Published threat advisories for September 18, 2026

A critical buffer overflow vulnerability exists in Totolink wireless routers within the formWlEncrypt function. This flaw allows unauthenticated, remote attackers to potentially execute arbitrary code or cause denial-of-service conditions, with publicly available exploit code increasing the likelihood of its misuse.

NVD modified: NVD date unavailable

A vulnerability in the OpenShift console allows unauthenticated remote attackers to exploit specific endpoints, potentially leading to server-side request forgery and denial of service. This could expose internal services or disrupt operations. Confirmation of relevance and exposure to specific OpenShift deployments is

NVD modified: NVD date unavailable

An unauthenticated attacker can reset any account's password in Cotonti by predicting password recovery tokens. This allows unauthorized access to sensitive information and system control. Confirm if Cotonti is in use and assess its exposure to understand the risk.

NVD modified: NVD date unavailable

LightLLM software has an authentication bypass vulnerability in a WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes. This could lead to the disclosure of user prompts, denial of service, or the system making requests to internal network addresses. The relevance and potential exposure

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a missing authentication vulnerability in its LoadBalancerServlet that allows unauthenticated users to access privileged operations, potentially impacting system integrity and availability.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a vulnerability where a remote attacker can bypass security restrictions due to missing authentication. This could impact the integrity and availability of protected data and potentially lead to unauthorized access to sensitive information.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a critical vulnerability allowing authenticated users to execute arbitrary SQL commands due to improper input handling. This could compromise the integrity and confidentiality of protected data and the Guardium system itself. The relevance depends on network accessibility and the specif

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a vulnerability allowing authenticated users to execute arbitrary SQL commands due to improper SQL command neutralization. This could impact the confidentiality and integrity of managed data. Organizations should confirm if this product is in use and assess its network exposure.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a vulnerability allowing an authenticated user to potentially execute arbitrary code through improper web page input handling. This could impact system integrity and availability if the web interface is reachable. It's important to determine if this technology is deployed and exposed in

NVD modified: NVD date unavailable

An unauthenticated remote attacker can bypass IP access controls to access the IBM Guardium Data Protection management interface. This could lead to unauthorized access to sensitive data if the system is reachable. The relevance and exposure of Guardium instances should be confirmed.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a vulnerability allowing authenticated attackers to execute arbitrary code due to improper input handling in its web page generation. This could impact system data and behavior if the web interface is reachable and exploited. Reviewing its exposure is important.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a vulnerability in its CAS listener that allows unauthenticated network attackers to send crafted messages and potentially execute unintended code on the appliance. This could compromise the appliance's integrity.

NVD modified: NVD date unavailable

A critical vulnerability exists in IBM Guardium Data Protection due to untrusted data deserialization, potentially allowing unauthenticated remote attackers to execute arbitrary code. This could compromise system integrity and confidentiality if the affected system is reachable over the network.

NVD modified: NVD date unavailable

An authenticated OS command injection vulnerability exists in IBM Guardium Data Protection's `exportCertificate` functionality, potentially allowing an attacker to execute unauthorized commands and impact system confidentiality, integrity, and availability.

NVD modified: NVD date unavailable

IBM Guardium Data Protection has a critical SQL injection vulnerability in its generateInsertQuery functionality. A remote attacker could inject malicious SQL, potentially compromising system confidentiality, integrity, and availability. This issue warrants attention to ensure the security of protected data and system

NVD modified: NVD date unavailable

IBM Sterling File Gateway has a vulnerability where an unvalidated SSO header could allow a remote attacker to bypass authentication and gain a fully authenticated session. This could expose sensitive data or operations within systems that manage file transfers.

NVD modified: NVD date unavailable

CordysCRM, an open-source customer relationship management system, has a vulnerability allowing unauthenticated access to user data. Attackers can exploit this to view workflow events, approval requests, mentions, and alerts, or to inject messages and terminate user channels. This could lead to unauthorized access and

NVD modified: NVD date unavailable

The pg_partman PostgreSQL extension is vulnerable to SQL injection, allowing a user with specific database privileges to execute arbitrary SQL. This could lead to full database compromise and operating system command execution as the PostgreSQL superuser. The reachability of this vulnerability is considered very unlike

NVD modified: NVD date unavailable

A vulnerability exists in FluidSynth's command handler that can lead to an out-of-bounds heap write, potentially causing denial of service or code execution. This issue is remotely reachable if the TCP server is enabled, or locally via the FluidSynth shell. Applications not using these features are unaffected.

NVD modified: NVD date unavailable

A SQL injection vulnerability in Hongjing e-HR allows unauthenticated attackers to read arbitrary database content, including credentials. This issue arises from an unsanitized query parameter in a web endpoint that may be externally reachable. Readers should care because unauthorized access to sensitive employee data

NVD modified: NVD date unavailable

A weakness in the Mongoid query path may allow an unauthenticated party to disclose or delete stored document data when an application passes external field names to certain query methods. This issue affects applications using the Mongoid library, and its impact depends on how those applications handle user-provided qu

NVD modified: NVD date unavailable

A vulnerability in Cocos AI's confidential computing system could permit session misbinding, potentially leading to the release of application data into unintended attestation contexts. This issue stems from an incorrect validation of security attestations during communication.

NVD modified: NVD date unavailable

An unauthenticated network attacker could exploit a vulnerability in Icinga 2 by impersonating trusted nodes through certificate manipulation on TCP port 5665, potentially leading to node control. This is relevant for organizations using Icinga 2 for system monitoring.An unauthenticated network attacker can exploit Ici

NVD modified: NVD date unavailable

The Mnemosyne memory layer for AI agents has a vulnerability where its sync server could incorrectly accept forged authentication tokens, potentially allowing unauthorized access to AI agent data. This issue could affect data integrity and confidentiality if the sync server endpoint is network-reachable and not secured

NVD modified: NVD date unavailable

LMDeploy's PyTorch DistServe component has a vulnerability that allows unauthenticated remote code execution when a specific disaggregated serving path is enabled. An attacker could exploit this by sending a crafted message to trigger unsafe deserialization, potentially compromising the LMDeploy serving process. This i

NVD modified: NVD date unavailable

This critical vulnerability affects IP cameras, where a weak password storage method allows offline cracking of the root account password. An attacker could recover credentials, potentially reusing them across devices with the same firmware. It is important to confirm if affected devices are in use and assess any poten

NVD modified: NVD date unavailable

CM2507 IP cameras store wireless network credentials in cleartext. An attacker with filesystem access could recover these credentials, potentially compromising network security. This vulnerability requires further access beyond standard network exposure, and its relevance depends on device deployment and access control

NVD modified: NVD date unavailable

A critical vulnerability in WACRM, a self-hostable CRM template, allows authenticated users to escalate privileges or access another tenant's data. This occurs due to flawed database security policies. If reachable, this could lead to unauthorized modification or exposure of sensitive tenant resources and knowledge.

NVD modified: NVD date unavailable

A heap out-of-bounds write vulnerability exists in the libheif library when processing specially crafted HEIF, HEIC, or AVIF files. This could allow remote attackers to cause memory corruption, potentially impacting system integrity and availability. The relevance and exposure of this issue depend on how applications i

NVD modified: NVD date unavailable

A critical remote code execution vulnerability exists in an administrative feature of the interchange project, allowing unauthenticated users to execute arbitrary Perl code server-side if a non-default configuration is enabled. This could lead to server compromise, and its relevance depends on whether this feature is e

NVD modified: NVD date unavailable

The kcp front-proxy has a vulnerability where it does not properly validate and remove inbound identity headers. This allows an authenticated user to inject forged headers, impersonating other users or gaining elevated privileges. This could lead to unauthorized access, modification, or deletion of resources, secrets,

NVD modified: NVD date unavailable

A heap buffer underflow vulnerability in IBM MQ for HPE NonStop, triggered by specially crafted multi-segment messages, could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code. This impacts the integrity and availability of the messaging service. It is uncertain if this

NVD modified: NVD date unavailable

A vulnerability exists in IBM MQ Appliance due to a heap buffer overflow in protocol message processing before authentication, which could allow a remote attacker to cause a denial of service or potentially execute arbitrary code. This could impact the availability and integrity of messaging services.

NVD modified: NVD date unavailable

A vulnerability in XWiki Rendering allows authenticated users to execute arbitrary scripts, including remote code execution with unrestricted access to wiki content. This occurs because rendered output within HTML macros is not properly escaped, enabling attackers to inject malicious script macros. This issue impacts s

NVD modified: NVD date unavailable

IBM Common Licensing Agent is vulnerable to cross-site request forgery, potentially allowing attackers to execute unauthorized actions by tricking trusted users. The relevance and exposure of this licensing technology require confirmation to understand potential business impact.

NVD modified: NVD date unavailable

A vulnerability in Concrete CMS Community Store allows unauthenticated attackers to inject script payloads into customer order fields, which can execute in authenticated manager sessions. This could lead to the creation of rogue accounts or the exfiltration of data. Confirmation is needed regarding the use and internet

NVD modified: NVD date unavailable

A sandbox escape vulnerability exists in the vm2 JavaScript library, allowing code within the sandbox to execute arbitrary code on the host system. This occurs when a host API exposes a promise, and the library's handling of these promises doesn't fully sanitize rejections, potentially allowing an attacker to bypass se

NVD modified: NVD date unavailable

A sandbox escape vulnerability in the vm2 NodeVM library allows attackers to execute arbitrary commands on the host system if certain configurations are met. This could lead to unauthorized operations and affect system integrity when untrusted code is processed. Identifying where this technology is implemented and how

NVD modified: NVD date unavailable

The vm2 library has a critical vulnerability that allows sandboxed code to escape its environment and execute arbitrary commands on the host system. This occurs when the application exposes non-strict host functions, and the sandboxed code calls them without a receiver, granting the script access to host global objects

NVD modified: NVD date unavailable

A vulnerability exists in an image processing library where processing a malformed TGA image file can cause an application to unexpectedly exit. This could happen if the library handles user-supplied image data, potentially disrupting service availability.

NVD modified: NVD date unavailable

A length parameter inconsistency vulnerability exists in ABB Freelance Controllers, which are industrial control systems. This flaw could potentially disrupt operations if an attacker sends specially crafted network traffic to a vulnerable controller, leading to a denial-of-service condition. Organizations using these

NVD modified: NVD date unavailable

An authenticated user with low privileges in the NetBackup Flex OS management shell can bypass cryptographic signature verification. This grants unrestricted root access, compromising the appliance's confidentiality, integrity, and availability. The vulnerability is externally exposed via the network, but typically suc

NVD modified: NVD date unavailable

An authenticated, low-privileged user can execute arbitrary code with root privileges on the NetBackup Flex OS management shell by supplying specially crafted input to a privileged administrative command. This grants unrestricted control over the appliance host and hosted containers, potentially compromising confidenti

NVD modified: NVD date unavailable

An insufficient entropy vulnerability in Synology DiskStation Manager's login logic allows remote attackers to read or write arbitrary files and perform denial-of-service attacks. This critical issue could lead to data compromise or system unavailability, making it important to confirm if affected Synology software is

NVD modified: NVD date unavailable

HCL BigFix Service Management has a critical Server-Side Request Forgery vulnerability in its search function that could permit an attacker to compel the application server to issue requests to internal systems not typically exposed online. This could potentially lead to unauthorized access to sensitive internal networ

NVD modified: NVD date unavailable

HCL BigFix Service Management has critical vulnerabilities allowing authenticated attackers to inject database commands for system details and manipulate requests for cross-tenant data access, potentially exposing PII. The threat is external and network-exploitable, impacting the confidentiality and integrity of sensit

NVD modified: NVD date unavailable

A vulnerability in the AF Companion WordPress plugin allows users with low-privileged roles to upload arbitrary files, including PHP scripts, through an import feature. This could lead to the execution of malicious code on the affected WordPress site. The issue is relevant if the plugin is in use and its import feature

NVD modified: NVD date unavailable

HGiga OAKlouds contains an insecure deserialization flaw, enabling unauthenticated remote attackers to execute arbitrary code by sending malicious serialized data. This could lead to server compromise. Confirmation of OAKlouds usage is needed to assess exposure.

NVD modified: NVD date unavailable

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network, potentially impacting data integrity and availability.

NVD modified: NVD date unavailable

An authentication bypass vulnerability in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network. This could enable an attacker to impersonate legitimate users, potentially leading to unauthorized access to sensitive resources or functionalities. The relevance and exposure of this technol

NVD modified: NVD date unavailable

An unauthorized attacker can elevate privileges over a network in Azure Billing due to insufficient data authenticity verification. This critical vulnerability may allow attackers to gain unauthorized access and control. The primary concern is confirming its relevance and exposure within our environment.

NVD modified: NVD date unavailable