Eosphoros DB-GPT Authorization Issue Vulnerability

eosphoros DB-GPT versions 0.8.2 and earlier have an authorization issue vulnerability. This vulnerability stems from the /api/v1/chat/react-agent endpoint, which relies on a simulated getuserfromheaders function. This function grants administrative role to all callers. Unauthenticated attackers c...

Nokia 1830 Global Express security vulnerabilities

The Nokia 1830 Global Express G42, GX G31, GX G32, and GX G34 models prior to the GX r9.0 version have security vulnerabilities. These vulnerabilities stem from issues with local privilege escalation in the management shell interface. Local attackers who are authenticated and have restricted shel...

Advantech Adam-3600 command injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a command injection vulnerability. This vulnerability stems from command injection, and it may allow authenticated attackers to execute root-level code on the system...

WAVLINK WL-WN530BE1-A has a command injection vulnerability

The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Overview In early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments. The intrusion achieved root code executio...

ROOT-APP-PYPI-CVE-2025-50181 CVE-2025-50181 in urllib3 - Patched by Root

Root has patched CVE-2025-50181 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-37891 CVE-2024-37891 in urllib3 - Patched by Root

Root has patched CVE-2024-37891 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-43804 CVE-2023-43804 in urllib3 - Patched by Root

Root has patched CVE-2023-43804 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-21441 CVE-2026-21441 in urllib3 - Patched by Root

Root has patched CVE-2026-21441 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-66471 CVE-2025-66471 in urllib3 - Patched by Root

Root has patched CVE-2025-66471 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-45803 CVE-2023-45803 in urllib3 - Patched by Root

Root has patched CVE-2023-45803 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-66418 CVE-2025-66418 in urllib3 - Patched by Root

Root has patched CVE-2025-66418 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-44431 CVE-2026-44431 in urllib3 - Patched by Root

Root has patched CVE-2026-44431 in the urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JJ37-3377-M6VV GHSA-jj37-3377-m6vv in nodemailer - Patched by Root

Root has patched GHSA-jj37-3377-m6vv in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-VVJJ-XCJG-GR5G GHSA-vvjj-xcjg-gr5g in nodemailer - Patched by Root

Root has patched GHSA-vvjj-xcjg-gr5g in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-R7G4-QG5F-QQM2 GHSA-r7g4-qg5f-qqm2 in nodemailer - Patched by Root

Root has patched GHSA-r7g4-qg5f-qqm2 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-268H-HP4C-CRQ3 GHSA-268h-hp4c-crq3 in nodemailer - Patched by Root

Root has patched GHSA-268h-hp4c-crq3 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10942 AIKIDO-2026-10942 in nodemailer - Patched by Root

Root has patched AIKIDO-2026-10942 in the nodemailer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-P6GQ-J5CR-W38F GHSA-p6gq-j5cr-w38f in nodemailer - Patched by Root

Root has patched GHSA-p6gq-j5cr-w38f in the nodemailer package for Root:npm. Multiple fixed versions available...