https://www.sectrend.com.cn/en/intel.html Sectrend publishes daily software supply chain security intelligence: exclusive CSSA early warnings, CVE analysis and package-poisoning alerts across the software supply chain. en https://www.sectrend.com.cn/en/intel-2026-10-08.html https://www.sectrend.com.cn/en/intel-2026-10-08.html Thu, 08 Oct 2026 01:00:00 GMT <h4>Improper input validation in Cisco License On-Prem allows remote code execution</h4><p>Before the release of a hardened version, the core module of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) contains an improper cryptographic signature verification flaw (CWE-347) caused by incorrect input validation. An attacker can exploit the vulnerability remotely over the network with low attack complexity and no user interaction. This could severely compromise system confidentiality, integrity, and availability, allowing remote code execution or complete control of the target system. All Cisco License On-Prem users who have not updated to a fixed version are affected. Because the attack is network-based and requires neither privileges nor user interaction, an attacker can easily launch it remotely.</p><p>Restrict network access to the management platform, allowing connections only from trusted IP addresses; Monitor abnormal network requests and input data, and deploy an intrusion detection system to identify potential exploitation attempts</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#cve-2026-76482">Source</a></p><h4>Code injection in the Movable Type upgrade script allows arbitrary code execution</h4><p>The Movable Type upgrade script contains a code injection flaw (CWE-94) caused by improper validation and control of input data. The vulnerability allows an unauthenticated attacker to execute arbitrary Perl scripts or SQL queries on the affected product. Movable Type fails to properly filter user-controlled input during the upgrade process, allowing malicious code to be injected. All Movable Type deployments without mitigation measures are affected. An attacker can trigger the vulnerability remotely without authentication, directly execute system commands or manipulate the database, and cause serious security damage.</p><p>Immediately restrict network access to the upgrade script, allowing access only from trusted administrator IP addresses; Configure Web application firewall (WAF) rules to block malicious code injection attempts targeting the upgrade script; Contact the vendor promptly for an official patch or upgrade to a secure version</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#cve-2026-96408">Source</a></p><h4>Payment callback parameter validation bypass in an ERP system allows authentication bypass</h4><p>An ERP system contains an insufficient data authenticity verification flaw (CWE-345) caused by improper validation of payment callback parameters and inadequate authentication controls on API endpoints. An unauthenticated remote attacker can manipulate parameters to make the application create an authenticated session for any user without valid payment verification. Successful exploitation allows the attacker to bypass authentication and gain unauthorized access to other users' accounts on the target system. All users of ERP systems where this flaw remains unfixed are affected. An attacker can launch the attack remotely without any prerequisites.</p><p>Strictly verify the origin and integrity of payment callback parameters and ensure that signature verification works correctly; Strengthen authentication controls on API endpoints and enforce strict access-control lists (ACL); Monitor abnormal session creation, especially sessions created without completing the full payment process</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#cve-2026-107102">Source</a></p><h4>kiyoramarkets@8.0.16 flagged as malicious</h4><p>The component was found to belong to a large family of malicious packages impersonating the Baileys WhatsApp library. It uses users' authenticated sessions to automatically subscribe them to attacker-controlled WhatsApp channels without their knowledge.</p><p>MD5: b1aae294b0fa058f9c78f3b9cc1c7a56</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#e1">Source</a></p><h4>internallib_v788@&gt;= 0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 77f250da5748a91aba5c934aa150c93f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#e2">Source</a></p><h4>tensorlake@&gt;= 0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 52daf62ca347b137227574b065b1c95d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#e3">Source</a></p><h4>tailwind-animatecss-uniform@2.0.7 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: af32ce729f436f12021f86bb5fd31bd2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-08.html#e4">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-10-07.html https://www.sectrend.com.cn/en/intel-2026-10-07.html Wed, 07 Oct 2026 01:00:00 GMT <h4>Missing Nacos authentication plugin silently bypasses authorization, allowing unauthorized access to sensitive APIs</h4><p>When the authentication plugin configured by nacos.core.auth.system.type is absent from the classpath, AbstractProtocolAuthService.enableAuth returns false, causing the authentication filter to silently allow requests. An attacker can directly call APIs protected by the @Secured annotation without any credentials. This flaw leaves the system without access control even though authentication appears to be enabled, exposing sensitive data and allowing unauthorized execution of business logic.</p><p>Change the code so that all requests are denied by default if the authentication plugin fails to load or is misconfigured, or validate the configuration strictly at startup and prevent the service from running. Remove the unsafe fallback that only logs a warning without blocking traffic.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e1">Source</a></p><h4>Relay workflow dispatch handles untrusted code references, compromising confidentiality and integrity</h4><p>An attacker can exploit a flaw introduced by PR #1665 to select a malicious branch reference through a `workflow_dispatch` event, replacing the default validation logic. Because the checked-out code directly contains executable scripts and the source reference is not required to be immutable, the attacker can remove the built-in identity allowlist and inject malicious workflow code. The vulnerability gives the attacker access to privileged credentials in the `snapshot-qualification` environment, exposing Daytona and cross-repository keys and severely compromising the system's confidentiality and integrity.</p><p>Strictly separate executable workflow code from candidate data sources, and load sensitive operations only from the trusted main branch. Implement validation based on artifact digests, restrict permissions associated with environment variables, and prohibit dynamic references to unverified external code paths.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e2">Source</a></p><h4>SOGo x-webobjects-remote-user identity spoofing vulnerability allows unauthorized access</h4><p>In SOGo versions before 5.8.0~ynh9, flawed authorization logic in the configuration module allows authorization bypass through a user-controlled key (CWE-639). Nginx does not strip the HTTP header &quot;x-webobjects-remote-user&quot;, and the SOGo configuration unconditionally trusts that header without verifying a password. Any client can therefore supply the header to gain access as any user, including privileged users, without providing a password. The vulnerability affects all SOGo users who have not updated to 5.8.0~ynh9, particularly deployments using YunoHost. An attacker only needs to craft a request containing the specific HTTP header to exploit the vulnerability remotely, with no user interaction.</p><p>Immediately upgrade SOGo to 5.8.0~ynh9 or later; Explicitly strip or ignore the &quot;x-webobjects-remote-user&quot; header in the Nginx configuration; Enable strict authentication and avoid relying on a single HTTP header for authorization decisions</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#cve-2026-74864">Source</a></p><h4>SiteSkite unauthenticated remote code execution vulnerability allows complete system control</h4><p>In SiteSkite 2.1.8 and earlier, the core processing module contains an unauthenticated remote code execution (RCE) flaw. Improper control of code generation (CWE-94) allows an attacker to send crafted requests over the network and directly trigger code injection without authentication. The vulnerability allows arbitrary system commands to run on the target server, resulting in data disclosure, loss of integrity, and service unavailability. All SiteSkite versions &lt;= 2.1.8 are affected, and public proof-of-concept (PoC) exploit code is already available. An attacker only needs network access to control the server remotely, with no user interaction.</p><p>Immediately upgrade SiteSkite to 2.1.9 or later to fix the vulnerability; Configure rules in the Web application firewall (WAF) to block malicious code injection requests targeting this component; Restrict network access to SiteSkite-related ports, allowing connections only from trusted IP addresses</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#cve-2026-96349">Source</a></p><h4>Zammad local privilege escalation vulnerability allows a local user to gain root privileges</h4><p>All versions of Zammad, including the latest alpha version, contain a severe security flaw that allows the local zammad user to escalate privileges to root. Missing or misconfigured privilege controls allow an attacker with zammad user privileges to bypass system restrictions and perform privileged operations. Successful exploitation gives the attacker the highest level of system control, allowing a complete server takeover. The vulnerability affects all unpatched Zammad deployments, regardless of version. Exploitation requires local zammad user privileges. However, because Zammad usually runs as a service, a compromised service or another entry point can make this vulnerability a key stepping stone for lateral movement and privilege escalation.</p><p>Immediately review and restrict the zammad user's system privileges according to the principle of least privilege; Monitor system call logs for zammad processes to detect abnormal privilege escalation; Watch for official security patches promptly or upgrade to a fixed version; if no patch is available, consider isolating the runtime environment</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#cve-2026-102490">Source</a></p><h4>kartykgithub-ph-b@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 408b640877c3e9c3f27b08e6a59403e7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e3">Source</a></p><h4>kartykgithub-ph-e@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 9aedda80527e93b7348d6abf994c1543</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e4">Source</a></p><h4>kartykgithub-ph-f@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: bdd3e8662838f423322479982ec6dcdd</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e5">Source</a></p><h4>css-interop-observer-polyfill@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 734bf6a15b4741937b0a3884965df29e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e6">Source</a></p><h4>css-relative-color-util@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 4bf16747e00dccef4dd0913ca0dbd2da</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e7">Source</a></p><h4>css-scroll-anchor-polyfill@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 6c28686c7098bd576cddabe1022400bb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e8">Source</a></p><h4>focus-visible-polyfill-lite@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: f7eb4ad055654131ebd7473019ca01d4</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e9">Source</a></p><h4>@kibt/www-nuxt-i18n@99.0.1 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: ef4c5fc05701c4b4f9ebb267e8779c10</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e10">Source</a></p><h4>tiny-focusgroup-helper@1.0.0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: e7aadb02e68161e102089d9fea652bf1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e11">Source</a></p><h4>ultimate-websocket@1.0.0 flagged as malicious</h4><p>The component was found to bypass the npm registry to download and execute attacker-controlled code directly from an insecure GitHub URL. Its postinstall script loads and runs the malicious module during installation.</p><p>MD5: 74afcc1ca8dc7ebd0af7f34adf9f32b2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e12">Source</a></p><h4>@inpeek/odata@99.99.99 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: a221a8aed09a5c960f20bae1576dc28f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e13">Source</a></p><h4>risk-detection@99.9.1 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: f729b5affa6da691571374b5d43ba912</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e14">Source</a></p><h4>serpacksven@&gt;= 0 flagged as malicious</h4><p>Any computer on which this package has been installed or run should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from another computer. Remove the package, but because full control of the computer may already have been handed to an outside entity, removing the package cannot be guaranteed to eliminate all malware introduced by its installation.</p><p>MD5: 6ed15814f63f825b33ecfc10bf40da91</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e15">Source</a></p><h4>serpacksven1@&gt;= 0 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 4a3e53d0e7e57c6fb9c61060503da116</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e16">Source</a></p><h4>serpacksven2@&gt;= 0 flagged as malicious</h4><p>The component was found to contain malicious code. Any computer on which this package has been installed or run should be considered fully compromised, and all keys and credentials stored on that computer should be rotated immediately from another computer.</p><p>MD5: b640de1f3402c60ad865e2c39625a1ac</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-10-07.html#e17">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-29.html https://www.sectrend.com.cn/en/intel-2026-09-29.html Tue, 29 Sep 2026 01:00:00 GMT <h4>Dayforce Payroll password recovery time-based blind SQL injection vulnerability leads to unauthorized data disclosure</h4><p>In Dayforce Payroll R2026.2.0, the password recovery feature contains a time-based blind SQL injection (CWE-89) security flaw due to missing input validation. An unauthenticated attacker can craft a specific GET request with a parameter containing an arbitrary SQL query. The parameter is interpreted as part of an SQL predicate, resulting in time-based blind SQL injection. Attempts to contact the vendor were unsuccessful, so the vulnerability has only been confirmed in R2026.2.0, although other versions may also be affected. An attacker can exploit it remotely without authentication and infer database contents from time delays, potentially exposing sensitive payroll data or compromising system integrity.</p><p>Deploy SQL injection detection rules in the Web application firewall (WAF), particularly for time-delay attacks; Apply strict allowlist validation to input parameters on the password recovery endpoint and use parameterized queries; Monitor abnormal server response times to identify potential blind SQL injection attacks</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#cve-2026-73640">Source</a></p><h4>WatchGuard AP internal API service OS command injection vulnerability leads to remote code execution</h4><p>The internal API service of WatchGuard AP contains an operating system command injection (CWE-78) security flaw due to missing input validation. An attacker with network access to the AP can send a crafted request to the internal API and execute arbitrary shell commands on the underlying operating system. The vulnerability allows an attacker with network access to take complete control of the affected device. It affects all unpatched WatchGuard AP devices. An attacker only needs a network connection to trigger the vulnerability, with no user interaction, and can control the device remotely.</p><p>Monitor abnormal request logs for the AP internal API service; Enable network access-control list (ACL) restrictions on the AP management interface; Block API calls from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#cve-2026-86102">Source</a></p><h4>img-to-native@&gt;= 0 flagged as malicious</h4><p>The component was found to contain malicious code that decrypts and drops an attacker-controlled Windows executable when require() is called.</p><p>MD5: 405ffe9d72bffc2bdf215eb26c371a74</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e1">Source</a></p><h4>native-runner@&gt;= 0 flagged as malicious</h4><p>The component was found to poll for and launch an external binary at a hardcoded path in a hidden, detached process when it is loaded with require.</p><p>MD5: db1f4113565b16372699c9366d26ffbd</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e2">Source</a></p><h4>nebula-sdk@&gt;= 0 flagged as malicious</h4><p>The component was found to embed and execute a decoded malicious Windows PE executable disguised as conhost.exe through the preinstall.cjs lifecycle script. This behavior is consistent with native RAT family tools, and a computer on which it has been installed should be considered fully compromised.</p><p>MD5: e50bfb3b240b272c8aeb8ef9b881bad3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e3">Source</a></p><h4>nebulajs-api@&gt;= 0 flagged as malicious</h4><p>The component was found to contain a custom PRNG-based string decoder and a ciphertext table, reconstructed into executable code through XOR at runtime. This is a typical npm install-time RCE dropper pattern, and any computer on which this package has been installed or run should be considered fully compromised.</p><p>MD5: 8862eee35c5bd066b01f32971a82f8e1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e4">Source</a></p><h4>vite-plugin-crypto@&gt;= 0 flagged as malicious</h4><p>The component was found to concatenate option fields and pass them to the SystemJS runtime module loader, enabling arbitrary JavaScript execution on the Vite build/development host. Any computer on which this package has been installed or run should be considered fully compromised.</p><p>MD5: 450eab40241f04fe4e7b421d7a884bd6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e5">Source</a></p><h4>llm-nebula@1.0.0 flagged as malicious</h4><p>The component was found to masquerade as an LLM SDK while executing an obfuscated malicious payload at installation time through a preinstall hook.</p><p>MD5: 8c98e43eb1e05225de8e7ad791d55aaf</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e6">Source</a></p><h4>hardhat-zet@2.0.1 flagged as malicious</h4><p>The component was found to have been published under a name impersonating the Hardhat Ethereum tooling ecosystem. Its README and documentation were copied from the unrelated pino logging project, and its main entry file contains a 4,498,609-byte obfuscator.io-style obfuscated bundle that executes automatically when loaded with require. It is suspected to be a supply-chain information stealer targeting Ethereum developers.</p><p>MD5: 1335aafb0c6ba8927020006b8776fcbb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e7">Source</a></p><h4>items-validator@1.0.5 flagged as malicious</h4><p>The component was found to communicate with a domain associated with malicious activity and execute one or more commands associated with malicious behavior.</p><p>MD5: 19d133ccf0c9d33e695ba89b6ab3cc83</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e8">Source</a></p><h4>aseitylab@0.1.0 flagged as malicious</h4><p>The component was found to contain malicious code that executes an arbitrary payload obfuscated with base85/zlib during installation or import, as well as an information stealer that retrieves instructions from blockchain C2.</p><p>MD5: b2b68cfb4168a9fa452abda543fafc2e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-29.html#e9">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-28.html https://www.sectrend.com.cn/en/intel-2026-09-28.html Mon, 28 Sep 2026 01:00:00 GMT <h4>Citrix NetScaler ADC/Gateway improper input validation vulnerability leading to remote command execution</h4><p>Before Citrix NetScaler ADC 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS, 13.1.37.279 FIPS, and NDcPP, and before Citrix NetScaler Gateway 14.1-73.37 and 13.1-64.23, there is an improper input validation (CWE-20) security defect. The vulnerability lets an unauthenticated attacker craft a malicious request and execute arbitrary commands on the server. Citrix NetScaler ADC and Gateway lack an effective validation mechanism when handling certain input, so an attacker can bypass security restrictions and take direct control of the underlying system. It affects every Citrix NetScaler ADC and Gateway user who has not updated to the specified fixed versions, including enterprise application delivery controller and gateway deployments. An attacker needs no authentication to trigger the vulnerability remotely and can take complete control of the system.</p><p>Restrict access to the Citrix management interface and specific ports at the firewall or WAF; Monitor abnormal process starts and command-execution logs on the server so intrusion can be found promptly</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#cve-2026-88771">Source</a></p><h4>Seetong Debug Service remote authentication bypass vulnerability leading to remote code execution</h4><p>In Seetong T8108, T8108P, T8116, and T8232 firmware 4.6.1.4-build202604241011, an unknown function in the Debug Service component has an improper authentication (CWE-287) security defect. The operation leads to improper authentication, and an attacker can attack remotely. Exploit code has been published and may already be in use. The vendor was contacted early in disclosure but made no response. The vulnerability affects every Seetong device running the affected firmware. An attacker can exploit it remotely with no user interaction, which can result in complete loss of system control.</p><p>Immediately isolate affected Seetong devices so they are not exposed on the public network; Enable a network access-control list (ACL) and restrict access to the Debug Service port</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#cve-2026-100886">Source</a></p><h4>@bb1omega23/test-paket@1.0.3 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 07100c42eab6cdbc930cccf866342413</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e1">Source</a></p><h4>@consts/links@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 252ff982315fd1f56107fc19dee944a3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e2">Source</a></p><h4>@wbnr/design-kit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1f75b7cbeeca95a7cea1775f2c006725</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e3">Source</a></p><h4>@wbnr/lottiefiles-loader@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2558d1f6b776a1b46dc2c964a4474727</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e4">Source</a></p><h4>kalasnik-npm-simple-test@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 14791321553017f361ceae134eb618f5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e5">Source</a></p><h4>kjj81@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 9b47f5cf9d32c2320c1d029cc7091190</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e6">Source</a></p><h4>riot-private@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8140c136cd355f6f1d606b8726b9a387</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e7">Source</a></p><h4>tanksync@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 37c0178e946b64a0a82c43c5ab52ecb2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e8">Source</a></p><h4>vinzzsync-wacli@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 30322c1833347a7e5378e2fa4ae8aea3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e9">Source</a></p><h4>wbnr-probe-visible-check@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bd95e46742b62a7beab639dd0b6d981c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-28.html#e10">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-23.html https://www.sectrend.com.cn/en/intel-2026-09-23.html Wed, 23 Sep 2026 01:00:00 GMT <h4>claude-code-action bypasses sanitization through HTML entity encoding to inject hidden instructions, causing malicious manipulation of large-model behavior</h4><p>An attacker can insert a malicious payload encoded as numeric HTML entities into interactive content. A logic flaw in sanitizeContent decodes entities after syntax stripping, so hidden HTML comments or attributes escape filtering and enter the LLM prompt, causing the model to execute unauthorized instructions. The vulnerability comes from incorrect input-preprocessing order and affects every data-formatting module that calls this sanitization function.</p><p>Reorder the data-sanitization pipeline so HTML entity decoding runs first, ensuring later security filters can match and strip plaintext. Add regression tests for double-encoding so similar bypasses do not recur.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e1">Source</a></p><h4>SGLang DiffusionServer unauthenticated arbitrary code execution vulnerability leading to remote code execution</h4><p>In SGLang's multimodal generation runtime, the DiffusionServer component of the disaggregated-diffusion orchestrator has a severe security defect. The component binds an unauthenticated ZeroMQ ROUTER socket to a network interface and, before any validation, passes the last frame of a received multipart message directly to pickle.loads(). This deserialization of untrusted data (CWE-502) lets an attacker craft a malicious message and execute arbitrary code on the target system. The vulnerability affects every SGLang DiffusionServer deployment that has no additional protection. An attacker needs no authentication, can trigger it remotely over the network with low complexity and no user interaction, and can take complete control of the system.</p><p>Immediately apply an access-control list (ACL) to the DiffusionServer network interface and allow only trusted IP addresses; Do not pass data from untrusted sources directly to pickle.loads(); use a safer serialization format or strict input validation; Monitor ZeroMQ sockets for anomalous traffic and deploy intrusion detection to identify malicious serialized payloads</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#cve-2026-93088">Source</a></p><h4>NVIDIA Linux infrastructure controller hardcoded-credential vulnerability leading to privilege escalation</h4><p>NVIDIA Infrastructure Controller for Linux has a security defect that uses hardcoded credentials (CWE-798). An attacker may cause the system to authenticate with those hardcoded credentials. Successful exploitation can lead to privilege escalation, data tampering, denial of service, and information disclosure. The vulnerability affects every unpatched NVIDIA Linux infrastructure controller deployment. An attacker can attack remotely over the network with no user interaction and low attack complexity, directly threatening confidentiality, integrity, and availability.</p><p>Immediately find and remove hardcoded credentials in code or configuration and switch to a secure key-management service; Monitor anomalous logins and privilege-escalation attempts; Restrict network access to NVIDIA Infrastructure Controller and apply least privilege</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#cve-2026-65113">Source</a></p><h4>kambxjowhdsgyw@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 79f19cca3fab03f775f44b951271327b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e2">Source</a></p><h4>no-fun@999.99.99 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 570796df1c46acaba8e027b01487c8f4</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e3">Source</a></p><h4>@tvg-mar/tvg-promos-atomic-ui@9.9.10 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ee21d8c6e1106e9da4e775a5951d42e2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e4">Source</a></p><h4>@wizloft/harness-authority@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4e51bef22b7e18d97a445b089ed7f826</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e5">Source</a></p><h4>@wizloft/harness-file-providers@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2e70c4260981092d97017529365985c2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e6">Source</a></p><h4>@wizloft/harness-memory@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5243fc964cbf89a0742ff006648a4e48</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e7">Source</a></p><h4>@wizloft/harness-plugin-file-events@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 32d756329c122f7ee0fbb580adb95cdc</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e8">Source</a></p><h4>kamafhbnowct@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 3ff6b7674096891dbbc41b4ae0763cbb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e9">Source</a></p><h4>z-deno-truth-bwhlsz@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 570eed60ef7866c908b659f6d7d2b642</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e10">Source</a></p><h4>z-deno-truth-ya1t4m@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e0a83fbbd2b56dc41bd07e78c22e2542</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-23.html#e11">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-21.html https://www.sectrend.com.cn/en/intel-2026-09-21.html Mon, 21 Sep 2026 01:00:00 GMT <h4>Twenty identity spoofing through forged SSO callbacks leading to complete administrator account takeover</h4><p>An attacker can exploit a logic flaw in the SSO login callback mechanism. With SECURITY permission, the attacker configures a malicious OIDC identity provider and crafts a request containing the target administrator's email. The system only verifies email ownership and does not bind an external identity identifier or the original authentication source, so it issues a legitimate token directly. This behavior bypasses the IMPERSONATE permission check, secondary verification, and audit logging, fully taking over the accounts of any workspace member, including administrators, and severely damaging system integrity and confidentiality.</p><p>Strictly bind SSO login to a pre-linked external identity identifier, forbid implicit association based only on a matching email, and ensure a complete authorization check and audit trail when switching identities.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-21.html#e1">Source</a></p><h4>OrdaSoft Joomla Gallery remote code execution vulnerability leading to full server control</h4><p>Before version 6.2.7 of the OrdaSoft Joomla Gallery extension, its updateOSGallery() function lacks an allowlist check and an is_callable() check on dynamic function calls, creating a severe code-injection (CWE-94) security defect. An attacker can craft an HTTP request containing a specific JSON body and trigger the function through task=update_osgallery, execute the value of the method field as a PHP function name, and pass the value of the package field as the argument. Because callable functions are not restricted, the attacker can directly call dangerous functions such as system, exec, shell_exec, and passthru, thereby executing arbitrary system commands on the server. The vulnerability affects all Joomla sites running an affected version of the extension. An attacker needs an authenticated privileged account to launch the attack; once exploitation succeeds, it leads to remote code execution and complete takeover of server control.</p><p></p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-21.html#cve-2026-88856">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-20.html https://www.sectrend.com.cn/en/intel-2026-09-20.html Sun, 20 Sep 2026 01:00:00 GMT <h4>DataEase SQL injection and SSRF vulnerabilities create server file-read and intranet-probing risk</h4><p>An attacker can use the /de2api/datasetData/previewSql endpoint to execute malicious Base64-encoded SQL statements, then combine the H2 engine FILE_READ function to bypass path filtering and read arbitrary local files on the server, or obtain sensitive information through insufficiently authenticated interfaces. In addition, JDBC parameters in data-source configuration lack sanitization and can lead to connection-string injection; together with remote file-loading, this forms SSRF, allowing outbound requests toward intranet services or cloud metadata interfaces and thereby leaking internal network topology and credentials.</p><p>Implement a strict SQL-statement allowlist and forbid execution of non-query dangerous functions. Validate protocols for all external URL requests and block access to private address ranges. In data-source configuration, strictly escape or filter special characters so that input data remains legitimate and safe.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-20.html#e1">Source</a></p><h4>Totolink A3002MU formWsc command injection leading to remote code execution</h4><p>In Totolink A3002MU firmware version Hh-B20211125.1046, the formWsc function in the /boafrm/formWsc file has a security defect. Improper handling of the localPin parameter leads to a command-injection (CWE-74) vulnerability. An attacker can launch the attack remotely and use this vulnerability to execute arbitrary system commands on the target device. Exploit code has been publicly disclosed and may be used in automated attacks. The vulnerability affects all Totolink A3002MU devices running the affected firmware version. An attacker needs no user interaction and can trigger the vulnerability remotely over the network, thereby fully controlling the device.</p><p>Deploy a firewall at the network boundary and restrict unauthorized access to the router management interface; Monitor network traffic and detect anomalous requests targeting the /boafrm/formWsc endpoint</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-20.html#cve-2026-93742">Source</a></p><h4>OpenPanel js-runtime sandbox-escape vulnerability leading to remote code execution</h4><p>Before OpenPanel js-runtime commit bad75bdd, its JavaScript webhook template validator failed to block constructor-chain access through computed member access, creating a sandbox-escape (CWE-94) security defect. An attacker with project write permission can use computed-property notation to reach the Function constructor and execute arbitrary code in the worker process. The vulnerability affects all OpenPanel users who have not updated to a fixed version. The attacker needs project write permission and can trigger the vulnerability by constructing a malicious webhook template, leading to remote code execution.</p><p>Strictly restrict project write permission and authorize only trusted personnel; Monitor anomalous code-execution behavior in the worker process</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-20.html#cve-2026-93985">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-19.html https://www.sectrend.com.cn/en/intel-2026-09-19.html Sat, 19 Sep 2026 01:00:00 GMT <h4>agno intelligent-agent orchestration layer lacks dynamic code-execution controls by default, allowing arbitrary code execution</h4><p>An attacker can exploit a model-output manipulation flaw to induce the agent to invoke an unprotected Python code-execution tool. Because the framework disables all confirmation mechanisms by default and has no policy gateway to intercept the call, malicious code runs directly in the host process through the exec function, severely damaging system integrity, confidentiality, and availability and achieving unauthenticated remote arbitrary code execution.</p><p>Developers should enable secondary confirmation for sensitive tools by default, implement policy-based pre-execution checks, and upgrade log warnings to blocking security checks, ensuring dynamically managed code resources run in a restricted sandbox or under strict privileges and eliminating default trust of model instructions.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-19.html#e1">Source</a></p><h4>agno AgentOS defaults to no authentication on A2A, allowing unauthorized interface calls and creating a remote-code-execution risk</h4><p>An attacker can exploit AgentOS default behavior when the A2A interface is enabled without configured credentials, accessing `/a2a/agents` endpoints over the network, enumerating registered agents without authentication, and sending malicious requests that trigger agent execution logic. If the target agent integrates a code-execution tool, this can lead directly to remote code execution; high-frequency calls can also cause denial of service, severely damaging system confidentiality, integrity, and availability.</p><p></p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-19.html#e2">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-18.html https://www.sectrend.com.cn/en/intel-2026-09-18.html Fri, 18 Sep 2026 01:00:00 GMT <h4>agno intelligent-agent orchestration layer lacks dynamic code-execution controls by default, allowing arbitrary code execution</h4><p>An attacker can exploit a model-output manipulation flaw to induce the agent to invoke an unprotected Python code-execution tool. Because the framework disables all confirmation mechanisms by default and has no policy gateway to intercept the call, malicious code runs directly in the host process through the exec function, severely damaging system integrity, confidentiality, and availability and achieving unauthenticated remote arbitrary code execution.</p><p>Developers should enable secondary confirmation for sensitive tools by default, implement policy-based pre-execution checks, and upgrade log warnings to blocking security checks, ensuring dynamically managed code resources run in a restricted sandbox or under strict privileges and eliminating default trust of model instructions.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-18.html#e1">Source</a></p><h4>agno AgentOS defaults to no authentication on A2A, allowing unauthorized interface calls and creating a remote-code-execution risk</h4><p>An attacker can exploit AgentOS default behavior when the A2A interface is enabled without configured credentials, accessing `/a2a/agents` endpoints over the network, enumerating registered agents without authentication, and sending malicious requests that trigger agent execution logic. If the target agent integrates a code-execution tool, this can lead directly to remote code execution; high-frequency calls can also cause denial of service, severely damaging system confidentiality, integrity, and availability.</p><p></p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-18.html#e2">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-17.html https://www.sectrend.com.cn/en/intel-2026-09-17.html Thu, 17 Sep 2026 01:00:00 GMT <h4>Corsair MCP component lacks code-execution sandbox isolation, allowing remote arbitrary code execution and host-environment disclosure</h4><p>An attacker can exploit a security flaw in the run_script tool of the @corsair-dev/mcp package by constructing malicious JavaScript and passing it directly into the new Function constructor. The mechanism does not introduce a VM sandbox or membrane isolation, so the execution context shares global variables with the host process. The attacker can then access process environment variables, perform dynamic file read/write operations, and bypass read-only restrictions, ultimately causing sensitive-data disclosure, integrity damage, and loss of service availability.</p><p>Move code execution to the node:vm module or reuse the workflow engine's secure context; create a prototype-less isolated environment; wrap instances with a proxy membrane to prevent prototype-chain escape; and strictly forbid dynamic imports and global-object access.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#e1">Source</a></p><h4>Floci presigned-request flaw allows authorization bypass, causing data disclosure and integrity damage</h4><p>When IAM enforcement is enabled, IamEnforcementFilter only inspects the HTTP Authorization header to evaluate permission policies. Presigned URLs and presigned POST requests carry signature material in query parameters or form fields and do not set the Authorization header, so the filter skips identity-policy checks. An attacker can exploit this logic flaw by constructing a presigned request that has a valid signature but no actual write permission, bypassing explicit deny policies or permission boundaries, and then writing arbitrary objects into an S3 bucket, damaging data integrity and creating a potential information-disclosure risk.</p><p>Extend IamEnforcementFilter at the code level so it can parse and validate authorization credentials from presigned-URL query parameters and POST form fields; ensure all authentication request types go through the unified IAM policy engine; and complete unit tests covering permission-control scenarios for each signature form.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#e2">Source</a></p><h4>Unauthenticated remote code execution in Arista EOS P4Runtime leading to full administrative control</h4><p>On affected platforms running Arista EOS with P4Runtime configured, an unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can, under certain conditions, achieve arbitrary code execution. Arista EOS disables P4Runtime by default. By constructing a malicious packet during P4Runtime session initialization, an attacker can obtain full administrative control of the compromised switch. Arista discovered this issue internally and is not aware of any malicious exploitation of this vulnerability in customer networks.</p><p>Keep P4Runtime disabled unless the business explicitly requires it (the default configuration); If P4Runtime must be enabled, strictly restrict source IPs and enforce network-layer access-control lists (ACLs); Monitor abnormal traffic and malicious-packet characteristics during P4Runtime session initialization</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#cve-2026-73453">Source</a></p><h4>Use-after-free in the Linux kernel NFSD module leading to remote code execution</h4><p>Before Linux kernel 7.2.5 and 7.3-rc1, the NFSD (NFS server daemon) module has a use-after-free (Use-After-Free, CWE-416) security flaw caused by a concurrency-handling defect. During export-state revocation, `nfsd4_revoke_export_states()` releases `nn-&gt;client_lock` without pinning the client reference, so under a race the client may already have been freed when `revoke_one_stid()` dereferences it. An attacker can construct a specific NFS export-removal operation (such as `exportfs -u`) racing with client expiration, trigger memory corruption, and threaten system stability and security. The vulnerability affects all Linux kernel users who have not updated to a fixed version, including servers and embedded deployments. An attacker needs only network access to trigger it, with no user interaction, and can operate remotely.</p><p>Immediately upgrade the Linux kernel to 7.2.5 or 7.3-rc1 or later; Monitor NFS service logs for abnormal export-revocation or client-expiration race behavior; Restrict the network-access scope of the NFS service and allow only trusted clients</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#cve-2026-90038">Source</a></p><h4>kartyk-github-single-ver-pkg@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1b23219be8e89b1a4395ca0dd5e56947</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#e3">Source</a></p><h4>kartyk-github-token-pkg@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2674a5e3dd89e04878d924ab51fcee71</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#e4">Source</a></p><h4>pkg-rollback-dreed-viced-sonic-ponds@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 24da0b9b6170d81f48aa593ed63e4e84</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-17.html#e5">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-16.html https://www.sectrend.com.cn/en/intel-2026-09-16.html Wed, 16 Sep 2026 01:00:00 GMT <h4>happy component uses a hard-coded key leading to remote identity forgery and account takeover</h4><p>An attacker uses the fixed development key published in the repository to derive valid authentication-signing material and construct a valid token that contains an arbitrary user ID. Because the server validates the token without querying session records and directly trusts the identity information inside the token, the attacker can impersonate an account, access sensitive data or decrypt stored third-party service credentials, compromising system confidentiality and integrity.</p><p>Remove the hard-coded key; generate a unique high-entropy random key for each deployment; inject configuration through a protected key-management system; bind authentication tokens to server-side state so they can be revoked, and manage key lifecycle and purpose isolation.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#e1">Source</a></p><h4>PraisonAI AgentApproval instruction injection bypasses safety approval and damages system integrity</h4><p>AgentApproval does not isolate tool arguments and embeds malicious instructions in the parameters awaiting approval. The approval prompt concatenates the raw input directly, without delimiting untrusted data or stripping comments, so the review model is interfered with by internal instructions and incorrectly approves a malicious tool call, which may cause data tampering or service interruption.</p><p>Wrap untrusted data with explicit delimiters and instruct the system prompt to ignore embedded instructions; implement comment filtering; and introduce a ternary judgment that escalates to human review, defaulting to reject or safely escalate potential injection requests.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#e2">Source</a></p><h4>MySQL MCP Server unauthorized SQL injection leading to remote code execution</h4><p>Before MySQL MCP Server 0.4.2, the SSE transport was not configured with security settings or DNS-rebinding protection; `/`, `/sse` and `/messages/` lacked authentication and bound to `0.0.0.0` by default. An attacker can call `execute_sql` without authorization, reach `cursor.execute(query)` through DNS rebinding, and read or modify the database. If the MySQL account has the FILE privilege, the attacker can also read and write server files and may achieve code execution. The default stdio transport is unaffected; 0.4.2 has the fix.</p><p>Upgrade to 0.4.2 or later; Avoid using MCP_TRANSPORT=sse in production, or correctly enable security settings and DNS-rebinding protection; Restrict the bind address, avoid 0.0.0.0, and enforce network access control</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#cve-2026-59971">Source</a></p><h4>Unauthorized OS command injection in the ping.php endpoint leading to remote code execution</h4><p>Applications that include a ping.php endpoint do not strictly filter and neutralize input. A remote unauthenticated attacker can craft a malicious request to execute arbitrary operating-system commands, achieve RCE and fully control the server.</p><p>Disable or remove unnecessary ping.php; Strictly validate allowlisted parameters and forbid special characters such as ; | &amp; $; Use a safe API instead of direct system-command invocation, or enable sandbox isolation</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#cve-2026-89308">Source</a></p><h4>chai-as-crack@7.0.5 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 470721bc789bc76e1a57a9347e82b218</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#e3">Source</a></p><h4>kartykp-prod-oidc-test-pkg@1.0.4 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ebc1e217592b58dd6acaff4f692c4cad</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#e4">Source</a></p><h4>kartykp-token-pkg@1.0.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1a067f6dc811791ca91eebc063515888</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-16.html#e5">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-15.html https://www.sectrend.com.cn/en/intel-2026-09-15.html Tue, 15 Sep 2026 01:00:00 GMT <h4>Aim tracking server permanently deletes experiment data at arbitrary paths due to missing authorization checks</h4><p>An attacker exploits the lack of allowlist validation on remote method calls by sending a crafted HTTP request over the network to the default open port, directly triggering server-side getattr to dynamically execute an arbitrary function, then invoking the Repo.rm method to run shutil.rmtree. The behavior is not confined to the mounted directory and requires no authentication, forcing recursive deletion of .Aim metadata directories under any writable path on the server and destroying experiment-data integrity and service availability.</p><p>Fix the code logic so that method_name is strictly allowlist-filtered at the dispatch layer, forbid dangerous operations such as rm, enable strong authentication on all API endpoints, and confine file operations to a predefined sandbox or mounted directory so that resource access follows the principle of least privilege.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e1">Source</a></p><h4>AiToEarn component uses hard-coded credentials leading to authentication bypass and administrator privilege escalation</h4><p>An attacker exploits static default AUTH_SECRET and internalToken values in the code and, with no preconditions, can craft a forged JWT token or send the known internal token as a Bearer header. Because the system does not invalidate default configuration and directly trusts the isManager claim in the token or the static token value, the attacker can bypass the normal authentication flow, illegally obtain administrator privileges or access protected internal-service endpoints.</p><p>Remove all hard-coded credentials from source code, require dynamically generated strong random keys at deployment time, implement a fail-safe policy that refuses to start instances using default values, and introduce an independent internal-service authentication mechanism to replace static token checks.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e2">Source</a></p><h4>Apache Syncope SQL injection vulnerability leading to arbitrary SQL execution</h4><p>In Apache Syncope versions before 3.0.16, 4.0.7 and 4.1.2, the Task search feature does not correctly sanitize sort clauses, resulting in an SQL injection (CWE-89) security defect. An administrator with appropriate privileges can craft a malicious sort parameter containing stacked queries and execute arbitrary SQL statements, threatening database integrity and system security. Apache Syncope has a logic defect when handling Task search requests; an attacker can trigger it with a crafted API request, leading to complete database control or sensitive-data disclosure. The vulnerability affects all Apache Syncope users who have not updated to 4.0.8 or 4.1.3, including enterprise identity-management deployments. The attacker must have administrator privileges, but successful exploitation can completely take over the backend database.</p><p>Immediately upgrade Apache Syncope to 4.0.8 or 4.1.3 or later; Restrict access to the Task search API and enforce strict network isolation; Monitor database logs for anomalous stacked queries or high-frequency SQL execution</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#cve-2026-82232">Source</a></p><h4>Apache Syncope Cypher injection vulnerability leading to remote code execution</h4><p>In Apache Syncope versions before 3.0.16, 4.0.7 and 4.1.2, the Neo4j persistence layer does not sufficiently escape input when handling certain FIQL search conditions, resulting in a Cypher injection vulnerability (CWE-89). An attacker can craft a malicious FIQL search parameter and inject arbitrary Cypher queries, thereby bypassing authentication, stealing sensitive data or modifying database contents. The vulnerability affects Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7 and 4.1.0-M0 through 4.1.2. An attacker needs no complex preconditions and can trigger it by sending a crafted request to a vulnerable endpoint, which may lead to data disclosure, integrity compromise or even remote code execution.</p><p>Immediately upgrade Apache Syncope to 4.0.8 or 4.1.3 or later; Enforce strict input validation and filtering on the FIQL search endpoint; Restrict Neo4j database access so that only the application server connects with least privilege; Deploy a web application firewall (WAF) to intercept anomalous Cypher-injection signatures</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#cve-2026-86460">Source</a></p><h4>ultra-ws@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 032019b47e16291e2cc0c273f81c444d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e3">Source</a></p><h4>get-power@1.0.3 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bbe773232bc99dd1085bc38910215e22</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e4">Source</a></p><h4>n8n-nodes-sysdiag2@2.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: b8c56576d69cd002a7198b0545ea447c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e5">Source</a></p><h4>@yggbrasil/api@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 619a66eff2b9a267c8c1f1c7030656a6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-15.html#e6">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-14.html https://www.sectrend.com.cn/en/intel-2026-09-14.html Mon, 14 Sep 2026 01:00:00 GMT <h4>kohya_ss Kontext manual annotation module allows arbitrary file deletion via path traversal</h4><p>An attacker can exploit the Kontext module's delete callback lacking server-side validation of hidden Gradio input controls by crafting a malicious HTTP request that includes path-traversal sequences or absolute-path parameters, thereby directly manipulating the `os.remove` system call. Because the file path is not verified to lie within the intended directory and there is no authentication mechanism by default, a remote unauthenticated attacker can bypass access control and delete any file the process has read/write permission for, destroying system data integrity and service availability.</p><p>Developers should implement strict server-side input validation, reject parameters containing path-traversal characters, confine file operations to a designated safe directory, and introduce an authentication mechanism so that only authorized users can perform sensitive filesystem operations.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-14.html#e1">Source</a></p><h4>Aim machine-learning experiment tracking component missing authorization checks allows remote deletion of heartbeat files, compromising integrity and availability</h4><p>An unauthenticated attacker can send a crafted malicious HTTP request to the default port, invoke the touch method and specify a wildcard cleanup mode, exploiting LocalFileManager._cleanup's lack of ownership filtering to batch-delete other users' heartbeat checkpoint files in the shared directory. The monitoring system then misjudges the run as stalled and forcibly terminates the process, causing data-integrity damage and a risk of service interruption.</p><p>Developers should introduce strict authentication and resource-ownership checks in file-operation logic, ensuring only authorized users can issue delete commands against specific session files, and restrict the server API's access to global path-traversal operations.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-14.html#e2">Source</a></p><h4>Totolink A3002MU boa component formFilter function remote buffer overflow leading to remote code execution</h4><p>In Totolink A3002MU firmware version Hh-B20211125.1046, the formFilter function in the /boafrm/formFilter file of the boa component has a security defect. The vulnerability stems from a lack of effective bounds checking when handling the ip6addr parameter; an attacker can manipulate that parameter to trigger a buffer overflow (CWE-119). Because the attack vector is network-based and complexity is low, an attacker can remotely exploit this vulnerability to execute arbitrary code. Exploit code is already public, and the vulnerability may be used in automated attacks against affected devices, severely threatening confidentiality, integrity and availability. The vulnerability affects all Totolink A3002MU devices running Hh-B20211125.1046 firmware. An attacker can launch the attack remotely without user interaction; successful exploitation may result in complete device control.</p><p>If an immediate upgrade is not possible, deploy an intrusion-detection system (IDS) at the network boundary to monitor anomalous traffic targeting the /boafrm/formFilter interface, especially requests containing malformed ip6addr parameters.; Restrict access to the router management interface, allowing only trusted IP addresses, to reduce the remote attack surface.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-14.html#cve-2026-90605">Source</a></p><h4>D-Link DIR-823G HNAP1 strcpy stack overflow leading to remote code execution</h4><p>In D-Link DIR-823G version 1.0.2B05_20181207, the /HNAP1/SetStaticRouteSettings interface of the HNAP1 component lacks bounds checking in the strcpy function, resulting in a stack buffer overflow (CWE-119) security defect. By manipulating the PAddress, SubnetMask or Gateway parameters, an attacker can trigger stack-memory overwrite, threatening device stability and security. The router has a memory-corruption vulnerability in certain network-configuration scenarios; an attacker can trigger it by crafting a malicious network request, leading to remote code execution or service interruption. The vulnerability affects all D-Link DIR-823G users running 1.0.2B05_20181207 firmware. An attacker only needs to send a remote request to complete exploitation, with no user interaction required, and can remotely control the device.</p><p>Monitor anomalous request logs for the HNAP1 interface; Enable access-control list (ACL) restrictions on the router management interface; Block SetStaticRouteSettings calls from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-14.html#cve-2026-90680">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-13.html https://www.sectrend.com.cn/en/intel-2026-09-13.html Sun, 13 Sep 2026 01:00:00 GMT <h4>convex-backend crafted deployment selector bypasses production authorization leading to remote privileged execution</h4><p>An attacker exploits a defect in the MCP server's validation logic for the deployment selector `kind` field by constructing a non-standard production-environment selector via name or reference, thereby bypassing the security guard that applies only to `kind: &quot;prod&quot;`. The vulnerability allows high-risk mutation tools such as `run` and `envSet` to be invoked directly without the dangerous production-deployment flag enabled, exposing the production environment to unauthorized code execution, leakage of sensitive environment information and service-integrity compromise.</p><p>Developers should refactor deployment-selector parsing so that all selector forms are normalized to the actual deployment type before the security-guard check, ensuring every request that targets production undergoes strict authorization and an explicit confirmation mechanism, eliminating authorization bypass caused by format differences.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#e1">Source</a></p><h4>LiteLLM case-insensitive email fallback overwrites SSO/JWT subject and steals proxy administrator privileges</h4><p>When the subject identifier in SSO or JWT authentication does not match the database record, the system incorrectly enables a non-strict email fuzzy-matching fallback. An attacker can exploit this defect by presenting an unverified email claim identical to an existing high-privilege account, inducing the system to bind the new malicious subject to the victim's database row and overwrite the original SSO subject identifier. Because the system lacks a second check on subject changes during role inheritance, the attacker can take over the target account's PROXY_ADMIN privileges and illicitly call sensitive management interfaces such as key generation, causing unauthorized access and potential service disruption.</p><p>Remove the automated email fuzzy-matching fallback at the code level and enforce strict subject-consistency checks, allowing linking only when the email has been verified and is currently unbound. Also add role-protection for already-bound accounts, forbidding direct inheritance of high-risk administrative privileges stored in the database merely because identity-provider information is missing, thereby blocking privilege-escalation rebinding at the source.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#e2">Source</a></p><h4>Gemini CLI .env overwrite of GEMINI_CLI_HOME leading to arbitrary code execution</h4><p>In Gemini CLI and its associated GitHub Action, improper input validation (CWE-20) creates a critical security defect. An unauthorized attacker can overwrite the environment variable GEMINI_CLI_HOME via an untrusted local .env file, achieving arbitrary code execution in Gemini CLI. The vulnerability allows an attacker to hijack the execution flow by manipulating environment configuration without obtaining privileges. It affects all users of defective versions of Gemini CLI and the GitHub Action, especially in CI/CD pipelines or local development environments. An attacker only needs to inject a malicious .env file into the target environment to trigger the vulnerability, which may lead to complete server control or sensitive data disclosure.</p><p>Strictly review and restrict the origin of .env files, loading only trusted environment configuration; Enforce least privilege in CI/CD environments and limit the Action's execution-permission scope</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#cve-2026-13745">Source</a></p><h4>Mistral Vibe parser bypasses permission checks for arbitrary code execution leading to remote code execution</h4><p>In Mistral Vibe, the command-parsing module cannot correctly interpret certain shell constructs and has an improper handling of syntactically invalid structure (CWE-228) security defect. An attacker uses shell constructs the parser does not recognize to bypass command-permission checks; the unparsed portion is excluded from security checks, allowing embedded commands to execute on the user system without approval. Mistral Vibe has a logic defect when handling specific shell constructs; an attacker can trigger it by crafting malicious input, leading to arbitrary code execution. The vulnerability affects all unpatched Mistral Vibe users. An attacker can complete exploitation by sending crafted requests or inducing the user to perform specific operations, thereby executing arbitrary instructions on the target system.</p><p>Monitor anomalous command-execution behavior logs; Enforce strict allowlist validation and sanitization of input data; Restrict use of shell constructs and avoid directly executing unparsed complex commands</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#cve-2026-87986">Source</a></p><h4>pinochiomathm@2.3.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f3b77b0f2294710bbee5d7ca07d80a15</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#e3">Source</a></p><h4>lucy-python-script-2030@0.1.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2649b87ce315abc41e643b5f9520eebf</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-13.html#e4">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-10.html https://www.sectrend.com.cn/en/intel-2026-09-10.html Thu, 10 Sep 2026 01:00:00 GMT <h4>9router Search Proxy SSRF Protection Bypass Leading to Internal Network Probing and Authentication Failure</h4><p>An attacker can pass a malicious provider_options.baseUrl parameter through the /v1/search endpoint and exploit multiple bypass techniques in the SSRF guard—including lack of DNS-resolution validation, defective IPv6-mapped address regex matching, ignoring trailing dots on hostnames, and failure to re-validate redirect targets—causing the server to issue requests to internal private networks or cloud metadata endpoints. Because requests toward loopback addresses are incorrectly marked by middleware as trusted local sources, an attacker can obtain keyless access to local /v1/* interfaces, steal upstream search provider API keys, and perform deep reconnaissance of internal services with sensitive data exfiltration.</p><p>It is recommended to enforce a strict allowlist of IP addresses after DNS resolution of domain names, disable automatic redirects or recursively security-check redirect targets, fix the regex defect in IPv6 address normalization logic, and remove blacklist restrictions that rely only on string matching. In addition, never treat requests whose source IP is a loopback address as authenticated by default; enforce an independent authentication flow for local interface access to block privilege-escalation risks.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e1">Source</a></p><h4>cPanel EmailTrack SQL Injection Leading to Remote Code Execution</h4><p>In cPanel, the EmailTrack component improperly escapes special elements in SQL commands (CWE-89), resulting in a SQL injection security flaw. Accounts with mail features enabled can craft malicious SQL queries to achieve remote code execution with root privileges. The vulnerability allows an attacker to bypass ordinary privilege restrictions through the mail feature entry point and directly obtain the highest control over the server. It affects all unpatched cPanel deployments, especially servers with mail tracking enabled. An attacker only needs existing mail account credentials to launch the attack and can achieve remote code execution without additional user interaction.</p><p>Monitor anomalous memory access behavior logs; Enable sandbox isolation mechanisms in the runtime environment; Block Canvas script loading from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#cve-2026-67401">Source</a></p><h4>MantisBT SOAP API Authentication Bypass Vulnerability Leading to Administrator Privilege Escalation</h4><p>In MantisBT 2.28.3 and earlier, the SOAP API mci_check_login() function has a critical authentication bypass flaw (CWE-287). Any user who knows any valid cookie_string can, when the target username (including administrators) is known, authenticate as that user without knowing the target password. Because default MantisBT installations enable self-registration ($g_allow_signup = ON), the vulnerability can be exploited with zero prior access. A self-registered user can use their own cookie_string (readable after login from the browser's MANTIS_STRING_COOKIE) to impersonate an administrator via the SOAP API. The REST API and Web UI are unaffected because they derive the username server-side or validate the session cookie to prevent forgery. Version 2.28.4 contains the fix. There are currently no known mitigations.</p><p>Immediately upgrade MantisBT to 2.28.4 or later to apply the official fix; If an immediate upgrade is not possible, disable self-registration (set $g_allow_signup = OFF); Monitor anomalous SOAP API login requests and authentication logs, and block suspicious IP addresses</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#cve-2026-47156">Source</a></p><h4>gmgn-trading-kit@1.7.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: df6c48588df0cd242c948d90afe28e29</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e2">Source</a></p><h4>discord-mfa-solver@1.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c368628df7ec616acab74b7f3dcf0935</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e3">Source</a></p><h4>@neroxkira/vangal-baileys@1.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1b0c437872f593b5d14d5171cbc9c18c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e4">Source</a></p><h4>@sahril2nd/baileys@1.0.21 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 28492d6b542fe88bfab589879ae420a5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e5">Source</a></p><h4>@auction-fe/reporting-system@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: fd3a41d9d258c12fa6885f19db501ff8</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e6">Source</a></p><h4>@auction-fe/ui-kit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ca28cb21d73e23792e12f564e7d14e5f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e7">Source</a></p><h4>@convertics/script@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: eb1da3ae41f1641b1c38fcae0da75e48</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-10.html#e8">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-09.html https://www.sectrend.com.cn/en/intel-2026-09-09.html Wed, 09 Sep 2026 01:00:00 GMT <h4>R2R Retrieval Service SQL Injection via Search Endpoint Leading to Unauthorized Data Disclosure</h4><p>An attacker can send crafted malicious requests to the POST /v3/retrieval/search interface, exploiting the fact that filter key values are concatenated directly into SQL strings rather than using parameterized binding, thereby injecting arbitrary SQL predicates into the WHERE clause. Because the default configuration allows anonymous access mapped to a high-privilege account, an attacker can perform time-based or boolean blind injection without authentication and steal sensitive information from the database, posing severe risks to data confidentiality and integrity.</p><p>Fixes should forbid concatenating user input directly into SQL statements, switch to parameterized queries or strict allowlist validation of filter key names, ensure all database operations use prepared statements, and change the system default configuration to require authentication so unauthorized high-privilege database access is prevented.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e1">Source</a></p><h4>PraisonAI Memory Module Authorization Bypass Leading to Cross-Tenant Data Leakage and Resource Exhaustion</h4><p>An attacker exploits a filtering failure of the user_id parameter when reading from default memory adapters such as Chroma and SQLite to perform unauthorized access and obtain other tenants' sensitive memory data; simultaneously exploits missing token metering logic on streaming response paths that causes inaccurate cost monitoring, and leverages a defect in hierarchical workflow modes that ignores maximum iteration limits by constructing permanently failing tasks to trigger infinite loops, thereby causing sustained compute resource consumption and denial of service.</p><p>It is recommended to enforce user-identity-based metadata filtering in the memory search mixer and push that isolation policy down to each adapter's query stage; fix streaming processing code to fully capture final usage data chunks; introduce a global iteration ceiling and per-task failure retry count limits in hierarchical scheduling logic to prevent runaway processes.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e2">Source</a></p><h4>Ivanti Neurons for ITSM Missing Authorization Vulnerability Leading to Remote Code Execution</h4><p>In Ivanti Neurons for ITSM prior to version 2026.2, the core service has a missing authorization (CWE-862) security flaw. Due to the lack of proper access control mechanisms, a remotely authenticated attacker can use this vulnerability to execute arbitrary code on the server. The vulnerability allows an attacker with a low-privilege account to escalate privileges and fully control the server over the network without user interaction. It affects all Ivanti Neurons for ITSM users who have not updated to 2026.2, including enterprise IT service management deployments. An attacker only needs authenticated credentials to trigger the vulnerability, severely threatening system integrity, confidentiality, and availability.</p><p>Immediately upgrade Ivanti Neurons for ITSM to 2026.2 or later to fix the vulnerability; Apply least privilege, strictly limiting the access scope and privilege level of remotely authenticated accounts; Monitor anomalous process starts and code execution on the server, and deploy an intrusion detection system (IDS) to identify suspicious activity</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#cve-2026-12646">Source</a></p><h4>hawtio-operator Arbitrary Certificate Issuance Vulnerability Leading to In-Cluster Service Identity Impersonation</h4><p>A critical flaw exists in hawtio-operator. The Operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses that key to issue client certificates whose Subject Common Name (CN) is supplied by the author of a namespaced Hawtio Custom Resource. Because the Operator ships a ClusterRole that aggregates Hawtio CR permissions into the edit and admin roles, any user with edit permission in any namespace can obtain a Service-CA-issued certificate with an arbitrary subject. That certificate can be used to impersonate any in-cluster service identity toward peer services that trust Service CA for client authentication, including Jolokia agents and other components that trust Service CA.</p><p>Immediately review and restrict hawtio-operator ClusterRole permissions, removing unnecessary aggregation into edit and admin roles; Monitor anomalous key-access behavior in the openshift-service-ca namespace; Apply additional authentication or authorization checks for services that rely on Service CA for client authentication</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#cve-2026-78234">Source</a></p><h4>open-item-validator@1.0.5 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0ee57b2782650f15ccdc32f614723055</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e3">Source</a></p><h4>file-type-detector@1.1.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 050e17389b65e4f93930cf0cf885aa01</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e4">Source</a></p><h4>gloggo@1.1.3 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 763c7b3f2ba2c0638263920e8d5a358d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e5">Source</a></p><h4>toru-ultimate@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 84bb36054832b37eadb9e48fcc41fcf9</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e6">Source</a></p><h4>@yongot/canary-mcp-isolation@1.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bcd7b518be449df015a52d074be322fa</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e7">Source</a></p><h4>@yongot/canary-mcp-test@2.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2015c4633ae3a9b269b93bcb60e53e7e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e8">Source</a></p><h4>bx-ui-view@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 44332c4415dd5dbb30ce3d6d8d664aa3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e9">Source</a></p><h4>reactlogo-load@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c186dfc5649d86b16c950d498f0177cb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e10">Source</a></p><h4>cat-sis2go-utils@99.1.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f3e390496e7cff043e196a4330f526ce</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-09.html#e11">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-08.html https://www.sectrend.com.cn/en/intel-2026-09-08.html Tue, 08 Sep 2026 01:00:00 GMT <h4>hermes-agent Approval Mechanism Failure Allows Path Rewrite Bypass of Denylist to Obtain Root Privileges</h4><p>This vulnerability stems from a logic defect in approvals.deny whitelist matching. An attacker exploits the limitation that fnmatch only performs whole-string text matching by specifying absolute paths such as /usr/bin/sudo or invoking the env wrapper to execute sudo, successfully bypassing interception rules targeting &quot;sudo *&quot;. Because the matching mechanism does not normalize the first command token or resolve the executable identity, semantically equivalent privilege-escalation commands can execute. In cloud environments configured for passwordless privilege escalation, a remote attacker can thereby break through the security fence and obtain host Root privileges.</p><p>It is recommended to add a first-token normalization step before command execution, extract the executable filename for independent matching validation, or upgrade the approval mechanism to support identity recognition based on binary file identity rather than pure text fuzzy matching, and correct documentation to accurately reflect the actual boundaries of current protections so users do not form incorrect expectations of unbypassable defenses.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e1">Source</a></p><h4>bisheng Hard-coded HMAC Key Enables Forged SSO Requests Leading to Unauthorized Remote Code Execution</h4><p>By exploiting a hard-coded HMAC key in the default deployment configuration and a broken environment-variable override mechanism, an attacker can bypass signature verification and send malicious requests to the /api/v1/internal/sso/login-sync endpoint, generating valid JWT session tokens for arbitrarily specified users. This vulnerability not only allows takeover of existing accounts with known external IDs or self-granting of department administrator privileges, but can also be combined with known code-execution flaws to execute arbitrary system commands with root privileges in the server background without any authentication, comprehensively compromising data confidentiality, integrity, and availability.</p><p>It is recommended to remove hard-coded sensitive credentials from configuration files, replace them with strong random strings injected via encrypted channels as environment variables, fix configuration loading logic to support dynamic environment-variable overrides, and add replay-attack protection plus strict input validation at the API layer.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e2">Source</a></p><h4>Extended Passport Protocol Processing Library Malformed EPP Header Memory Safety Vulnerability Leading to Remote Code Execution</h4><p>In the Extended Passport Protocol (EPP) processing library, a buffer copy without input size checking (CWE-120) results in a memory safety vulnerability. Under specific conditions, an unauthenticated attacker can attack by sending carefully crafted network requests containing malformed EPP headers, potentially causing undefined behavior and abnormal program termination. Successful exploitation may severely impact application confidentiality, integrity, and availability, and may even lead to remote code execution. The vulnerability affects all systems using the affected EPP processing library; an attacker requires no authentication to launch the attack remotely over the network, and exploitation complexity is low.</p><p>Monitor anomalous network request and memory access behavior logs; Enable strict input validation and boundary checking mechanisms for EPP services; Block EPP header requests from unknown sources or with abnormal formats</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#cve-2026-44756">Source</a></p><h4>Adobe Commerce Template Engine Improper Neutralization of Special Elements Leading to Arbitrary Code Execution</h4><p>In Adobe Commerce, the template engine improperly neutralizes special elements (CWE-1336), resulting in an arbitrary code execution security flaw. An attacker can use this vulnerability to execute arbitrary code in the context of the current user. The vulnerability can be exploited without user interaction, and the scope is changed. Adobe Commerce has a logic defect when handling template rendering; an attacker can trigger it by crafting malicious requests, leading to remote code execution. The vulnerability affects all unpatched Adobe Commerce versions. An attacker only needs to launch an attack over the network to complete exploitation, with no user interaction and remote control possible.</p><p>Monitor anomalous code execution behavior logs; Enable strict input validation mechanisms in the runtime environment; Block template rendering requests from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#cve-2026-75650">Source</a></p><h4>@aircanada/components@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: eaafa008b716bd8f0c8abfef2e3d8880</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e3">Source</a></p><h4>@aircanada/core@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ed28fe6b177d56fa5a38def13cd64e34</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e4">Source</a></p><h4>@aircanada/navigation-handler@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5c889706b5a9e938cc465a17fa888816</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e5">Source</a></p><h4>@idkruan-10/dpd-depconf-probe@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f9a02e3de43dd3befafd5eb0254a741e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e6">Source</a></p><h4>op-ts-server-core@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: fd29c33c687677a272ad231b4b09f11b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e7">Source</a></p><h4>service-home@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d5a4216333ac6e16d1ea99b0058890a0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e8">Source</a></p><h4>krdpass-auth-react-native@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4435d8d6e1969bfc093976a856c7b5b0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e9">Source</a></p><h4>@web2apk/baileys@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 9805d9e9ddd26da5be63739ec721af0c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-08.html#e10">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-07.html https://www.sectrend.com.cn/en/intel-2026-09-07.html Mon, 07 Sep 2026 01:00:00 GMT <h4>KiroCrew incorrect authorization allowing attackers to achieve remote code execution via forged titles</h4><p>The vulnerability stems from the auto_approve_subagent_spawn predicate deciding whether to auto-approve permission events solely based on a model-generated title field, without verifying the actual event type or source identity. An attacker can craft a malicious Shell command and forge its title as a legitimate spawn_runMCP tool identifier, bypassing the hook gateway's command checks and name-grant validation. Because this logic exists in multiple transport-layer handlers and can be triggered over the network without user interaction, successful exploitation leads to unauthorized arbitrary code execution that severely damages system confidentiality, integrity and availability.</p><p>Developers should refactor the auto-approval logic and abandon fragile checks that rely only on the title field. Introduce strict verification of canonical event identity such as tool name or non-model-generated metadata, and grant approval only when the call is confirmed as a legitimate MCP tool invocation. Also update callback contracts globally to pass complete event objects or explicit security flags to strengthen boundary protection.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e1">Source</a></p><h4>Keycloak LDAP mapper DN parsing defect allowing unauthorized role acquisition and privilege escalation</h4><p>An attacker exploits a defect in the Group-Role-LDAP-Mapper &quot;Get Roles From User MemberOf Attribute&quot; strategy: the system incorrectly truncates the full distinguished name (DN) in the user memberOf attribute to the first relative distinguished name (RDN) and matches by name in the global group subtree rather than validating the path. Same-named groups under different hierarchy levels are wrongly associated, allowing unauthorized users to inherit high-privilege roles and causing cross-branch lateral privilege escalation and sensitive data disclosure risk.</p><p>Fixing this vulnerability requires correcting DN handling at the code level so that LDAP queries use the full distinguished name for exact matching or post-validate that returned entries' DNs are in the user's group membership list, avoiding fuzzy name-only retrieval to ensure accurate privilege mapping.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e2">Source</a></p><h4>Advantech WISE-6610 Node-RED Library command injection leading to remote code execution</h4><p>In Advantech WISE-6610 series devices (including WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA) version 1.2.1_20251110, the nodered_lib_apply function in the Node-RED Library component has a security defect. Improper handling of the act parameter leads to command injection (CWE-74). An attacker can launch a remote attack and execute arbitrary system commands by manipulating that parameter. Exploit code is publicly available and may be used. Upgrading to version 1.2.4_20260821 resolves the issue. Upgrading the affected component is recommended. The vendor was notified early, responded professionally, and promptly released fixed versions for the affected products.</p><p>Immediately upgrade Advantech WISE-6610 series device firmware to 1.2.4_20260821 or later; Restrict access to the Node-RED management interface at the network layer, allowing only trusted IP addresses; Monitor device logs for anomalous system command execution behavior</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#cve-2026-79698">Source</a></p><h4>Advantech WISE-6610 Basic Station Certificate-Deletion Handler command injection leading to remote code execution</h4><p>In Advantech WISE-6610 series devices (including NB, EB, TB, JB, CB, EL series and P-series DEA/DNA/DTA models) version 1.2.1_20251110, the basicstation_apply function in the Basic Station Certificate-Deletion Handler component has a security defect. Improper handling of the act parameter leads to command injection (CWE-74). An attacker can launch a remote attack and execute arbitrary system commands by manipulating that parameter. The exploitation method has been publicly disclosed and there is a risk of use. Upgrading to version 1.2.4_20260821 mitigates the issue. The vendor was notified early, responded professionally, and promptly released fixed versions for the affected products.</p><p>Immediately upgrade Advantech WISE-6610 series device firmware to 1.2.4_20260821 or later; Deploy firewall rules at the network boundary to restrict unauthorized access to device management interfaces; Monitor device logs for anomalous request behavior targeting the basicstation_apply function</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#cve-2026-79697">Source</a></p><h4>JooDatabase Lite unauthenticated SQL injection leading to database compromise</h4><p>In JooDatabase Lite before version 5.1.0, this Joomla extension lacks effective validation of the cid parameter and contains an unauthenticated SQL injection (CWE-89) security defect. An attacker can craft malicious requests to directly manipulate database queries, leading to sensitive data disclosure, data tampering or remote code execution. The vulnerability affects all JooDatabase Lite users who have not updated to 5.1.0, including various Joomla-based site deployment scenarios. An attacker can trigger it remotely without any authentication; the barrier is extremely low and the impact is severe.</p><p>Enforce strict input validation and filtering on critical parameters such as cid; Deploy a web application firewall (WAF) to intercept common SQL injection attack patterns</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#cve-2026-78080">Source</a></p><h4>Eclipse Arrowhead MQTT certificate authentication bypass leading to remote code execution</h4><p>In Eclipse Arrowhead versions 5.0.0 through 5.2.1, when the MQTT API with a certificate authentication policy is enabled, CertificateMqttFilter has an authentication bypass by spoofing (CWE-290) security defect. The filter parses the X.509 certificate the client sends in the MQTT message payload but does not verify its signature or issuer chain, authorizing only via simple string comparison (DN-qualifier and cloud-name in the CN). An attacker can generate a self-signed certificate with crafted CN and dnQualifier values to be authenticated as the cloud system operator (isSysOp == true), bypass the downstream ManagementServiceMqttFilter and obtain full management privileges over MQTT. The vulnerability affects all unpatched Eclipse Arrowhead 5.0.0 through 5.2.1 users. An attacker only needs to publish crafted messages to the MQTT broker to complete exploitation and obtain the highest privileges without complex interaction.</p><p>Enforce strict access control lists (ACL) at the MQTT broker layer to limit publish permissions; Monitor anomalous certificate authentication requests in MQTT messages, especially traffic containing self-signed certificates or specific DN patterns</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#cve-2026-82180">Source</a></p><h4>RouterOS SSH RSA public-key exponent verification bypass leading to remote code execution</h4><p>In RouterOS before versions 6.49.21, 7.23.4 and 7.24.2, the SSH authentication module has improper verification of cryptographic signature (CWE-347), specifically an RSA public-key exponent verification bypass. When matching an SSH authentication request to an authorized user key, the system checks only the key type and modulus and ignores the exponent. Because signature verification uses the client-supplied key, an attacker who knows an authorized RSA modulus can present a key with exponent 1, forge a valid signature and open an SSH command channel as the target user without the private key. The vulnerability affects all RouterOS users who have not updated to the fixed versions above. An attacker can launch a remote network attack and obtain SSH access to the target system without user interaction.</p><p>Immediately upgrade RouterOS to 6.49.21 (long-term support), 7.23.4 (long-term support) or 7.24.2 (stable); Monitor SSH login logs to identify anomalous authentication attempts or connections from unknown sources; Consider temporarily disabling the SSH service or restricting its access-source IPs</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#cve-2026-67276">Source</a></p><h4>omni-channel-oid-frontend@0.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 43dbf7963e03e26519dc34c2adc1f10f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e3">Source</a></p><h4>oce-configurator-wireless-frontend@9999.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e34cb782effc6c1a06b6ba91565e48b9</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e4">Source</a></p><h4>ocfe-tv-subscription-center-web@0.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f7db766495aa8b62d32e74723faa36d5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e5">Source</a></p><h4>omni-channel-order-frontend@0.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 9bb405ced295f81a468cefb61c8d1f3f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e6">Source</a></p><h4>@caliperx2/components@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ef63fc69116971605e13b7bbc1329541</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e7">Source</a></p><h4>b2b-frontend-external-library@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2ca0f468cf91acd4b5bd294654784b8b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e8">Source</a></p><h4>omni-channel-configurator-wireline-frontend@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1d61e8e326307869d4567d2663a5b3d5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e9">Source</a></p><h4>html_vue@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 82898b5ab6a86ab52a3c2557182de50e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e10">Source</a></p><h4>vscode-vue@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 710119459926e37c2ec325e57efcef2a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e11">Source</a></p><h4>timeweave@1.4.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c63eba333b10f57f586df8a31dc386bd</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e12">Source</a></p><h4>tailwind-aspect@0.4.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 6965edf06cd4aedc6d821f49809a4ef3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e13">Source</a></p><h4>@crysnovax/baileys@2.7.16 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: a565c5331697d32d35015c78ff0e17b7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e14">Source</a></p><h4>megan-baileys@1.0.5 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e08219025b36b3b1491db64a58fddb33</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-07.html#e15">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-03.html https://www.sectrend.com.cn/en/intel-2026-09-03.html Thu, 03 Sep 2026 01:00:00 GMT <h4>openclaw multi-agent platform authorization check failure allowing attackers to perform unauthorized high-risk operations and lose control of system privileges</h4><p>The vulnerability stems from a logic defect in the claude-cli backend when handling agents.list[].tools.deny: the denied tool list is not dynamically passed into CLI invocation arguments, so native tools such as exec and write remain enabled. An attacker can exploit this remotely over the network without additional authentication or user interaction to induce a restricted agent to run high-risk commands that should have been forbidden, bypassing intended privilege isolation and causing confidentiality disclosure, data tampering and service availability damage.</p><p>Developers should refactor backend command-line argument construction so that agent-level tool allowlists and denylists map correctly into the runtime environment, and add configuration-validity checks during system status inspection to warn promptly when permission settings cannot be enforced, achieving precise access control and closed-loop risk management.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e1">Source</a></p><h4>TensorFlow RaggedGather integer overflow leading to heap buffer overflow and denial of service</h4><p>An attacker can craft RaggedGather operator inputs with specific parameters to trigger the issue. Because internal accumulation of output counts lacks bounds checking for the int32 type, integer overflow wraps to a smaller value, causing the system to allocate an undersized memory buffer while subsequent data-copy loops still write according to the actual logical row count, producing a heap buffer overflow that corrupts process memory integrity and may cause service interruption or code execution.</p><p>Developers should enforce strict overflow checks on code paths involving numeric accumulation and memory allocation, use wider arithmetic or safe library functions to validate result ranges, abort and return an error immediately when potential overflow is detected, and strengthen input-parameter validation to block maliciously crafted data flows.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e2">Source</a></p><h4>WatchMan-Site7 plugin debug console arbitrary code execution</h4><p>In WatchMan-Site7 WordPress plugin versions 4.2.0 and earlier, the debug console does not enforce access restrictions and contains improper control of code generation (CWE-94). The console directly executes user-supplied PHP code, allowing any authenticated user (for example a subscriber) to run arbitrary code on the server. The vulnerability affects all WatchMan-Site7 plugin users who have not updated to a fixed version. An attacker needs only a low-privilege authenticated account to trigger it remotely without complex interaction.</p><p>Restrict access to the debug console endpoint at the server layer; Monitor logs for anomalous PHP code execution behavior on the server</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#cve-2026-77009">Source</a></p><h4>Embed HTML5 Game plugin unauthorized file upload leading to remote code execution</h4><p>In Embed HTML5 Game WordPress plugin versions 1.3 and earlier, unrestricted upload of file with dangerous type (CWE-434) exists because the plugin does not properly restrict the identity of users uploading files or the uploaded file types. An unauthenticated attacker can upload a PHP backdoor to the affected site and fully control the server. The vulnerability affects all Embed HTML5 Game plugin users who have not updated to a secure version, across WordPress site deployment scenarios. An attacker can launch the attack remotely without authentication by crafting malicious requests to upload malicious scripts and achieve remote code execution.</p><p>Configure a web application firewall (WAF) to intercept illegal file-upload requests; Periodically scan site files to detect and remove suspicious PHP backdoor files</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#cve-2026-4357">Source</a></p><h4>@stellarshift/abi-tools@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 84af270381a0a6500449bc0cce6c0392</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e3">Source</a></p><h4>@stellarshift/evm-address-kit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8ab78491c447aaa7ad4397df8b391dd6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e4">Source</a></p><h4>@stellarshift/token-units@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8897adce2683e37ddfeab77f849722d3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e5">Source</a></p><h4>real-router-utils@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 059ef9a7c548e09bee5a6b9006e217d7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e6">Source</a></p><h4>apple-internal-test-utility@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 70c0f216d51158543f641bbeb52412f6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e7">Source</a></p><h4>frank-apple-sync-service@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: dfd7119d8b197c47db5e0489ec877f54</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e8">Source</a></p><h4>frank-apple-utils@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 62a2edb304b16cfd24329a5016ceca0b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e9">Source</a></p><h4>google-cloud-internal-build-helper@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 3b3b2024c10259d12711952512698c17</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e10">Source</a></p><h4>google-cloud-internal-core-utils@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: a8b383f52f9b5dab612a2ebcbfab8843</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e11">Source</a></p><h4>google-internal-cloud-audit-security-check@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5ddd8464adf7b45bb1f825917397b374</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-03.html#e12">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-02.html https://www.sectrend.com.cn/en/intel-2026-09-02.html Wed, 02 Sep 2026 01:00:00 GMT <h4>Drogon ORM component SQL injection leading to WHERE clause bypass and data disclosure</h4><p>An attacker exploits a defect in RestfulController where JSON filter operators are not validated, injecting malicious SQL fragments into the WHERE clause. The Criteria constructor only intercepts the in operator and concatenates other strings directly into the SQL statement, allowing the attacker to craft always-true logic or blind-injection payloads to bypass access control and extract sensitive database records.</p><p>Enforce an operator allowlist that strictly limits permitted SQL operators, ensuring every user-supplied operator is validated before participating in SQL construction, and avoid arbitrary string concatenation that enables injection.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#e1">Source</a></p><h4>wg-easy authentication interface lacking login attempt limits allowing second-factor bypass and full system control</h4><p>After obtaining a legitimate account password, an attacker can send unlimited brute-force requests against the TOTP second-factor interface. Because the system imposes no limit on failed authentication attempts, implements no account lockout, and lacks audit logging, the attacker can guess a valid code with high probability in a short time, bypass two-factor authentication and take over administrator privileges.</p><p>Introduce a session- or account-scoped failure counter in backend logic, set a reasonable maximum attempt threshold that triggers temporary lockout, and combine exponential backoff with mandatory security-event audit logging to contain automated brute-force attacks.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#e2">Source</a></p><h4>HPE Networking Fabric Composer API authentication bypass leading to full host control</h4><p>Vulnerabilities were found in the HPE Networking Fabric Composer API that may allow an unauthenticated remote attacker to bypass existing authentication controls. Successful exploitation can grant the attacker administrator privileges and lead to complete control of the HPE Networking Fabric Composer host. The issue is improper authentication (CWE-287); the attack vector is network-based with low complexity, requiring no user interaction and no privileges. It affects all unpatched HPE Networking Fabric Composer deployments. An attacker only needs to send crafted remote requests to obtain the highest privileges without authentication.</p><p>Deploy firewall rules at the network boundary to restrict unauthorized access to API endpoints; Monitor API access logs to identify and block anomalous unauthenticated request behavior</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#cve-2026-76657">Source</a></p><h4>HPE Networking Fabric Composer SSH daemon remote code execution leading to complete system control</h4><p>A vulnerability has been found in the SSH daemon of HPE Networking Fabric Composer that may allow an unauthenticated remote attacker to gain administrative access to a vulnerable AFC host. Successful exploitation may allow the attacker to execute arbitrary commands as a privileged user on the underlying operating system, resulting in complete system control. The vulnerability affects all unpatched HPE Networking Fabric Composer deployments; an attacker can launch a remote network attack without authentication, with low complexity and no user interaction required.</p><p>Immediately isolate affected HPE Networking Fabric Composer hosts and restrict their network access; Monitor the SSH daemon for anomalous login attempts and command-execution logs</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#cve-2026-76658">Source</a></p><h4>eslint-rxjs@1.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4c596e46c9fc02b6f12f5e64ff523ca2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#e3">Source</a></p><h4>chromatitle-dev@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: fab750ab2964222e8cae6ba9e358d0ce</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-02.html#e4">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-09-01.html https://www.sectrend.com.cn/en/intel-2026-09-01.html Tue, 01 Sep 2026 01:00:00 GMT <h4>AgentScope Bash tool permission bypass from incomplete command-separator validation damaging system integrity and availability</h4><p>An attacker exploits incomplete command-separator recognition in is_read_only_command by crafting malicious compound commands containing &amp; or newlines, so dangerous operations such as file deletion that should be blocked are misclassified as read-only. That triggers check_permissions' fast-allow path, skipping later security checks and user confirmation, creating arbitrary code execution risk and directly threatening system integrity and data availability in the controlled environment.</p><p>Complete the command-separator allowlist to cover all valid separator cases, perform strict AST deep-traversal analysis before execution so every subcommand meets the read-only standard, and introduce mandatory human review to block automated high-risk operations.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e1">Source</a></p><h4>OpenRLHF remote reward model service missing authentication leading to training signal tampering and data disclosure</h4><p>An attacker can abuse the default 0.0.0.0 bind and unauthenticated POST /get_reward endpoint to inject malicious reward values within network reach, steering policy updates while stealing prompts and generated text from request payloads, resulting in manipulated model training and sensitive data exfiltration.</p><p>Change the default listen address to the local loopback interface, mandate mutual TLS or shared-secret authentication, and validate format and integrity of returned reward values so only trusted sources can enter the training loop.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e2">Source</a></p><h4>Tenda AC1206 Web UI Telnet feature missing authentication leading to remote unauthorized access</h4><p>In Tenda AC1206 version 15.03.06.23, the TendaTelnet function in /goform/telnet of the Web UI component has an improper authentication (CWE-287) security defect. Performing specific operations causes authentication to be missing, and an attacker can launch the attack remotely. The exploitation method has been publicly disclosed and is at risk of being used. The Tenda AC1206 router has a serious security vulnerability in Web UI interaction scenarios; an attacker can trigger it with crafted requests, leading to remote unauthorized access or full device control. It affects all Tenda AC1206 users running firmware 15.03.06.23. An attacker only needs to send crafted requests over the network, with no user interaction required, for remote control.</p><p>Monitor anomalous network connections and Telnet access logs; Enable strong authentication on the router management interface or restrict source IPs; Block requests to the /goform/telnet endpoint from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#cve-2026-82693">Source</a></p><h4>Tenda AC18 Telnet Handler authentication bypass leading to remote code execution</h4><p>In Tenda AC18 version 15.03.05.19, a logic defect in an unknown function in /goform/telnet of the Telnet Handler component creates an improper authentication (CWE-287) security defect. The manipulation causes authentication to be missing, and an attacker can attack remotely. Exploit code has been disclosed and may be used in attacks. The Tenda AC18 router has an authentication bypass in specific Telnet access scenarios; crafted requests can trigger unauthorized remote access or system control. It affects all unpatched Tenda AC18 15.03.05.19 users. An attacker only needs to send specific requests remotely, with no user interaction, for remote control.</p><p>Disable the Telnet service in the router management UI and switch to the more secure SSH protocol; Configure firewall rules to restrict remote access to the /goform/telnet endpoint</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#cve-2026-82695">Source</a></p><h4>selfsigned-certificate@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 41572c2f306b507b0d49a0ab4af4c2a9</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e3">Source</a></p><h4>tailwindcss-forms-style@0.1.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0de57f3d76d56d34763bf2460d3cd7d7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e4">Source</a></p><h4>kisama-js@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2aca2fd098e55351257c2c1f5af62d9e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e5">Source</a></p><h4>@yane88/hexhub-client@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 3eaf1d84210daff9fb1c720213582ced</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e6">Source</a></p><h4>@yane88/idea-2026.2-06@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1b97166bbdfdd94a22b372908b7fc37a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e7">Source</a></p><h4>@yane88/listary-02@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d8fdedf6dad0b58e49069f769c473a30</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e8">Source</a></p><h4>@yane88/term-reqable-02@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 78edf93d8f9a7d96f0c3502ef0fb3314</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e9">Source</a></p><h4>@yane88/workbuddy@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 09788403514ae706e2c30a786c3c4e3f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e10">Source</a></p><h4>@yane88/workbuddy-02@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c77c49d2cfac1e5f6c3edf4d27b35b14</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e11">Source</a></p><h4>core_main@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: fbe22731b1428483ba281605625a8b75</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-09-01.html#e12">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-31.html https://www.sectrend.com.cn/en/intel-2026-08-31.html Mon, 31 Aug 2026 01:00:00 GMT <h4>lmdeploy P2P connector remote code execution via deserialization of untrusted data</h4><p>The vulnerability stems from engine_conn.py applying no authentication on ZMQ TCP sockets and directly calling recv_pyobj on raw network bytes. That method effectively runs pickle.loads, so an attacker can send a malicious Pickle-serialized payload to the exposed port. Because type checks occur after deserialization, the defense fails, enabling arbitrary code execution on the engine node and leading to full system compromise and lateral movement risk.</p><p>It is recommended to replace unsafe serialization with secure protocols such as JSON or MsgPack combined with strict schema validation, and to enable ZMQ CURVE encryption and authentication so that only authorized clients can connect and exchange data.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e1">Source</a></p><h4>Megabasterd remote code execution and data disclosure risk from deserialization flaws and unsafe input handling</h4><p>An attacker can exploit Java deserialization during Settings import or database session restore, chaining the commons-collections gadget on the classpath for remote code execution. Unvalidated file-path decryption allows arbitrary file writes; an unauthenticated local streaming server enables SSRF; weak key derivation and plaintext storage increase credential disclosure risk; maliciously crafted PBKDF2 iteration parameters can cause denial of service; and a misconfigured global authenticator lets third-party servers capture proxy credentials.</p><p>Enforce strict object deserialization filtering and migrate sensitive storage to JSON; canonicalize decrypted file paths to prevent traversal; add random token validation and Host header checks for local service interfaces; use a strong KDF such as Argon2id with AES-GCM for data at rest; and bound external numeric parameters to prevent resource exhaustion.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e2">Source</a></p><h4>cc-connect unauthorized Webhook endpoint remote code execution via command injection leading to full system compromise</h4><p>The vulnerability lies in authentication and command execution on the /hook endpoint. When webhook.token is empty, authenticate returns true and bypasses access control. An attacker can send an unauthenticated POST with a malicious exec field that is passed unsanitized into exec.CommandContext running /bin/sh -c, executing arbitrary OS commands in the service process context and fully compromising the server with sensitive data disclosure risk.</p><p>Fixes should require a non-empty high-entropy token for authentication, remove or strictly limit direct OS command execution, apply strict allowlist filtering and character escaping on user input, and run the service with least privilege to limit blast radius.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e3">Source</a></p><h4>cc-connect management interface full server compromise via missing authentication combined with command injection</h4><p>An attacker can abuse authentication bypass caused by a default empty token, sending malicious requests to the unprotected cron creation endpoint so that a user-controlled exec parameter is passed directly into shellExecCommand. The defect stems from missing input filtering and authentication, allowing a remote attacker without credentials to run arbitrary OS commands on the host, then steal sensitive data, plant backdoors or move laterally to other internal assets.</p><p>Fix authentication so an empty token denies access, enforce a strict command-parameter allowlist, avoid concatenating shell commands directly, and use a firewall to limit network access to management interfaces, eliminating injection risk at the root.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e4">Source</a></p><h4>ash_ai code injection leading to remote code execution</h4><p>In ash_ai prior to version 1.0.0, the AshAi.Actions.Prompt module improperly handles prompt content, creating a code injection (CWE-94) security defect. The component evaluates prompt content with EEx.eval_string/2; when prompt action text includes request data, attacker-controlled text is compiled and run as an EEx template (Elixir source). Content such as &lt;%= System.cmd(...) %&gt; executes on the server before any model request is issued. The vulnerability affects all ash_ai users not updated to 1.0.0, including early versions from 0.1.0. An attacker only needs to send a crafted request to an exposed prompt action, with no authentication required, and can control the system remotely.</p><p>Immediately upgrade ash_ai to 1.0.0 or later; Review whether function-supplied prompt content is evaluated as EEx and ensure only statically configured templates are evaluated; Enforce strict access control and input validation on exposed AI interfaces</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#cve-2026-77956">Source</a></p><h4>Boa Web Server remote buffer overflow leading to remote code execution</h4><p>In Tenda HG10 firmware 300001138, the formIPv6Routing function in /boaform/admin/formIPv6Routing of the Boa Web Server component has a security defect. It does not perform strict bounds checking on the destNet parameter, resulting in improper restriction of operations within the bounds of a memory buffer (CWE-119) and a buffer overflow. An attacker can trigger it remotely over the network with a crafted request; exploit code has been publicly disclosed and may be used in attacks. The vulnerability affects all Tenda HG10 devices running the affected firmware. No authentication is required, attack complexity is low, and the system may be fully compromised.</p><p>Deploy a firewall at the network boundary to restrict external access to device management interfaces such as /boaform/admin/; Monitor network traffic for anomalous requests targeting the formIPv6Routing interface</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#cve-2026-82542">Source</a></p><h4>ToolUniverse sandbox escape leading to remote code execution</h4><p>In ToolUniverse prior to version 1.3.0, the executor behind the python_code_executor tool (in python_executor_tool.py) has a sandbox escape flaw. Although it checks forbidden attribute names and calls, it retains the attribute-lookup builtin and does not block dunder attributes reached via string lookup or allowed modules. An attacker can walk from a literal's class to its base and enumerate subclasses to obtain references to the process and subprocess modules. Per-call arguments also let the caller widen the import allowlist before checks run. Meanwhile, the HTTP and MCP servers in http_api_server.py and smcp_server.py bind to all interfaces, enable debug mode and require no authentication, so any caller who can reach the port can execute code as the server process. The vulnerability affects all ToolUniverse users not updated to 1.3.0. An unauthenticated attacker can trigger it remotely and fully control the server.</p><p>Immediately upgrade ToolUniverse to 1.3.0 or later, which adds Bearer Token authentication, defaults the bind address to loopback, and strengthens attribute checks; If an immediate upgrade is not possible, bind the server to 127.0.0.1 only and disable debug mode; Apply network ACLs so only trusted IPs can reach the relevant ports; Monitor the server process for anomalous behavior such as unexpected child processes or outbound connections</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#cve-2026-81096">Source</a></p><h4>GiveWP deserialization of untrusted data leading to object injection</h4><p>In GiveWP prior to version 4.16.7.1, the data processing module lacks strict validation of input data, creating a deserialization of untrusted data (CWE-502) security defect. An attacker can craft malicious serialized data to trigger object injection, which may lead to remote code execution or sensitive information disclosure. The GiveWP plugin has a deserialization vulnerability when handling certain requests; an attacker can launch it remotely over the network with no user interaction and low complexity, seriously threatening confidentiality, integrity and availability. It affects all GiveWP users not updated to 4.16.7.1, including all WordPress sites deploying the plugin. An attacker only needs to send a crafted request to exploit it and remotely control the affected system.</p><p>Immediately upgrade GiveWP to 4.16.7.1 or later; Deploy a web application firewall (WAF) to block anomalous deserialization requests; Monitor server logs to identify and block suspicious object injection attempts</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#cve-2026-82222">Source</a></p><h4>ArgoCD MCP unauthorized access leading to remote code execution</h4><p>In argocd-mcp version 0.8.0, when ARGOCD_API_TOKEN is configured, the HTTP transport module binds incorrectly, creating a binding to an unrestricted IP address (CWE-1327) security defect. The component binds to all network interfaces and accepts MCP sessions without caller credentials. An attacker who can reach the listener can use the operator-stored token to invoke the full tool set, creating applications, requesting syncs and modifying Argo CD resources. The vulnerability affects all unpatched argocd-mcp 0.8.0 deployments. Network reachability alone is enough; no extra authentication is required for remote control.</p><p>Restrict the argocd-mcp listen address to localhost or trusted internal interfaces only; Enforce strict Network Policies to block unauthorized traffic to the MCP service port; Regularly rotate ARGOCD_API_TOKEN and monitor anomalous tool-call logs</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#cve-2026-82456">Source</a></p><h4>@fidzzhost/baileys@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ec831478fb3f57ae29784a8088383cb7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e5">Source</a></p><h4>brat-codex@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 766972ec1cd9ed5211cc4e5bb74186d0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e6">Source</a></p><h4>cloufcrxz@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d2e8343812e2b352ae31c1e078c040bb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e7">Source</a></p><h4>h2-codex@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bc0a5bb001e1627c8e0bf1add533b501</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e8">Source</a></p><h4>h3-codex@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: dd8f9d0ddbed98af8622a04ac6d8fb45</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e9">Source</a></p><h4>originaldevelopmentstelemetry@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f47cb15b2b9ed3841dcb57ff80037e65</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e10">Source</a></p><h4>real-browser-plus@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: aa13ddce28c13c4bd8bc794834b1ee38</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e11">Source</a></p><h4>@lucideproxy/svg@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 41aa7b3c270b0418aaf0e1b3b00b8242</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e12">Source</a></p><h4>eslint-prettier-js@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e6cc8be8bdfc81bc1176b94db9440679</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e13">Source</a></p><h4>redis-cookie-server@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e0c31a232420f2ee401fa2129fede823</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e14">Source</a></p><h4>tailwindcss-3d-animate@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e0622ab006233acc967ddfc961ec4b41</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e15">Source</a></p><h4>@hd-team/app-dnpkg-eight@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: a87fae3ce665cfecea23d03ec5f8b38c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e16">Source</a></p><h4>@hd-team/app-dnpkg-prod@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d27b64311ae8ee507d0e1c91de990bf0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e17">Source</a></p><h4>@hd-team/app-dnpkg-ten@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 42c93882e00123b1861f35ac15517d84</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e18">Source</a></p><h4>@hd-team/app-dnpkg-test@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 9411ad3eee7bcbb49ab811eed3c54f8a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e19">Source</a></p><h4>@hd-team/app-dnpkg-three@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 605991ca3d159de945b470cd95718900</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e20">Source</a></p><h4>@hd-team/app-impkg-prod@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4ecb6a827300f071df4a70a3d0a34d24</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e21">Source</a></p><h4>@hd-team/app-impkg-test@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 600f45b886a555369709037085092b9d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e22">Source</a></p><h4>hydration-ui-dlx@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 6724cd52359fd8c3ff9b5268d82179e8</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e23">Source</a></p><h4>svelte-ui-dlx@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bb91cac05ddbbba23d8e8a36b3244109</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e24">Source</a></p><h4>amplitude-session-replay@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 152136aee53e4a8bf7da2ff2ef5195af</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e25">Source</a></p><h4>aws-blog@45.0.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: b7f7c4d2cc21fcb2bd49b7c5b962c029</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e26">Source</a></p><h4>intuit-authz@55.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5f9191dd90dc9a78c6bed542ca88e8fc</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e27">Source</a></p><h4>analytics-web-client@30.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 703876921fc588c5a5c33c7137c05a19</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e28">Source</a></p><h4>aura-instrumentation@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0df4275a872ed6831db1f24ce93c28b2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e29">Source</a></p><h4>confluence-create-content@30.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c773aeb2f61a5a5f9ca8fc01fc66973c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e30">Source</a></p><h4>jira-projects-backbone@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: dfcb32ac019aa665381710c2ba5d1eac</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e31">Source</a></p><h4>mkt-ui-library@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0ad694a0cf5df4be1d03f8da5ba816b2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e32">Source</a></p><h4>oit-lib-oracle-util@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 7d8c9ae6c13bb75d35d7b1250ceb10cf</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e33">Source</a></p><h4>prm-bundles@45.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d520961855be6c4b71060ee11be1152e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e34">Source</a></p><h4>htps-provider@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d7deae3c4aebe6dc846d230928019aef</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e35">Source</a></p><h4>manager-thedate@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5c6369b790f20c3cca3a488c0ad426eb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e36">Source</a></p><h4>nuvyra-marketplace-sdk@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: efdc4d5219756a4725646966e3bdc085</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e37">Source</a></p><h4>node-net-pool@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 69d5a1f717f9a562c8ebccfcbb4164af</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e38">Source</a></p><h4>gclassroom@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e443ecf915581c5181d768b945e16c8f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e39">Source</a></p><h4>opiumbest@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: dd9bb27499b5ee1d7208362acd789ae1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e40">Source</a></p><h4>quesoeducation@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 779c913f559afc556b72ce75f1a95fc3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-31.html#e41">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-27.html https://www.sectrend.com.cn/en/intel-2026-08-27.html Thu, 27 Aug 2026 01:00:00 GMT <h4>kafka-ui remote code execution by bypassing Groovy filtering leading to full server compromise</h4><p>An attacker exploits the PUT /api/smartfilters/testexecutions endpoint's failure to check the filtering.groovy.enabled configuration, submitting requests that contain malicious Groovy scripts. Because the executeSmartFilterTest method in MessagesController lacks security interception logic, an attacker without administrator privileges can directly compile and execute arbitrary OS commands, fully taking over the host and sensitive data.</p><p>It is recommended to uniformly invoke a security configuration check when handling smart-filter test requests so that the global disable policy takes effect, and to strengthen interface authentication with role-based access control to prevent unauthorized users from triggering code execution.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e1">Source</a></p><h4>Zephyr RTOS USB Bluetooth HCI module out-of-bounds write due to missing bounds checks leading to system crash or memory corruption</h4><p>An attacker can trigger the vulnerability by sending malicious HCI packets that exceed the USB endpoint Maximum Packet Size (MPS). Because bt_hci_tx_sync_in does not verify that the packet length fits the fixed-size USB transfer buffer, net_buf_add_mem performs an out-of-bounds write. With assertions enabled this causes an immediate system panic; otherwise adjacent memory is overwritten, potentially hijacking control flow, leaking sensitive information and making the service unavailable.</p><p>Developers should strictly validate source data length against remaining destination buffer space before copying, ensure the allocated limit is never exceeded, introduce a dynamic buffer pool or hardcoded length checks, and enable configuration options that strengthen runtime bounds detection.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e2">Source</a></p><h4>Google Cloud BigQuery CData JDBC driver improper input validation leading to remote code execution and privilege escalation</h4><p>In Google Cloud BigQuery Data Transfer Service versions on Google Cloud Platform prior to 2026-05-01, the CData JDBC driver integration has an improper input validation (CWE-74) security defect. An authenticated attacker can craft malicious JDBC connection string parameters to achieve remote code execution inside the connector container and escalate privileges within the tenant project. The vulnerability allows unauthorized arbitrary code execution and seriously threatens data integrity and system control in the cloud environment. It affects all Google Cloud BigQuery Data Transfer Service users who have not updated to a version after 2026-05-01. The attacker needs some authentication, but once exploitation succeeds they can execute code in the container and move laterally to escalate privileges.</p><p>Confirm the service version has been updated to 2026-05-01 or later, which fixes this vulnerability; Review and restrict the input sources for JDBC connection string parameters and enforce strict input validation; Monitor connector container anomaly logs to detect potential malicious execution activity</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#cve-2026-12717">Source</a></p><h4>UniFi Protect command injection leading to remote code execution</h4><p>In the UniFi Protect application, improper input validation (CWE-20) creates a command injection security defect. An attacker with network access can exploit it to execute arbitrary commands on the host device. The vulnerability allows a direct network-based attack with no user interaction and low attack complexity, and may seriously damage confidentiality, integrity and availability of the host system. It affects all unpatched UniFi Protect deployments; an attacker needs only network access to trigger remote code execution.</p><p>Restrict access to the UniFi Protect management interface at the network layer, allowing only trusted IP addresses; Deploy an intrusion detection system (IDS) or firewall rules to monitor and block anomalous command-execution traffic</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#cve-2026-77537">Source</a></p><h4>svelte-vli-ui@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: cda319748517bff26b55be963f700542</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e3">Source</a></p><h4>self-certificates@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d71d53732effd00a0718baf59e6bf598</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e4">Source</a></p><h4>self-sign@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: a352f9a9aded15e30840e86d9c87fafc</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e5">Source</a></p><h4>dumb-binding-gyp-package@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 15c0474d23441126c9bf13c0117a90ef</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e6">Source</a></p><h4>grandfather_of_the_desert@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f427241ba3e5cbd94d8e01e9294fa223</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e7">Source</a></p><h4>shai_hulululud@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 31cfb382c3dcece40aabe7f8b85bfa14</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e8">Source</a></p><h4>the_tax_free_cashier_is_at_9f@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 3472880c17512c02fe171ef9502f9fb5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e9">Source</a></p><h4>tset_racie@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 459f6fcb186ce81cb32ac1581a12277a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e10">Source</a></p><h4>bnotify-web-sdk@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5ad638063be6709776dafd4a120b1b40</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-27.html#e11">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-26.html https://www.sectrend.com.cn/en/intel-2026-08-26.html Wed, 26 Aug 2026 01:00:00 GMT <h4>OpenSSL QUIC listener object lifecycle management defect leading to denial of service</h4><p>An attacker can exploit a logic defect in SSL_listen_ex when detaching the inbound channel, causing the new connection object to be incorrectly bound to the listener hierarchy while retaining a freed pointer, producing a use-after-free condition. Because the returned connection cannot complete the handshake yet retains invalid internal state, subsequent BIO operations or destructor cleanup may access a dangling pointer or an uninitialized thread assist worker, causing out-of-bounds memory access or abnormal process termination and achieving denial of service against the affected service.</p><p>It is recommended to enforce strict lifecycle validation when handling QUIC connection objects, ensuring correct ownership transfer and state initialization complete before detachment. The development team should fix test cases to accurately capture handshake failure scenarios and add defensive checks for invalid object state in production to prevent illegal memory access.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e1">Source</a></p><h4>sub2api image download endpoint lacking URL validation leading to SSRF, internal network probing and cloud credential disclosure</h4><p>An attacker can use the /v1/images/generations endpoint to inject a malicious image_url parameter into the request body. Because the backend downloadOpenAIImageBytes function performs no validity check on the destination address, the server issues an HTTP GET request directly to that URL. This defect allows an attacker to reach internal network resources or cloud provider metadata services with the server's identity, leading to theft of sensitive credentials, internal port scanning and potential service disruption.</p><p>It is recommended to enforce a strict URL allowlist limiting access to trusted CDN domains, add IP address range filtering that rejects requests resolving to loopback, private network segments and link-local addresses, and introduce DNS rebinding protection to ensure request safety.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e2">Source</a></p><h4>Adobe Campaign Classic Server-Side Request Forgery Leading to Arbitrary Code Execution</h4><p>Adobe Campaign Classic (ACC) contains a server-side request forgery (SSRF) vulnerability (CWE-918) that may result in arbitrary code execution in the context of the current user. An attacker can exploit it to execute arbitrary code, and exploitation requires no user interaction. The scope is changed, the attack vector is network-based with low attack complexity, no privileges and no user interaction are required, and the impact on confidentiality, integrity and availability is high.</p><p>Deploy network-layer protection to restrict what external resources the server may request; Monitor anomalous network request behavior, particularly unexpected outbound connections initiated from within application servers</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#cve-2026-76193">Source</a></p><h4>Apache Hive Metastore SQL Injection Leading to Unintended Partition Metadata Tampering</h4><p>In Apache Hive prior to version 4.2.1, the Hive Metastore module does not use bound parameters when parsing partition names in direct SQL, resulting in SQL injection (CWE-94). When direct SQL is enabled (the default), an authenticated user can craft a malicious partition name containing a single quote in a Metastore RPC request to alter the generated WHERE clause, reading, modifying or affecting unintended partition metadata including statistics updates, truncation targets and file metadata cache operations. The vulnerability affects all Apache Hive users who have not updated to 4.2.1 and is present at risk under default configuration. An attacker needs Hive Metastore API access but can trigger the vulnerability remotely with no additional user interaction, compromising data integrity and confidentiality.</p><p>Immediately upgrade Apache Hive to version 4.2.1 or later to fix this vulnerability; If an immediate upgrade is not possible, consider disabling direct SQL in configuration (setting metastore.try.direct.sql to false), noting the potential performance impact; Monitor Hive Metastore logs to detect anomalous partition name requests or SQL execution errors</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#cve-2026-49845">Source</a></p><h4>video-crate-check@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: b6e4b0ebdbced85be25afce02f96127b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e3">Source</a></p><h4>dim-svelte-ui@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 79a6e5f110d2cb98c9f4eb3ea907ead5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e4">Source</a></p><h4>foldmap@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8d169bb521c0d8bfac7a3392e91586b7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e5">Source</a></p><h4>snapbuf@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: baf1194cbb49351eecfcd42cefa140c1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e6">Source</a></p><h4>svelte-cls-ui@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 6a2584b73187f37ff11840990f7fd015</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e7">Source</a></p><h4>tailwind-scrollbar-hider@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 355da2493d77fd98b8c1ebfb27ccd215</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e8">Source</a></p><h4>wm-eslint-fe@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 40c0f64bf298e095e08c26d8d07284c2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e9">Source</a></p><h4>array-shuffler-utils-99@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d1ad4df3c8c6f8ced9916ba2adb646cb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e10">Source</a></p><h4>fivem-tool-helper@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 166b6e97d6b9fa31581166abf409010e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e11">Source</a></p><h4>fivem-tool-helper-v2@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1ea028ac42fbe1ceb74eb935d943ffb3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-26.html#e12">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-25.html https://www.sectrend.com.cn/en/intel-2026-08-25.html Tue, 25 Aug 2026 01:00:00 GMT <h4>hermes-agent gateway authorization defect and code injection leading to permission bypass and remote code execution</h4><p>This vulnerability comprises two critical defects. First, under multiplexed configuration the gateway's _auth_env function fails to properly isolate environment variable scope, incorrectly falling back to the global os.environ when a specific configuration file is missing, allowing an attacker to exploit the permissive policy of another configuration file for privilege-exceeding access. Second, when processing queue tasks, tools/bot_relay.py applies no strict character set validation or escaping to the connection_id field and concatenates it directly into an executed Python code string, allowing an attacker to inject arbitrary Python statements through a crafted ID and achieve remote code execution in a process holding the corresponding privileges.</p><p>It is recommended that developers fix the environment variable reading logic to ensure configuration scope isolation, and apply strict type checking and secure encoding to all dynamic input data, prohibiting direct concatenation of untrusted data into executable code context.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e1">Source</a></p><h4>python-sdk client lacking redirect validation leading to SSRF and disclosure of internal sensitive data</h4><p>The vulnerability originates in the HTTP client factory configuration enabling redirect following unconditionally with no destination host validation. By controlling a malicious MCP server that returns a 3xx status code, an attacker can redirect client requests to internal or loopback addresses such as 127.0.0.1. If the target service responds with JSON-RPC formatted data, the client mistakenly treats it as a legitimate server response and injects it into the LLM session, leading to internal probe reconnaissance and disclosure of sensitive identity information.</p><p>It is recommended that developers disable default redirect following when constructing the HTTP client, or add strict allowlist validation of the target URL host and internal address filtering before performing a redirect, ensuring connections are permitted only to predefined safe domains. Client-side network boundary protection should mirror the existing server-side security middleware.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e2">Source</a></p><h4>CakePHP FunctionsBuilder jsonPath SQL Injection Leading to Database Compromise</h4><p>In CakePHP prior to versions 5.1.10, 5.2.15 and 5.3.7, the FunctionsBuilder::jsonValue() method lacks effective filtering of the jsonPath parameter when used with PostgresDriver, resulting in SQL injection (CWE-89). When user-controllable data reaches that parameter, an attacker can craft malicious SQL statements leading to database disclosure, tampering or execution of arbitrary system commands. The vulnerability affects all CakePHP users who have not updated to the fixed versions above, particularly backend applications using PostgreSQL. An attacker can trigger it with a specific request and manipulate the database remotely without complex preconditions.</p><p>Immediately upgrade CakePHP to 5.1.10, 5.2.15 or 5.3.7 or later; Apply strict allowlist validation or escaping to data passed into the jsonPath parameter; Limit database account privileges and avoid connecting the application with a high-privilege account</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#cve-2026-77635">Source</a></p><h4>Affiliate Pro Unauthenticated Privilege Escalation Leading to Remote Code Execution</h4><p>In Affiliate Pro - Affiliate Program for WooCommerce &amp; WordPress 8.9.1 and earlier, the permission validation module contains a logic defect resulting in incorrect privilege assignment (CWE-266). An unauthenticated attacker can craft a specific request to bypass authentication and escalate their own privileges directly, threatening site data integrity and system control. The plugin contains a permission bypass in certain endpoint invocation scenarios that an attacker can trigger remotely over the network, leading to unauthorized access or complete site takeover. The vulnerability affects all Affiliate Pro users who have not updated beyond 8.9.1, including e-commerce and content management platforms built on WooCommerce and WordPress. An attacker only needs to send a malicious request to the target site, requiring no user interaction and allowing remote control.</p><p>Immediately upgrade the Affiliate Pro plugin to a secure version after 8.9.1; Monitor site backend login logs and anomalous permission change behavior; Configure a web application firewall (WAF) to block unauthorized access attempts against the plugin's specific endpoints</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#cve-2026-32558">Source</a></p><h4>Joomla Page Builder CK Second-Order SQL Injection Leading to Remote Code Execution</h4><p>In the Joomla extension Page Builder CK prior to version 3.6.5, the loadStyles method of the front-end page model handles input improperly, resulting in second-order SQL injection (CWE-89). An attacker can craft specific data to trigger SQL injection, leading to database disclosure, tampering or remote code execution. The vulnerability affects all Page Builder CK users who have not updated to 3.6.5. An attacker can trigger it through front-end page interaction, exploiting the second-order nature to execute malicious SQL commands in a subsequent request.</p><p>Immediately upgrade the Page Builder CK extension to version 3.6.5 or later; Apply strict prepared statements and escaping to database query parameters; Deploy a web application firewall (WAF) to intercept suspicious SQL injection requests</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#cve-2026-77994">Source</a></p><h4>@medisend/auth@0.0.1-security-research flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 6cf7cbadfea90673eda5dc423392af43</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e3">Source</a></p><h4>kelly-stake-sizing@0.1.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1c20a1dd2fb23d086786baf1ac252343</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e4">Source</a></p><h4>svelte-dim-ui@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 9e0eb4c09af0897c10d38c5641ba31d6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e5">Source</a></p><h4>classhomework@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 24ff6662567d594218a3c3956f29d275</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e6">Source</a></p><h4>classwork@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c3aa7d7d326c817df8edeac3464e917c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e7">Source</a></p><h4>desmosisfire@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ad172bbc784beafc003e4937eb9af214</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e8">Source</a></p><h4>desmosistuff@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: b8cb6ed8403b02edb352f560a5d4bde0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e9">Source</a></p><h4>desmosschoolwork@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1c1b000b2126ff213f4146d357dbe528</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e10">Source</a></p><h4>ilovedesmos@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 112a43457429e35039fbe51b6fc5baca</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e11">Source</a></p><h4>tungtungisgoated@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 99c06fcac970bce46e8b14d40be223ae</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-25.html#e12">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-24.html https://www.sectrend.com.cn/en/intel-2026-08-24.html Mon, 24 Aug 2026 01:00:00 GMT <h4>sub2api proxy trusts forged HTTP headers, rendering IP access control and rate limiting ineffective</h4><p>An attacker exploits the default configuration's unconditional trust of the CF-Connecting-IP header, crafting malicious HTTP requests to forge the source IP address and thereby bypass both the API key IP allowlist check and the rate limiting on the login endpoint. The defect stems from the backend failing to distinguish trusted reverse proxies from ordinary clients, leaving the security protection logic entirely circumvented.</p><p>It is recommended to modify the configuration to disable the default trust of forwarded IP options, and to strip or overwrite the relevant HTTP headers from untrusted sources at the reverse proxy layer. A strict proxy chain trust verification mechanism should also be established to ensure accurate IP resolution.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e1">Source</a></p><h4>CubeSandbox missing authentication and rate limiting allows any user to remotely perform full sandbox lifecycle operations</h4><p>The vulnerability arises because CubeAPI binds to 0.0.0.0:3000 by default when no authentication credentials are configured, and logs this only at INFO level rather than raising a warning, allowing an attacker to reach sensitive endpoints from anywhere on the network without credentials. Because the rate limiting middleware loads only in the code branch where authentication is enabled, the unauthenticated mode has no frequency control at all. Combined with an unconditionally applied permissive CORS policy, an attacker can easily launch large-scale concurrent requests or cross-site scripting attacks, abusing the sandbox management interface and causing compute resource exhaustion, data disclosure and denial of service.</p><p>It is recommended to decouple the authentication and rate limiting modules in code so that rate limiting is enforced regardless of whether authentication is enabled. The default bind address should be changed to 127.0.0.1, or a severe warning raised and startup refused when an unauthenticated configuration is detected. CORS configuration should also be tightened with an allowlist policy to prevent cross-origin abuse, and environment variable settings strictly validated before production deployment.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e2">Source</a></p><h4>StackGres Operator Privilege Escalation Leading to Administrator Access</h4><p>In the StackGres operator, an untrusted search path (CWE-426) security flaw results in a privilege escalation vulnerability. A low-privilege tenant owning a database can exploit it to obtain administrator privileges. The vulnerability allows exploitation over the network with low complexity, changing the security scope without user interaction and causing serious impact to confidentiality, integrity and availability. It affects all unpatched StackGres operator deployments. An attacker needs only low-privilege tenant identity to trigger it and then escalate to administrator level.</p><p>Apply least privilege and strictly restrict tenant access to operator resources; Monitor operator audit logs to detect anomalous privilege escalation behavior</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#cve-2026-78155">Source</a></p><h4>justhtml URL Sanitization and HTML Serialization Bypass Leading to Cross-Site Scripting</h4><p>In justhtml prior to version 1.15.0, multiple security issues exist in the URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True) and edge cases across several custom sanitization policies. Depending on configuration, an attacker can bypass sanitization to inject active HTML and JavaScript — for example through encoded javascript: URLs, backslash-based relative URLs resolved to remote hosts, programmatic element and attribute names or HTML comments that break markup structure, reintroduction of a raw closing textarea tag through Markdown passthrough, or retention of style, meta http-equiv=refresh and base href tags in custom policies. Most custom policy issues do not affect the default sanitize=True configuration; they primarily affect helper APIs, programmatic DOM construction, html_passthrough=True and custom policy or transformation pipelines.</p><p>Immediately upgrade justhtml to version 1.15.0 or later; Review and restrict use of html_passthrough=True and custom sanitization policies; Apply strict allowlist filtering to input data and avoid permissive default sanitization configurations</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#cve-2026-5388">Source</a></p><h4>EFM ipTIME T16000M Session Validation Bypass Leading to Remote Code Execution</h4><p>In EFM ipTIME T16000M version 14.20.2, the httpcon_check_session_url function within the Session Validation Handler component contains an improper authentication (CWE-287) security flaw. The vulnerability results in authentication bypass and allows remote exploitation. Exploit code is public and usable in attacks. The vendor was contacted early in the disclosure process but did not respond. The vulnerability affects all devices running EFM ipTIME T16000M firmware 14.20.2. An attacker can launch the attack remotely over the network and bypass authentication with no user interaction, potentially obtaining control of the device.</p><p>Monitor logs for anomalous network session validation requests; Enable IP allowlist access control on the device management interface; Block session validation traffic from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#cve-2026-78167">Source</a></p><h4>hydration-dim-kit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d79bd7cc5b3b0ebc4965048b95085c88</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e3">Source</a></p><h4>@opap/player-kyc-widget@3.999.999 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 3ce114537783f4070a1cb5505878a89a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e4">Source</a></p><h4>sm-admin@99.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 76f7e1cd450f825b53524b56d68e927a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e5">Source</a></p><h4>sm-apikey-model@99.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 7038e95a7c012ea16476ed0d7051fa7b</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e6">Source</a></p><h4>sm-billing-form@99.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8ab97513ba4bac76b3a7b91a292f31c1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e7">Source</a></p><h4>sm-cart@99.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 777c691cce9d2a45a8f8d2df4b496d04</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e8">Source</a></p><h4>sm-checkout@99.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0a4c9fa76e0f5812e5a5385ed1afe80a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e9">Source</a></p><h4>sm-payment@99.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 8e9de7bb06d9561edc377c3aca86429d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-24.html#e10">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-23.html https://www.sectrend.com.cn/en/intel-2026-08-23.html Sun, 23 Aug 2026 01:00:00 GMT <h4>TencentDB-Agent-Memory SSRF validation bypass leading to internal network resource disclosure and loss of system integrity</h4><p>An attacker exploits the mismatch between hostname extraction logic and the regular expression check in git-fetcher.ts by crafting bracketed IPv6 addresses or IPv4-mapped IPv6 addresses such as [::1] or [::ffff:169.254.169.254]. Because PRIVATE_ADDR_RE neither strips the brackets nor decodes the mapped format, loopback, link-local and private addresses successfully bypass the SSRF denylist. The attacker can then issue remote requests against cloud metadata endpoints or internal services, causing sensitive configuration disclosure and creating the risk of internal network penetration.</p><p>It is recommended to strip leading and trailing brackets from the URL hostname and normalize it into standard IPv4 or IPv6 form, while extending the regular expression to cover every category of IPv6 private address range and IPv4-mapped variant — completing thorough protocol normalization and address type determination before internal access control, thereby closing off this class of boundary bypass.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e1">Source</a></p><h4>node-http-proxy header transformation defect on DELETE and OPTIONS requests leading to HTTP request smuggling, unauthorized access and data disclosure</h4><p>An attacker triggers the vulnerability by crafting a DELETE or OPTIONS request that carries a Transfer-Encoding: chunked header but no Content-Length header. Because the deleteLength function does not check for the presence of chunked encoding before forcibly setting Content-Length to 0 and removing the Transfer-Encoding header, the backend server terminates reading early based on the incorrect length and misinterprets the remaining payload as a new request. This CL.TE smuggling mechanism allows an attacker to inject arbitrary HTTP methods that bypass proxy routing restrictions, reaching internal sensitive endpoints directly, hijacking session context or poisoning shared caches, seriously undermining system isolation and data integrity.</p><p>It is recommended to fix the code so that length is set to 0 only when both Content-Length and Transfer-Encoding headers are absent, and to strictly prohibit modifying the message framing of requests carrying chunked encoding. Original transfer semantics should be preserved to avoid front-end and backend parsing divergence, and developers should follow the HTTP specification strictly when determining request boundaries to prevent this class of desync attack.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e2">Source</a></p><h4>IT Residence Arbitrary File Upload Leading to Remote Code Execution</h4><p>In IT Residence 3.2.1 and earlier, the subscriber functionality module has insufficient file upload validation, resulting in unrestricted upload of dangerous file types (CWE-434). An attacker can craft a malicious file upload request to bypass security restrictions and upload executable scripts or web shells, threatening server integrity and availability. IT Residence contains an arbitrary file upload vulnerability in subscriber file handling that an attacker can trigger remotely over the network, leading to complete server compromise or data disclosure. It affects all IT Residence users who have not updated beyond 3.2.1, including every site environment where the plugin is deployed. An attacker needs only a low-privilege account to launch the attack, with no complex interaction and remote control possible.</p><p>Strictly limit uploadable file types and extensions to an allowlist of safe formats; Configure the upload directory to prohibit script execution (for example by removing execute permissions); Deploy a web application firewall (WAF) to intercept anomalous upload request behavior</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#cve-2026-74014">Source</a></p><h4>Omnigent Shared Agent Session Permission Bypass Leading to Remote Code Execution</h4><p>In Omnigent prior to version 0.3.0, the PUT /sessions/{session_id}/agent endpoint contains a logic flaw: although it checks the session's LEVEL_EDIT permission, it does not reject bound shared or template agents whose agent.session_id is None. An authenticated user with session edit permission can replace that shared agent package through omnigent/server/routes/sessions.py, add a stdio MCP server, and cause subsequent sessions using the shared agent to launch attacker-controlled commands through omnigent/tools/mcp.py. The command executes with the privileges of the Omnigent runner process, potentially exposing files, credentials, workspace data, internal services and the availability of the runner. The issue was fixed in version 0.3.0.</p><p>Immediately upgrade Omnigent to version 0.3.0 or later to fix the vulnerability; Review and restrict access to the /sessions/{session_id}/agent endpoint so only trusted sources can modify shared agents; Monitor Omnigent runner processes for anomalous command execution, particularly stdio MCP server launch records</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#cve-2026-62674">Source</a></p><h4>Incus Instance Migration Config Override Privilege Escalation Leading to Container Escape</h4><p>In Incus prior to version 7.3.0, the system container and virtual machine management module lacks an authorization mechanism (CWE-862), resulting in a configuration override privilege escalation flaw. When migrating an instance to another cluster member, user-supplied configuration overrides — including security-critical keys such as security.privileged and raw.lxc — are applied without enforcing any project restrictions, allowing restricted project users to escalate to a privileged container and escape to the host. Incus contains a permission bypass in instance migration scenarios that an attacker can trigger with a crafted migration configuration, leading to container escape and complete host compromise. It affects all Incus users who have not updated to 7.3.0, including cluster deployments. An attacker needs only restricted project user permissions to trigger it; exploitation is easy and can be performed remotely.</p><p>Immediately upgrade Incus to version 7.3.0 or later to fix the vulnerability; Review instance migration configuration policy across the cluster and restrict override permissions for sensitive configuration keys; Monitor container migration logs to detect anomalous configuration overrides and privilege escalation attempts</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#cve-2026-62940">Source</a></p><h4>cig-data-patcher@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5eedc571cde211bb2175a56afce728e6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e3">Source</a></p><h4>create-react-app-text@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 6956d2b9cfff978d5c772f3492d72c75</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e4">Source</a></p><h4>create-react-app-ui@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5e997e3fe9733a790756a2ba35d6353d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e5">Source</a></p><h4>create-react-app-ux@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5d95381cf07143ee6398c56c0d096233</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e6">Source</a></p><h4>ethereum-validator@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2621a4097c64b80e4ac116514609e4f7</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e7">Source</a></p><h4>goldstar-api-server@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: cb588940bb863de67c0f370367477ccf</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e8">Source</a></p><h4>@pablo_clueless/printr@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 5d4ac904aa416f6f58191c1794e151a3</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e9">Source</a></p><h4>@pablo_clueless/sniffr@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2a40044d00b9afc086008d6cb94d233d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e10">Source</a></p><h4>exam-kit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 2c782b0562158c100b434a9c867206cd</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e11">Source</a></p><h4>@next-fonts/font@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 274e18a3ba7a1eaeeb84443eb095561c</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e12">Source</a></p><h4>kelly-sizing@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 813bad3b1a823b1617b88af89793f87d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e13">Source</a></p><h4>lumen-pages-community@9.9.9 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c156900a09ef879ae2ac686b41b24102</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e14">Source</a></p><h4>internallib_v902@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 379eabfd65fd4defb322cbbab0bf4197</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e15">Source</a></p><h4>stillm4ddpocs-demo-gadget@999.9.10 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d4292b2aacf9d120d3937b65575942dc</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e16">Source</a></p><h4>@syncraft-labs/core@0.4.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: ed5298f4d7ada01979f78dd4a3f414d1</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e17">Source</a></p><h4>@syncraft-labs/react@0.4.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 18f96e66b323b6b598f6e3ef7cd21a15</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e18">Source</a></p><h4>@syncraft-labs/vue@0.4.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 47e70f2ca8803e60e280f77257d6e0cb</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e19">Source</a></p><h4>stillm4ddpocs-demo-sprocket@999.9.12 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0f50213a9575c50f98d860a367ec297d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e20">Source</a></p><h4>stillm4ddpocs-rtest-bravo@999.9.10 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4ec16f9241a20f69090aa2680bc2e4be</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e21">Source</a></p><h4>totp-utils@1.4.9 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: bfb0c8f207e3b63b596f254238dc7362</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-23.html#e22">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-20.html https://www.sectrend.com.cn/en/intel-2026-08-20.html Thu, 20 Aug 2026 01:00:00 GMT <h4>hermes-agent incorrect interaction mode setting disables the security approval mechanism, letting the model bypass restrictions and execute dangerous commands</h4><p>The vulnerability originates in the cli.py entry point unconditionally setting the HERMES_INTERACTIVE environment variable to 1, causing non-interactive single-query mode to be misidentified as interactive. This triggers a human approval prompt that can never be answered, leading to timeouts or tool invocation failures. Because the refusal surfaces as a generic fault rather than an explicit security policy denial, the agent model treats it as a technical obstacle to overcome and reconstructs the dangerous instruction through execution channels such as execute_code that are not subject to the same restrictions — for example running shutil.rmtree via python3 -c — successfully bypassing command filtering for categories such as recursive deletion. The affected host ultimately faces loss of data integrity and high-risk unauthorized operations.</p><p>It is recommended to disable the interactive flag in non-interactive mode to avoid futile approval hangs, and to configure an explicit automatic denial or allowlist policy for that path. All execution channels should apply the same security classification checks so the model receives a clear policy denial signal, preventing it from seeking workarounds around security restrictions.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e1">Source</a></p><h4>Apache Superset MCP service exception handling defect disables authentication, permitting unauthorized access</h4><p>An attacker exploits the silent swallowing of exceptions thrown by MCP_AUTH_FACTORY in the _create_auth_provider function. When a custom authentication factory fails because of a configuration error, dependency change or missing environment variable, the system returns None instead of terminating startup, leaving the MCP server running with no authentication. Any remote user can then issue requests without credentials, causing sensitive data disclosure and loss of system integrity.</p><p>It is recommended to remove the exception suppression around authentication factory initialization and follow fail-safe principles by rethrowing the exception to prevent service startup, or to refuse service outright when the authentication provider is empty while a factory is configured — ensuring the system never degrades to an unprotected state when the authentication component is unavailable.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e2">Source</a></p><h4>Stigmem Unauthenticated Access Leading to Arbitrary Read, Write and Federation Operations</h4><p>In Stigmem prior to version 0.9.0a2, disabling authentication in a non-loopback deployment results in an unauthenticated access (CWE-285) security flaw. If a node is exposed beyond the local development environment, an attacker can perform read, write and federation operations anonymously. The vulnerability allows an unauthenticated attacker to manipulate data and services directly wherever the network is exposed, seriously threatening system integrity and confidentiality. It affects all Stigmem users who have not updated to 0.9.0a2, particularly deployments binding the service to non-local interfaces without enforced authentication. An attacker can launch the attack remotely without any credentials, obtaining sensitive data or tampering with system state directly.</p><p>Immediately upgrade Stigmem to version 0.9.0a2 or later; Enforce authentication in non-local deployment environments; Configure firewall rules to restrict access to Stigmem ports, allowing only trusted IP addresses</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#cve-2026-76243">Source</a></p><h4>Nikstore Core Unauthenticated SQL Injection Leading to Database Disclosure</h4><p>In Nikstore Core 1.5 and earlier, the core processing module lacks strict filtering and escaping of input parameters, resulting in an unauthenticated SQL injection (CWE-89) security flaw. An attacker can send a crafted malicious request over the network without any authentication and manipulate backend database queries directly. The vulnerability allows an attacker to bypass authentication, steal sensitive data, tamper with database content or take further control of the server. It affects all users running Nikstore Core 1.5 and earlier, and because no user interaction is required, an attacker can exploit it remotely at scale with automated scripts.</p><p>Immediately upgrade Nikstore Core to a secure version after 1.5; Deploy a web application firewall (WAF) at the application layer to intercept common SQL injection patterns; Minimize database access permissions and restrict what the application account can do in the database</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#cve-2026-73388">Source</a></p><h4>ai-texts-utils@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 0146821466ebfda76227a76aadd6c53e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e3">Source</a></p><h4>mc-provider@1.0.10 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c6b238519943f1abd95d4da0b2be4d33</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e4">Source</a></p><h4>node-runtime-utils@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f6c561b78feb70fe5fc40738cd979273</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e5">Source</a></p><h4>@httttt/mcp-demo@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: c8e4e3a01cb8df5eaa593d36a887e48d</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e6">Source</a></p><h4>expect-dotenv@7.2.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: afbea90650288a41fd6da2152e3490b5</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-20.html#e7">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-19.html https://www.sectrend.com.cn/en/intel-2026-08-19.html Wed, 19 Aug 2026 01:00:00 GMT <h4>CubeSandbox CubeOps weak credential configuration allows forged administrator tokens leading to authentication bypass</h4><p>Because the BootstrapJWTSecret function performs no validity check on empty strings at startup, the system loads a zero-length HMAC key whenever the JWT secret in the database is empty or reads back abnormally. An attacker can exploit this flaw to construct a valid access token containing the administrator role without any network interaction or complex preconditions, bypassing the authentication middleware directly and obtaining full control over every protected endpoint under /api/v1.</p><p>It is recommended to add non-empty validation for the JWT secret in code, ensure the key length meets security requirements, and require generation of a high-entropy random key on first deployment. The storage layer logic that swallows database errors should also be fixed to improve robustness.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e1">Source</a></p><h4>better-auth URL validation defect allows attackers to bypass SSRF protection leading to internal network probing and data disclosure</h4><p>The vulnerability originates in an asymmetry between the discovery endpoint URL validation logic and the manual configuration path. When a tenant registers an external identity provider, the system requires the unknown origin to be added to the trusted list to pass validation, but this action simultaneously disables security checks against private addresses and DNS resolution. An attacker can exploit this logic defect by crafting a malicious HTTPS request that induces the server to connect to internal networks, performing a server-side request forgery attack that exposes internal services or leaks sensitive information.</p><p>It is recommended that developers unify the URL validation model so publicly routable HTTPS hosts still undergo strict IP address and DNS resolution security checks without needing to be added to the trusted list, reserving the trusted list exemption only for non-standard protocols or private addresses — fixing the SSRF protection bypass without sacrificing functionality.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e2">Source</a></p><h4>Thunderbird Memory Corruption Leading to Remote Code Execution</h4><p>Internally discovered memory corruption vulnerabilities (CWE-119) exist in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or other security-relevant defects and, with enough effort, could presumably be exploited. The issue has been fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14 and Thunderbird 153.1. Thunderbird carries a memory corruption risk when processing certain data, which an attacker can trigger with a crafted email or attachment, leading to remote code execution or service disruption. The vulnerability affects all Thunderbird users who have not updated to the fixed versions above. An attacker only needs to induce the target to open a crafted email to exploit it, requiring no user interaction and allowing remote control.</p><p>Monitor logs for anomalous memory access behavior; Enable sandbox isolation for the runtime environment; Block loading of email attachments from untrusted sources</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#cve-2026-74990">Source</a></p><h4>Seroval fromJSON Deserialization Leading to Remote Code Execution</h4><p>In Seroval prior to version 1.5.3, the seroval.fromJSON() function does not verify genuine internal Promise resolver records, resulting in deserialization of trusted data (CWE-502). An attacker-controlled JSON Promise control node can manipulate values in the generic deserialization reference table, producing deserialization side effects when plugins are enabled and potentially causing unintended server-side calls or remote code execution when downstream frameworks register callable wrappers. The vulnerability affects all Seroval users who have not updated to 1.5.3. An attacker can trigger it with crafted JSON data, requiring no user interaction and allowing remote control.</p><p>Immediately upgrade Seroval to version 1.5.3 or later; Apply strict allowlist validation to input data and reject untrusted Promise control nodes; Restrict the registration scope of callable wrappers in downstream frameworks to avoid unintended server-side calls</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#cve-2026-59940">Source</a></p><h4>infogram-bot@1.6.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 37664be0544034a16e1dc98660079415</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e3">Source</a></p><h4>bqq1@1.0.0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 880e8dd99bcdab7a264b2d2bd7de4a2e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e4">Source</a></p><h4>txs-lib-sdk@1.0.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 27e9b8dce5f0871365c2f122737a12d2</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e5">Source</a></p><h4>chaikit@2.3.5 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 79ac17604df97b414e0160628044f14a</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e6">Source</a></p><h4>@sarex-team/sdk-js@9.9.11 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: e6e48ce32fd1c1f8fef18345dbbd0b55</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e7">Source</a></p><h4>@sarex-team/viewer@9.9.11 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 65dd93d31b3160314132bcc0a7e18237</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e8">Source</a></p><h4>hardhat-hold@2.0.1 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: f920d19a4402378da0355080c805ef0f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e9">Source</a></p><h4>secp256k1-lib@1.0.3 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1418cb9c240e36876b980e5783057672</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e10">Source</a></p><h4>price-scripping-js@1.1.2 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4dc78f582330b9510eea2a5f3b8ee256</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-19.html#e11">Source</a></p> https://www.sectrend.com.cn/en/intel-2026-08-18.html https://www.sectrend.com.cn/en/intel-2026-08-18.html Tue, 18 Aug 2026 01:00:00 GMT <h4>cal.diy authorization defect allows privilege-exceeding handling of team bookings and data compromise</h4><p>The defect originates from a hardcoded permission validation stub service in the booking access control module, which always returns an allow result when handling team booking scenarios, leaving upper-layer route handlers unable to intercept unauthorized requests. An attacker holding only ordinary user credentials can craft malicious confirmation instructions over the network interface, tampering with the target booking identifier to trigger privilege-exceeding logic. This path bypasses the dynamic identity binding mechanism directly, allowing an attacker to illegitimately approve or reject any pending team schedule and pivot laterally into the private booking records of organization members. Affected systems face cross-tenant unauthorized read and write and disruption of business workflow order.</p><p>It is recommended that the development team remove all test permission validation stub code and replace it with a real authorization implementation backed by the relational database, strictly enforcing user identity binding and role permission mapping. Least privilege should be applied at sensitive business nodes so that contextual permission is re-verified before every data operation. Automated authorization test cases and end-to-end audit logging should also be introduced, with defensive programming standards established to prevent this class of logic defect.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e1">Source</a></p><h4>Claude Code command wrapping and variable interpolation defect enabling malicious operations that wipe the host system drive</h4><p>An attacker can craft a file path parameter containing special syntax to induce the local interpreter to perform undefined variable interpolation within a double-quoted context, statically collapsing the original target path into the root directory identifier. This mechanism also bypasses static path protection that only covers literal built-in command invocations. The attack chain nests the underlying system shell to redirect the restricted operation into an equivalent deletion command, using error stream redirection and silent execution flags to suppress runtime feedback. When such a high-risk instruction exceeds the preset foreground interaction timeout, the system automatically hands it to a background thread to continue running with no secondary confirmation interception, ultimately causing irreversible erasure of the host operating system core partition and associated configuration files, resulting in permanent service outage and loss of business continuity.</p><p>It is recommended to enforce strict path allowlist validation and ensure security rules cover all equivalent shell-wrapped commands. Syntax analysis should be deployed at the instruction routing layer to block irregular paths, high-risk operations should require mandatory human review, log capture policy should be standardized, and system call scope should be restricted under least privilege.</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e2">Source</a></p><h4>YouTrack Unauthenticated Database Backup Download via Shared Draft Signature</h4><p>In JetBrains YouTrack prior to versions 2025.3.156085, 2026.1.13913 and 2026.2.18112, an authentication bypass using an alternate path or channel (CWE-288) security flaw exists. An unauthenticated attacker can download database backups directly through a shared draft signature, resulting in sensitive data disclosure. The vulnerability affects all YouTrack users who have not updated to the above secure versions. An attacker can trigger it remotely over the network without any authentication, exploitation complexity is low, and it directly grants high-confidentiality and high-integrity data access.</p><p>Immediately upgrade YouTrack to 2025.3.156085, 2026.1.13913 or 2026.2.18112 or later; Restrict network access to YouTrack instances, allowing connections only from trusted IP addresses; Monitor for anomalous large file downloads and unauthorized database access logs</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#cve-2026-75045">Source</a></p><h4>openssl_encrypt Authentication Bypass Leading to Loss of Data Integrity</h4><p>In openssl_encrypt prior to version 1.4.0, the pqc.py module contains an authentication bypass (CWE-347) security flaw: when AES-GCM decryption fails, the system incorrectly falls back to unauthenticated AES-CTR mode. An attacker can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks undetected. The vulnerability affects all openssl_encrypt users who have not updated to 1.4.0. An attacker only needs to intercept and modify ciphertext in network transit to exploit it, requiring no user interaction and allowing remote control.</p><p>Immediately upgrade openssl_encrypt to version 1.4.0 or later; Enable an additional integrity verification mechanism such as HMAC at the transport layer; Monitor network traffic for anomalous ciphertext modification and block suspicious connections promptly</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#cve-2026-74901">Source</a></p><h4>bcs-core@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: eaac5b4a93514e197782b300a136ae90</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e3">Source</a></p><h4>leb128x@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 70608bb7fe522648626629ef63bd9531</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e4">Source</a></p><h4>reseller-app@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 1bdde0a0452c7b593ffb3c4eabb9cb9f</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e5">Source</a></p><h4>sui-gql-core@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: d88bb84fa805d8166f66d9189f24beb6</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e6">Source</a></p><h4>sui-move-rpc@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4990ad581ab620badc84e7be998b307e</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e7">Source</a></p><h4>blastradar@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: df23136304d6c07837deaa9d9d026fcc</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e8">Source</a></p><h4>sui-move-graphql@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 4fb838d9d1b24a73704fca1266b3a9c0</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e9">Source</a></p><h4>ulebkit@&gt;= 0 flagged as malicious</h4><p>This version was found communicating with a malicious domain and executing malicious commands. Audit your dependencies and pin safe versions immediately.</p><p>MD5: 864335a3abbc5adfeff382d58ffbd903</p><p><a href="https://www.sectrend.com.cn/en/intel-2026-08-18.html#e10">Source</a></p>