Daily CVE Report — 2026-06-04
47 CVEs published in the last 24 hours with CVSS ≥ 7.0
- 🔴 Critical (9.0–10.0): 6
- 🟠 High (7.0–8.9): 41
IOCs listed are potential indicators based on vulnerability class — treat as a starting point for threat hunting, not confirmed detections.
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14771
Weakness: CWE-552
Situation
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41283
Weakness: CWE-863
Situation
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-47065
Weakness: CWE-502
Situation
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy
Assessment: Fully addressed.
When the serialised stream contains a TC_PROXYCLASSDESC (the marker
for a java.lang.reflect.Proxy ), JDK’s ObjectInputStream.readProxyDesc()
is
dispatched. JDK then calls the default
ObjectInputStream.resolveProxyClass(interfaces) implementation, which
performs Class.forName(intf, false, latestUserDefinedLoader()) for EACH
interface name and constructs the proxy class — bypassing the accepted
classes list .
ZDRES-233: Class.forName(name, initialize=true, classLoader) in
readClassDescriptor Triggers Static Initialiser of Allow-Listed Classes
Assessment: Fully addressed.
For ANY class on the allow-list, deserialising a stream that names it triggers the class’s
(static initialiser) BEFORE any instance is constructed. This means an
attacker who supplies a class name on the allow-list (e.g., the
developer wrote accept(“com.myapp.*") , attacker supplies
com.myapp.SomeClass ) causes of SomeClass — and many
real-world classes have side-effecting static initialisers
Both issues have been fixed.
Potential IOCs
- Malformed or unexpected serialized objects in requests
- Unexpected object instantiation or class-loading in app logs
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35075
Weakness: CWE-1393
Situation
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36576
Weakness: CWE-78
Situation
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.
Potential IOCs
- Unexpected child processes spawned by the web/app server
- Unusual system command executions in OS audit logs
- New cron jobs or scheduled tasks
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36748
Weakness: CWE-79
Situation
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
Potential IOCs
- Script tags or encoded JS in user-supplied input
- Unexpected outbound requests from client browsers
- CSP violation reports
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14772
Weakness: CWE-639
Situation
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15656
Weakness: CWE-266
Situation
Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.
This issue affects School Management: from n/a through 93.2.0.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35082
Weakness: CWE-22
Situation
The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.
Potential IOCs
- Directory traversal sequences (../) in request paths
- Access to files outside expected document root in logs
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35083
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35084
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35085
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36607
Weakness: CWE-307
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate limiting applied to the login endpoint (code=7). An attacker on the adjacent network can attempt unlimited passwords without triggering account lockout.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36608
Weakness: CWE-441
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or localhost (127.0.0.1) as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the internet with a single SOAP request.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41860
Weakness: CWE-326
Situation
CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attacker to intercept traffic between bosh-monitor and the BOSH director or UAA and steal credentials.
Affected versions:
- BOSH: all versions prior to v282.1.9 (inclusive); fixed in v282.1.9 or later
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-20230
Weakness: CWE-918
Situation
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.
Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.
Note: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41011
Weakness: CWE-78
Situation
PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release.MF inside the uploaded tarball. The string is passed to Bosh::Common::Exec.sh, which executes via %x{} — i.e., /bin/sh -c. No Shellwords.escape is applied. The Models::Package Sequel validation (VALID_ID = /^[-0-9A-Za-z_+.]+$/i) would reject the name, but in create_package (lines 74–79) the shell-out in save_package_source_blob runs before package.save, so validation fires too late.
Affected versions:
- BOSH: all versions prior to v282.1.12 (inclusive); fixed in v282.1.12 or later
Potential IOCs
- Unexpected child processes spawned by the web/app server
- Unusual system command executions in OS audit logs
- New cron jobs or scheduled tasks
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41010
Weakness: CWE-78
Situation
ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolated into a shell string: Bosh::Common::Exec.sh("tar -C #{job_dir} -xf #{job_tgz} 2>&1", :on_error => :return). Bosh::Common::Exec.sh executes via %x{#{command}} (bosh-common/lib/bosh/common/exec.rb:53), i.e. /bin/sh -c, so any shell metacharacters in name are interpreted. FileUtils.mkdir_p(job_dir) on line 49 creates the literal directory (no shell) and succeeds even when the name contains $()/;, so execution reaches the sh call.
Affected versions:
- BOSH Director: all versions prior to v282.1.12 (inclusive); fixed in v282.1.12 or later
Potential IOCs
- Unexpected child processes spawned by the web/app server
- Unusual system command executions in OS audit logs
- New cron jobs or scheduled tasks
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35076
Weakness: CWE-73
Situation
The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35077
Weakness: CWE-73
Situation
The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35078
Weakness: CWE-73
Situation
The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35079
Weakness: CWE-73
Situation
The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35080
Weakness: CWE-73
Situation
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35081
Weakness: CWE-20
Situation
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
Potential IOCs
- Malformed or oversized input in application logs
- Validation error spikes in application metrics
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14773
Weakness: CWE-79
Situation
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
- Script tags or encoded JS in user-supplied input
- Unexpected outbound requests from client browsers
- CSP violation reports
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5241
Weakness: CWE-829
Situation
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the trust_remote_code parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using AutoModel.from_pretrained() with trust_remote_code=False, the LightGlueConfig reads the trust_remote_code value from the untrusted config.json file and propagates it into nested AutoConfig.from_pretrained() calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-49036
Weakness: CWE-829
Situation
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-49042
Weakness: CWE-829
Situation
An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via unspecified vectors.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
CVE-2026-40290 | CVSS 7.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-40290
Weakness: CWE-416
Situation
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.16.0 and prior to 4.11.0, a user-after-free (UAF) race condition exists in the shared memory teardown logic of FF-A within OP-TEE SPMC/SP flows. This only applies when OP-TEE is configured as an SPMC for S-EL0 SPs, that is, with CFG_SECURE_PARTITION=y. The function sp_mem_remove(), responsible for freeing entries in smem->receivers and smem->regions, fails to acquire the global sp_mem_lock before performing the free() operations. Concurrently, other code paths, such as sp_mem_get_receiver(), iterate over these same lists without holding a lock, or, like sp_mem_is_shared(), iterate while holding the lock but are not serialized against the unprotected free() in sp_mem_remove(). This creates a cross-thread race where a thread iterating the list can acquire a pointer to an entry (e.g., struct sp_mem_map_region or struct sp_mem_receiver), and then another thread calls sp_mem_remove(), freeing the object. When the first thread resumes and dereferences the pointer, it results in a Use-After-Free vulnerability. Version 4.11.0 fixes the issue.
Potential IOCs
- Heap corruption indicators in crash/core dumps
- Unexpected memory access violations in system logs
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41859
Weakness: CWE-295
Situation
A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials grant administrative director access. UsersSync#bosh_api_response_body builds a Net::HTTP client with verify_mode = OpenSSL::SSL::VERIFY_NONE for every director call (/info, /deployments, /deployments//vms).
Affected versions:
- BOSH: all versions prior to v282.1.9 (inclusive); fixed in v282.1.9 or later
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15655
Weakness: CWE-89
Situation
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection.
This issue affects School Management: from n/a through 93.2.0.
Potential IOCs
- SQL syntax strings in HTTP parameters or logs
- Excessive database error responses (500s)
- Unusual database query volumes or timings
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-49771
Weakness: CWE-89
Situation
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.
This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.
Potential IOCs
- SQL syntax strings in HTTP parameters or logs
- Excessive database error responses (500s)
- Unusual database query volumes or timings
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41032
Weakness: CWE-200
Situation
It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10737
Weakness: CWE-862
Situation
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attackers to read file metadata and obtain download links for arbitrary files stored inside project folders on the server, which can contain sensitive information. The authorization gate uses a negated nonce check OR-chained with permission checks, meaning a missing or invalid nonce causes the entire condition to evaluate to true and bypass all preceding capability and ownership checks. The secondary fallback check only denies access for root-level files (pid == 0), leaving all files stored inside project folders fully exposed to unauthenticated users who supply only a valid file ID in a POST request to admin-ajax.php.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41858
Weakness: CWE-338
Situation
Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a small candidate list to recover the Administrator password. The randomize_password job exists solely to lock the local Administrator account behind an unguessable password as a hardening control. Because the password is derived from a predictable, clock-seeded PRNG, a network attacker who can estimate VM boot time can reconstruct a small candidate list and recover the Administrator password, defeating the hardening control.
Affected versions:
- windows-utilities-release: all versions prior to v0.23.0 (inclusive); fixed in v0.23.0 or later
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14774
Weakness: CWE-863
Situation
Incorrect Authorization vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37462
Situation
An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36609
Weakness: CWE-327, CWE-341
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-based password encoding (securityEncode function), this allows an attacker to reverse captured authentication tokens to recover the plaintext password.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36611
Weakness: CWE-200
Situation
Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-42061
Weakness: CWE-250
Situation
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44609
Weakness: CWE-427
Situation
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44682
Weakness: CWE-427
Situation
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50033
Weakness: CWE-427
Situation
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10771
Weakness: CWE-918
Situation
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10777
Weakness: CWE-287
Situation
A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the file admin/config.php of the component Administrative Backend. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Potential IOCs
- Authentication bypass attempts in access logs
- Logins without corresponding credential validation events
- Sessions created without prior authentication events
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3820
Weakness: CWE-78
Situation
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.
An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process invocation.
Potential impact includes denial-of-service attacks, arbitrary code execution, or permanent compromise of the controller.
Potential IOCs
- Unexpected child processes spawned by the web/app server
- Unusual system command executions in OS audit logs
- New cron jobs or scheduled tasks
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36606
Weakness: CWE-798
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a backup file can decrypt it to recover all stored credentials including admin password, WiFi PSK, and DDNS credentials.
Potential IOCs
- Successful logins from unexpected IPs using default credentials
- Brute-force attempts against known default accounts
Remediation
Generated by daily-cves · Source: NVD
Daily CVE Report — 2026-06-04
47 CVEs published in the last 24 hours with CVSS ≥ 7.0
CVE-2025-14771 | CVSS 9.9 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14771
Weakness: CWE-552
Situation
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
Remediation
CVE-2026-41283 | CVSS 9.9 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41283
Weakness: CWE-863
Situation
OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.
Potential IOCs
Remediation
CVE-2026-47065 | CVSS 9.8 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-47065
Weakness: CWE-502
Situation
ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy
Assessment: Fully addressed.
When the serialised stream contains a TC_PROXYCLASSDESC (the marker
for a java.lang.reflect.Proxy ), JDK’s ObjectInputStream.readProxyDesc()
is
dispatched. JDK then calls the default
ObjectInputStream.resolveProxyClass(interfaces) implementation, which
performs Class.forName(intf, false, latestUserDefinedLoader()) for EACH
interface name and constructs the proxy class — bypassing the accepted
classes list .
ZDRES-233: Class.forName(name, initialize=true, classLoader) in
readClassDescriptor Triggers Static Initialiser of Allow-Listed Classes
Assessment: Fully addressed.
For ANY class on the allow-list, deserialising a stream that names it triggers the class’s
(static initialiser) BEFORE any instance is constructed. This means an
attacker who supplies a class name on the allow-list (e.g., the
developer wrote accept(“com.myapp.*") , attacker supplies
com.myapp.SomeClass ) causes of SomeClass — and many
real-world classes have side-effecting static initialisers
Both issues have been fixed.
Potential IOCs
Remediation
CVE-2026-35075 | CVSS 9.8 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35075
Weakness: CWE-1393
Situation
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Potential IOCs
Remediation
CVE-2026-36576 | CVSS 9.8 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36576
Weakness: CWE-78
Situation
An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.
Potential IOCs
Remediation
CVE-2026-36748 | CVSS 9.0 🔴 CRITICAL
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36748
Weakness: CWE-79
Situation
RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.
Potential IOCs
Remediation
CVE-2025-14772 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14772
Weakness: CWE-639
Situation
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
Remediation
CVE-2025-15656 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15656
Weakness: CWE-266
Situation
Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.
This issue affects School Management: from n/a through 93.2.0.
Potential IOCs
Remediation
CVE-2026-35082 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35082
Weakness: CWE-22
Situation
The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.
Potential IOCs
Remediation
CVE-2026-35083 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35083
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
Potential IOCs
Remediation
CVE-2026-35084 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35084
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.
Potential IOCs
Remediation
CVE-2026-35085 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35085
Weakness: CWE-121
Situation
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.
Potential IOCs
Remediation
CVE-2026-36607 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36607
Weakness: CWE-307
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate limiting applied to the login endpoint (code=7). An attacker on the adjacent network can attempt unlimited passwords without triggering account lockout.
Potential IOCs
Remediation
CVE-2026-36608 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36608
Weakness: CWE-441
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or localhost (127.0.0.1) as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the internet with a single SOAP request.
Potential IOCs
Remediation
CVE-2026-41860 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41860
Weakness: CWE-326
Situation
CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attacker to intercept traffic between bosh-monitor and the BOSH director or UAA and steal credentials.
Affected versions:
Potential IOCs
Remediation
CVE-2026-20230 | CVSS 8.6 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-20230
Weakness: CWE-918
Situation
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.
Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.
Note: To exploit this vulnerability, the WebDialer service must be enabled. WebDialer is disabled by default.
Potential IOCs
Remediation
CVE-2026-41011 | CVSS 8.2 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41011
Weakness: CWE-78
Situation
PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release.MF inside the uploaded tarball. The string is passed to Bosh::Common::Exec.sh, which executes via %x{} — i.e., /bin/sh -c. No Shellwords.escape is applied. The Models::Package Sequel validation (VALID_ID = /^[-0-9A-Za-z_+.]+$/i) would reject the name, but in create_package (lines 74–79) the shell-out in save_package_source_blob runs before package.save, so validation fires too late.
Affected versions:
Potential IOCs
Remediation
CVE-2026-41010 | CVSS 8.2 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41010
Weakness: CWE-78
Situation
ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside the uploaded tarball. These paths are then interpolated into a shell string: Bosh::Common::Exec.sh("tar -C #{job_dir} -xf #{job_tgz} 2>&1", :on_error => :return). Bosh::Common::Exec.sh executes via %x{#{command}} (bosh-common/lib/bosh/common/exec.rb:53), i.e. /bin/sh -c, so any shell metacharacters in name are interpreted. FileUtils.mkdir_p(job_dir) on line 49 creates the literal directory (no shell) and succeeds even when the name contains $()/;, so execution reaches the sh call.
Affected versions:
Potential IOCs
Remediation
CVE-2026-35076 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35076
Weakness: CWE-73
Situation
The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
Remediation
CVE-2026-35077 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35077
Weakness: CWE-73
Situation
The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
Remediation
CVE-2026-35078 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35078
Weakness: CWE-73
Situation
The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
Remediation
CVE-2026-35079 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35079
Weakness: CWE-73
Situation
The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
Remediation
CVE-2026-35080 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35080
Weakness: CWE-73
Situation
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Potential IOCs
Remediation
CVE-2026-35081 | CVSS 8.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-35081
Weakness: CWE-20
Situation
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
Potential IOCs
Remediation
CVE-2025-14773 | CVSS 8.0 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14773
Weakness: CWE-79
Situation
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
Remediation
CVE-2026-5241 | CVSS 8.0 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5241
Weakness: CWE-829
Situation
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the
trust_remote_codeparameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model usingAutoModel.from_pretrained()withtrust_remote_code=False, theLightGlueConfigreads thetrust_remote_codevalue from the untrustedconfig.jsonfile and propagates it into nestedAutoConfig.from_pretrained()calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.Potential IOCs
Remediation
CVE-2022-49036 | CVSS 7.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-49036
Weakness: CWE-829
Situation
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.
Potential IOCs
Remediation
CVE-2022-49042 | CVSS 7.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-49042
Weakness: CWE-829
Situation
An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users to execute arbitrary code via unspecified vectors.
Potential IOCs
Remediation
CVE-2026-40290 | CVSS 7.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-40290
Weakness: CWE-416
Situation
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.16.0 and prior to 4.11.0, a user-after-free (UAF) race condition exists in the shared memory teardown logic of FF-A within OP-TEE SPMC/SP flows. This only applies when OP-TEE is configured as an SPMC for S-EL0 SPs, that is, with
CFG_SECURE_PARTITION=y. The functionsp_mem_remove(), responsible for freeing entries insmem->receiversandsmem->regions, fails to acquire the globalsp_mem_lockbefore performing thefree()operations. Concurrently, other code paths, such assp_mem_get_receiver(), iterate over these same lists without holding a lock, or, likesp_mem_is_shared(), iterate while holding the lock but are not serialized against the unprotectedfree()insp_mem_remove(). This creates a cross-thread race where a thread iterating the list can acquire a pointer to an entry (e.g.,struct sp_mem_map_regionorstruct sp_mem_receiver), and then another thread callssp_mem_remove(), freeing the object. When the first thread resumes and dereferences the pointer, it results in a Use-After-Free vulnerability. Version 4.11.0 fixes the issue.Potential IOCs
Remediation
CVE-2026-41859 | CVSS 7.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41859
Weakness: CWE-295
Situation
A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials grant administrative director access. UsersSync#bosh_api_response_body builds a Net::HTTP client with verify_mode = OpenSSL::SSL::VERIFY_NONE for every director call (/info, /deployments, /deployments//vms).
Affected versions:
Potential IOCs
Remediation
CVE-2025-15655 | CVSS 7.6 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15655
Weakness: CWE-89
Situation
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection.
This issue affects School Management: from n/a through 93.2.0.
Potential IOCs
Remediation
CVE-2026-49771 | CVSS 7.6 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-49771
Weakness: CWE-89
Situation
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.
This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.
Potential IOCs
Remediation
CVE-2026-41032 | CVSS 7.5 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41032
Weakness: CWE-200
Situation
It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.
Potential IOCs
Remediation
CVE-2026-10737 | CVSS 7.5 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10737
Weakness: CWE-862
Situation
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attackers to read file metadata and obtain download links for arbitrary files stored inside project folders on the server, which can contain sensitive information. The authorization gate uses a negated nonce check OR-chained with permission checks, meaning a missing or invalid nonce causes the entire condition to evaluate to true and bypass all preceding capability and ownership checks. The secondary fallback check only denies access for root-level files (pid == 0), leaving all files stored inside project folders fully exposed to unauthenticated users who supply only a valid file ID in a POST request to admin-ajax.php.
Potential IOCs
Remediation
CVE-2026-41858 | CVSS 7.5 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41858
Weakness: CWE-338
Situation
Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a small candidate list to recover the Administrator password. The randomize_password job exists solely to lock the local Administrator account behind an unguessable password as a hardening control. Because the password is derived from a predictable, clock-seeded PRNG, a network attacker who can estimate VM boot time can reconstruct a small candidate list and recover the Administrator password, defeating the hardening control.
Affected versions:
Potential IOCs
Remediation
CVE-2025-14774 | CVSS 7.4 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14774
Weakness: CWE-863
Situation
Incorrect Authorization vulnerability in ABB T-MAC Plus.
This issue affects T-MAC Plus: 4.0-24.
Potential IOCs
Remediation
CVE-2026-37462 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-37462
Situation
An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Potential IOCs
Remediation
CVE-2026-36609 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36609
Weakness: CWE-327, CWE-341
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-based password encoding (securityEncode function), this allows an attacker to reverse captured authentication tokens to recover the plaintext password.
Potential IOCs
Remediation
CVE-2026-36611 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36611
Weakness: CWE-200
Situation
Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port 1900, exposing internal memory to unauthenticated adjacent network attackers.
Potential IOCs
Remediation
CVE-2026-42061 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-42061
Weakness: CWE-250
Situation
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
Remediation
CVE-2026-44609 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44609
Weakness: CWE-427
Situation
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
Remediation
CVE-2026-44682 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44682
Weakness: CWE-427
Situation
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
Remediation
CVE-2026-50033 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-50033
Weakness: CWE-427
Situation
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.
Potential IOCs
Remediation
CVE-2026-10771 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10771
Weakness: CWE-918
Situation
A vulnerability was found in crmeb crmeb_java 1.4. Affected is the function RestTemplate.getForEntity of the file crmeb-common/src/main/java/com/zbkj/common/utils/RestTemplateUtil.java of the component base64 Qrcode Endpoint. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Potential IOCs
Remediation
/api/front/qrcode/base64crmeb/crmeb_java#35CVE-2026-10777 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10777
Weakness: CWE-287
Situation
A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the file admin/config.php of the component Administrative Backend. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Potential IOCs
Remediation
CVE-2026-3820 | CVSS 7.2 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3820
Weakness: CWE-78
Situation
There is a vulnerability in the Supermicro BMC SMTP service at Supermicro AS-2115HS-TNR.
An attacker may obtain administrator privileges and inject specially crafted characters into the SMTP service configuration. This may cause the underlying system to execute unintended commands during process invocation.
Potential impact includes denial-of-service attacks, arbitrary code execution, or permanent compromise of the controller.
Potential IOCs
Remediation
CVE-2026-36606 | CVSS 7.1 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36606
Weakness: CWE-798
Situation
Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode. An attacker who obtains a backup file can decrypt it to recover all stored credentials including admin password, WiFi PSK, and DDNS credentials.
Potential IOCs
Remediation
Generated by daily-cves · Source: NVD