GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, pact-broker-docker-fips, kube-logging-operator, pact-broker-docker, logstash-fips, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, ruby3.3-rails...

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan RAT called Backdoor.Turn to conceal command-and-control C2 traffic inside Microsoft Teams relay infrastructure. According to findings from Broadcom-owned Symantec and Carbon...

CVE-2026-34023

The CVE-2026-34023 issue affects Wertheim SafeController Software (AssemblyVersion 6.15.8328.28014) and is caused by an incorrect authorization in the WebSocket communication used by the SafeController WebMessageBroker. An authenticated attacker with low-privilege branch credentials can manipulat...

CVE-2026-54412

CVE-2026-54412 affects LiamBindle MQTT-C up to v1.1.6. The vulnerability is a heap-based out-of-bounds read and integer underflow in mqtt_unpack_publish_response() (src/mqtt.c). A broker-controlled or injected PUBLISH packet can allow a remote unauthenticated attacker to crash a subscribed MQTT-C...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: keycloak-fips, neo4j, pinot-fips, apache-hop-fips, apache-pulsar, tez, apache-activemq-artemis, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, apache-hop, hadoop-fips, zipkin, apicurio-registry, pinot, management-api-for-apache-cassandra-5.0, celeborn,...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: keycloak-fips, neo4j, pinot-fips, apache-hop-fips, apache-pulsar, tez, apache-activemq-artemis, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, apache-hop, hadoop-fips, zipkin, apicurio-registry, pinot, management-api-for-apache-cassandra-5.0, celeborn,...

CVE-2026-10142

A flaw was found in kafka-python. A malicious broker or a machine-in-the-middle attacker can exploit a denial-of-service vulnerability in the protocol parser. By sending a specially crafted 4-byte frame length value without proper bounds validation, an attacker can trigger excessive memory...

CVE-2026-50085

The Aqara Board service op-test.aqara.com accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and has an estimated CVSS...

CVE-2026-10557

The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices. These credentials are embedded in the application binary and are readily extractable via APK decompilation. The credentials provide access to cloud MQTT brokers...

CVE-2026-50085

The CVE-2026-50085 entry concerns the Aqara Board service at op-test.aqara.com. Connected sources provide concrete details: the service accepts arbitrary MQTT command payloads and forwards them to the platform’s HiveMQ broker without authentication, representing CWE-306 Missing Authentication for...

CVE-2026-50085 Aqara Board IoT insecure debug API

The Aqara Board service op-test.aqara.com accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and has an estimated CVSS...

EUVD-2026-36475

The Aqara Board service op-test.aqara.com accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and has an estimated CVSS...

CVE-2026-10557

CVE-2026-10557 concerns the Yarbo Android/iOS mobile applications, where hard-coded MQTT broker credentials are embedded in the application binary and identical across all users/devices. These credentials are extractable via APK decompilation and provide access to cloud MQTT brokers carrying real...