25, 2026

A critical vulnerability exists in WebSocket endpoints that lack proper authentication, allowing attackers to impersonate charging stations. This could lead to unauthorized access to sensitive data or system actions, potentially resulting in privilege escalation and a compromise of system security. The issue is relevan

NVD published: June 25, 2026

A path traversal vulnerability in Flowise's document store API allows unauthenticated attackers to write arbitrary files to the filesystem, potentially leading to remote code execution. This critical issue affects how the application stores documents and could result in unauthorized system control.

NVD published: June 25, 2026

Flowise contains an unsandboxed remote code execution vulnerability in its Custom MCP feature, allowing unauthenticated attackers to execute arbitrary OS commands, potentially leading to complete compromise of the platform container or server. This is due to minimal authentication and authorization controls, especially

NVD published: June 25, 2026

Flowise contains an arbitrary file access vulnerability due to missing validation of parameters used in file handling operations. This could allow an unauthenticated attacker to read or write arbitrary files, potentially leading to remote code execution. Confirming if this technology is in use and exposed externally is

NVD published: June 25, 2026

Flowise versions up to 2.2.4 contain an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when local storage is configured. This flaw permits attackers to upload malicious files to arbitrary directories, potentially leading to remote code execution and system compromise.

NVD published: June 25, 2026

An authentication bypass vulnerability in Flowise allows unauthenticated remote attackers to create user accounts via an unprotected registration endpoint. This grants them full API access to the system without needing credentials. The primary concern is confirming if Flowise is in use and assessing potential exposure.

NVD published: June 25, 2026

A critical vulnerability exists in OMGF Pro, allowing for the upload and use of malicious files. If reachable, this could permit attackers to execute arbitrary code and gain significant control over the affected system, potentially compromising its integrity and availability. Confirmation of the plugin's presence and i

NVD published: June 25, 2026

An out-of-bounds write in RTKLIB's decode_type1033 function allows an attacker to corrupt memory by sending a crafted RTCM3 message, potentially leading to arbitrary code execution or denial of service. The relevance and exposure of this vulnerability depend on how RTKLIB is implemented and networked within your enviro

NVD published: June 25, 2026

An unauthenticated attacker can impersonate any user, including administrators, and create new accounts in File Browser when proxy authentication is enabled. This is achievable by sending a forged HTTP header to a reachable server, bypassing the need for credentials. This vulnerability allows for unauthorized account c

NVD published: June 25, 2026

An authentication flaw in File Browser allows unauthenticated remote attackers to execute arbitrary OS commands on the server by injecting shell metacharacters into login fields. This pre-authentication vulnerability could impact server integrity and data if the application is reachable.

NVD published: June 25, 2026

A vulnerability in the Cursor code editor allows a malicious agent to write arbitrary files outside the workspace, potentially leading to remote code execution without user interaction. This occurs when path canonicalization fails, enabling unauthorized writes to system locations under user privileges.

NVD published: June 25, 2026

A vulnerability in Cursor, an AI-powered code editor, allows a malicious agent to escape its sandbox by manipulating directory parameters. This could lead to arbitrary file writes outside the intended workspace, potentially enabling unsandboxed remote code execution with user privileges and no further user interaction

NVD published: June 25, 2026

A heap-based buffer overflow vulnerability exists in socat, where a malicious SOCKS5 proxy can overwrite adjacent memory. This occurs due to a sign-extension flaw when parsing domain name replies, potentially leading to impact if socat is configured in a relevant network context. Understanding the deployment and exposu

NVD published: June 25, 2026

An authenticated user with a builder role in ToolJet can overwrite a shared marketplace plugin with arbitrary JavaScript, enabling server-side code execution and a potential compromise of the entire deployment. This vulnerability is relevant if your organization uses ToolJet and the affected plugin functionality is rea

NVD published: June 25, 2026

LibreChat's OAuth implementation improperly validates the resource parameter, allowing a malicious OAuth server to steal access tokens intended for a legitimate server. This could lead to unauthorized access to user accounts and sensitive information.

NVD published: June 25, 2026

An unauthenticated SQL injection vulnerability exists in the Premmerce Wishlist for WooCommerce plugin. If reachable, this could allow attackers to access or manipulate sensitive database information, potentially impacting data confidentiality and integrity. The primary concern is determining if this plugin is in use a

NVD published: June 25, 2026

An unauthenticated SQL injection vulnerability exists in a metadata and taxonomy processing component, potentially allowing unauthorized access to sensitive data via network requests. This poses a risk to data integrity and could lead to misuse. Confirming the relevance and exposure of this component within the organiz

NVD published: June 25, 2026

A SQL injection vulnerability exists in YMC Filter, potentially allowing attackers to manipulate or access backend data through crafted network requests. This could compromise database integrity and confidentiality. The relevance and exposure of this vulnerability to our environment require confirmation.

NVD published: June 25, 2026

A critical remote code execution vulnerability exists in the Widget Options plugin, allowing an attacker with low-privilege access to execute arbitrary code on the server. If reachable, this could lead to a complete compromise of the application and its data, necessitating confirmation of the plugin's use and exposure.

NVD published: June 25, 2026

Dell Wyse Management Suite has a critical vulnerability where it accepts extraneous untrusted data, potentially allowing a remote attacker with low privileges to execute code. This could impact systems managed by the suite.

NVD published: June 25, 2026

A vulnerability in the Linux kernel's network request handling could lead to a use-after-free condition, potentially causing system instability or crashes. This issue arises from a race condition involving preemptive scheduling and timer events during socket setup. Swiftly identifying and addressing affected Linux kern

NVD published: June 25, 2026

A use-after-free vulnerability exists in the Linux kernel's MediaTek Ethernet driver, potentially allowing unauthorized access or data corruption through improper memory handling during packet metadata teardown. If reachable, this could lead to system instability or code execution, making it important to confirm if thi

NVD published: June 25, 2026

A vulnerability in the Linux kernel's SCTP processing allows for out-of-bounds reads when handling COOKIE_ECHO chunks, potentially leading to memory corruption. This could be triggered by network-accessible, unauthenticated traffic targeting services that utilize the SCTP protocol. Unpatched systems could be at risk of

NVD published: June 25, 2026

The Linux kernel's SIT tunnel implementation has a vulnerability where a cached pointer to an inner IPv6 header can become stale after certain network packet offloads, potentially leading to the use of freed memory. This could result in the corruption or disclosure of sensitive data within network traffic. The vulnerab

NVD published: June 25, 2026

The Linux kernel's SCTP implementation contains a vulnerability allowing unauthenticated peers to read uninitialized memory. This occurs when a malformed SCTP chunk is sent, causing the system to read beyond expected data. The risk depends on whether your environment uses SCTP and if it's exposed to external network tr

NVD published: June 25, 2026

A vulnerability in the Linux kernel's SCTP implementation allows for out-of-bounds reads when processing malformed network packets, potentially affecting system stability or leading to information disclosure. This issue may be reachable via the network without authentication.

NVD published: June 25, 2026

A flaw in the Linux kernel's IPv6 Virtual Tunnel Interface (ip6_vti) can cause incorrect tunnel matching. This vulnerability may allow an attacker to misdirect network traffic by sending specially crafted packets. The exact impact is uncertain, but it relates to network packet handling.

NVD published: June 25, 2026

A vulnerability in the Linux kernel's mvpp2 network driver could allow specially crafted packets to corrupt memory by exceeding buffer limits. This could lead to system instability or compromise if exploited. The issue has been resolved in the kernel.

NVD published: June 25, 2026

A vulnerability in the Linux kernel's network driver allows attackers to return packet buffers to hardware pools they no longer own, potentially leading to data corruption or denial of service when processing network packets. This issue could impact systems handling network traffic if a specific error path is triggered

NVD published: June 25, 2026

A vulnerability exists in the Linux kernel's RDMA/srp component where a malformed response from a storage target could lead to a read fault. This could potentially cause a denial-of-service condition or memory corruption if reachable. The relevance of this issue depends on the use of specialized InfiniBand or RoCE fabr

NVD published: June 25, 2026

A vulnerability in the Linux kernel's iSER driver allows a remote, unauthenticated attacker to crash a system by sending a malformed login request. This leads to an out-of-bounds write and a denial-of-service, impacting system stability.

NVD published: June 25, 2026

A vulnerability in the Linux kernel's network fragment handling could allow a use-after-free condition during network namespace teardown. This may cause system instability or unauthorized access if triggered by crafted network packets.

NVD published: June 25, 2026

A vulnerability in the Linux kernel's AF_RXRPC protocol involves an ACK parser that may incorrectly handle fragmented UDP packets, potentially allowing unauthorized access or modification of system data. The issue arises from assumptions about buffer handling during SACK table parsing. This could lead to data corruptio

NVD published: June 25, 2026

A vulnerability in the Linux kernel's netfilter component allows specially crafted packets to bypass Ethernet MAC header checks. This could affect system integrity and availability by leading to incorrect network packet processing. It is important to determine if affected kernel components are present and reachable.

NVD published: June 25, 2026

A critical heap overflow vulnerability exists in the cjson library within Apache Kvrocks, potentially allowing for code execution or denial of service when reachable via network requests. This issue impacts Apache Kvrocks versions from 2.0.4 through 2.15.0. While the database is typically internal, confirming exposure

NVD published: June 25, 2026

A flaw in Apache Kvrocks' permission handling could allow a low-privilege attacker to execute arbitrary commands by tricking a user into interacting with a malicious resource, potentially impacting data integrity and confidentiality. The Apache Kvrocks security team is responsible for addressing this, and organizations

NVD published: June 25, 2026

A critical OS command injection vulnerability exists in the Rapid7 InsightConnect Traceroute Plugin for Linux. Remote attackers can execute arbitrary commands by sending unvalidated input through request parameters, potentially leading to unauthorized system access. Confirm if this plugin is in use.

NVD published: June 25, 2026

A vulnerability in the Rapid7 InsightConnect Translate Plugin for Linux systems permits remote attackers to execute arbitrary operating system commands due to improper input sanitization in command construction. This could lead to unauthorized command execution if the plugin processes specially crafted text or expressi

NVD published: June 25, 2026

A critical vulnerability exists in a Rapid7 InsightConnect plugin for Linux, allowing attackers to execute arbitrary OS commands by sending specially crafted input. This issue stems from insufficient validation of the host parameter within the plugin's ping action. The potential impact includes unauthorized command exe

NVD published: June 25, 2026

A critical OS command injection vulnerability exists in the Rapid7 InsightConnect AWK Plugin on Linux, allowing remote attackers to execute arbitrary commands by sending malicious input. This could lead to a compromise of the affected system. It is important to confirm if this plugin is in use within the environment.

NVD published: June 25, 2026

An OS command injection flaw exists in the Rapid7 InsightConnect Sed Plugin for Linux, allowing authenticated users to run arbitrary commands due to insufficient input validation. This could impact system integrity and data, making it important to verify if the plugin is in use and if the vulnerable functionality is ex

NVD published: June 25, 2026

An Arbitrary File Write vulnerability exists in the Rapid7 InsightConnect Sed Plugin on Linux. Authenticated attackers can write to any file path via the expression parameter, potentially leading to system integrity issues or further malicious activity. This is relevant if the Sed Plugin is in use and accessible.

NVD published: June 25, 2026