Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Investigation Assistant App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-40175 DESCRIPTION: Axios i...

EUVD-2026-27235

An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Logging" diagnostic mode is enabled, the application inadvertently records administrative credentials in plain text within the log files. An attacker with administrative access to the PaperCut Hive management...

CVE-2026-7823 Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable results in os command injection. The attack may be launched remotely. The exploit has been released to the...

PT-2026-36937

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update document/continue document/delete document/get content of the file app/routes/document.py. Performing a manipulation of the argument DOCS...

CVE-2026-7776

creationtimestamp| type| source ---|---|--- 2026-05-04 22:49:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2qzjvh2626 2026-05-04 23:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2rxo7cyx2p 2026-05-05 02:09:50+00:00| seen|...

CVE-2026-42155

creationtimestamp| type| source ---|---|--- 2026-05-04 20:56:34+00:00| published-proof-of-concept| https://github.com/OpenMage/magento-lts/security/advisories/GHSA-2cwr-gcf9-pvxr 2026-05-16 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlwu63uqud2d...

CVE-2026-41925

creationtimestamp| type| source ---|---|--- 2026-05-04 20:42:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2jvukepv2v...

CVE-2026-7671

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. Attacks of...

CVE-2026-42238 Unauthenticated Remote Code Execution via Backup Restore in nginx-ui

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint POST /api/restore that is completely unauthenticated during the first 10 minutes after process startup on any fresh installation. An unauthenticated remote attacker can...

CVE-2026-6321

creationtimestamp| type| source ---|---|--- 2026-05-04 19:36:47+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3ml2gaeaaas2n 2026-05-04 20:18:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2il54ya22q 2026-05-04 22:34:34+00:00| seen|...

CVE-2025-47405

creationtimestamp| type| source ---|---|--- 2026-05-04 19:07:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emokys72g...

CVE-2026-43616

creationtimestamp| type| source ---|---|--- 2026-05-04 18:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dn4fq4j2p...

CVE-2026-42092

creationtimestamp| type| source ---|---|--- 2026-05-04 18:31:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cm7hqfa2q...

CVE-2026-41571

creationtimestamp| type| source ---|---|--- 2026-05-04 18:24:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c6ljvvg2r 2026-05-04 20:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j2fwzwb2e...

CVE-2026-41571

Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt"null" placeholder whenever a user has no stored password. OIDC-registered users are created with an empty password, so anyone who submits password:...

CVE-2026-42090 Notesnook: RCE via stored XSS in note export rendering

Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution in the desktop app. The root cause is...

CVE-2026-5654

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause the application to crash by exploiting an issue within the AMR-NB codec. Successful exploitation leads to a denial of service, which prevents Wireshark from functioning and analyzing network traffic. Mitigation To...

CVE-2026-41044

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the admin web console to craft a malicious broker name. This malicious name, containing an xbean binding, can be used by a virtual machine VM transport to load a remote Spring...

CVE-2026-7735

creationtimestamp| type| source ---|---|--- 2026-05-04 06:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz3hedhnt2q...

Malicious Package

Overview @alfa.life.mapp/app.web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...