CVE-2026-59225 Open WebUI: Arena task endpoints can bypass underlying model access controls

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.12 before 0.10.0, an authenticated non-admin user with read access to an arena wrapper model can reach a restricted underlying model through task endpoints such as /api/v1/tasks/moa/completions. The...

EUVD-2025-59225

Malicious code in ida-ikan12-sluey npm...

CVE-2025-59225

CVE-2025-59225 is a Microsoft Excel Remote Code Execution vulnerability caused by a use-after-free. The vulnerability allows a local attacker to execute code on a vulnerable system. Various security advisories and update plugins confirm Excel-related fixes in October 2025 releases (MSRC/KB5002794...

CVE-2025-59225 Microsoft Excel Remote Code Execution Vulnerability

...

Description of the security update for Excel 2016: October 14, 2025 (KB5002794)

Description of the security update for Excel 2016: October 14, 2025 KB5002794 Summary This security update resolves Microsoft Excel Information Disclosure Vulnerability and Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerabilities, see the following security...