Analysis

Tea LaTeX 1.0 is described as having an unauthenticated OS command injection flaw reachable through /api.php, rated critical with a CVSS 3.1 base score of 9.8. The issue is tied to the tex2png API action. The record lists no fixed version and no confirmed exploitation.

CVE-2025-67484 is an improper input validation issue in Wikimedia MediaWiki, associated with the includes/Api/ApiFormatXml.Php file. NVD scores it 9.8 (critical) under CVSS 3.1 and the description lists fixed releases 1.39.16, 1.43.6, 1.44.3 and 1.45.1. No confirmed exploitation appears in the sources consulted.

CVE-2026-24471 affects continuwuity, a Rust Matrix homeserver, and Conduit-derived servers. A malicious remote server can induce the local server to sign an arbitrary event during user-triggered room leave, join or knock actions. The GitHub CNA rates it critical with a CVSS 4.0 score of 9.3, and fixes are listed for continuwuity, Conduit, Grapevine and Tuwunel.

CVE-2025-8587 is an SQL injection flaw (CWE-89) in SKSPro from AKCE Software Technology R&D Industry and Trade Inc., described as affecting versions through 07012026. NVD scores it 9.8 (CVSS 3.1, Critical), while the CNA USOM lists 8.6. No KEV listing or confirmed exploitation appears in the sources consulted, and the record lists no fixed version.

CVE-2026-1740 describes an improper authentication flaw (CWE-287) in the EFM ipTIME A8004T firmware version 14.18.2, located in the session check function of /cgi/timepro.cgi. NVD rates it Critical with CVSS 3.1 score 9.8, and the record states the exploit has been made public. The CISA KEV catalog does not list it, and the vendor did not respond to early disclosure, so no fix is listed.

CVE-2026-52989 affects the nvmet-tcp NVMe over TCP target in the Linux kernel. When a PDU length or offset is out of bounds, the error is not reported to callers, which may leave a receive iterator uninitialized. The record carries a CNA-assigned CVSS 3.1 score of 9.8 and lists stable-branch patches.

CVE-2026-1453 affects the KiloView Encoder Series and is classified as missing authentication for a critical function (CWE-306). According to the record, an unauthenticated attacker could create or delete administrator accounts, which may grant full administrative control over the product. The CNA (ICS-CERT) rated it critical, with a CVSS 3.1 base score of 9.8.

CVE-2025-57529 is a critical SQL injection weakness (CWE-89) in the YouDataSum CPAS Audit Management System, affecting versions up to and including 4.9 according to the record. The CVSS 3.1 base score is 9.8, and the record describes possible unauthenticated remote access with unauthorized data access as the consequence. No confirmed exploitation in the wild appears in the sources consulted, but two repository references tagged as exploit-related are present, so affected deployments should be prioritized.

CVE-2026-24772 affects OpenProject from 17.0.0 before 17.0.2 and is tied to the synchronization server used for real-time document collaboration. The server does not properly validate the backend URL it receives, so it can send a decrypted authentication token to an unintended endpoint. The fix is available in 17.0.2, and disabling the collaboration feature is the documented workaround.

Splunk fixed several internally identified vulnerabilities in Splunk Enterprise, grouped under the single identifier CVE-2026-76284 by weakness class CWE-707. The record gives a CVSS 3.1 score of 9.8 from the CNA and CISA-ADP and names versions 10.4.3, 10.2.7, 10.0.10 and 9.4.15 as where the issues were addressed. No confirmed exploitation appears in the sources consulted.

CVE-2025-65875 is an arbitrary file upload weakness in the AddFont() function of FPDF v1.86 and earlier, classified as CWE-434. According to the NVD description, an attacker can execute arbitrary code by uploading a crafted PHP file. NVD rates it 9.8 Critical under CVSS v3.1, while the MITRE CNA record gives 8.8, and the record lists no fixed version.

CVE-2026-52958 is a flaw in the libceph component of the Linux kernel. The length check in osdmap_decode() reserves space for only one osd_weight entry, although osd_state and osd_weight are decoded once per OSD, so a corrupted osdmap message can lead to an out-of-bounds read. The CNA scores it 9.1 (critical) under CVSS 3.1, and the record lists patch commits for several stable branches.

CVE-2025-67186 is a buffer overflow in the setUrlFilterRules interface of the firewall.so module in TOTOLINK A950RG firmware V4.1.2cu.5204_B20210112. The record describes a missing length check on the url parameter, and the NVD CVSS 3.1 base score is 9.8 (critical). No confirmed exploitation appears in the sources consulted, and no fixed version is listed in the record.

CVE-2026-1547 is a command injection weakness (CWE-77) reported in Totolink A7000R firmware version 4.1cu.4154, in the setUnloadUserData function of /cgi-bin/cstecgi.cgi. NVD lists a CVSS 3.1 base score of 9.8 (critical), and the record states that remote attack is possible and that a public exploit exists. No fixed version is listed in the sources consulted, and the CVE is not in the CISA KEV catalog, so no confirmed active exploitation appears in the sources consulted.

CVE-2025-66480 is a critical path traversal flaw in the im-server component of Wildfire IM, affecting versions before 1.4.3. The file upload endpoint does not strip directory traversal sequences from user-supplied filenames, which can allow arbitrary file writes on the server. The vendor fixed the issue in version 1.4.3, and the record reports a CVSS 3.1 base score of 9.8.