EUVD-2026-56181

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...

CVE-2026-63317

A flaw was found in Apache OpenNLP. This vulnerability allows an attacker to achieve arbitrary class instantiation by providing a specially crafted XML feature generator descriptor within a model archive or by supplying untrusted format names. While not direct remote code execution, successful...

CVE-2026-72563 BadChoice Handesk - Broken Access Control

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array...

CVE-2026-72563 BadChoice Handesk - Broken Access Control

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array...

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can work even after a blunt version of the same theft is refused: split the request...

CVE-2026-24329

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

CVE-2026-24329

CVE-2026-24329 : A flaw in wildfly-core allows a remote user authenticated as an administrator to inject a malformed payload into the Inet Address field via the Management Model. This causes the server to crash and become unrecoverable because the payload is written into standalone.xml, resulting...

CVE-2026-24329 Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

CVE-2026-24329

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

EUVD-2026-55929

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

CVE-2026-58245 Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)

SAP Advanced Planning and Optimization Model Mix Planning contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to...

CVE-2026-58245

CVE-2026-58245 concerns SAP Advanced Planning and Optimization (Model Mix Planning), where a hard-coded credential in the application’s source enables an attacker with HIGH privileges and no user interaction to bypass authorization and delete specific planning-related restrictions. The descriptio...

PT-2026-70225

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.3 Description A heap out-of-bounds read occurs when a crafted .traineddata model is loaded through the TessBaseAPI::Init function. This happens because SquishedDawg::read squished dawg in src/dict/dawg.cpp accep...

Cross-Corpus Evaluation of Generalizable Vulnerability Detection in IoT Firmware

IoT firmware vulnerability detection remains challenging due to heterogeneous firmware ecosystems, resource-constrained platforms, and limitations in existing benchmarks. Many datasets are synthetic or general-purpose and lack human-verified, contamination-screened annotations, limiting evidence ...

CVE-2026-24329: XML Injection (aka Blind XPath Injection)

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management Model. This injection causes the server to crash and become unrecoverable, as the payload is written into the standalone.xml...

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs

Existing vision-language model VLM backdoors are usually treated as static vulnerabilities: one-to-one and N-to-N attacks bind one or more triggers to a finite set of targets before victim training. This assumption substantially underestimates the threat. We show that a single poisoning phase can...

CVE-2026-58245: Use of Hard-coded Credentials

SAP Advanced Planning and Optimization Model Mix Planning contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application. An attacker with high privileges could leverage this hardcoded credential to...

PT-2026-70035

Name of the Vulnerable Software and Affected Versions SAP Advanced Planning and Optimization Model Mix Planning affected versions not specified Description The application contains a hardcoded credential within its source code used for authorization checks when accessing specific functionalities...

PT-2026-70872

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CISA: CDM Data Model Document 6.0.1

This document provides a comprehensive description of a common data schema that supports the associated Logical Data Model LDM to ensure that prescribed diagnostic activities within CDM solutions are consistent across all participating federal agencies. This updated version aligns with the latest...