CVE-2026-47769

APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the /webhooks/:serverSlug/:eventName endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the...

CVE-2026-47769 APIFold Vulnerable to Unauthenticated Webhook Event Injection

APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the /webhooks/:serverSlug/:eventName endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the...

CVE-2026-47769 APIFold Vulnerable to Unauthenticated Webhook Event Injection

APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the /webhooks/:serverSlug/:eventName endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the...

CVE-2026-47769

APIFold is the affected software. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, its OpenAPI/Swagger-based MCP server could accept arbitrary unauthenticated JSON on the /webhooks/:serverSlug/:eventName endpoint, storing payloads in Redis and webhook_events without signature checks or a...

CVE-2026-47769 APIFold Vulnerable to Unauthenticated Webhook Event Injection

APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the /webhooks/:serverSlug/:eventName endpoint accepts arbitrary unauthenticated JSON and stores it in Redis and the...

PYSEC-2026-3541 TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

ImpactThe /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration.By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal SummaryPraisonAI's Dynamic Context module provides filesystem-backed history andterminal-log storage. The SDK reference describes the module as providing:- artifact storage for tool...

PYSEC-2026-3514 PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage

PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage Summary PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.gettools: python ctx = setupdynamiccontext agent = Agent instructions="You are a data analyst.",...

Astra Linux – Vulnerability in Chromium

In Google Chrome, the race condition in shared storage prior to version 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Johnson Controls XAAP Android

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

PT-2026-64147

Name of the Vulnerable Software and Affected Versions Chatwoot versions prior to 4.16.0 Description An authentication bypass exists in the direct uploads controller. This flaw allows unauthenticated attackers to resolve any account and conversation to create arbitrary ActiveStorage blobs within a...

PT-2026-64196

Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description The software stores passwords in plaintext, which could lead to the exposure of cleartext credentials through the API. Recommendations Update to a version newer than 3.2.1a14...

CVE-2026-40430: Plaintext Storage of a Password

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API...

CVE-2024-58023: Cleartext Storage of Sensitive Information

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

PT-2026-64141

Impact The /internal/object storage endpoint accepts a caller-supplied JSON storage path parameter that dynamically overrides the TensorZero object storage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that ma...

Linux UFS Kernel Heap Buffer Overflow DoS

The vulnerability of the ufshcdmcqpollcqelock function in the drivers/ufs/core/ufs-mcq.c module related to UFS host controllers in the Linux operating system is associated with the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

NPM: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

NPM: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads vulnerability discovered by ? in WordPress Npm n8n versions 1.123.58...

GHSA-W867-JM58-P9PV n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does not account for files already written to the shared temporary directory. This causes temporary files to accumulate on disk until the periodic cleanup runs,...

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does not account for files already written to the shared temporary directory. This causes temporary files to accumulate on disk until the periodic cleanup runs,...