CVE-2023-36845

CVE-2023-36845 説明 CVE-2023-36845 は、Juniper SRX ファイアウォールおよび EX スイッチに影響を与える注目すべき PHP 環境変数操作の脆弱性です。Juniper はこの脆弱性を中程度の深刻度と分類していますが、本記事では、この単一の脆弱性をリモートから認証なしでコード実行に悪用する方法を詳しく説明します。 検索 - Shodan root@kitploit: title:"Juniper Web Device Manager" root@kitploit: title:"Juniper" http.favicon.hash:214172473...

DocsGPT - Unauthenticated Remote Code Execution

A vulnerability, that could result in Remote Code Execution RCE, has been found in DocsGPT. Due to improper parsing of JSON data using eval an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.This issue affects DocsGPT- from 0.8.1 through 0.12.0. id:...

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855は、Proxylogonとしても知られる、Exchangeにおけるサーバーサイドリクエストフォージェリ SSRF の脆弱性であり、攻撃者が任意のHTTPリクエストを送信し、Exchangeサーバーとして認証されることを可能にします。この脆弱性を発見した研究者Orange Tsaiによると、CVE-2021-26855はCVE-2021-27065と連鎖させることでコード実行を可能にします（下記参照）。悪用チェーンが成功すると、認証されていない攻撃者が「オープンな443ポートのみを介してMicrosoft Exchange...

CVE-2026-85025

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...

PT-2026-89598

🚨Critical - IBM Langflow OSS Unauth RCE via Public MCP Project Endpoints CVE-2026-85025 Langflow OSS improperly enforces public-flow restrictions on publicly shared MCP project endpoints, allowing unauthenticated access to/modify chat sessions. By abusing weak session isolation, attackers can piv...

Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

Summary WmServiceMock is bundled with IBM webMethods Integration Server. Remediation steps are provided below CVE-2026-12118 Vulnerability Details CVEID:CVE-2026-12118 DESCRIPTION: IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary...

Astra Linux – Vulnerability in libjackson-json-java

A deserialization flaw was discovered in the Jackson-Databind library, in versions prior to 2.6.7.1, 2.7.9.1, and 2.8.9. This flaw could allow an unauthenticated user to execute arbitrary code by sending maliciously crafted input to the readValue method of the ObjectMapper...

Astra Linux – Vulnerability in Jackson-Databind

A deserialization flaw was discovered in Jackson-Databind through version 2.9.10.4. This flaw could allow unauthenticated users to execute code via Ignite-JTA or Quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and...

CVE-2026-43631

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

EUVD-2026-53932

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn without any allowlist, blocklist, or...

CVE-2026-46581

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...

GHSA-XC48-889X-5QMW Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

Summary The mitigation shipped for CVE-2025-8943 blocks the -y and --yes flags on npx to stop auto-installation of arbitrary packages. That flag filter works. The environment-variable check in the same patch denies only four variable names by exact string match, and npm reads its configuration...

CVE-2026-17561 Unauthenticated RCE in Innotim Software's Logsign SIEM

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...

CVE-2026-55971

A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...

CVE-2026-43832

CVE-2026-43832 has connected details from PT-2026-66674 describing a stack-based buffer overflow in the Cookie parsing methods that could allow code execution when the SafeEnhancement feature is enabled. The exploitation is described as unauthenticated. No remediation steps or affected product ve...

CVE-2026-43832

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51240

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

CVE-2026-65880

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...