Vulnerabilities
Cisco Expressway Out-of-Bounds Write Flaw Rated High Severity
Cisco hardens Expressway software to fix an out-of-bounds write vulnerability identified during an internal security review of the product.
Firewall Chronicle Patch Watch Desk
The Firewall Chronicle Patch Watch Desk is the part of the Firewall Chronicle newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 64 articles so far. See the editorial policy or report an error.
Vulnerabilities
Pillow PDF Append Flaw Triggers RecursionError in Python Services
A high-severity vulnerability in Pillow allows crafted PDFs to exhaust resources during append operations, risking denial of service for affected Python applications.
Vulnerabilities
Tenda AC19 Web Management Service Exposes Critical Remote Stack Buffer Overflow
Public exploit code targets a stack-based overflow in the Tenda AC19 firewall configuration endpoint, rated critical by the NVD.
Vulnerabilities
PHP Security Team Plans Oct 21 Release for Two 9.2 CVSS Vulnerabilities
The PHP project confirms an October 21 release addressing two vulnerabilities rated 9.2 on CVSS v4.0, impacting environments running the language.
Vulnerabilities
TOTOLINK X2000R Heap Buffer Overflow in Upload Handler Enables Arbitrary Code Execution
Authenticated HTTP requests can trigger a critical heap buffer overflow in the router’s upload handler, enabling arbitrary code execution on the device.
Vulnerabilities
TOTOLINK X2000R boa vpnPassword Stack Overflow CVE-2026-9660 RCE
Authenticated attackers can trigger arbitrary code execution via stack-based buffer overflows in the boa web server’s vpnPassword parameter handling on specific firmware builds.
Vulnerabilities
Trigger.dev CLI CSRF Flaw in Authorization Flow Allows Account Takeover
A cross-site request forgery vulnerability in Trigger.dev versions prior to 4.5.2 enables attackers to steal personal access tokens via a malicious link.
Vulnerabilities
Totolink X2000R Stack Overflow in static_dns1 Parameter Allows Authenticated Code Execution
Authenticated HTTP requests targeting the static_dns1 parameter in Totolink X2000R firmware can trigger critical stack-based buffer overflows and arbitrary code execution.
Vulnerabilities
WordPress TinyMCE Thumbnail Gallery Path Traversal Exposes Files
Unauthenticated attackers can read arbitrary files in WordPress sites running TinyMCE Thumbnail Gallery versions prior to 1.1.0 via a path traversal flaw.
Vulnerabilities
Python certifi Critical Patch Strips Root Certificates from Trust Store in Oct 2026 Update
The Python certifi package issued a critical update on Oct 20, 2026, to remove root certificates from its trust store.
Vulnerabilities
Adobe Acrobat for Edge Out-of-Bounds Write Allows Remote Code Execution
A high-severity flaw in Adobe Acrobat for Edge lets attackers run code via malicious files, requiring user interaction to trigger the exploit.
Vulnerabilities
NSS 3.131.1 Patch Addresses Security Flaw CVE-2026-113470 in Mozilla Crypto Library
Developers using Mozilla's Network Security Services should update to version 3.131.1 to resolve a security issue tracked under CVE-2026-113470.
Vulnerabilities
NGINX Heap Buffer Overflows: F5 Issues Emergency Patches for Critical RCE and DoS Flaws
F5 released emergency updates for NGINX products to fix heap buffer overflows that could allow attackers to crash systems or run unauthorized code.
Vulnerabilities
Coze Studio 0.5.0 Predecessors Exposed to Command Injection via Python Nodes
A default configuration flaw in Coze Studio allows registered users to execute unsandboxed Python code, potentially exposing sensitive credentials and internal services.
Vulnerabilities
Coze Studio IDOR CVE-2026-77935 Enables Cross-Tenant Workflow Manipulation Up to v0.5.1
An insecure direct object reference in Coze Studio through 0.5.1 allows authenticated users to access and manipulate workflows belonging to other tenants.
Vulnerabilities
H3C Magic NX15 OS Command Injection in usrlist Binary Enables Remote Code Execution With Public Exploit
A critical OS command injection flaw in H3C Magic NX15 100R017 firmware allows remote attackers to execute arbitrary commands, with public exploits already available.
Vulnerabilities
Pillow Rank Filter Crash in Zero-Size Images Fixed in 13.0.0
A high-severity flaw in older Pillow versions causes native crashes when processing zero-size images with rank-based filters, resolved in the latest release.
Vulnerabilities
Cognition API Lacks Auth, Enables Unauthenticated Remote Code Execution
Missing authentication on Cognition's REST endpoints allows attackers to run shell commands as the server process in versions prior to 0.13.0.
Vulnerabilities
aiohttp high-severity resource exhaustion flaws patched in 3.14.4 release
Attackers can trigger unbounded memory or CPU usage via crafted requests to aiohttp servers running versions prior to 3.14.4.
Vulnerabilities
SiteGuard WAF Command Injection CVE-2026-106931 Enables Local Privilege Escalation to Root
Attackers exploit a local command injection flaw in SiteGuard WAF to gain root or SYSTEM privileges on servers running vulnerable versions.
Vulnerabilities
WhaTicket Community Auth Bypass Enables Unauthenticated Admin Registration
A critical flaw in WhaTicket Community allows attackers to register as administrators without credentials, exposing tickets and settings.
Vulnerabilities
Misaka Danmu Server Auth Bypass Allows Admin Takeover in Versions Through 2.8.9
Unauthenticated attackers can rewrite configuration keys via an unprotected endpoint to seize administrative control in Misaka Danmu Server.
Vulnerabilities
HestiaCP Authorization Bypass Lets Admins Impersonate Root Users
A high-severity flaw in HestiaCP versions prior to 1.10.5 allows non-root administrators to execute commands as the protected administrator's system account.
Vulnerabilities
RIOT OS ATWINC15x0 Driver Buffer Overflow Allows Code Execution via Malformed SSIDs
A critical buffer overflow in the RIOT OS Wi-Fi driver allows nearby attackers to execute code or crash devices by broadcasting oversized network names.