Vulnerabilities

U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfs_path_buff buffer by returning multiple relative symlink targets that are appended without cumulative length validation. Attackers can send two or more READLINK responses containing relative symlink targets of approximately 1100 bytes each to corrupt adjacent BSS variables including nfs_server_ip, nfs_server_mount_port, nfs_server_port, nfs_our_port, nfs_state, and rpc_id, potentially achieving memory corruption and control over the NFS client state machine.

CVE-2026-48027 is a supply-chain compromise in which version 18.95.0 of Nx Console, the Visual Studio Code UI for the Nx and Lerna build tools, was published with embedded malicious code (CWE-506). The compromised release was live on the Visual Studio Marketplace for roughly 18 minutes (12:30-12:48 UTC) and on OpenVSX for about 36 minutes (12:33-13:09 UTC) on 19 May 2026, so developers whose clients pulled the update during those windows had the malicious extension installed. An attacker gains code execution on developer workstations and used it to steal cloud and CI credentials; the compromise has been tied to a breach of GitHub internal repositories and is associated with ransomware activity. Only users who installed Nx Console 18.95.0 are affected, and version 18.100.0 is not compromised. CISA added the flaw to the Known Exploited Vulnerabilities catalog on 27 May 2026 with known ransomware use, and public analysis is available from StepSecurity.

Do: Upgrade to Nx Console 18.100.0 immediately; if 18.95.0 was installed on 19 May 2026, treat local secrets as compromised and rotate GitHub tokens, cloud and CI credentials, npm tokens, and SSH keys on affected machines, and review repositories and pipelines for tampering. Follow CISA KEV/BOD 22-01 required actions and review the StepSecurity blog post for indicators of compromise.

Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.

Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster node pointing to an arbitrary internal URL and then sending API requests with the X-Node-ID header. The Proxy middleware forwards these requests to the attacker-specified internal address, bypassing network segmentation and enabling access to services bound to localhost or internal networks.

Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim the initial administrator account on a fresh nginx-ui instance during the first-run setup window. The public /api/install endpoint is reachable without authentication, and the request-encryption flow only protects payload confidentiality in transit; it does not authenticate who is allowed to perform installation. A remote attacker who reaches the service before the legitimate operator can set the admin email, username, and password, causing permanent initial-instance takeover. This issue has been patched in version 2.3.8.

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user who was disabled by an administrator can use previously issued API tokens for up to the token lifetime. In practice, disabling a compromised account does not actually terminate that user’s access, so an attacker who already stole a JWT can continue reading and modifying protected resources after the account is marked disabled. Since tokens can be used to create new accounts, it is possible the disabled user to maintain the privilege. Version 2.3.4 patches the issue.

Nginx UI versions 2.3.5 and prior ship a Model Context Protocol (MCP) integration exposed via two HTTP endpoints, /mcp and /mcp_message; while /mcp requires authentication, /mcp_message enforces only IP whitelisting, and the default whitelist is empty, which the middleware treats as allow-all, so the endpoint accepts requests with no authentication (CWE-306, missing authentication for a critical function). An attacker with network reachability to /mcp_message can invoke all MCP tools unauthenticated, including restarting nginx, creating, modifying, or deleting nginx configuration files, and triggering automatic config reloads. This yields complete takeover of the nginx service on the affected host, with critical-severity impact across confidentiality, integrity, and availability (CVSS 3.1: 9.8). All Nginx UI deployments running 2.3.5 or earlier are affected, especially those where the MCP endpoints are reachable from untrusted networks. News reports indicate the flaw is being actively exploited in the wild; it is not yet in CISA KEV, EPSS is high at 36.3% (98th percentile), and no patched release was available at publication.

Do: No fixed release was available at publication — monitor the upstream advisory (GHSA-h6c2-x2m2-mwhf) and the Nginx UI project and upgrade as soon as a patched version ships. Until then, restrict exposure of /mcp_message by setting a non-empty IP whitelist, firewalling the MCP endpoints to trusted management addresses or localhost/VPN only, or disabling the MCP integration. Review access logs for unauthenticated requests to /mcp_message and check for unexpected nginx config changes or restarts, which would indicate exploitation.

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIO_Imp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Nginx UI (a third-party web administration interface for the Nginx web server) prior to version 2.3.3 exposes its /api/backup endpoint without any authentication (CWE-306) and returns the backup encryption keys in the X-Backup-Security response header (CWE-311). Any unauthenticated attacker who can reach the endpoint over the network can send a single request and receive a full system backup containing user credentials, session tokens, SSL/TLS private keys, and Nginx configurations, then decrypt it immediately using the key leaked in the same response. This effectively hands the attacker the secrets needed to impersonate administrators, decrypt protected data, and potentially take over the underlying Nginx server. All deployments running Nginx UI before 2.3.3 are affected, with the greatest risk on instances where the API is reachable from the internet or from untrusted networks. A public security advisory has been published; the flaw is not yet in CISA KEV, but EPSS assigns a 22.2% probability of exploitation within 30 days (98th percentile), and a separate Nginx UI flaw (CVE-2026-33032) is reported as actively exploited, indicating attackers are targeting this product.

Do: Upgrade Nginx UI to version 2.3.3 or later immediately. If upgrading is not possible, restrict network access to the /api/backup endpoint (firewall rules, allowlists, or placing the interface behind authentication or on localhost only), and check access logs for unauthenticated requests to /api/backup or downloads using the X-Backup-Security header. If exposure is suspected, rotate all secrets contained in backups, including admin passwords, SSL/TLS private keys, and active session tokens.

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

CVE-2025-13315 is an access control flaw (CWE-420) in Twonky Server 8.5.2 on Linux and Windows that allows an unauthenticated remote attacker to bypass authentication on the server's web service API. By sending requests to the API without valid credentials, the attacker can read a server log file and retrieve the administrator's username and encrypted password, which could be cracked offline or used against the admin interface. Anyone running the affected Twonky Server build is exposed, and per Rapid7 (the assigning CNA) the flaw was not yet fixed at the time of disclosure. There is no confirmed in-the-wild exploitation and the issue is not in CISA KEV, but a public PoC exists and EPSS assigns a high 32.5% probability of exploitation within 30 days (98th percentile). The same Rapid7 advisory also covers companion issue CVE-2025-13316 in Twonky Server.

Do: Because Rapid7 reported the bug as not fixed at disclosure, monitor the Rapid7 advisory and Lynx Technology for a patched Twonky Server release and upgrade as soon as one is available. In the interim, restrict access to the Twonky web service API to trusted networks only (e.g., firewall rules limiting the default web port) and review access logs for unauthenticated API requests. Once patched, change the Twonky administrator password, since it may have been exposed in encrypted form, and review the same advisory for the companion CVE-2025-13316.

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.

The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities.

A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown code of the component Ticket Bearbeiten Page. The manipulation of the argument Notizen leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.

Nginx UI, a third-party web management interface for the Nginx web server, fails to validate the input supplied when configuring logrotate, passing it directly to exec.Command and enabling arbitrary command execution (CWE-20, improper input validation). An attacker who can reach an affected Nginx UI instance over the network can trigger the flaw via the logrotate configuration feature, with no privileges or user interaction required per the CVSS 4.0 scoring (AV:N/AC:L/PR:N/UI:N). Successful exploitation grants full command execution on the host running Nginx UI, with high impact on confidentiality, integrity, and availability (CVSS 4.0 score 8.9, High). All Nginx UI deployments running versions prior to 2.0.0-beta.36 are affected; Nginx itself is not affected. Exploitation is documented in a public GitHub security advisory (GHSA-66m6-27r9-77vm) with a proof of concept available; the flaw is not yet in CISA KEV, and EPSS assigns a 27.7% probability of exploitation within 30 days (98th percentile).

Do: Upgrade Nginx UI to version 2.0.0-beta.36 or later. Until upgraded, restrict access to the Nginx UI interface (bind to localhost or place it behind a VPN/firewall or authenticated reverse proxy) and treat logrotate configuration entries as untrusted. Review logs and existing logrotate settings for signs of injected or unexpected commands indicating prior exploitation.

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any answer. The finder provided the information that this issue affects ESP HR Management versions before 6.6.

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.

Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/IP Network Series, which may allow an unauthenticated attacker to stop the device operations by sending a specially crafted packet.

Cross-Site Scripting (XSS) vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements.

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request.