Daily CVE Report — 2026-06-07
9 CVEs published in the last 24 hours with CVSS ≥ 7.0
- 🔴 Critical (9.0–10.0): 0
- 🟠 High (7.0–8.9): 9
IOCs listed are potential indicators based on vulnerability class — treat as a starting point for threat hunting, not confirmed detections.
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11413
Weakness: CWE-119, CWE-121
Situation
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-26422
Weakness: CWE-732
Situation
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11435
Weakness: CWE-74, CWE-89
Situation
A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
- SQL syntax strings in HTTP parameters or logs
- Excessive database error responses (500s)
- Unusual database query volumes or timings
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11437
Weakness: CWE-918
Situation
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11450
Weakness: CWE-74, CWE-77
Situation
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument dev_name results in command injection. It is possible to initiate the attack remotely. Upgrading to version 4.7 mitigates this issue. It is advisable to upgrade the affected component. The vendor confirms: " From version 4.7 onward, we have enabled method‑level validation at the HTTP /rpc layer. nas‑web.eject_disk is no longer in the whitelist of allowed methods. Consequently, directly calling eject_disk through the default /rpc endpoint returns Invalid params, preventing entry into subsequent dangerous functions and blocking the remote exploit chain described in the report."
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11451
Weakness: CWE-74, CWE-77
Situation
A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument media_dir can lead to command injection. It is possible to launch the attack remotely. Upgrading to version 4.8.1 will fix this issue. You should upgrade the affected component. The vendor explains: "In version 4.8.1, before writing media_dir to the FTP configuration command, the code escapes single quotes using escape_single_quote(). The payloads in the report—which rely on closing a single quote, appending commands with a semicolon, and commenting out the tail with #—cannot escape execution under the current code path. We also verified this on a GL‑MT3000 device running firmware version 4.8.1 using similar payloads calling the /NAS_API_SET_PROTO_CONFIG interface. Although the interface returned success, the marker file intended to prove command execution was not created; the payload was written into /etc/vsftpd.conf only as ordinary configuration content and did not trigger any shell command execution. Therefore, with the current firmware version and default runtime environment, we could not reproduce the claimed “unauthorized command injection in set_proto_config”."
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11452
Weakness: CWE-74, CWE-77
Situation
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function FUN_0042e200 of the file /cgi-bin/glc of the component SET_USER_PWD Handler. The manipulation of the argument Password leads to command injection. The attack can be initiated remotely. Upgrading to version 4.8.1 is able to address this issue. The affected component should be upgraded. The vendor explains: " The current code escapes single quotes in the password parameter and handles it inside a shell single‑quote context. The payloads in the report, which rely on $() or backticks to trigger command substitution, are not executed under the current code path. We tested on a GL‑MT3000 device running firmware 4.8.1 using similar payloads, and no command‑execution marker file was created."
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11456
Weakness: CWE-74, CWE-89
Situation
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
- SQL syntax strings in HTTP parameters or logs
- Excessive database error responses (500s)
- Unusual database query volumes or timings
Remediation
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11457
Weakness: CWE-74, CWE-707
Situation
A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/testConnection of the component JimuReport test-connection Endpoint. Performing a manipulation of the argument dbType/dbDriver/dbUrl/dbUsername/dbPassword results in injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
- Unexpected outbound network connections from the affected service
- Unusual process creation or privilege escalation events
- New or modified files in application directories
- Spike in error rates or application crashes around the affected component
Remediation
Generated by daily-cves · Source: NVD
Daily CVE Report — 2026-06-07
9 CVEs published in the last 24 hours with CVSS ≥ 7.0
CVE-2026-11413 | CVSS 8.8 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11413
Weakness: CWE-119, CWE-121
Situation
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
Remediation
CVE-2026-26422 | CVSS 8.4 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-26422
Weakness: CWE-732
Situation
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
Potential IOCs
Remediation
CVE-2026-11435 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11435
Weakness: CWE-74, CWE-89
Situation
A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
Remediation
CVE-2026-11437 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11437
Weakness: CWE-918
Situation
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
Remediation
CVE-2026-11450 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11450
Weakness: CWE-74, CWE-77
Situation
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument dev_name results in command injection. It is possible to initiate the attack remotely. Upgrading to version 4.7 mitigates this issue. It is advisable to upgrade the affected component. The vendor confirms: " From version 4.7 onward, we have enabled method‑level validation at the HTTP /rpc layer. nas‑web.eject_disk is no longer in the whitelist of allowed methods. Consequently, directly calling eject_disk through the default /rpc endpoint returns Invalid params, preventing entry into subsequent dangerous functions and blocking the remote exploit chain described in the report."
Potential IOCs
Remediation
CVE-2026-11451 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11451
Weakness: CWE-74, CWE-77
Situation
A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument media_dir can lead to command injection. It is possible to launch the attack remotely. Upgrading to version 4.8.1 will fix this issue. You should upgrade the affected component. The vendor explains: "In version 4.8.1, before writing media_dir to the FTP configuration command, the code escapes single quotes using escape_single_quote(). The payloads in the report—which rely on closing a single quote, appending commands with a semicolon, and commenting out the tail with #—cannot escape execution under the current code path. We also verified this on a GL‑MT3000 device running firmware version 4.8.1 using similar payloads calling the /NAS_API_SET_PROTO_CONFIG interface. Although the interface returned success, the marker file intended to prove command execution was not created; the payload was written into /etc/vsftpd.conf only as ordinary configuration content and did not trigger any shell command execution. Therefore, with the current firmware version and default runtime environment, we could not reproduce the claimed “unauthorized command injection in set_proto_config”."
Potential IOCs
Remediation
CVE-2026-11452 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11452
Weakness: CWE-74, CWE-77
Situation
A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function FUN_0042e200 of the file /cgi-bin/glc of the component SET_USER_PWD Handler. The manipulation of the argument Password leads to command injection. The attack can be initiated remotely. Upgrading to version 4.8.1 is able to address this issue. The affected component should be upgraded. The vendor explains: " The current code escapes single quotes in the password parameter and handles it inside a shell single‑quote context. The payloads in the report, which rely on $() or backticks to trigger command substitution, are not executed under the current code path. We tested on a GL‑MT3000 device running firmware 4.8.1 using similar payloads, and no command‑execution marker file was created."
Potential IOCs
Remediation
CVE-2026-11456 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11456
Weakness: CWE-74, CWE-89
Situation
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxf_dump_systable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
Remediation
CVE-2026-11457 | CVSS 7.3 🟠 HIGH
NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-11457
Weakness: CWE-74, CWE-707
Situation
A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/testConnection of the component JimuReport test-connection Endpoint. Performing a manipulation of the argument dbType/dbDriver/dbUrl/dbUsername/dbPassword results in injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
Potential IOCs
Remediation
Generated by daily-cves · Source: NVD