Analysis

PEAR Pearweb versions before 1.33.0 use preg_replace() with the /e modifier in bug update email handling. If attacker-controlled content reaches the evaluated replacement, PHP code may be executed, and the advisory states the issue is patched in 1.33.0. NVD rates it 9.8 (critical) under CVSS 3.1, and no confirmed exploitation appears in the sources consulted.

CVE-2026-53246 is a critical out-of-bounds write weakness (CWE-787) in the Linux kernel SCTP code. The CNA scored it 9.8 under CVSS 3.1, and the record notes that a missing length check on a cached INIT chunk can lead to out-of-bounds reads and memory corruption. The sources consulted do not show confirmed exploitation.

Cacti versions 1.2.30 and earlier are affected by an OS command injection flaw (CWE-78) caused by missing sanitization in escape_command(). The issue is fixed in version 1.2.31, and NVD rates it 9.8 under CVSS 3.1, while GitHub's CNA rates it 8.6 under CVSS 4.0. The CVE is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

CVE-2020-37071 affects the CraftCMS 3 vCard Plugin 1.0.0 and is classified as CWE-502 (deserialization of untrusted data). The record describes unauthenticated arbitrary PHP code execution through the plugin's vCard download functionality, and it carries a critical CVSS 3.1 score of 9.8. The record lists no affected or fixed version data and no confirmed exploitation in the sources consulted.

PEAR Pearweb versions before 1.33.0 contain an unauthenticated SQL injection flaw (CWE-89) in a package endpoint that accepts a version value. The record states that remote attackers can run arbitrary SQL, and the issue is fixed in 1.33.0. CISA KEV does not list this CVE, and no confirmed exploitation appears in the sources consulted.

IBM Common Cryptographic Architecture (CCA) versions 7.5.52 and 8.4.82 are described as allowing an unauthenticated user to run arbitrary commands with elevated privileges. IBM's PSIRT assigned a CVSS 3.1 base score of 9.8 (critical), and the record maps the issue to CWE-250. The sources consulted show no confirmed exploitation, and the record contains no affected-version or fix data.

CVE-2020-37069 is a classic buffer overflow (CWE-120) in the NLST command of Konica Minolta FTP Utility version 1.0, as described in the VulnCheck-provided record. The CNA scores it CVSS 3.1 9.8 (Critical), and the record says it may allow denial of service and potentially unauthorized code execution. No KEV listing or confirmed exploitation appears in the sources consulted, and the record contains no fixed version.

GLPI versions from 11.0.0 up to before 11.0.5 contain a server-side request forgery (SSRF) flaw in the Webhook feature, which a GLPI administrator can trigger. NVD rates it 9.1 under CVSS 3.1, and the description states the issue is patched in 11.0.5. No confirmed exploitation appears in the sources consulted.

CVE-2026-53225 is a Linux kernel SCTP flaw in ASCONF address parameter handling that can cause an uninitialized memory read. The CNA rates it 9.1 (Critical) under CVSS 3.1, and the record links fixes in several stable kernel branches. No confirmed exploitation appears in the sources consulted.

The Linux kernel TCP stack has a request socket reference count underflow in reqsk_queue_hash_req(), classified as CWE-416 Use After Free and scored 9.8 (Critical) by the CNA. The upstream fix wraps timer setup and reference initialization in nested preemption-disabled sections. The affected ranges listed are 6.12 up to 7.0.13 and 7.1-rc1 through 7.1-rc6.

CVE-2026-25115 affects n8n versions before 2.4.8 and allows an authenticated user to break out of the Python sandbox used by the Python Code node. NVD scores it 9.9 under CVSS 3.1, and the GitHub CNA scores it 9.4 under CVSS 4.0. The record states the issue is fixed in 2.4.8, and no confirmed exploitation appears in the sources consulted.

FUXA 1.2.7 initializes with authentication disabled because the 'secureEnabled' flag is commented out by default in server/settings.default.js. According to the CNA record, unauthenticated remote attackers could reach sensitive API endpoints, modify projects and control industrial equipment. The CNA assigned a CVSS 3.1 base score of 9.3 (critical), and no fixed version is listed in the sources consulted.

CVE-2025-64712 is a path traversal vulnerability in the partition_msg function of the Unstructured open-source document processing library, affecting versions before 0.18.18. According to the record, a crafted MSG file with attachments can be used to write or overwrite arbitrary files on the filesystem. The issue is fixed in version 0.18.18, and the record rates it critical with CVSS 3.1 score 9.8.

Rocket.Chat versions before the listed fixed releases contain a NoSQL injection flaw in the CAS login handler, rated critical by GitHub Security Advisories with CVSS 3.1 score 9.1. According to the record, an unauthenticated attacker may obtain a valid authentication token for a user who is logging in through CAS or SAML SSO at the same time, and an administrator victim could lead to full instance compromise. Upgrading to a fixed release is the primary remediation.

CVE-2026-8592 is an OS command injection flaw in the process_string action of the Rapid7 InsightConnect AWK Plugin on Linux, as described in the record. The NVD assigns a CVSS 3.1 base score of 9.8 (critical), while the CNA lists 7.7. The affected range is listed as versions below 1.2.2, and no confirmed exploitation appears in the sources consulted.