CVE Vulnerability Advisory Database

[Affected Scope] Joomla Page Builder CK extension versions prior to 3.6.0

[Impact] Unauthenticated attackers can upload arbitrary executable files (such as PHP), leading to full remote code execution (RCE) and complete compromise of the web server

[Mitigation] Immediately upgrade the Page Builder CK extension to version 3.6.0 or higher

[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21

[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container

[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher

[Affected Scope] Linux systems utilizing ebtables SNAT targets within bridge netfilter configurations.

[Impact] Local attackers can trigger kernel memory corruption, leading to Denial of Service (DoS) or Privilege Escalation.

[Mitigation] Apply the latest kernel security patches provided by your distribution and reboot.

[Affected Scope] Langflow versions prior to 1.9.1

[Impact] An authenticated attacker can execute arbitrary AI workflows belonging to other users by exploiting an IDOR vulnerability, potentially exposing sensitive data.

[Mitigation] Immediately upgrade Langflow to version 1.9.1 or higher, and restrict network access until patched.

[Affected Scope] Joomla iCagenda extension versions prior to 3.9.15 and 4.0.8

[Impact] Unauthenticated remote attackers can bypass file upload restrictions to upload malicious PHP scripts, leading to complete system compromise via Remote Code Execution (RCE).

[Mitigation] Immediately upgrade the iCagenda extension to the patched versions (3.9.15 / 4.0.8 or higher) and disable script execution in upload directories.

[Affected Scope] Websites utilizing the SP Page Builder extension for Joomla

[Impact] Unauthenticated attackers can upload and execute malicious PHP code, leading to complete takeover of the web server

[Mitigation] Immediately update to the latest patched version, apply WAF rules, and disable PHP execution in upload directories

[Affected Scope] All versions of PTC Windchill PDMlink and FlexPLM prior to 11.0 M030, including all CPS releases.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges by deserializing untrusted data.

[Mitigation] Apply the official vendor security patches (CPS) immediately, restrict external network exposure, and enable WAF deserialization detection rules.

[Affected Scope] Zyxel GS1900-48HPv2 firmware versions up to 2.90(ABTQ.1)C0.

[Impact] Unauthenticated LAN-based attackers can execute arbitrary OS commands and gain full control of the device via crafted HTTP requests.

[Mitigation] Immediately update to the latest patched firmware and restrict access to the management interface using ACLs.

[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)

[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation

[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities

[Affected Scope] LiteSpeed cPanel plugin versions prior to 2.4.8 (distributed in LiteSpeed WHM PlugIn prior to 5.3.2.0)

[Impact] An attacker with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can exploit symlinks to bypass isolation, escalate privileges, and compromise the server

[Mitigation] Immediately upgrade the LiteSpeed WHM plugin to version 5.3.2.0 or higher to apply the patched cPanel plugin (v2.4.8+)

[Affected Scope] SimpleHelp versions 5.5.15 and prior, and 6.0 pre-release versions with OIDC authentication configured

[Impact] Unauthenticated remote attackers can forge identity tokens to bypass authentication, gain full technician sessions, and potentially bypass multi-factor authentication (MFA)

[Mitigation] Immediately upgrade SimpleHelp to the patched version or disable OIDC authentication until the patch is applied

[Affected Scope] Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62

[Impact] Unauthenticated remote attackers can compromise and completely take over the PeopleSoft Enterprise PeopleTools system via HTTP network access

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external HTTP access to the affected component

[Affected Scope] Splunk Enterprise versions 10.2.x below 10.2.4 and 10.0.x below 10.0.7 (versions 9.4 and earlier are unaffected)

[Impact] An unauthenticated remote attacker can access the PostgreSQL sidecar service endpoint to create or truncate arbitrary files, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to patched versions (10.2.4+, 10.0.7+) or disable the PostgreSQL sidecar service if an immediate upgrade is not feasible

[Affected Scope] Fortinet FortiSandbox (5.0.0 to 5.0.5, 4.4.0 to 4.4.8, 4.2 all versions), FortiSandbox Cloud and PaaS (5.0.4 to 5.0.5)

[Impact] An unauthenticated remote attacker can execute unauthorized OS commands with root privileges via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched versions (5.0.6, 4.4.9 or higher) and restrict external access to the management interface

[Affected Scope] Ivanti Sentry versions prior to R10.5.2, R10.6.2, and R10.7.1

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions (R10.5.2, R10.6.2, R10.7.1, or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103

[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)

[Affected Scope] Check Point Remote Access and Mobile Access VPN gateways utilizing the deprecated IKEv1 key exchange protocol

[Impact] Unauthenticated remote attackers can bypass user authentication and establish unauthorized VPN connections without valid user credentials

[Mitigation] Apply the official vendor hotfixes immediately, or disable the deprecated IKEv1 protocol and transition to IKEv2

[Affected Scope] Arista EOS-based switches configured with tunnel decapsulation such as VXLAN, decap-groups, or GRE tunnel interfaces

[Impact] Attackers can bypass security boundaries by sending unexpected tunneled packets, which the switch incorrectly decapsulates and forwards. This vulnerability is actively exploited in the wild

[Mitigation] Apply the latest EOS security patches from Arista or implement inbound Access Control Lists (ACLs) to restrict unauthorized tunnel traffic

[Affected Scope] Vulnerable versions of the JCE (Joomla Content Editor) extension for Joomla CMS

[Impact] Unauthenticated remote attackers can create unauthorized editor profiles, bypass file upload restrictions, and upload malicious PHP scripts to achieve full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade JCE to the latest patched version and deploy Web Application Firewall (WAF) rules to block unauthorized profile modification requests

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.