CVE Vulnerabilities - 2 October 2026

The Vibe‑Trading AI service runs a web API that anyone can reach without a password. Because of this, anyone can upload scripts or other files to the server and potentially run them. Set a secret API ...

The Vibe‑Trading AI service runs a FastAPI web server that is reachable from any network and does not require a secret key, so anyone can call its endpoints, upload script files and cause them to be e...

The Vibe‑Trading AI system includes tools that can be triggered by a language model to execute shell commands, make external web requests, and run code templates. Because these tools are enabled by de...

The Vibe‑Trading AI system automatically makes several helper tools available to its language model, and anyone can trigger them without authentication. These tools can run shell commands, make arbitr...

The Loom for AWS software (versions before 1.6.1) does not check who is making certain requests, so anyone on the network can gain full administrative control of the system. This could let an attacker...

The web interface on Tenda HG7, HG9 and HG10 devices can be tricked into running malicious code when a specially crafted request is sent. This could allow an attacker on the network to take control of...

The Consul software may fail to verify the source address when a callback other than a public‑key is used, potentially allowing unauthorized access. This issue builds on a prior fix for SSH configurat...

The self‑hosted version of Trigger.dev uses a default password that is not documented, so many installations run with it unchanged. An attacker who can reach the server can connect and retrieve decryp...

The AI Gateway part of GitLab may let a signed‑in user who has Duo Agent Platform rights alter a prompt template to break out of its safe area. By doing so, they could cause the gateway to execute any...

Apache Thrift versions before 0.25.0 may write beyond its memory limits if compressed data is processed, which could cause crashes or allow attackers to run code. This happens when the ZLIB compressio...

The Multilang adminbin feature does not properly check input, allowing attackers to run any command they choose. This could let someone take control of the server or steal data. Apply the latest secur...

The web management page of certain MikroTik RouterOS versions can be tricked with a specially crafted request, even before a user logs in. This could let an attacker take full control of the router or...

UTMStack versions before 11.2.16 accept a special internal key header without checking who sent it. If someone discovers that key, they can log in as an administrator through the API, create or delete...

The Cloud Virtualization Management part of H3C's CAS platform lets anyone upload files without logging in, and it does not check the file name or type. An attacker could place a malicious web page on...

The agentscope software version 1.0.20 contains a flaw in its command‑execution feature that can let a remote user supply and run their own code on the host system. This could allow unauthorized actio...

FinRobot version 1.0.0 lets specially crafted input reach the create_file_with_code function and cause the system to execute unwanted code. This could let an attacker take control of the application o...

In version 0.14 of SuperAGI, the functions that retrieve or change tool information do not confirm that the user belongs to the same organization as the tool. This lets a signed‑in user from one compa...

The Vanna software version 2.0.2 contains a weakness that could let a malicious user cause the program to execute code they supply. This could lead to unauthorized actions on your system or data being...

The version of SuperAGI up to 0.0.14 does not verify that an agent a signed‑in user tries to run belongs to their own organization. Because of that, a user can start executions for agents owned by a d...

The pandas-ai version 3.0.0 from sinaptik‑ai contains a weakness that could let an attacker insert and run their own commands when the program processes certain inputs. This could lead to unauthorized...

If you use Seroval (versions 0.12.0 through 1.6.2) to read JSON, an attacker can embed special data that causes your application to execute unwanted code when the JSON is parsed. This happens because ...

The Divi Membership plugin for WordPress (versions up to 2.2.0) lets a visitor create an account with full administrator rights. An attacker can send a specially crafted request and log in as the site...

The WPMobile.App plugin for WordPress sites can be tricked into giving password‑reset links to anyone when its mail‑to‑push feature is turned on. An attacker can use those links to take over any user’...

If a client uses the Apache Directory LDAP API to talk to an LDAP server, a specially crafted response can cause the client to load and execute unwanted Java code, potentially letting an attacker take...

The JSON API Auth plugin for WordPress may cache a response that contains an administrator's login cookie. An unauthenticated user can retrieve this cached response and gain full admin access to the s...