Analysis

Samsung MagicINFO 9 Server versions below 21.1090.1 contain a hard-coded database account and password, according to the record. Login with that account can be used to manipulate the database. The CNA reports a CVSS 3.1 base score of 9.8, and the sources consulted show no confirmed exploitation.

CVE-2025-5319 is an SQL injection flaw (CWE-89) in the DIGITA Efficiency Management System from Emit Informatics and Communication Technologies Industry and Trade Ltd. Co., described as affecting versions through 03022026. The CNA-assigned CVSS 3.1 base score is 9.8 (critical), but the record contains no structured affected versions, fixes or CISA KEV listing.

Marlin Firmware through 2.1.2.7 contains an out-of-bounds write in the M421 G-code handler when MESH_BED_LEVELING is enabled. The record links the flaw to CWE-129, a CVSS 3.1 score of 9.1, and a fix in commit 1f255d1. No confirmed exploitation appears in the sources consulted.

Feast versions before 0.63.0 deserialize a field of OnDemandFeatureView specs with dill.loads() before any authorization check, which can allow remote code execution through the registry server. The record rates it critical, with CVSS 3.1 base score 9.8 from VulnCheck. No confirmed exploitation appears in the sources consulted, and the CVE is not listed in CISA KEV.

A Linux kernel change in the netfilter SIP connection tracking helper (nf_conntrack_sip) replaces unsafe port parsing that relied on simple_strtoul() and dereferenced pointers without adequate bounds checks. The CNA classifies the issue as CWE-476 (NULL Pointer Dereference) with a CVSS 3.1 score of 9.8 (critical). The record shows no CISA KEV listing and no confirmed exploitation in the sources consulted.

CVE-2026-1701 describes an SQL injection flaw in how /enrollment/index.php handles the ID argument in itsourcecode School Management System 1.0, which can be triggered remotely. NVD records a CVSS 3.1 base score of 9.8, and the record states that an exploit has been publicly disclosed. The sources consulted do not identify a fixed version, and the only listed fix entry is a third-party mitigation reference.

CVE-2026-52955 affects the libceph component of the Linux kernel, where decoding a CRUSH map in crush_decode() can access memory out of bounds when the two algorithm fields of a bucket in an OSD map message disagree. The kernel CNA rates it critical with CVSS 3.1 score 9.8 and a network attack vector that requires no privileges or user interaction. CISA KEV does not list it and no confirmed exploitation appears in the sources consulted; fixes are referenced for several stable kernel lines.

CVE-2026-1545 is a SQL injection weakness reported in itsourcecode School Management System 1.0, in the file /course/index.php. The record states that it can be exploited remotely and that a public exploit is available, and NVD rates it 9.8 under CVSS 3.1. The record lists no fixed version, only a mitigation reference, and the CISA KEV catalog does not list it.

A SQL injection vulnerability (CWE-89) has been reported in SEMCMS 5.0, involving the searchml argument of /SEMCMS_Info.php. According to the NVD-assigned CVSS 3.1 score of 9.8, the flaw can be exploited remotely without privileges or user interaction. The record states that an exploit has been publicly disclosed, but no confirmed exploitation appears in the sources consulted and the vendor did not respond to early disclosure.

CVE-2026-22778 affects vLLM from 0.8.3 before 0.14.1. According to the record, an invalid image sent to the multimodal endpoint causes an error that is returned to the client and reveals a heap address, which weakens ASLR. The record also states this leak can be chained with a heap overflow in an image decoder to reach remote code execution, and it assigns a critical CVSS 9.8 score.

The record describes a stack buffer overflow in the setRadvdCfg interface of the ipv6.so module in TOTOLINK A950RG firmware V4.1.2cu.5204_B20210112, caused by missing length validation of the radvdinterfacename parameter. The CNA-supplied CVSS 3.1 base score is 9.8 (critical), and the CVE is not listed in CISA KEV. No fixed version appears in the record, so affected devices should be inventoried and exposure reduced while the vendor status is checked.

CVE-2026-24841 is a critical OS command injection flaw (CWE-78) in the WebSocket endpoint /docker-container-terminal of Dokploy versions prior to 0.26.6. The record states that the containerId and activeWay parameters reach shell commands without sanitization, and that authenticated attackers could run arbitrary commands on the host. Upgrading to 0.26.6 is the remediation stated in the record; no confirmed exploitation appears in the sources consulted.

CVE-2026-56367 is an integer overflow in the PSB (PSD v2) RLE decoding path of ImageMagick, in ReadPSDChannelRLE in coders/psd.c, which leads to a heap out-of-bounds read on 32-bit builds. According to the record, processing a crafted PSB file can cause information disclosure or a crash. The record lists a NVD CVSS 3.1 base score of 9.1, but no KEV listing and no confirmed exploitation appear in the sources consulted.

According to the CVE record, FileRise versions before 3.16.0 contain a path traversal flaw in the shared-folder upload endpoint. The record describes arbitrary file write and administrator account takeover, with a CVSS 3.1 base score of 9.8. No confirmed exploitation appears in the sources consulted.

Kyverno versions before 1.15.3 and from 1.16.0 before 1.16.3 allow a user who can create namespaced Policies to make the admission controller ServiceAccount perform Kubernetes API requests beyond the policy's namespace. The record rates the issue critical, with a CVSS 3.1 base score of 9.9, and classifies it as CWE-269. Fixed releases are 1.15.3 and 1.16.3.